Privacy Policy

Last updated: Sep 2026

This Privacy Policy explains how UHY Prime Hong Kong CPA Limited trading as UHY Prime (the “Firm”, “we”, “us” or “our”) collects, uses, discloses, retains and protects personal data in connection with the website at https://uhy-hk.com/, any forms or resources made available through the website, and related communications. 

The Firm is the data user responsible for the personal data described in this Privacy Policy, unless a particular form or service identifies another entity. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other applicable requirements. 

This Privacy Policy should be read together with any Personal Information Collection Statement (“PICS”) displayed on or before the collection of personal data through a particular form, service or communication. Where a PICS contains more specific information, it will apply to that collection activity to the extent of any inconsistency.

 

1. Who we are 

The website is operated by:

  • Legal name: UHY Prime Hong Kong CPA Limited
  • Trading name: UHY Prime
  • Registered office / business address: Suite 1206, 12/F, Tower 6, The Gateway, Harbour City, 9 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
  • Privacy contact: Privacy Officer
  • Email: general@uhy-hk.com
  • Telephone: 2250 1000


UHY Prime is an independent member of the international UHY network. The Firm is legally separate from Urbach Hacker Young International Limited and from every other UHY member firm, unless expressly stated otherwise in a separate written engagement or notice. 

 

2. Personal data we may collect

Depending on how you interact with us, we may collect the following types of personal data:

  • Identity and contact data, such as your name, job title, employer, email address, telephone number, postal address and other contact details.
  • Enquiry data, including the contents of your message, the subject of your enquiry, meeting details and related correspondence.
  • Professional data, such as your employer, role, business sector and other information relevant to a professional service requested by you or your organisation.
  • Recruitment data, including information contained in your CV, application, cover letter, interview notes and references, where you apply for a position with us.
  • Communication preference data, such as your subscription status, marketing consent, withdrawal or unsubscribe records and preferred language.
  • Technical and usage data, including your IP address, browser type, device information, approximate location, referring page, pages visited, access times, error logs and similar information.
  • Cookie data, including information collected through cookies and similar technologies, as described in our Cookies Policy.
  • Other information, that you choose to provide to us, or that is lawfully provided to us in connection with our business activities.


Please do not submit identity-card numbers, passwords, payment-card details, confidential client information or other sensitive information through a general website enquiry form unless we have expressly provided a secure channel for that purpose.

 

3. How we collect personal data

We may collect personal data:

  1. directly from you when you submit an enquiry, subscribe to communications, register for an event, request a publication, apply for a role or contact us;
  2. automatically through the website, cookies, server logs, analytics and similar technologies;
  3. from your employer or organisation where you contact us in a professional capacity;
  4. from UHY entities, member firms, professional advisers, service providers or other persons where this is lawful and relevant to our business; and
  5. from publicly available sources where appropriate and permitted by law.

 

4. Purposes of collection and use

We may collect, hold, use and disclose personal data for the following purposes:

  1. To respond to and manage your enquiries, requests, meetings and other communications;
  2. To provide publications, reports, event information, newsletters or other materials requested by you;
  3. To assess, discuss, deliver and administer business and professional services;
  4. To process job applications and administer recruitment;
  5. To operate, maintain, secure and improve this website;
  6. To analyse website usage and improve website content, where permitted by your cookie choices;
  7. To detect and prevent spam, fraud, cyberattacks, unauthorised access and other misuse;
  8. To manage our records, audits, insurance, risk, professional obligations and internal administration;
  9. To comply with applicable laws, regulations, court orders, professional rules and lawful requests from regulators or government authorities; and
  10. To send information about our services, publications and events, only where permitted by law and, where required, with your consent.


We will not use personal data for a new purpose that is unrelated to the purpose for which it was collected unless we have obtained the consent required under applicable law.

 

5. Mandatory and voluntary information

Where a form asks for personal data, fields marked with an asterisk or otherwise identified as mandatory must be completed for us to process the relevant request. If you do not provide mandatory information, we may be unable to respond to your enquiry, provide requested material, administer your registration or process your application.

Other information is voluntary. You may choose not to provide it, but this may limit the extent to which we can tailor our response or provide a requested service. The specific PICS displayed with a form will identify the relevant mandatory and voluntary fields and the consequences of not providing mandatory information.

 

6. Disclosure of personal data

We may disclose personal data, where relevant and lawful, to the following classes of persons:

  • Our personnel, including directors, employees, partners, consultants and contractors who need the information for legitimate business purposes.
  • UHY entities and member firms, where necessary to respond to an enquiry, coordinate an international matter, provide a requested service or administer the UHY network.
  • Technology service providers, including website hosting, content-management, cloud-storage, email-delivery, form-processing, analytics, cybersecurity and anti-spam providers.
  • Professional and business advisers, including auditors, insurers, banks and other business-support providers.
  • Authorities and other persons, where disclosure is required or permitted by law.


We require service providers that process personal data on our behalf to use appropriate contractual or other safeguards and to process the information only for authorised purposes, subject to applicable law.

We do not sell personal data. We will not provide personal data to another person for that person’s direct marketing purposes unless the required notice and consent have been obtained under the PDPO.

 

7. International processing and transfers

Because the UHY network and some technology service providers operate internationally, personal data may be accessed, stored or processed in Hong Kong or another jurisdiction. Where personal data is transferred to an overseas UHY entity or service provider, we will take reasonable steps to ensure that the information is handled in accordance with applicable data-protection, confidentiality and security requirements.

 

8. Direct marketing

We do not use personal data for direct marketing unless we have first provided the required notice and obtained the consent required under the PDPO.

 

9. Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember preferences, understand website usage and, where applicable, support analytics or other services. Our Cookies Policy describes the cookies used on the website, their providers, purposes, categories and expiry periods.

Strictly necessary cookies may be used where required for the website to function. You may manage or delete cookies through your browser settings. Disabling cookies may affect certain website functions.

 

10. Data accuracy

We take practicable steps to ensure that personal data we hold is accurate and, where appropriate, up to date. Please notify us if your personal data changes or if you believe that information we hold is inaccurate or incomplete.

 

11. Data retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required or permitted by applicable law, professional obligations, contractual requirements, dispute management, audit, risk or legitimate business needs.

We periodically review the information we hold. When personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it, unless retention is required or permitted by law.

 

12. Data security

We take practicable technical, administrative and physical measures to protect personal data against unauthorised or accidental access, processing, erasure, loss, use, alteration or disclosure. These measures may include access controls, confidentiality obligations, secure transmission, system monitoring, backup controls, staff training and vendor due diligence.

No method of transmission or storage is completely secure. If we identify a personal-data incident, we will assess and respond to it in accordance with our incident-response procedures and applicable legal requirements.

 

13. Access and correction of personal data

Under the PDPO, you may request access to personal data held by us about you and request correction of personal data that is inaccurate. We may need to verify your identity and may request information reasonably necessary to locate the relevant records.

To make a request, contact our Privacy Officer:

  • Email: general@uhy-hk.com
  • Postal address: Suite 1206, 12/F, Tower 6, The Gateway, Harbour City, 9 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
  • Telephone: 2250 1000


We will handle requests in accordance with the PDPO. In certain circumstances, we may be permitted or required by law to refuse access or correction. Where required, we will provide reasons for a refusal. We may charge a fee permitted by the PDPO for complying with a data-access request.

If you have any concern about how we handle your personal data, please contact our Privacy Officer at general@uhy-hk.com. You may also contact the Office of the Privacy Commissioner for Personal Data in Hong Kong.

 

14. Links to third-party websites

The website may contain links to third-party websites, including UHY member-firm websites and external services. Those websites have their own privacy practices. We are not responsible for the privacy, security or content of third-party websites, and you should review their policies before providing personal data.

 

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, services or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Where a material change requires additional notice or consent, we will provide that notice or obtain that consent in the manner required by law.