Privacy Policy
Last updated: October 2, 2026Scope and responsibility
This policy describes the website and enquiry-handling practices of WZ CPA Limited ("we", "us" or "our"). It is prepared with reference to Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486). A separate engagement letter and any additional collection notice will address information required for professional services.
Information you provide
You may contact us by email or telephone on this website. We may receive your name, contact details, organisation, enquiry, correspondence and any attachments you choose to send. The website currently has no enquiry form, account registration or document-upload facility.
Providing enquiry information is voluntary. Without enough contact details or background, we may be unable to respond or assess your request. Please provide only what is needed for an initial discussion. Do not send identity documents, financial records or information about other people unless necessary and you are entitled to provide it. We will agree an appropriate channel before requesting sensitive engagement materials.
Why we use information
We use enquiry information to respond, understand the proposed work, carry out appropriate preliminary acceptance or conflict checks where necessary, arrange follow-up and keep a proportionate record of our dealings. We may also use relevant records to meet applicable legal obligations, address complaints or establish, exercise or defend legal rights.
An enquiry is not a subscription to marketing. Website analytics and marketing tools are not currently enabled. Before introducing them, we will review the information collected, update the notices and obtain consent where required. We will not treat this policy or continued browsing as blanket permission for direct marketing or unrelated uses.
Website connections and logs
Hosting and security systems may process IP addresses, request times, requested URLs, browser information and error or security events to deliver and protect the website.
The homepage includes a map built from Hong Kong Lands Department topographic, label and optional aerial imagery tiles. When it loads, your browser connects to the Lands Department services and may transmit your IP address, browser or device information. The map controls also load icons from Google Maps and Amap; the Partners section contains links to external partner websites that open after you click them. Those providers may receive similar connection information. The map renderer is bundled with this website, does not load a CDN-hosted SDK, and sends no API key. Lazy loading delays the map requests; it is not a consent mechanism. See our Cookies policy, the Lands Department Topographic Map API notice, Map Label API notice, Imagery Map API notice and the CSDI terms and conditions.
Internal handling and service platforms
Enquiries are managed by authorised internal personnel. We do not outsource enquiry handling or sell enquiry details to external sales or marketing agents.
Internal handling does not mean no technology provider processes information. Email and telecommunications providers, hosting providers and the Lands Department map service may transmit, store or otherwise process information needed for their services. Platform operators may process data under their own terms and privacy notices. We may disclose information where required by law or a lawful regulatory or court process.
Storage and security
Email, messages, backups and third-party platform operations may involve processing outside Hong Kong. Processing locations depend on the providers and services used.
Access to enquiry records is restricted to authorised personnel who need it for their work. We use reasonable organisational and technical safeguards appropriate to the information, and require appropriate protection where we engage a processor. No internet transmission or storage system can be guaranteed completely secure.
How long information is retained
Hong Kong privacy law does not prescribe one universal maximum retention period for all enquiries and website logs. We retain identifiable information only as long as necessary for its purpose or a directly related purpose, subject to applicable legal requirements.
- Enquiries that do not become engagements: retain only while needed to answer the enquiry, complete a relevant follow-up, or address a specific justified legal or complaint-related need. Review after the enquiry closes and erase or irreversibly anonymise information that is no longer needed.
- Website and security logs: retain for the shortest period reasonably needed for operation, troubleshooting and security. A security incident may justify retaining a limited relevant extract for longer.
- Engagement records: if you become a client, applicable professional, contractual and legal record-keeping requirements will be addressed separately. Those requirements do not automatically apply to every initial enquiry.
- Legal holds and backups: a specific obligation or dispute may require relevant records to be preserved. Restrict their use, review the hold and arrange deletion when the need ends. Deletion procedures must also address copies and backups.
This is a retention principle, not a claim that a particular number of years is legally required.
Access, correction and privacy enquiries
You may ask whether we hold your personal data, request access and request correction under the applicable provisions of the Ordinance. Contact info@wzcpa.hk, or write to WZ CPA Limited, Rooms 1703-4, 17/F, Tung Chiu Commercial Centre, 193 Lockhart Road, Wan Chai, Hong Kong, marked for privacy enquiries. These requests are handled by designated internal personnel; we do not imply that a statutory data protection officer has been appointed.
We may ask for information reasonably necessary to verify your identity or authority. We will handle access and correction requests within the applicable statutory time limits, generally 40 days, subject to the Ordinance's procedures and exemptions. A non-excessive fee may be charged for a data access request where permitted; we will explain any applicable charge. You may also raise a concern with the Office of the Privacy Commissioner for Personal Data.
Changes
We will update this policy when our practices change and identify the revision date. Material changes to collection or use will be explained at the relevant point, with any required consent sought separately. A revised notice does not itself authorise an unrelated use of information already collected.