Privacy policy

Who we are

This policy explains how Northlink Selections Limited ("we", "us") handles personal data. We are a marketing agency registered in Hong Kong at Unit 1101B, 11/F, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong. We are the controller of the personal data described here, except where we process data on a client's behalf (see "Client work" below).

Questions about privacy: [email protected].

What we collect

When you contact us

If you use our contact form or email us, we receive what you send: usually your name, email address, company or website, the service you are interested in, an optional budget range and your message.

When you visit the site

Our web server records standard technical data, such as IP address, browser type and the pages requested, for security and to keep the site running. We do not use advertising or analytics cookies on this site. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.

When you are a client

We keep contact details for the people we work with, along with contracts, invoices and correspondence.

Client work

To deliver our services, clients may grant us access to accounts such as Meta Business Manager, Google Ads, Google Analytics, Google Search Console, Merchant Center or their website. These accounts can contain personal data about the client's own customers or users.

When we work in a client's accounts, we act as a processor on the client's behalf. We use that access only to deliver the agreed work, we do not copy customer data out of those platforms beyond what the work requires, and we stop using the access when the engagement ends. Clients can remove our access at any time. Where a client needs a data processing agreement, we will sign one.

How we use personal data, and why

• To answer enquiries and discuss possible work. Basis: our legitimate interest in responding to people who contact us, or steps taken at your request before a contract.
• To deliver and bill for services. Basis: performance of a contract.
• To keep the site secure and working. Basis: our legitimate interest.
• To meet legal obligations, such as keeping accounting records. Basis: legal obligation.

We do not sell personal data, and we do not add enquiries to marketing lists.

Who we share it with

We share personal data only with service providers that help us run the business, and only as far as they need it:

• Web3Forms, which delivers contact form submissions to our inbox
• Our email, hosting and file-sharing providers
• Accountants and professional advisers, where required
• Authorities, where the law requires it

International transfers

We are based in Hong Kong and some of our providers operate in other countries. If you are in the European Economic Area or the United Kingdom, your data may be transferred outside it. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Enquiries that do not lead to work are deleted within 24 months. Client records are kept for the length of the engagement and afterwards for as long as accounting and legal requirements demand. Server logs are kept for a short period for security purposes.

Your rights

Depending on where you live, including under the EU and UK GDPR and Hong Kong's Personal Data (Privacy) Ordinance, you can ask to access, correct or delete your personal data, restrict or object to how we use it, or receive a copy in a portable format. To make a request, email [email protected]. You also have the right to complain to your local data protection authority.

Security

We use access controls, strong authentication and reputable providers to protect personal data. No system is perfectly secure, but we take reasonable steps to keep data safe and limit who can see it.

Changes

We may update this policy. The date at the top shows when it last changed.