Privacy Policy Statement
Last Updated: September 23, 2026 | Regulated by Cap. 486 Laws of Hong Kong
1. General Principles & Regulatory Framework
Hit Team Limited ("Company", "we", "us", or "our") operates as an AI and Digital Transformation consultancy for Hong Kong enterprises. We place paramount importance on safeguarding the privacy and personal data of our clients, prospective partners, and website visitors. This Privacy Policy is formulated in rigorous compliance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong, the "PDPO"), its six Data Protection Principles (DPP 1-6), and the Ethical Artificial Intelligence Development and Use Guidelines issued by the Office of the Privacy Commissioner for Personal Data (PCPD).
2. Adherence to the Six Data Protection Principles (DPP 1-6)
DPP 1: Purpose & Manner of Collection
We only collect personal data directly relevant to lawful business operations (e.g. strategy consultations, client advisory, vCIO roadmap design, cybersecurity audits). The purposes are explicitly communicated prior to collection, and no excessive data is gathered.
DPP 2: Accuracy & Retention Period
We maintain reasonable procedures to ensure collected data is accurate and up-to-date. Personal data will not be retained longer than necessary to fulfill the intended purpose, statutory requirements, or accounting obligations.
DPP 3: Use of Personal Data
Unless prior voluntary and explicit consent is granted by you, collected personal data is strictly confined to the stated original purposes (or directly related purposes). We never sell, rent, or trade your personal data to any third parties.
DPP 4: Security Safeguards
We deploy enterprise-grade Zero-Trust architectures, end-to-end TLS encryption, role-based access controls, and strict server hardening to safeguard personal data against unauthorized or accidental access, processing, erasure, or misuse.
DPP 5: Openness & Transparency
We openly communicate our data practices through this policy on our official website. You can review the kinds of personal data we hold and the primary purposes for which it is used at any time.
DPP 6: Access & Correction Rights
Under Sections 18 and 22 of the PDPO, you are entitled to request access to and correction of your personal data held by us. We respond to written requests within 40 days as required by law.
3. Direct Marketing Compliance (Part 6A of PDPO)
Pursuant to Part 6A of the Personal Data (Privacy) Ordinance, when Hit Team Limited intends to use your personal data (name, business email, and telephone/WhatsApp number) for direct marketing of our consultancy services:
- We must obtain your explicit, voluntary consent (such as ticking the consent checkbox on our consultation booking form) before using your personal data for direct marketing.
- You may opt out or withdraw consent at any time without charge by emailing [email protected] (stating "Opt-out") or clicking unsubscribe in our emails.
- Upon receiving your request to withdraw consent, we will process it as soon as reasonably practicable and cease using your personal data for direct marketing within ten business days.
4. AI Ethics & Confidentiality Statement
As enterprise digital transformation advisors, we strictly align our operations and technical implementations with the Ethical Artificial Intelligence Development and Use Guidelines published by the Hong Kong PCPD. Client business strategies, operational data, and confidential internal information shared during our consulting engagements are never used to train public foundation models without explicit authorization.
5. Data Access Requests & Inquiries
For questions concerning our privacy practices or to exercise your rights under the PDPO, please contact our Data Protection Officer: