LEGAL 01 — PRIVACY POLICY
Privacy Policy
Last updated: 2026-09-29
1. Who we are
This website is operated by The SuperGroup Holdings Limited, trading as SuperGroup Team ("we", "us"). We are the data user for personal data collected through this site. Contact for all privacy matters: contact@supergroupteam.com.
2. What we collect
- Enquiry data: name, company, job title, email, phone or WhatsApp number, services of interest, budget range, expected start, project summary, and how you heard about us, when you submit our enquiry form or contact us directly.
- Recruitment data: name, contact details, CV, portfolio links and cover letter, when you apply for a role.
- Newsletter data: your email address, when you subscribe.
- Usage data: pages visited, device and browser information and approximate location, collected through analytics cookies only where you consent (see our Cookie Policy).
- Client project data: handled under the contract and confidentiality terms of each engagement, not under this policy alone.
3. How we use it
We use personal data to respond to enquiries and provide quotations; to deliver and administer contracted services; to assess job applications; to send service updates and our newsletter where you have subscribed; and to operate, secure and improve this website. We collect personal data lawfully and fairly, for purposes directly related to our business, and adequate but not excessive for those purposes, in line with the Data Protection Principles of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
4. Direct marketing
We only use your name and contact details for direct marketing (such as our newsletter or service announcements) with your consent, as required by Part 6A of the PDPO. Every marketing message includes an unsubscribe option, and you can withdraw consent at any time at no charge by emailing contact@supergroupteam.com.
5. Who we share it with
We do not sell personal data. We share it only with: service providers who process it on our instructions (website hosting, analytics, email delivery and CRM providers); our professional advisers where necessary; and public authorities where disclosure is required by law. Processors are bound by contract to use the data only for the services they provide to us.
6. Where it is stored
Some of our service providers store data outside Hong Kong. Where they do, we choose providers that apply security and confidentiality standards consistent with this policy and the PDPO.
7. How long we keep it
Enquiry records are kept for 24 months after last contact; unsuccessful application records for 12 months; newsletter data until you unsubscribe; and client records for the engagement plus statutory retention periods. Personal data is erased or anonymised when no longer needed for the purpose it was collected.
8. How we protect it
Access on a least-privilege basis, two-factor authentication on all system accounts, credentials held in an enterprise password manager, data kept in approved cloud environments with regular backups, and information security managed with reference to the ISO/IEC 27001 framework.
9. Your rights
Under sections 18 and 22 of the PDPO you may request access to, and correction of, personal data we hold about you. Write to contact@supergroupteam.com; we respond within 40 days as the Ordinance requires and may charge a reasonable fee for access requests as it permits. You may also complain to the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk).
10. Children
This site is directed at businesses and is not intended for children. We do not knowingly collect personal data from minors.
11. Changes
We may update this policy from time to time; the date above shows the current version. Material changes will be flagged on this page.