Privacy Policy & Cookie Policy
Last Updated: January 2026 | Governing Framework: Hong Kong Personal Data (Privacy) Ordinance (Cap. 486)
NexvoraHK ("we", "our", or "the firm") fully respects your corporate privacy and personal confidentiality. This Privacy Policy describes our standard operational processes regarding the collection, handling, storage, and protection of commercial records submitted through our platform and advisory divisions. By interacting with our digital interfaces or utilizing our professional corporate services, you confirm full understanding and adherence to these standard compliance parameters.
1. Information Categories We Collect
In the performance of company incorporation, auditing coordination, structural maintenance, and banking account facilitation, we systematically collect designated corporate and verification data:
- KYC and Anti-Money Laundering (AML) Documentation: Including valid passports, national identity credentials, proof of residential address issued within the preceding three months, and organizational ownership charts detailing Ultimate Beneficial Owners (UBOs) as legally required under Hong Kong trust and corporate governance rules;
- Corporate Fiscal & Accounting Archives: Bank monthly statements, purchase orders, commercial invoices, and trailing business agreements provided during bookkeeping representation or tax advisory engagements;
- Contact Credentials: Representative names, corporate email accounts, contact telephone lines, and details outlined within consultation submission inquiries;
- System Analytical Telemetry: Basic browsing IP addresses, operating device categories, and general session engagement logging across our published compliance guidance directories.
2. Lawful Utilization of Collected Data
We maintain a rigorous policy against the sale, lease, or unapproved transfer of confidential client operational archives to external commercial marketing entities. Data utilization strictly operates across the following administrative capacities:
- Executing mandated statutory declarations directly with the Hong Kong Companies Registry and the Inland Revenue Department (IRD);
- Presenting corporate assessment profiles to international institutional banks during pre-approved account onboarding reviews (always under explicit prior client consent);
- Fulfilling compulsory statutory bookkeeping and customer due diligence archival standards applicable to licensed Trust or Company Service Providers (TCSP);
- Replying to explicit technical tax inquiries, audit planning schedules, and advisory correspondence.
3. Cookies and Web Analytics Implementation
To secure operational performance across our platform and facilitate bilingual interaction across our extensive reference catalogs, we rely on minimal, highly regulated browser session protocols:
- Essential Functional Cookies: Preserving system state parameters, such as language localization choices (Traditional Chinese and English) and protecting submission forms from spam interventions.
- Anonymous Statistical Monitoring: Utilizing Google Analytics to aggregate general readership volume across specific compliance educational materials without attempting to link individual identity profiles to browsing patterns. Users retain standard authority to purge or disable cookies directly through browser preferences.
4. Security Safeguards & Statutory Retention Windows
All active communications are encrypted using secure SSL structural layers. For corporate files subject to ongoing institutional compliance mandates:
In accordance with the **Hong Kong Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) and Section 51C of the Inland Revenue Ordinance (Cap. 112)**, corporate account service ledgers, identification verification copies, and financial records must undergo mandatory archiving for a **minimum duration of no less than seven (7) complete tax years**, even subsequent to the expiration or formal termination of professional consulting representation. Once the required limitation threshold has transpired, corresponding digital and physical records are systematically expunged via irreversible data deletion protocols.
5. Rights to Inspect, Amend & Erase Records
Pursuant to basic principles defined under the Ordinance, authorized entity representatives hold explicit rights regarding data accuracy and maintenance:
- Request formal structural confirmation and read access regarding stored organizational profiles within our internal practice registries;
- Order swift administrative modifications to directory listings, shareholder residency details, and beneficial allocations following authorized internal restructures;
- Request immediate disposal of ancillary diagnostic questionnaires and preliminary business evaluation notes submitted during exploratory discussions that did not mature into operational contracts.
Have further specific inquiries concerning our archival data protocols?
Contact our practice managers directly through our dedicated engagement channel: