Privacy Policy

1. Introduction

Tessera ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services and website. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of Hong Kong.

For questions about this policy or your personal data, contact us at [email protected].

2. Data We Collect

Information You Provide

• Name and contact details (email address, phone number) submitted via enquiry forms
• Message content submitted through our contact form
• Information provided during project engagements under separate data processing agreements

Information Collected Automatically

• Browser type, operating system, and device information
• Pages visited on our website and time spent
• IP address (used for analytics, not retained against individual profiles)
• Cookie data (see our Cookie Policy for full details)

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and conducting initial consultations
• Delivering contracted services where a formal agreement is in place
• Improving our website and understanding how it is used
• Complying with applicable legal obligations under Hong Kong law

We do not use personal data submitted via our contact form for marketing communications without explicit consent.

4. Legal Basis for Processing

We process personal data on the following grounds: consent (where you have submitted information voluntarily), performance of a contract (where an engagement is underway), and legitimate interest (for website analytics and service improvement). Processing is always consistent with PDPO requirements.

5. Data Retention

Contact form data is retained for 24 months unless an engagement follows, in which case it is retained for the duration of the engagement and for up to 7 years thereafter for legal and compliance purposes. Analytics data is retained in aggregate form only and is not linked to identifiable individuals.

6. Data Sharing

We do not sell personal data. We may share data with:

• Service providers who assist with website hosting and analytics, under contractual data protection obligations
• Regulatory authorities or law enforcement where required by applicable Hong Kong law

For engagement-related data, any sharing is governed by a separate data processing agreement.

7. Data Security

We apply technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission, access controls, and regular security review. Our practices are aligned with ISO 27001 information security standards. In the event of a data breach affecting your personal data, we will notify you in accordance with PDPO requirements.

8. Cookies

Our website uses cookies to support basic functionality and analytics. You can manage cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the website to function.

9. Your Rights Under PDPO

Under the PDPO, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Request erasure of data where there is no lawful basis for continued retention
• Object to processing in specific circumstances
• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required under PDPO.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

11. Children's Privacy

Our services are directed at organisations and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website following updates constitutes acceptance of the revised policy.

13. Contact

Data controller: Tessera
Address: 160 Argyle Street, Mong Kok, Kowloon, Hong Kong
Phone: +852 2763 5148
Privacy enquiries: [email protected]