Privacy Policy page

This Privacy Policy (the “Policy”) is for the website, owned by Candy Pang & Co. (or CPC), and governs the privacy of those users choosing to use it.

This Policy explains matters concerning user privacy and covers the obligations and requirements of the users, the website and the website owners. The means by which this website processes, stores and protects user data and information is also detailed in this Policy.

CPC will be the manager of any personal data that we collect from or about you in connection with the provision of our professional services, or related activities such as promoting our business areas, marketing or handling job applications.

Personal Information Collection Statement
You may find the notice as to why your personal data is collected, how it is intended to be used, to whom your personal data may be provided, and how to access, review and correct your personal data in accordance with the requirements of “Personal Data (Privacy) Ordinance” in our “Personal Information Collection Statement” (“PICS”).

Our website may sometimes use cookies and log files for statistical analysis, in order to better understand user behavior, to administer the site, to tailor the information presented to a user based on their preferences, and to enhance user experience. Any information collected by our use of cookies is compiled on an aggregate and anonymous basis.

Content from Other Websites
Content on this site may include embedded content (such as videos, images, articles, etc). Embedded content from other websites acts in exactly the same way as if the visitor has visited the other website.
These websites may also collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Personal Data
If you make an inquiry
When you contact us (whether directly, via this website, email, telephone or by post) with an inquiry about our legal services, we will ask you to supply your basic contact details (e.g., name, email address, phone number and, where applicable, the company or other person you represent and your job title). We need this information to be able to identify you and deal with your inquiry.

When you are or become a client
When you (or the company or other person you represent) become a client of CPC, we may collect further personal data from you, if it is relevant and/ or necessary to the professional services we are providing.

When you make a personal payment for our professional services, details of the method of payment, including your bank details, will be processed.

Professional or business contacts
If you provide CPC with your professional or business contact details or other relevant personal data, we will use this to keep in touch with you and to share with you information that we believe is, or may become, relevant to our and your business or profession and/or our representation of you.

Privacy of Your Data
We will not use your personal data for any other purpose, nor disclose it to nor share it with any third party, without your consent, unless we are required to do so by law, or appliable rules of professional conduct or as mentioned below.

Other professionals and other bodies
In the course of providing legal services, we may require the services of third parties such as counsel, external / overseas lawyers, accountants, experts and services providers, or we may refer you to such third parties. This will require us to share with such third parties your contact details, as well as any further personal data which is relevant to the services they provide. We may also be required to disclose your personal data to regulators, by order of the court or to government departments.

Professional or business contacts
If you have given us your professional or business contact details or other relevant personal data, we may use such data for the purposes of promoting our legal services, unless you indicate otherwise.

Sharing Your Data
In order to provide some of our professional services, we may need to share your personal data with one or more third-party providers situated in foreign countries that do not have the same standards of data protection laws. We will only do so with your consent, or where it is necessary for the performance of the contract we have with you.

How Long Do We Retain Your Data?
Should you contact us with an enquiry about our professional services but subsequently not become a client (or the company or other person you represent does not do so), it is CPC policy to delete your personal data after 12 months.

If you already are or become a client (or the company or other person you represent is or becomes a client), we normally retain contact information (including personal data) for at least seven years after the end of the relevant contract or client relationship, or for longer where it is necessary for us to do so to comply with regulatory or other legal obligations, or for the establishment, exercise or defense of legal claims, or where we agree with you to do so. In some cases, we may need to retain records indefinitely.

Personal data relating to our professional relationship will be retained for so long as necessary, or until you indicate otherwise to us. We aim to update our contacts’ preferences on a regular basis.

In cases where it is not physically possible to delete certain data (for example, where it is stored on a secure external server), we will take the necessary measures to ensure that it is not available for re-use or disclosure to third parties.

Security Over Your Data
We take reasonable precautions to ensure that your personal data remains confidential and have put in place appropriate security measures to protect your personal data. We will limit access to those who have a business need to know; they will only process your personal data on our instructions and subject to a duty of confidentiality.
We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

Your Rights Over Your Data
At any time, you can ask us to provide you with an exported file of the personal data we hold about you, including any data you have given us. You can also request that we erase any personal data we have about you. We will comply with such request; however this does not include any data we are obliged to keep for administrative, legal, or security purposes.

Changes to the Privacy Policy and PICS
CPC reserves the right to update this Privacy Policy and PICS at any time and will make available an updated version on our website or in writing so that you are always aware of what information we collect, how we use the information and under what circumstances the information is disclosed. Any such change, update or modification will be effective immediately upon posting.

Your Contact Information
If you have any questions, comments or requests about our commitment to data protection, please contact the CPC team at