Privacy Policy

The data user is DRIFT BAY HOLDINGS LIMITED, FLAT/RM 02 11/F HANG SENG CASTLE PEAK RD BLDG 339 CASTLE PEAK RD CHEUNG SHA WAN KL. Enquiries about personal data, including requests for access or correction, should be addressed to the Privacy Officer at that address.

Email for data protection enquiries: info@driftbay.co

From the enquiry form: your name, your company, its country of registration, your business email address and the content of your message.

From a business relationship: identification documents for signatories and beneficial owners, corporate registration documents, and bank account details — collected because the company must verify who it is contracting with and where payment is going.

This website sets no analytics, advertising or tracking cookies. It loads no third-party fonts, scripts, maps or social media widgets. The only cookie-equivalent stored in your browser is a local flag recording that you have acknowledged the cookie notice.

To answer your enquiry; to negotiate, perform and administer a contract; to carry out customer due diligence, sanctions screening and payment verification; to keep accounting records and file tax returns; and to comply with legal or regulatory obligations.

Personal data is not used for direct marketing, and is not sold, rented or transferred for any marketing purpose.

The company’s bankers, auditors, company secretary and legal advisers, where necessary for the purpose above; freight forwarders, inspection agencies and customs authorities where required to perform a shipment; and law enforcement, regulators or courts where the company is required or permitted by law to disclose.

Where a transfer of personal data outside Hong Kong is necessary to perform a contract, it is limited to what that purpose requires.

Enquiries that do not lead to a relationship are deleted within twelve months. Transaction and due diligence records are kept for at least seven years after the end of the relationship, as required by the Companies Ordinance, the Inland Revenue Ordinance and the customer due diligence standard the company applies.

Under sections 18 and 22 of and Principle 6 in Schedule 1 to the Ordinance, you may ask whether the company holds personal data about you, ask for a copy, and ask for correction of data that is inaccurate. A reasonable fee may be charged for complying with a data access request, as the Ordinance permits.

Requests are answered within forty days.

This site is served over HTTPS with HSTS, a strict content security policy and framing disabled. Documents containing personal data are held in access-controlled systems and are not circulated outside the people who need them for the purpose they were collected for.