Privacy Policy

1. Your Anonymity & Reveal Control

Before you accept a Reveal, employers see only your anonymous profile — skills, experience years, salary expectation, and location. No name, phone, email, or LinkedIn. Nothing identifying is shared until you accept a Reveal, and you can block specific companies (your current employer is auto-blocked) so they never see you in search.

2. Data Protection Principles

We comply with the six Data Protection Principles (DPPs) under Hong Kong's PDPO:

• DPP1 – Purpose & Collection: data is collected lawfully, fairly, and for clear purposes.
• DPP2 – Accuracy & Retention: data is kept accurate and not retained longer than necessary.
• DPP3 – Use: data is used only for the purposes stated at collection, unless fresh consent is obtained.
• DPP4 – Security: we safeguard against unauthorized or accidental access, loss, or misuse.
• DPP5 – Transparency: our policies are available and accessible to all users.
• DPP6 – Access & Correction: you have the right to access and correct your personal data.

3. Information We Collect

• Contact details (name, email, phone number)
• Professional information (CV, work experience, education, skills)
• Account credentials and preferences
• Usage data, device information, and cookies

4. Legal Basis for Processing

• Your consent (e.g., when you provide your CV)
• Performance of a contract (e.g., delivering our services)
• Legitimate interests (e.g., improving platform security and user experience)
• Compliance with legal obligations

5. How We Use Your Information

• To create and manage your candidate profile
• To match candidates with employers
• To communicate with you about services and updates
• To improve our platform and prevent fraud
• To comply with applicable laws and regulations

6. Direct Marketing

We will only use your personal data for direct marketing with your explicit consent. You may opt out at any time from your settings or by contacting us.

7. Cookies & Tracking Technologies

We use a minimal set of cookies to keep you signed in and the platform secure. For details, see our Cookie Policy.

8. Information Sharing

We do not sell your personal data. We may share information with:

• Employers — only after you accept a Reveal
• Service providers supporting our operations
• Legal authorities when required by law
• Third parties in the event of a business transfer

9. Data Security

We use technical and organizational measures to protect your data, including strong industry-standard password hashing, encryption of data in transit (HTTPS) and of sensitive data at rest, and protections against common web attacks. No method of transmission or storage is completely secure, but we apply current best practices to safeguard your information.

10. Your Rights

• Access and obtain a copy of your personal data
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent at any time
• Object to or restrict processing
• Request data portability (where applicable under GDPR)

11. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Deleted accounts are soft-deleted immediately and purged after 30 days.

12. International Transfers

Your data may be transferred outside Hong Kong. Where applicable, we ensure appropriate safeguards are in place to protect your information.

13. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.