1. Introduction
This Privacy Policy explains how Wealth Link (HK) CPA Limited, a company registered in Hong Kong with its registered office at Rm 02 13/F RAILWAY PLZ, 39 CHATHAM RD S, Tsim Sha Tsui, Hong Kong (HK), collects, uses, stores, and protects information about visitors, clients, and users of the website at mhvision.lol and of the computer systems design and computer integrated systems design services described on that website.
The website and all associated services are developed and operated by the developer WealthLink, acting for and on behalf of Wealth Link (HK) CPA Limited. We respect your privacy and are committed to handling your information responsibly and in accordance with applicable laws, including the Personal Data (Privacy) Ordinance of Hong Kong and, where relevant, the General Data Protection Regulation of the European Union and the United Kingdom General Data Protection Regulation.
This policy applies to information that you provide to us directly through the website, information that we collect automatically when you visit the website, and information that we receive from business partners and service providers in the course of providing our services. By using the website or engaging our services, you agree to the practices described in this policy. If you do not agree with any part of this policy, please do not use the website or provide your personal information to us. We encourage you to read this policy carefully and to check this page periodically for updates.
2. Information We Collect
We collect several categories of information in connection with our website and our services. The first category is information that you give us directly. This includes your name, email address, telephone number, company name, job title, and any other details you choose to send to us through the contact form on the website, by email, by telephone, or during a project discussion. When you purchase services, we may also collect billing and payment details, although payment processing is typically handled by secure third party payment providers and we do not store full card numbers ourselves.
The second category is information that we collect automatically. This includes technical data such as your Internet Protocol address, browser type and version, operating system, device identifiers, the pages you visit on the website, the time and date of your visit, the length of your session, the website that referred you, and your general geographic location. We collect this data through server logs, cookies, and similar technologies as described in the section on cookies below.
The third category is information from other sources. This includes professional details that you make available on public professional networks such as LinkedIn, information shared with us by colleagues or business partners when they introduce you to our firm, and details that we need in order to comply with legal obligations such as identity verification and anti money laundering checks. We do not intentionally collect sensitive or special categories of personal data, and we ask you not to send such information unless we expressly request it for a lawful purpose.
3. How We Use Your Information
We use the information we collect for a range of legitimate business purposes. We use contact information to respond to your enquiries, to schedule consultations, to prepare proposals and quotations, to deliver contracted services, and to manage our client relationships over time. We use technical data to operate and improve the website, to measure traffic and usage patterns, to diagnose technical faults, and to protect the website against security threats, fraud, and abuse.
Where you have agreed to receive communications, we may use your contact details to send you service updates, industry insights, and occasional newsletters about our work. You may opt out of these communications at any time using the unsubscribe link provided in each message or by contacting us directly, and we will honour your choice without penalty.
We also use information to meet our legal, regulatory, and accounting obligations, including record keeping, audit, tax, and compliance requirements. In addition, we may aggregate and anonymise information for analytical and statistical purposes so that we can understand how our website and services are used across our whole client base. Aggregated data that no longer identifies any individual is not treated as personal data under this policy and may be used freely.
4. Legal Bases for Processing
Under applicable data protection law, we rely on several lawful bases for processing your information. Where you have given consent, for example when you subscribe to a newsletter or accept non essential cookies, we process your information on the basis of that consent. You may withdraw your consent at any time, and withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.
Where processing is necessary for the performance of a contract with you, such as when we deliver a service that you have ordered or perform pre contractual steps at your request, we rely on that contractual necessity. Where we have a legitimate interest that is not overridden by your rights and freedoms, such as operating and securing the website, analysing usage, preventing fraud, and marketing similar services to business clients, we rely on that legitimate interest.
Where we are required to process information to comply with a legal obligation, such as tax, accounting, anti money laundering, or regulatory rules, we rely on that legal duty. When we rely on legitimate interests, we balance them carefully against your interests and fundamental rights, and we do not process your information in ways that you would reasonably consider intrusive.
7. International Data Transfers
Your information may be processed and stored outside the country in which you are located, including in Hong Kong and in other countries where we or our service providers operate. The internet is global, and data you submit through the website may transit through servers located in multiple jurisdictions before reaching us.
When we transfer personal data across borders, we take steps to ensure that it receives an appropriate level of protection in line with the requirements of applicable law. For transfers involving the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission standard contractual clauses or an adequacy decision recognised by the relevant supervisory authority.
Where information originates in Hong Kong, we comply with the Personal Data (Privacy) Ordinance, which restricts the transfer of personal data outside Hong Kong unless certain conditions are met or the affected individuals are informed. We apply contractual protections and technical safeguards designed to keep your information secure wherever it is held.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to provide our services, and to comply with legal, accounting, and regulatory obligations. The appropriate retention period depends on the type of information and the reason it was collected. For example, client project records are typically retained for the duration of the engagement and for a reasonable period afterwards to support billing, audit, warranty, and dispute resolution.
Website server logs and analytics data are generally retained for a shorter period, such as twelve to twenty four months, unless a security incident or legal request requires longer retention. Information that we retain for compliance purposes is kept in line with statutory limitation periods, which can vary by jurisdiction and by the type of record.
When information is no longer needed for any legitimate purpose, we delete it, destroy it, or anonymise it so that it can no longer identify you. We review our retention schedules periodically to make sure they remain appropriate, and we train our staff on the importance of keeping records only for as long as they are genuinely useful.
9. Data Security Measures
We take the security of your information seriously and implement technical, administrative, and physical safeguards designed to protect it against unauthorised access, loss, alteration, and misuse. These measures include encrypted data transmission where the technology supports it, access controls that limit data to staff who genuinely need it to perform their duties, secure data centres and hosting environments, firewalls and intrusion detection systems, and regular reviews of our security practices.
We train our staff on data protection principles and on the practical habits that keep information safe, such as strong passwords, careful handling of email attachments, and prompt reporting of suspected incidents. We also require our service providers to maintain safeguards that are comparable to our own before they are permitted to handle your information.
While no method of transmission over the internet and no method of electronic storage is completely secure, we work hard to protect your information and to respond promptly if a security issue is identified. If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority where we are legally required to do so.
10. Your Privacy Rights
Depending on where you live, you may have certain rights in relation to your personal information. These may include the right to access a copy of the information we hold about you, the right to request correction of inaccurate or incomplete information, the right to request deletion of your information in certain circumstances, the right to object to certain types of processing, and the right to request restriction of processing while a complaint is being resolved.
You may also have the right to data portability, which allows you to receive the information you provided to us in a structured, commonly used, and machine readable format, and to transmit that information to another organisation where the legal conditions are met. Where we process information on the basis of consent, you may withdraw your consent at any time without affecting the lawfulness of any processing that took place before the withdrawal.
To exercise any of these rights, please contact us using the details in the Contact Us section below. We will respond to verified requests within the timeframes required by applicable law, which is usually within one month. We may ask you to verify your identity before processing your request, and we may decline requests that are excessive, repetitive, or not permitted by law, in which case we will explain our reasons.
11. Privacy for Children
Our website and services are directed to business clients and are not intended for children. We do not knowingly collect personal information from children under the age of sixteen. If you are a parent or guardian and you believe that your child has provided personal information to us, please contact us using the details below so that we can review the matter and delete that information as promptly as possible.
If we learn that we have collected personal information from a child without appropriate verification, we will take steps to remove that information from our records and to limit any account or profile associated with the child. We encourage parents and guardians to monitor the online activity of their children and to teach them about the safe and responsible use of the internet.
Because our services are professional in nature and are offered to organisations rather than to children, we do not design features that appeal to children, we do not market our services to children, and we do not knowingly collect information through any mechanism that children are likely to use.
12. Third Party Websites and Services
Our website may contain links to websites, platforms, and services operated by third parties, including professional networks, payment providers, industry resources, and publications. This Privacy Policy applies only to our own website and to the services we control. When you follow a link to a third party website, the privacy practices of that website apply to the information you provide there, and not this policy.
We encourage you to review the privacy policies of any third party website you visit and to consider whether you are comfortable with how those websites collect and use information. We are not responsible for the content, privacy practices, or data collection activities of any third party website, and we do not control the information those websites may collect about you.
Links to third parties are provided for convenience only and do not imply endorsement of the third party, its products, its services, or its privacy practices. If you are uncertain about a link or a third party service mentioned on our website, please contact us and we will be glad to clarify the relationship, if any.
13. Automated Decision Making
We do not use automated decision making, including profiling, that produces legal effects concerning you or similarly significant effects on you, except where you have consented, where the decision is necessary for the performance of a contract with you, or where the decision is authorised by law. If we ever introduce automated decision making of this kind, we will inform you in advance and offer you the opportunity to request human intervention, to express your point of view, and to contest any automated decision.
We may use analytics and aggregated reporting to understand how our website is used and to improve our services and marketing. These activities do not produce legal or similarly significant effects on you as an individual, and they are conducted on the basis of the legitimate interests described in the section on legal bases above.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in the technology we use, in the services we offer, or in legal and regulatory requirements. When we make material changes, we will revise the last updated date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.
We encourage you to review this policy periodically so that you stay informed about how we protect your information. Your continued use of the website after changes are posted constitutes your acceptance of the revised policy, except where the law requires separate and specific consent from you.
If we make a change that would permit us to use your personal information in a materially different way from that described at the time it was collected, we will seek your consent where required before doing so.
15. Contact Us
If you have questions, comments, or requests regarding this Privacy Policy or the handling of your personal information, you may contact us by any of the methods below. Our privacy contact is Wang Yan. Our postal address is Wealth Link (HK) CPA Limited, Rm 02 13/F RAILWAY PLZ, 39 CHATHAM RD S, Tsim Sha Tsui, Hong Kong (HK). Our email address is info@mhvision.lol and our telephone number is +13097038638.
We aim to respond to privacy enquiries within a reasonable time and, in any event, within the timeframes required by applicable law. When you contact us, please describe the nature of your enquiry and provide enough detail for us to respond helpfully and securely.
If you believe that your privacy rights have been violated, you may also lodge a complaint with your local data protection authority or, in Hong Kong, with the Office of the Privacy Commissioner for Personal Data, whose details are available on the website of that office.