Last Updated:     5 December 2025

Introduction

At THL Advisory Services Limited (“THL Advisory”, “we”, “our”, and/or “us”), it is our policy to protect the privacy and personal data of individuals who interact with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website https://thl-advisory.com and provide your contact details to us under Hong Kong’s Personal Data Privacy Ordinance (Cap. 486) (the “PDPO”) and other applicable data protection regulations. Further information about the PDPO can be found on the official website of the Office of the Privacy Commissioner for Personal Data.

Collection and use of your personal data

We collect the following types of personal data directly from you when you voluntarily provide it through our website contact forms or other communication channels:

• Name
• Email address
• Phone number
• Any additional information you choose to include in your message

Any personal data collected from you on the website will only be used for the specific purposes mentioned at the time of collection or for purposes directly related to those specific purposes. Generally, we would use your personal data for the following purposes:

• To respond to your inquiries and provide consulting services information
• To communicate with you regarding our services
• To send you relevant updates, newsletters, or marketing materials (only with your explicit consent)
• To conduct market research and customer satisfaction surveys
• To improve our website and services
• To comply with legal obligations under Hong Kong law

Use

Use of website

of website

Some information may be collected automatically, such as an IP address and device type, when you visit our websites or use our services. This information is useful to us as it provides us with a better understanding of how you are interacting with our websites and services so that we can continue to provide you with the best experience possible.

Our Website may also include links to third-party websites, plug-ins and applications.  Clicking on those links or enabling those connects may allow third parties to collect or share data about you.  We do not control these websites, plug-ins or applications and are not responsible for any breach of their privacy policies or the Ordinance.  We encourage you to read the privacy policies of every website you visit when you go to those websites, plug-ins or applications.

Cookie usage policy

Cookies are small text files placed on your device when you visit our website. They help us recognize your device and remember information about your visit.

You may refuse the use of cookies or withdraw your consent at any time by selecting the appropriate settings on your browser. Please note that removal of cookies may affect your use and experience of our website.

By continuing to use our Website without changing your privacy settings, you are agreeing to our use of cookies.

Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Typically, we retain contact information for 24 months after our last communication, unless you request earlier deletion or we have an ongoing business relationship. Upon the expiry of time relating to any business needs or legal requirements to retain your Personal Data we will ensure that your Personal Data is deleted or anonymised.

Data disclosure and transfer

We do not sell, trade, or rent your personal data to third parties. We may disclose your personal data only in the following circumstances:

• To our employees and affiliated consultants who need the information to respond to your inquiries
• To service providers who assist us in operating our website and business (subject to confidentiality agreements)
• When required by law, regulation, or legal process
• To protect the rights, property, or safety of our company, our clients, or others

If personal data is transferred outside Hong Kong, we will ensure appropriate safeguards are in place as required by the PDPO.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, and secure data storage.

Access to and correction of personal data

You are entitled, in accordance with the PDPO, to check whether we hold data about you and to have access to those data. Under the PDPO, you have the right to:

• Request access to your personal data held by us
• Request correction of any inaccurate personal data
• Ascertain our policies and practices concerning personal data
• Be informed of the kind of personal data held by us
• Withdraw consent for direct marketing at any time
• To exercise any of these rights, please contact us using the details provided below.

Direct marketing

Direct marketing

We will only use your personal data for direct marketing purposes with your explicit prior consent. If you have given consent, you may opt-out at any time by clicking the "unsubscribe" link in any marketing emails or by sending an email stating this to info@thl-advisory.com.

Consent and updates

By submitting your personal data to THL Advisory, you consent to its use as outlined above. We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. We encourage you to review this policy regularly.

Contact us

Cn

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer via email at info@thl-advisory.com stating DATA PRIVACY MATTER in the subject line.