Privacy Notice

1. Who is responsible for your data

ASSISTLY LIMITED, a company incorporated in Hong Kong with its registered office at Flat A, 8/F., Kingswell Commercial Tower, 171 Lockhart Road, Wan Chai, Hong Kong, is the data user (and, where the GDPR applies, the data controller) for the personal data described in this notice.

For any question about this notice or about your personal data, write to [email protected].

2. What personal data we collect

When you email us, we receive the data you include: your name, email address, message content and any details of your request. We do not ask for more than is needed to respond and to carry out what you instruct.

Our hosting infrastructure keeps standard, short-lived server logs (such as IP address, browser type and request time) that are technically necessary to deliver the site and keep it secure. We do not use these logs to identify or profile visitors.

3. Why we process it and on what basis

We use personal data to reply to your enquiry, prepare and agree a scope of work, deliver requested services, keep proportionate business records and comply with applicable law. Under the PDPO, data is used for the purpose for which it was collected or a directly related purpose.

Where the GDPR applies to you, the legal bases we rely on are: steps taken at your request prior to entering into a contract; our legitimate interests in running a secure website and responding to correspondence; and compliance with legal obligations.

4. Cookies and analytics

This is a static website. It sets no cookies, uses no analytics or advertising trackers, and embeds no third-party content that could track you. There is no cookie banner because there is nothing to consent to.

5. Who may receive your data

We do not sell personal data. Access is limited to Assistly personnel who handle your request, and to service partners engaged to fulfil it — for example an aviation operator or hotel — who receive only the details necessary for the booking concerned.

We may also disclose data to professional advisers, or to regulators and authorities where disclosure is required by law or reasonably necessary to protect legal rights and security.

6. International transfers

Because we arrange services worldwide, fulfilling a request may involve passing relevant details to partners outside Hong Kong or, for EEA clients, outside the EEA. We transfer only what the specific arrangement requires and expect recipients to protect it under confidentiality and security obligations.

Where the GDPR applies, we rely on recognised safeguards for such transfers, such as adequacy decisions or the European Commission's Standard Contractual Clauses, as appropriate.

7. How long we keep data

We keep correspondence and engagement records only for as long as needed to respond, deliver the services concerned and maintain proportionate business records, including any period required by applicable accounting or legal obligations. Data that is no longer needed is deleted or anonymised.

8. Your rights

Under the PDPO you may request access to the personal data we hold about you and request correction of inaccurate data. We respond to data access and correction requests within the timeframes the Ordinance sets.

If you are in the EEA, you may additionally have the rights to erasure, restriction of processing, objection to processing based on legitimate interests, and data portability, subject to the conditions of the GDPR. To exercise any right, email [email protected].

9. How we protect data

Access to personal data is restricted to those who need it for a legitimate purpose. We use reputable infrastructure providers, encrypted connections in transit and internal confidentiality practices proportionate to the sensitivity of our clients' affairs. No internet service can guarantee absolute security, but reasonable safeguards are applied at every layer.

10. Questions and complaints

Please raise any privacy concern with us first at [email protected] so we can review it. If you are not satisfied, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).

If you are in the EEA, you may also lodge a complaint with the supervisory authority of your place of residence, place of work or the place of the alleged infringement.