1. Controller

The controller responsible for personal data processing described in this Policy is Connect4Global Company Limited, registration number 2960515, with its registered office at Unit 2602-03, 26/F, BEA Tower, Millennium City 5, 418 Kwun Tong Road, Kwun Tong, Kowloon, Hong Kong SAR. Privacy enquiries and requests may be sent to request@connect4global.com.

2. Scope

This institutional website has no contact forms, registration facilities, newsletter subscriptions, visitor analytics or advertising tracking tools. Visiting a website can nevertheless involve processing of technical connection information by the hosting infrastructure. Visitors may also choose to contact us through external email, telephone or messaging services.

3. Personal data and purposes

Technical connection data: The hosting infrastructure may record IP addresses, browser or device information, access times and requested resources to deliver, maintain and secure the website, detect abuse and investigate incidents. Where the GDPR applies, this processing is based on legitimate interests (Article 6(1)(f)), subject to the applicable balancing assessment.

Contacts initiated by visitors: When a visitor contacts us by email, telephone or WhatsApp, we may process their name, contact details, organisation and message content to respond and, where appropriate, take steps requested before entering into a contract. Where the GDPR applies, the legal basis may be Article 6(1)(b) or Article 6(1)(f), depending on the enquiry.

External platforms: Social media and messaging links take visitors to independent services. Their processing is governed by their own notices.

4. Retention

Enquiries that do not result in a contractual relationship are retained for no longer than 12 months after the last communication, unless a longer period is necessary to meet a legal obligation or establish, exercise or defend legal claims. Different periods may apply to contractual and accounting records.

Website access logs are subject to monthly rotation and archiving settings in cPanel. Some older archived log files remain in the hosting account; consequently, no uniform deletion period is represented here. Log retention, including any provider-managed logs and backups, is under review and will be specified once verified. Records will be assessed for deletion when no longer necessary.

5. Recipients and service providers

Website hosting infrastructure is supplied by DMNS — DOMINIOS, S.A., Portugal, acting as a processor to the extent it processes personal data on our instructions. The physical server location and the provider’s retention periods for logs and backups remain to be confirmed. Email and communications service providers may also process information needed to deliver those services. Data may be disclosed to competent authorities where legally required.

6. International access and transfers

Authorised team members in Hong Kong, Macau, Portugal and the United Arab Emirates may access enquiries when needed to respond and coordinate business activities. Depending on the applicable law, such access may constitute an international transfer. Where the GDPR applies, transfers must rely on a valid Chapter V mechanism, such as appropriate safeguards or an applicable derogation in the limited circumstances permitted by law. We do not represent that standard contractual clauses have been executed or that a particular derogation covers all transfers without further assessment. Visitors may request information about the safeguards applicable to their data.

7. International legal framework

Depending on the circumstances and territorial scope, relevant laws may include the EU General Data Protection Regulation and applicable ePrivacy rules; Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486); Macau Law No. 8/2005; Mainland China’s Personal Information Protection Law; and UAE Federal Decree-Law No. 45 of 2021. Mentioning these laws does not mean each applies to every visitor or processing activity.

8. Security

We use HTTPS for the website and seek to restrict access to personal data to authorised personnel with a business need. Security measures are reviewed in light of the risks and services involved.

9. Individual rights

Depending on the applicable law, individuals may have rights of access, correction, deletion, restriction, objection and portability, and the right to complain to a competent supervisory authority. Requests can be sent to request@connect4global.com. Under the GDPR, requests are generally answered within one month, subject to lawful extensions and exceptions. Relevant authorities include Portugal’s Comissão Nacional de Proteção de Dados (cnpd.pt) and Hong Kong’s Office of the Privacy Commissioner for Personal Data (pcpd.org.hk).

10. Children

This website and our services are intended for businesses, investors and institutions and are not directed at children.

11. Changes and languages

We may update this Policy to reflect changes in our practices or applicable requirements. The latest version will be published here. Where permitted by law, the English version prevails over a translation in the event of inconsistencies.