Privacy Policy

1. Overview

Karford Securities Limited ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are registered with the Hong Kong Securities and Futures Commission (SFC) and comply with the Personal Data (Privacy) Ordinance (PDPO) and applicable data protection regulations.

2. Information We Collect

We collect information in the following ways:

• Account Information: When you create a client account, we collect your name, email address, phone number, residential address, and financial information necessary for portfolio management and compliance.
• Portfolio Data: Information about your investment preferences, portfolio holdings, transaction history, and risk profile.
• Communication Records: Records of emails, phone calls, meetings, and other communications with our advisory team.
• Website Usage: IP addresses, browser type, pages visited, time spent on pages, and other analytics data through cookies and similar technologies.
• Compliance Information: Identity verification documents, bank account details, and tax information required for regulatory compliance.
• Payment Information: Credit card or bank details for fee billing (processed securely through third-party payment providers).

3. How We Use Your Information

We use your information for:

• Service Delivery: Managing your portfolio, executing trades, providing advisory services, and monitoring investment performance.
• Regulatory Compliance: Meeting SFC requirements, anti-money laundering (AML) obligations, know-your-customer (KYC) verification, and tax reporting.
• Risk Management: Assessing client suitability, managing portfolio risk, and preventing fraud.
• Communication: Sending statements, reports, market updates, and service notifications.
• Improvement: Analyzing website usage to improve our platform, services, and user experience.
• Marketing: Sending promotional materials and updates about new services (only with your consent).
• Legal Obligations: Responding to legal requests, protecting our rights, and enforcing our agreements.

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share data with:

• Service Providers: Third parties who provide payment processing, data hosting, email delivery, and analytics services (subject to strict confidentiality agreements).
• Financial Institutions: Banks and custodians necessary for executing trades and holding assets.
• Regulatory Authorities: SFC, Hong Kong Monetary Authority (HKMA), and other regulatory bodies as required by law.
• Legal Proceedings: When required by court order or to protect our legal rights.
• Business Transfer: In the event of merger, acquisition, or sale of assets, client information may be transferred as part of that transaction.

All data sharing is subject to confidentiality obligations and PDPO compliance.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication mechanisms and multi-factor authentication for account access
• Regular security audits and penetration testing
• Restricted access to personal data (staff access limited to business-need basis)
• Secure disposal of physical records
• Incident response procedures for data breaches

While we maintain strong security practices, no system is completely impenetrable. We cannot guarantee absolute security, but we are committed to protecting your data.

6. Your Rights

Under the PDPO, you have the following rights:

• Access: You may request access to the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete data.
• Deletion: You may request deletion of your data (subject to legal and regulatory retention requirements).
• Marketing Opt-Out: You may opt out of marketing communications at any time.
• Data Portability: You may request a copy of your data in a structured, commonly used format.

To exercise these rights, contact our Data Protection Officer at dpo@karford.hk.

7. Data Retention

We retain personal data for as long as necessary to:

• Provide services and manage your account
• Comply with legal and regulatory requirements (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain business records and audit trails

After the retention period, data is securely deleted or anonymized unless longer retention is legally required.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to:

• Remember your preferences and login information
• Analyze website traffic and usage patterns
• Improve user experience and website functionality
• Detect and prevent fraud

You can control cookie preferences through your browser settings. Disabling cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be effective immediately upon posting. We encourage you to review this policy regularly to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

Data Protection Officer
Karford Securities Limited
Email: dpo@karford.hk
Phone: +852 2234 5678
Address: 2801 World Finance Centre, Central, Hong Kong

If you believe your privacy rights have been violated, you may lodge a complaint with the Hong Kong Privacy Commissioner for Personal Data (PCPD).