Privacy Policy

OnPoint Media Limited (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit www.onpointmediahk.com, contact us, or use our services.

By using our website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

The data controller responsible for your personal data is:

OnPoint Media Limited
Registered address: Office 747, 7/F Star House Building, Tsim Sha Tsui, Kowloon, Hong Kong
Email: [email protected]
Registration Number: 3104476

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

  • Identity information: name, job title, company name, and professional details.
  • Contact information: email address, telephone number, postal address, and other communication details.
  • Enquiry information: information contained in messages, requests, proposals, or other correspondence.
  • Account or service information: login details, project information, preferences, and information required to provide our services.
  • Technical information: IP address, browser type, device information, operating system, language settings, and approximate location.
  • Usage information: pages visited, referring websites, browsing behavior, and interactions with our website.
  • Marketing information: communication preferences and records of your consent or objection to marketing communications.
  • Transaction information: billing details, payment information, and records of services purchased, where applicable.

We do not intentionally collect special categories of personal data unless this is necessary, legally permitted, and clearly explained to you at the time of collection.

3. How We Collect Personal Data

We may collect personal data:

  • directly from you when you contact us, submit a form, request information, or enter into an agreement;
  • automatically through cookies, analytics tools, and similar technologies;
  • from your employer or organisation when you act on its behalf;
  • from publicly available sources or business directories; and
  • from service providers or business partners where legally permitted.

4. Purposes of Processing

We may use personal data for the following purposes:

  • to respond to enquiries and provide requested information;
  • to prepare proposals, negotiate agreements, and provide our services;
  • to manage client, supplier, and business relationships;
  • to process payments and maintain business records;
  • to operate, maintain, secure, and improve our website and services;
  • to personalise website content and understand how visitors use our website;
  • to send service-related communications;
  • to send marketing communications where permitted and where you have provided consent, when required;
  • to administer events, surveys, or other business activities;
  • to prevent fraud, misuse, security incidents, and other unlawful activity;
  • to comply with legal, regulatory, tax, accounting, and law-enforcement obligations; and
  • to establish, exercise, or defend our legal rights.

Where required by applicable law, we will identify the relevant legal basis for processing, such as consent, performance of a contract, compliance with a legal obligation, or our legitimate business interests.

5. Whether Providing Personal Data Is Obligatory or Voluntary

Providing personal data is generally voluntary. However, certain information may be necessary for us to respond to your enquiry, enter into a contract, provide requested services, process a payment, or comply with a legal obligation.

If you do not provide personal data that is necessary for these purposes, we may be unable to respond to you, provide the relevant service, or complete the requested transaction. We will indicate where information is mandatory, for example by marking required fields on an online form.

6. Direct Marketing

We may use your personal data to send information about our services, news, events, or other business updates where this is permitted by law.

Where consent is required, we will only send direct marketing communications after receiving your consent. You may withdraw your consent or object to direct marketing at any time by:

  • clicking the unsubscribe link in the relevant communication;
  • contacting us at [email protected]; or
  • using any preference-management option we provide.

Withdrawing consent or objecting to marketing will not affect the lawfulness of processing carried out before your request.

7. Disclosure and Classes of Transferees

We may share personal data with the following categories of recipients, where necessary for the purposes described in this Privacy Policy:

  • our employees, officers, contractors, and professional advisers;
  • technology, hosting, cloud-storage, IT, cybersecurity, and software providers;
  • website analytics, customer relationship management, and communications providers;
  • payment processors, banks, and financial institutions;
  • marketing and advertising service providers, where permitted;
  • legal, accounting, auditing, and insurance advisers;
  • business partners involved in delivering requested services;
  • regulators, government authorities, courts, law-enforcement agencies, or other third parties where required or permitted by law; and
  • prospective buyers, investors, or advisers in connection with a merger, acquisition, restructuring, or sale of assets.

We require service providers that process personal data on our behalf to protect it appropriately and to use it only for authorised purposes.

8. Cross-Border Transfers

Some recipients or service providers may be located outside the country or region in which you live. As a result, your personal data may be transferred to, stored in, or accessed from another jurisdiction.

Where we transfer personal data across borders, we will take reasonable and legally required steps to protect it. These measures may include transferring data to jurisdictions recognised as providing an adequate level of protection, using approved contractual safeguards, obtaining your consent where required, or relying on another lawful transfer mechanism.

You may contact us to request further information about the safeguards used for a specific international transfer.

9. Cookies and Similar Technologies

We may use cookies and similar technologies to operate our website, remember preferences, analyse traffic, improve performance, and, where permitted, support marketing activities.

You can manage cookies through your browser settings or our cookie-management tool, where available. Disabling certain cookies may affect the functionality of the website.

For more information, please see our Cookie Policy.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business records, resolve disputes, enforce agreements, and comply with legal obligations.

Retention periods may vary depending on the type of information and the purpose for which it was collected. When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with applicable law.

11. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of personal data transmitted to or stored by us.

12. Your Rights to Access and Correct Personal Data

Subject to applicable law, you may have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of personal data in certain circumstances;
  • request restriction of processing in certain circumstances;
  • object to certain processing, including direct marketing;
  • withdraw consent where processing is based on consent; and
  • request a copy of your personal data in a usable format, where applicable.

To request access to or correction of your personal data, contact us using the information found at the top of this document.

We may need to verify your identity before responding. We will respond within the period required by applicable law. If you believe we have handled your personal data improperly, you may also have the right to lodge a complaint with the relevant data protection authority.

13. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review their privacy policies before providing personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or privacy practices. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal data, please contact:

OnPoint Media Limited
Registered address: Office 747, 7/F Star House Building, Tsim Sha Tsui, Kowloon, Hong Kong
Email: [email protected]
Registration Number: 3104476