Privacy Policy

This Privacy Policy governs the collection, use, and protection of personal data by Risk Consulting HK Ltd (“we,” “us”) in connection with our services, including due diligence, employment/vendor screening, and citizenship-by-investment programs. We comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and other applicable laws.

We only process data essential for:
• Legally mandated due diligence & investigations
• Employment/vendor background checks
• Citizenship-by-investment applications

Types of data:
• Full name, contact details (email, phone, address)
• Government-issued IDs (e.g., passport, HKID)
• Employment/education records
• Financial information (for investment-related services)

We process your data to:
• Fulfill contractual obligations (e.g., screening services)
• Comply with legal requirements (e.g., anti-money laundering laws)
• Protect legitimate interests (e.g., fraud prevention)

We implement:
• Encryption for data in transit and at rest
• Access controls (role-based permissions)
• NDA-bound staff training
• Regular security audits
Note: While we take rigorous steps, no system is 100% secure.

Your data is:
• Never sold to third parties
• Shared only with:
  • Accredited partners (bound by strict confidentiality agreements)
  • Legal/government authorities (when required by law, e.g., court orders)
  • Regulated financial institutions (for citizenship-by-investment cases)

Under the PDPO and GDPR (if applicable), you may:
• Request access to your personal data
• Correct inaccuracies
• Delete non-essential records (subject to legal retention periods)
• Withdraw consent (where processing is consent-based)

To exercise these rights, contact:
• Email: support@rc-hk.com.hk
• Response time: Within 30 days (unless legally restricted)

We retain data only as long as necessary for:
• Legal compliance (e.g., HK AML laws require 5+ years)
• Service fulfillment
• Dispute resolution