Privacy policy
Effective date: 1 January 2026
This website (arphoenix.com) is operated by We Aries Group Limited, a Hong Kong company trading as AR Phoenix. This policy explains how we collect, use, and retain your personal data when you visit the site or contact us, and how we handle it in line with the Personal Data (Privacy) Ordinance (Cap. 486).
1. Identity of the data user
AR Phoenix is owned and operated by We Aries Group Limited, a Hong Kong company. If you have any questions about this policy, email privacy@arphoenix.com.
2. What we collect
When you reach out through the contact form or by email, we collect your name, email, phone number (optional), company, the content of your message, and your newsletter opt-in choice. Once Google Analytics is wired in, we also collect standard analytics signals such as page views, IP address, browser type, and device category.
3. How we use it
We use this information to respond to your enquiry, scope a potential engagement, send the newsletter to people who opted in, and analyse aggregate site usage to improve our content. We don't use your data for marketing unrelated to your enquiry.
4. Disclosure and sub-processors
We do not sell your personal data. We rely on the following sub-processors to handle data on our behalf: Google Workspace / Gmail SMTP (transactional email), Cloudflare Turnstile (form abuse prevention), and Google Analytics (site usage statistics). Each sub-processor only sees the data it needs and is bound by its own privacy commitments.
5. Retention
Enquiry records where no engagement contract is signed are deleted after three months. Data relating to signed engagements or active clients is retained for seven years from the end of the relationship, in line with standard Hong Kong record-keeping practice. Newsletter subscriber records are retained until you unsubscribe. Analytics data is retained for 24 months and then deleted.
6. Your rights
Under sections 18 to 23 of the Personal Data (Privacy) Ordinance, you have the right to access, correct, and request deletion of personal data we hold about you. To exercise these rights, email privacy@arphoenix.com. We'll respond within 40 calendar days.
7. Cookies
This site uses first-party analytics cookies to understand overall usage, and third-party cookies only where required by Cloudflare Turnstile to prevent abuse. You can disable cookies in your browser, though some features may not work as expected.
8. International transfers
Because our sub-processors operate in multiple regions (for example AWS Tokyo and the Cloudflare global network), your data may be processed outside Hong Kong. Standard safeguards are applied to those transfers.
9. Updates to this policy
We may update this policy from time to time. The current version and effective date are shown at the top of this page. We will notify known contacts of any material change through reasonable means.
10. Contact
For any question about your personal data, this policy, or to exercise your statutory rights, email privacy@arphoenix.com.