Privacy Policy

Effective date: 8 September 2026 · Last updated: 8 September 2026

This Privacy Policy explains how Olimpios Limited ("Olimpios", "we", "us") collects, uses, stores and protects personal data when you visit olimpios.org (the "Website"), contact us, or work with us as a client, prospective client, contractor or partner.

Olimpios Limited is a company incorporated in Hong Kong (Business Registration No. 80700642), with its registered address at Unit 907, 9/F, Silvercord Tower 2, 30 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong. For the purposes of applicable data protection law, Olimpios Limited is the data controller of the personal data described in this Policy. We process personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO") and, where it applies to clients and visitors in the European Economic Area or the United Kingdom, the EU and UK General Data Protection Regulation ("GDPR").

1. Data we collect

We collect only what we need to respond to you and to run our business:

• Contact form data. When you submit the form on the Website: your name, work email address, company name, the stage you select, and the message you write.
• Correspondence. Emails and messages you exchange with us, including their metadata (sender, recipient, date and time).
• Business relationship data. If you become a client, contractor or partner: contact details of your team members involved in the engagement, contractual and billing information, and information reasonably required for the delivery of our services.
• Technical data. Our hosting provider automatically records limited technical logs (such as IP address, browser type, pages requested and timestamps) for security and operation of the Website. We do not currently use advertising trackers or analytics cookies on the Website.

We do not knowingly collect data of children under 18, and the Website is not directed at them. We do not collect special categories of personal data (such as health or biometric data) and ask you not to send them to us.

2. How we use personal data

• To respond to enquiries submitted through the Website or by email;
• To prepare proposals and to negotiate, conclude and perform contracts for our services;
• To administer, secure and improve the Website;
• To keep business records and comply with legal, accounting, tax and regulatory obligations, including in Hong Kong;
• To establish, exercise or defend legal claims.

We do not sell personal data, do not share it with data brokers, and do not use it for third-party advertising. We do not use the personal data described in this Policy to train artificial-intelligence models.

3. Legal bases (EEA/UK visitors)

Where GDPR applies, we rely on: legitimate interests (responding to business enquiries, operating and securing the Website, business administration); performance of a contract (delivering services you or your company have engaged us for); and legal obligation (record-keeping, tax and accounting). Where we ever rely on consent, you may withdraw it at any time.

4. Who we share data with

We share personal data only with service providers that help us operate, under contracts that restrict their use of the data:

• Website hosting and form processing: Netlify, Inc. (United States) — hosts the Website and receives contact-form submissions;
• Email: Zoho Corporation (European data centres) — provides our business mailboxes;
• Professional advisers and authorities: accountants, auditors, lawyers, banks and public authorities where required for compliance, and only to the extent necessary.

In client projects we act on our clients' instructions with respect to data held in their own systems (for example, their CRM). Such data is processed under the relevant client agreement, remains in the client's accounts, and is not covered by this Policy.

5. International transfers

We operate from Hong Kong and serve clients in the United Kingdom, the United States, the European Union and the United Arab Emirates, so personal data may be transferred to and stored in countries other than your own, including Hong Kong and the United States. Where GDPR applies to such transfers, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses entered into with our service providers, or transfer to recipients covered by an applicable adequacy decision or certification framework.

6. Retention

• Contact-form enquiries and related correspondence: up to 24 months after our last exchange, unless a business relationship follows;
• Contractual, billing and accounting records: at least 7 years, as required by Hong Kong law;
• Technical hosting logs: retained for the short periods set by our hosting provider for security purposes.

When data is no longer needed, we delete or anonymise it.

7. Security

The Website is served exclusively over HTTPS. Access to mailboxes and administrative systems is limited to authorised persons and protected by authentication controls. Our service providers maintain their own certified security programmes. No method of transmission or storage is completely secure, but we take measures appropriate to the risk and will comply with applicable breach-notification laws if an incident affects your personal data.

8. Your rights

Under the PDPO you have the right to request access to your personal data and to request correction of inaccurate data. Where GDPR applies, you additionally have the rights to erasure, restriction of processing, data portability, and to object to processing based on legitimate interests, as well as the right to lodge a complaint with your local supervisory authority (in Hong Kong, the Office of the Privacy Commissioner for Personal Data, pcpd.org.hk).

To exercise any of these rights, email us at hello@olimpios.org. We respond within the timeframes set by applicable law and may need to verify your identity before acting on a request.

9. Cookies

The Website does not set advertising or analytics cookies. Only technically necessary functionality is used to deliver the site and process the contact form. All resources of the Website, including fonts, are served from our own domain; your browser makes no requests to third-party advertising or analytics servers. If we introduce analytics or other cookies in the future, we will update this Policy and, where required, ask for your consent.

10. Changes to this Policy

We may update this Policy from time to time. The current version, with its effective date, is always published on this page. Material changes will be highlighted on the Website.

11. Contact

Olimpios Limited
Unit 907, 9/F, Silvercord Tower 2, 30 Canton Road,
Tsim Sha Tsui, Kowloon, Hong Kong
Business Registration No. 80700642
Email: hello@olimpios.org