Privacy Policy
Last Updated: March 2026
1. Introduction
Nimbus ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you contact us, engage our services, or visit our website.
We comply with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and other applicable data protection regulations. Please read this policy carefully to understand our practices regarding your personal data.
2. What Personal Data We Collect
2.1 Information You Provide
When you contact us, submit a contact form, or engage our services, we may collect:
- • Your name and surname
- • Email address
- • Telephone number
- • Business name and position
- • Information about your legal matter or inquiry
- • Company address and business details
- • Any documents or information you provide related to your matter
2.2 Information We Collect Automatically
We may automatically collect certain information about your visit through cookies and similar technologies:
- • IP address
- • Browser type and version
- • Pages visited and time spent
- • Referring website
3. How We Use Your Information
We use the personal data we collect for the following purposes:
- • Providing and improving our legal services
- • Responding to your inquiries and requests
- • Communicating with you about our services
- • Managing your engagement and billing
- • Complying with legal obligations and professional requirements
- • Analysing website usage to improve our online presence
- • Protecting against fraud and security incidents
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- • Performance of a Contract: When processing data necessary to provide you with legal services
- • Consent: When you have provided explicit consent for specific processing
- • Legal Obligation: When required by Hong Kong law or professional legal requirements
- • Legitimate Interest: To improve our services and protect against fraud
5. Data Sharing and Disclosure
5.1 Who We Share Data With
We do not share your personal data with third parties except in the following circumstances:
- • With your explicit consent
- • When required by law or court order
- • With professional advisers (accountants, IT providers) subject to confidentiality obligations
- • With regulatory authorities in fulfilling our legal obligations
5.2 Data Security
We implement comprehensive security measures to protect your personal data:
- • Encrypted storage and transmission of sensitive information
- • Restricted access to personal data (need-to-know basis)
- • Regular security assessments and updates
- • Professional indemnity insurance
- • Secure document management and disposal procedures
6. Data Retention
We retain your personal data for the following periods:
- • Client Data: For the duration of engagement plus 6 years (as required by professional regulations and tax law)
- • Inquiry Data: For 12 months from last contact, unless you request deletion
- • Website Analytics: In aggregated form for up to 24 months
- • Cookies: As specified in our Cookie Policy
7. Your Rights
Under the PDPO and applicable data protection law, you have the following rights:
7.1 Right of Access
You have the right to request access to the personal data we hold about you and to receive information about how we use it.
7.2 Right of Correction
You have the right to correct any personal data we hold that is inaccurate, incomplete, or out of date.
7.3 Right of Erasure
You have the right to request deletion of your personal data, subject to our obligations to retain data under legal professional privilege and other legal requirements.
7.4 Right of Data Portability
You have the right to request your personal data in a portable format suitable for transmission to another organisation.
7.5 Right to Withdraw Consent
Where we process data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
8. Exercising Your Rights
To exercise any of the rights listed above, please contact us at:
Email: [email protected]
Phone: +852 3548 2179
Address: Suite 3305, 33/F, Central Plaza, 18 Harbour Road, Wan Chai, Hong Kong
We will respond to requests within 30 days and may request additional information to verify your identity.
9. Cookies
Our website uses cookies to enhance your experience. For detailed information about the cookies we use and how to manage your cookie preferences, please see our Cookie Policy.
10. Legal Professional Privilege
Information shared with us for the purpose of obtaining legal advice is protected by legal professional privilege. We maintain this privilege at all times and do not disclose privileged information except where required by law or when the privilege is waived.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of external websites. We recommend reviewing the privacy policies of any websites you visit through our site.
12. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete such information and terminate the child's access to our services.
13. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or by posting the updated policy on our website with a new "Last Updated" date.
14. Contact Information
If you have questions about this Privacy Policy or our data protection practices, please contact us:
Email: [email protected]
Phone: +852 3548 2179
Office Hours: Monday – Friday, 9:00 AM – 6:00 PM (HKT)
© 2026 Nimbus. This Privacy Policy is provided in English. In the event of any conflict between the English and any other version, the English version shall prevail.