1. Scope and responsibility
This policy covers the CathayCity website and related enquiry channels. The website and enquiry services operate under the CathayCity brand. If you engage a specific service, the responsible service entity and professional advisers will be identified in the service agreement or when information is collected. Privacy enquiries are received at info@cathaycity.com.
We use the data protection principles of Hong Kong’s Personal Data (Privacy) Ordinance as the basis for handling personal information in our Hong Kong operations, while respecting mandatory requirements in other applicable jurisdictions. Changing the website language changes the displayed text, not the service entity, processing purposes or applicable law.
2. Information we collect
Information you provide may include your name, email address, telephone or WhatsApp details, destination preferences, immigration goals, enquiry text and any family, education or employment background you choose to share. We also record service consent, marketing preferences and related communications.
Browsing and online chat may involve processing page visits, times, network addresses, browser information, visitor identifiers and conversation records to deliver and protect the website and enquiry service. An initial assessment does not require passport uploads, complete financial records, medical records or criminal records. If these are needed for an engagement, their purpose, recipients and submission method will be explained separately.
3. Purposes and your choices
We use relevant information to answer enquiries, arrange contact and initial assessments, understand service needs, follow up matters you engage us to handle, maintain communications, address complaints, prevent misuse and meet applicable legal obligations. Use is limited to stated and directly related purposes; any different use will require the consent required by applicable law.
You may browse general content without providing enquiry details. Fields marked as required are needed to process that request; without them we may be unable to submit, respond to or complete the assessment. Other information and marketing subscriptions are voluntary. Please provide only information relevant to your enquiry.
4. Online chat and external channels
Online chat uses automated replies and staff support. Messages, visitor identifiers and current page information may be used to connect conversations, answer questions and enable staff follow-up. Some conversation state is also stored in your browser. Do not send identity document numbers, account passwords, payment card details or complete sensitive documents in general chat.
If you contact us through WhatsApp, email or another external platform, that platform handles information under its own terms and privacy policy. Automated replies support general enquiries; a consultant should review questions about your individual application.
6. Retention and security
Retention depends on the progress of your enquiry or service, follow-up needs, applicable record-keeping obligations and dispute handling. Indefinite retention is not our general rule: information no longer needed for the relevant purposes should be deleted or de-identified, except where records must be retained by law. Contact us to ask about retention of your records.
The website uses encrypted connections for transmission and access permissions to restrict staff access to records. Please protect your device and email account. No internet transmission or storage is absolutely secure. Contact us promptly if you suspect unauthorised access or a problem with your information.
7. Browser storage and links
The website uses browser local and session storage to remember an online chat visitor identifier, current conversation and invitation state. The staff workspace also uses necessary sign-in and language-setting cookies.
Your browser settings let you inspect, limit or clear cookies and site storage. Doing so may reset features or require sign-in again. Clearing browser storage does not automatically delete enquiry records already held on the server. External websites describe their processing in their own policies.
8. Marketing and withdrawal
Service enquiries and marketing subscriptions are handled separately. We use contact details for immigration updates, service information or events only with the consent required by applicable law. Marketing consent is not required to request an initial consultation.
You may stop marketing contact using the unsubscribe method in the message or by emailing info@cathaycity.com. Withdrawal does not prevent necessary service communications or affect lawful processing that occurred before withdrawal.
9. Access, correction and privacy requests
You may ask whether we hold personal information about you and request access or correction of inaccurate information under applicable law. You may also request deletion, cessation of a use or withdrawal of consent. We assess these requests against applicable rights and continuing legal, service or record obligations, and explain any limits on fulfilment.
We may verify your identity and the scope of your request to avoid disclosure to an unauthorised person. Start with your contact name and email address or telephone number; do not send complete identity documents unprompted. We respond within applicable legal requirements and time limits. You may raise unresolved concerns with us, Hong Kong’s Privacy Commissioner for Personal Data or another applicable regulator.
10. Family members and children
If you provide information about a spouse, child or other family member, ensure that you are authorised to do so and that the person understands its purpose. Information about children should be provided or authorised by a parent or authorised guardian.
For initial enquiries, describe family size, age ranges and planning needs rather than unnecessary names, identity documents or school records. Family information needed for an engagement will be explained at the relevant service stage.
11. Updates and contact
We may update this policy as services, processing practices or applicable requirements change. The latest version and update date appear on this page. Changes to purposes requiring a separate notice or consent will be handled in accordance with applicable requirements.
All language versions are intended to explain the same information-handling policy. Contact the privacy email below if you have a question about a translation or the meaning of a provision.
Personal information and privacy enquiries
To request access or correction, withdraw marketing consent or raise a privacy concern, email us below with “Personal information request” in the subject. Please do not attach passports, bank statements or other sensitive documents to your initial email.
info@cathaycity.com