Privacy Policy

Company: Prolink Consulting Limited 

Data Controller Information 

Data Controller: Prolink Consulting Limited 

Representative: Mac Kurata 

Address: Room 507B, 5/F, Empire Centre, 68 Mody Road, Tsim Sha Tsui, Kowloon, Hong Kong Email: [email protected] 

Phone: +852-5803-1111 

Privacy Management Responsibility 

Privacy compliance is managed by the Data Protection Officer (DPO) under the Management  Office. 

The DPO oversees PDPA compliance, handles data subject requests,  

monitors data processing activities, and ensures corrective actions for privacy-related incidents. 

1. Purpose 

This External Privacy Policy explains how Prolink Consulting Limited (“the Company”) collects, uses, stores, and protects personal data from clients, candidates, and business partners in the course of providing recruitment and consulting services. 

2. Data We Collect 

We may collect personal data such as names, contact details, employment history, education, professional qualifications, and other relevant information provided voluntarily by individuals for recruitment or business purposes. 

3. Purpose of Processing 

Personal data is collected and processed solely for legitimate business purposes, including recruitment services, client relationship management, legal compliance, and operational improvement. Processing is based on consent, contractual necessity, or legitimate interest. 

4. Legal / Contractual Requirements 

Certain personal data may be required by law or contract. 

If such data is not provided, Prolink may be unable to proceed with the recruitment process, submit your profile to clients, or comply with regulatory requirements. 

5. Data Sharing 

The Company may share data with clients, affiliated offices, or service providers as required to deliver recruitment services. 

All third parties are bound by confidentiality and data protection agreements. 

6. Cross-Border Transfers 

Where data is transferred outside the country of collection, appropriate safeguards such as contractual clauses and secure systems are applied to ensure data protection consistent with applicable privacy laws.

7. Data Retention 

Personal data is retained only as long as necessary for business, legal, or compliance purposes,  generally up to (1) year unless longer retention is legally required. 

8. Data Subject Rights 

Individuals have the following rights: 

– Access and obtain a copy of their personal data 

– Request correction or deletion of personal data 

– Restrict or object to processing 

– Request data portability to another provider 

9. Data Security 

We employ encryption, secure storage, and restricted access protocols to safeguard personal data from  unauthorized access, misuse, or loss. 

10. Policy Updates 

This policy is reviewed annually and may be updated to comply with legal or operational requirements. Updates will be reflected on the Company’s website or shared directly with stakeholders.