Privacy Policy

1. Who We Are

Wrenford is a business consulting practice based in Hong Kong. Our registered office is located at 10/F, Three Exchange Square, 8 Connaught Place, Central, Hong Kong. For data-related enquiries, we may be contacted at [email protected] or by telephone at +852 3861 2547.

2. Information We Collect

We collect personal information in the following circumstances:

• Enquiry forms: When you submit a contact or enquiry form on our website, we collect your name, email address, telephone number (if provided), and the content of your message.
• Direct correspondence: When you contact us by email, telephone, or in person, we retain records of that correspondence.
• Engagement onboarding: When an engagement commences, we collect additional information as required to carry out the work. This may include organisational information, commercially sensitive data, and contact details for key personnel.
• Website usage: We may collect technical information about your visit including your IP address, browser type, referring pages, and pages visited. This is collected via analytics tools subject to your cookie preferences.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries and arrange initial consultations
• To carry out consulting engagements under the terms agreed with you
• To maintain records of our communications and work
• To comply with applicable legal obligations
• To improve the content and functionality of our website, where analytics data has been consented to
• To send occasional relevant communications if you have consented to receive them

We do not use personal information for automated decision-making or profiling.

4. Legal Basis for Processing

We process personal information on the following legal bases:

• Contract performance: When processing is necessary to carry out an engagement or respond to a pre-contractual enquiry
• Legitimate interests: Where we have a legitimate business reason to process information that does not override your interests or rights
• Legal obligation: Where processing is required by applicable law
• Consent: Where you have freely given, specific, and informed consent — for example, to the use of analytics cookies

5. Sharing of Information

We do not sell, rent, or trade personal information to third parties.

We may share information with third parties in the following limited circumstances:

• With service providers who assist us in operating our website or practice (such as website hosting, email delivery, or analytics platforms), subject to appropriate data processing agreements
• Where required by Hong Kong law, court order, or regulatory authority
• With professional advisers (such as legal counsel) as reasonably necessary

Any third party with whom we share personal information is required to handle it in a manner consistent with this policy and applicable law.

6. Retention of Information

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by law.

• Enquiry correspondence: retained for up to 24 months from the date of last contact
• Engagement records: retained for up to 7 years from the conclusion of an engagement, in accordance with standard business record-keeping practice in Hong Kong
• Website analytics data: retained in accordance with the data retention settings of the relevant analytics platform, typically 14 to 26 months

7. Your Rights

Subject to applicable law, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of your personal information, subject to legal retention requirements
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a valid request.

8. Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration, or destruction. However, no transmission of data over the internet or system can be guaranteed to be completely secure, and we cannot warrant the absolute security of any information transmitted to us.

9. Cookies

Our website uses cookies. For full information on the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Continued use of our website after any update constitutes your acceptance of the revised policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or our handling of your personal information, please contact us: