1.1 This Privacy Policy explains how Mr. Discovery Limited (“Company”, “we”, “us”, “our”) collects, uses, stores, shares, and protects your personal data when you interact with us through our website, purchase Services, or otherwise engage with us.
1.2 We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”) and, where relevant, international standards such as the EU General Data Protection Regulation (GDPR).
1.3 By using our Services or providing us with personal data, you acknowledge that you have read and understood this Privacy Policy.

2.1 “Client” or “you” means any individual, company, or organisation purchasing or using our Services.
2.2 “Services” means any consultations, strategic advisory, funding applications, marketing execution, creative production, or related services offered by us.
2.3 “Personal Data” means any information relating directly or indirectly to an identified or identifiable individual, as defined under PDPO.
2.4 “Processing” means any operation performed on Personal Data, such as collection, storage, use, transfer, disclosure, or deletion.

3.1 Identity Data: name, job title, company name, billing details, government identifiers (if provided).
3.2 Contact Data: email, telephone, address, billing contact.
3.3 Transaction Data: invoices, service records, payment confirmations, wire/T/T transfers, online payment details.
3.4 Technical & Cookie Data: IP address, device, browser type, operating system, referral URLs, cookie identifiers, and online behaviour (pages visited, time spent, clicks).
3.5 Communications Data: correspondence, enquiries, support requests, recordings of consultations if mutually agreed.
3.6 Third-Party Data: information you provide relating to your staff, contractors, or customers for project execution (e.g. marketing lists, creative materials).

4.1 Directly: when you submit forms, request quotations, purchase consultations, or engage us for Services.
4.2 Automatically: through cookies and analytics when you visit our website.
4.3 From third parties: payment processors, subcontractors, or referrals.

We process Personal Data for:
5.1 Delivering and managing Services.
5.2 Issuing quotations, invoices, receipts, and performing accounting.
5.3 Preparing funding applications, marketing campaigns, and creative projects.
5.4 Client communication and relationship management.
5.5 Legal compliance (tax, audit, regulatory requirements).
5.6 Service and website improvements.
5.7 Sending you updates or marketing communications (with opt-out rights).
5.8 Fraud prevention and enforcing contracts.

6.1 Consent.
6.2 Contractual necessity (to perform Services).
6.3 Legal obligation (e.g. tax reporting).
6.4 Legitimate interests (business operations, client relationship management, fraud prevention).

7.1 We may share Personal Data with:
7.1.1 Employees, officers, and authorised subcontractors under confidentiality obligations.
7.1.2 Payment processors, banks, auditors, insurers, and IT service providers.
7.1.3 Government authorities or regulators where required by law.
7.1.4 Professional advisers (legal, accounting, tax).
7.2 We do not sell or rent Personal Data.

8.1 Data may be transferred to servers or providers outside Hong Kong.
8.2 Safeguards (e.g. encryption, contractual terms) will be used to protect your Personal Data.

9.1 Retention lasts as long as necessary for the purposes collected, including statutory retention (e.g. 7 years for financial records).
9.2 Where data is no longer required, it will be securely deleted, anonymised, or archived.

10.1 Our website uses cookies and similar technologies to improve functionality, personalise content, measure traffic, and enhance your user experience.
10.2 Types of cookies used:
10.2.1 Essential cookies: required for core website functionality.
10.2.2 Performance cookies: analytics (e.g. page visits, traffic sources).
10.2.3 Functional cookies: remember preferences and settings.
10.2.4 Targeting cookies: track browsing habits to deliver relevant ads (if enabled).
10.3 You may disable cookies via your browser settings; however, this may affect site performance or certain features.
10.4 By continuing to use our site without adjusting your settings, you consent to our use of cookies.

11.1 We apply reasonable technical and organisational safeguards (e.g. SSL, access controls, encryption).
11.2 While we strive to protect Personal Data, no internet transmission or storage is entirely secure.

12.1 Under PDPO (and GDPR where applicable), you may:
12.1.1 Request access to your Personal Data.
12.1.2 Request correction of inaccurate/incomplete data.
12.1.3 Request deletion, subject to legal obligations.
12.1.4 Opt out of direct marketing.
12.1.5 Withdraw consent (without affecting prior lawful use).
12.1.6 Request restriction of processing or portability (GDPR).

Our website and Services may link to third-party platforms. We are not responsible for their privacy practices and encourage you to review their policies.

Our Services are not directed at children under 18, and we do not knowingly collect their data. If discovered, such data will be erased.

15.1 We may engage subcontractors (e.g. editors, designers, media buyers) for specialised tasks.
15.2 Such parties process Personal Data only under our instructions and confidentiality terms.

If a data breach occurs that risks your rights, we will notify you and, where required, regulators promptly.

We may amend this Privacy Policy from time to time. Updates will be posted on our website with a new effective date. Continued use of Services means acceptance of the revised Policy.

For requests or questions regarding this Policy:

Data Protection Officer
Mr. Discovery Limited
Email: privacy@mrdiscovery.co
Address: Unit 9C, 9/F, 235 Wing Lok Street Trade Centre, Sheung Wan, Hong Kong