Privacy Policy

Effective 21 August 2026

Anchor Business Advisory Limited (“Anchor”, “we”, “us”) is a Hong Kong corporate services firm, Business Registration No. 71950848, with its office at Unit A, 14/F, Two Chinachem Plaza, 135 Des Voeux Road Central, Central, Hong Kong. This policy explains what personal data we collect, why we collect it, who we share it with and what rights you have. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

1. The data we collect

• Contact and identity details — your name, company, role, email address, telephone number and postal address.
• Messages you send us — the content of your email and messaging conversations with us, including WhatsApp messages, together with any documents, images or voice notes you attach, and the time each message was sent.
• Client engagement records — where we act for you, the accounting, corporate and tax records you provide so that we can carry out the work, together with our working papers and correspondence.
• Due diligence records — identity documents and ownership information we are required to obtain and keep before and during an engagement.
• Technical data — our hosting provider records standard server logs, including IP addresses and pages requested, in the ordinary course of serving this website.

Providing personal data is voluntary, but if you do not provide what we need we may be unable to answer your enquiry or to act for you.

2. How we use it

• to answer your enquiries and communicate with you about our services;
• to provide the services set out in an engagement letter, including preparing accounts, filings, returns and correspondence;
• to make statutory and regulatory filings on your behalf;
• to meet our own legal, regulatory, anti-money-laundering, record-keeping and professional obligations;
• to issue invoices and collect fees; and
• to maintain the security and proper operation of our systems.

We do not sell personal data, and we do not use it for direct marketing without your separate consent.

3. Business messaging, including WhatsApp

We communicate with clients by email and by business messaging services, including WhatsApp. Some of our messaging channels are operated with the assistance of automated systems that acknowledge messages, answer routine questions and route enquiries to the right person; a member of our team remains available on every channel. Messaging us is voluntary, and you may ask us to use email instead at any time.

Messages sent to us on WhatsApp pass through the WhatsApp Business Platform operated by Meta Platforms and are subject to Meta’s own terms and privacy policy in addition to this one. On our side, messages and their attachments are stored on servers we control so that we have a record of what was asked and answered, and so that we can act on your instructions.

Please do not send us payment card details, passwords, or health or other sensitive information by message. If a matter needs documents of that kind, ask us and we will arrange a more appropriate way to receive them.

4. Who we share it with

We disclose personal data only:

• to government departments and regulators where a filing or a legal obligation requires it, such as the Companies Registry and the Inland Revenue Department;
• to reporting accountants, auditors and other professional advisers involved in your matter, where you have instructed or authorised us;
• to service providers who support our operations, including our website host and the messaging platforms described above, who may process data only on our instructions; and
• where we are required or permitted to disclose by law, by a court, or by a professional obligation.

5. Transfers outside Hong Kong

Some of the service providers we use, including messaging and hosting providers, operate infrastructure outside Hong Kong, so your data may be transferred and stored outside Hong Kong. Where that happens we take reasonable steps to satisfy ourselves that the data continues to be protected to a standard comparable to that required under the Personal Data (Privacy) Ordinance.

6. How long we keep it

We keep personal data only for as long as it is needed for the purpose it was collected for, and for as long as we are required to keep it by law or by our professional obligations. For most client records the period is set by legislation rather than by us: tax law requires business records to be kept for a minimum period after the transaction they relate to, and anti-money-laundering law requires customer due diligence records to be kept for a minimum period after a business relationship ends. We keep engagement and accounting records for at least as long as those obligations require, and we will tell you the position for a particular record if you ask. Enquiries that do not lead to an engagement are deleted once they are no longer needed.

7. Security

We take reasonable and practicable steps to protect personal data against unauthorised access, loss, use or disclosure. Access to client records is limited to the people who need it for their work, systems that hold client data are access-controlled, and data in transit to and from this website and our messaging systems is encrypted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies

This website does not set cookies for tracking, analytics or advertising, and it does not embed third-party advertising or social-media trackers. It does not need cookies in order to work: every page functions normally if you block or delete cookies in your browser, and no part of the site is withheld if you do. Our hosting provider keeps standard server logs for security and diagnostic purposes.

9. Your rights

Under the Personal Data (Privacy) Ordinance you have the right to ask whether we hold personal data about you, to request a copy of it, and to request correction of data that is inaccurate. You may also ask us to stop using your data for a particular purpose, although doing so may prevent us from continuing to act for you.

To make a request, write to info@anchorbahk.com or to the postal address below, marked for the attention of the Privacy Compliance Officer. We will respond within the time allowed by the Ordinance. A reasonable fee may be charged for complying with a data access request, as the Ordinance permits.

10. Requesting deletion of your data

You may ask us to delete the personal data we hold about you. To do so, write to info@anchorbahk.com from the email address you contacted us with, or send us a message on the WhatsApp number you messaged us from, stating that you want your data deleted. Please tell us which channel your data relates to so that we can identify the right records.

We will confirm the request, delete the messaging history and contact details held for you, and confirm once that is done, normally within 30 days. Deletion means removing the record from our live systems and from our routine backups, so that it is no longer available to us or recoverable in the ordinary course of our work.

Where we are required by law or by our professional obligations to retain particular records — for example engagement, accounting or anti-money-laundering records for a client — we will delete everything not covered by that requirement and tell you what has to be kept and for how long. Where it is practicable to do so, we will anonymise the data we must keep so that it no longer identifies you.

11. Changes to this policy

We may update this policy from time to time. The version published on this page applies, and the effective date above shows when it was last changed.

12. Contact

Questions or complaints about how we handle personal data should be addressed to:

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.