Privacy Policy

Introduction

Tessera ("we," "our," or "us") is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

We operate in accordance with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and maintain strict protocols for data protection. If you have questions about this policy or our data practices, please contact us at [email protected].

Information We Collect

Personal Data You Provide

When you contact us through our website, request information, or engage our services, we may collect:

• Name and contact information (email address, phone number)
• Company name and position
• Business address and location
• Communication preferences
• Information provided in consultation discussions
• Any other information you choose to provide

Automatically Collected Data

When you visit our website, we automatically collect certain information through cookies and similar technologies:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website and exit pages
• Date and time of visits

For detailed information about our cookie usage, please see our Cookie Policy.

How We Use Your Information

We process your personal data on the following legal bases and for these purposes:

Service Delivery (Contractual Basis)

• Providing consulting services you have engaged us to deliver
• Responding to your inquiries and service requests
• Managing client relationships and communications
• Delivering engagement deliverables and reports

Legitimate Business Interests

• Improving our website functionality and user experience
• Analyzing website traffic and usage patterns
• Conducting business development and marketing activities
• Maintaining business records and analytics

Legal Compliance

• Complying with Hong Kong legal and regulatory requirements
• Responding to legal requests and preventing fraud
• Protecting our legal rights and interests

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

Service Providers

We engage trusted third-party service providers who assist with:

• Website hosting and maintenance
• Email communication services
• Analytics and performance monitoring
• IT infrastructure and security

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.

Data Security and Protection

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security audits and assessments
• Employee training on data protection
• Incident response and breach notification procedures

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but remain committed to protecting your information.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods include:

• Client engagement data: Duration of engagement plus 7 years
• Marketing communications: Until consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months
• General inquiries: 2 years from last contact

After retention periods expire, we securely delete or anonymize personal data.

Your Privacy Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

Right of Access

You may request access to the personal data we hold about you and receive a copy.

Right to Correction

You may request correction of inaccurate or incomplete personal data.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, commonly used format where technically feasible.

Right to Object

You may object to processing of your data for marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 40 days as required by the PDPO.

Marketing Communications

We may send you marketing communications about our services if:

• You have provided explicit consent, or
• You are an existing client and the communications relate to similar services

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting [email protected].

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

International Data Transfers

Your data is primarily processed and stored in Hong Kong. If we transfer data outside Hong Kong, we ensure appropriate safeguards are in place to protect your information in accordance with PDPO requirements.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.