Privacy Policy

1. Introduction

Meridian Legal Services ("we," "us," or "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and in our engagement with you. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and applicable data protection regulations.

2. Data Collection

What Personal Data We Collect

We collect personal data that you provide directly through our contact forms, email inquiries, phone conversations, and formal engagement agreements. This includes:

• Name and professional title
• Email address and phone number
• Organisation and business address
• Information about your legal matter or inquiry
• Communication records and correspondence

How We Collect Data

We collect personal data directly from you when you complete contact forms, send us enquiries, call our office, or engage our services. We also use cookies and analytics tools to understand website usage patterns (see Cookie Policy).

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you provide information through our website forms
• Contract Performance: To deliver legal services you have engaged us to provide
• Legitimate Interest: To manage our business, respond to inquiries, and improve our services
• Legal Obligation: To comply with professional regulations and legal requirements

4. How We Use Your Data

We use your personal data to:

• Provide legal services and respond to your inquiries
• Communicate with you about your engagement and deliverables
• Process invoices and manage financial records
• Maintain attorney-client privilege and confidentiality
• Comply with professional and legal obligations
• Improve our website and service delivery (with anonymised analytics)
• Manage our business operations and risk management

We do not use your data for marketing purposes without your explicit consent.

5. Data Sharing

We do not share your personal data with third parties except:

• Service Providers: Secure cloud storage providers and email services necessary to deliver our services
• Professional Advisers: When required to obtain specialist input on matters you have engaged us to handle
• Legal Compliance: When required by law, court order, or professional regulatory bodies
• Your Consent: When you explicitly authorise sharing with specific parties

All service providers are bound by confidentiality agreements and data protection obligations.

6. Data Retention

We retain personal data for as long as necessary to:

• Provide legal services and maintain attorney-client relationships
• Comply with professional and regulatory record-keeping obligations
• Manage potential disputes or claims

Typically, client files are retained for 7 years following completion of engagement. You may request earlier deletion unless retention is required by law or professional obligations.

7. Data Protection Measures

We implement appropriate security measures to protect your personal data:

• Encrypted communication channels for sensitive information
• Secure cloud storage with access controls
• Password-protected systems and authentication
• Limited staff access to personal data (need-to-know basis)
• Regular security assessments and updates
• Confidentiality agreements with all staff members

No system is completely secure, but we are committed to protecting your data from unauthorised access and misuse.

8. Your Rights

Under Hong Kong's PDPO, you have the following rights:

• Access: Request access to personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request erasure of your personal data (subject to legal/professional obligations)
• Portability: Request your data in a portable format
• Withdraw Consent: Withdraw consent for specific uses of your data
• Object: Object to certain processing of your personal data

To exercise these rights, contact [email protected]

9. International Data Transfers

As a Hong Kong-based law firm, we primarily process data within Hong Kong. If international transfers occur, we ensure appropriate safeguards are in place in accordance with Hong Kong data protection requirements.

10. Cookies and Tracking

Please see our Cookie Policy for detailed information about cookies, tracking technologies, and your preferences.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete such data immediately.

12. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes via email or website notice.

13. Contact Us

If you have questions about this Privacy Policy or our data handling practices:

• Email: [email protected]
• Phone: +852 3482 6719
• Address: Suite 1801, 18/F, Wheelock House, 20 Pedder Street, Central, Hong Kong

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong if you believe your rights have been violated.