Privacy Policy

Introduction

Tradewind Legal is committed to protecting the privacy and personal data of individuals who engage with our services. This Privacy Policy explains how we collect, use, store, and protect personal information in connection with our international trade law practice.

This policy applies to personal data collected through our website, during consultations, in the course of providing legal services, and through other interactions with our firm. By engaging with Tradewind Legal, you acknowledge that you have read and understood this Privacy Policy.

For privacy-related questions or concerns, please contact us at [email protected].

Data Collection

Personal Data We Collect

We collect the following categories of personal data:

• Contact information including name, email address, phone number, and business address
• Company information such as business name, industry, and trading activities
• Transaction details related to your international trade activities that are relevant to legal services
• Communication records including correspondence, meeting notes, and document drafts
• Website usage data including IP address, browser type, and pages visited

How We Collect Data

We collect personal data through:

• Contact forms and inquiry submissions on our website
• Email, phone, and in-person consultations
• Documents and information you provide during legal engagements
• Cookies and similar technologies on our website (see our Cookie Policy for details)
• Third-party sources when necessary for providing legal services

Legal Basis for Processing

We process personal data based on:

• Contract performance: Processing necessary to provide legal services you have requested
• Legitimate interests: Communicating about services and maintaining client relationships
• Legal obligations: Compliance with professional regulations and legal requirements
• Consent: Where you have explicitly agreed to specific uses of your data

Data Usage

How We Use Your Data

Personal data is used for the following purposes:

• Providing legal services including documentation review, agreement drafting, and dispute advisory
• Communicating with you about your legal matters and our services
• Processing inquiries and responding to requests for information
• Maintaining records as required by professional regulations
• Improving our services and website functionality
• Complying with legal and regulatory obligations

Data Sharing

We may share personal data with:

• Third-party service providers who assist with document management, IT services, or office operations
• Professional advisers such as accountants or insurers when necessary for our operations
• Regulatory authorities or courts when required by law
• Other parties with your explicit consent

We do not sell personal data to third parties. All service providers are required to maintain appropriate data protection standards.

Marketing Communications

We may send you information about our services or developments in international trade law that may be relevant to your business. You can opt out of marketing communications at any time by contacting us at [email protected].

Data Protection

Security Measures

We implement appropriate technical and organizational measures to protect personal data:

• Encrypted data transmission and storage
• Secure servers with restricted access
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel
• Employee training on data protection obligations

Data Retention

We retain personal data for the following periods:

• Client matter files: Seven years after completion of legal services, as required by professional regulations
• Inquiry and consultation records: Three years from last contact
• Website analytics data: Two years from collection
• Marketing communications data: Until you opt out or three years of inactivity

After retention periods expire, personal data is securely deleted or anonymized.

Data Breach Procedures

In the event of a data breach that poses risks to individuals' rights, we will notify affected individuals and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable regulations.

Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance and other applicable laws, you have the following rights:

Right to Access

You may request access to personal data we hold about you. We will provide this information within 40 days of receiving a valid request.

Right to Correction

You may request correction of inaccurate or incomplete personal data. We will review and update information as appropriate.

Right to Erasure

You may request deletion of personal data in certain circumstances, subject to our legal and professional obligations to retain records.

Right to Object

You may object to processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Lodge Complaint

If you believe we have not handled your personal data appropriately, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.

To exercise these rights, please contact us at [email protected]. We may need to verify your identity before processing requests.

Cookies and Tracking

Our website uses cookies to enhance user experience and analyze site usage. For detailed information about our use of cookies, including types of cookies, purposes, and how to manage preferences, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from someone under 18, we will delete it promptly.

International Data Transfers

Personal data is primarily stored and processed in Hong Kong. If data is transferred outside Hong Kong, we ensure appropriate safeguards are in place through standard contractual clauses or other approved mechanisms.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or how we handle your personal data, please contact: