1. Who we are

This website is operated by Golden Monkey Consulting Limited, a company registered in Hong Kong under registry code 76213049, with its registered office at Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Hong Kong.

For the purposes of applicable data protection law we are the data user (under the Hong Kong Personal Data (Privacy) Ordinance) and, where the General Data Protection Regulation applies, the data controller in respect of personal data collected through this site.

Questions about this policy, or any request relating to your personal data, should be sent to info@goldenmonkey.io.

2. Scope of this policy

This policy covers personal data collected through this website only. Personal data processed in the course of a client engagement is governed by the engagement letter and any separate data protection terms agreed with that client.

3. What we collect

Information you send us

If you contact us by email, we receive whatever you choose to include — typically your name, email address, and the details of your enquiry.

If you use the enquiry form on this website, we collect the name, email address and message you enter, and your telephone number if you choose to provide it. The form is processed by a script on our own server and the contents are emailed directly to us. The submission is not stored in a database, and it is not passed to any third-party form service. Our server records the IP address the submission came from, briefly and solely to limit abuse of the form.

We do not operate a newsletter or an account system on this website, we do not ask you to register, and we do not add people who contact us to any marketing list.

Technical information recorded by our hosting provider

Like effectively all websites, our hosting provider records standard server log information when a page is requested. This ordinarily includes the IP address making the request, the date and time, the page requested, the referring page where one is sent by your browser, and basic browser and operating system information. This is generated automatically by the web server; it is not something we ask you for.

Aggregate traffic measurement

We use Ahrefs Web Analytics to understand how many people visit the site and which pages they read. It is a cookieless analytics tool: it does not set cookies, does not store persistent identifiers on your device, and does not track individuals across websites, devices or sessions. What we see is aggregate — visit counts, page popularity, referring sources and approximate country — not the behaviour of identifiable people.

Because it sets no cookies and does not process data capable of identifying you, no consent banner is required and none is shown. If you would prefer not to be counted at all, blocking requests to analytics.ahrefs.com will exclude you entirely and will not affect how the site works.

What we do not collect

  • We set no cookies of any kind. See our cookie policy.
  • We use no advertising, retargeting or social media tracking pixels.
  • We do not build visitor profiles, and we do not carry out automated decision-making or profiling.
  • We do not knowingly collect any special category or sensitive personal data through this website.
  • We do not use session recording, heatmap or live chat tools.

4. Why we process it, and on what basis

Where the GDPR applies, we rely on the following legal bases:

  • Legitimate interests — to respond to enquiries you send us, to operate and secure the website, and to prevent abuse. We consider these interests are not overridden by your rights, given the very limited data involved.
  • Steps prior to entering a contract — where your enquiry concerns a possible engagement.
  • Legal obligation — where we are required to retain or disclose information by law.

We do not process personal data collected through this website for marketing purposes, and we do not sell, rent or trade it.

5. Third parties

We keep third-party involvement deliberately minimal. Only the following are involved in the operation of this website:

  • Our hosting provider, which stores the website files and generates the server logs described above. Personal data in those logs is processed on our behalf.
  • Ahrefs Web Analytics, which provides the aggregate visit measurement described above. Your browser requests a small script from analytics.ahrefs.com, and Ahrefs receives the technical information necessary to serve that request and record an anonymous visit. No cookie is set and no persistent identifier is stored on your device.
  • Google Fonts. The typefaces used on this site are currently delivered from Google's servers. As a technical necessity of that delivery, your browser connects to Google and your IP address is visible to Google when a page loads. Google states that it does not use these requests to build advertising profiles. If you would prefer to avoid this connection entirely, you can block requests to fonts.googleapis.com and fonts.gstatic.com; the site remains fully readable in a fallback typeface.

We do not use any other third-party service on this website — no embedded video, no social media widgets, no chat tools, no content delivery network beyond the above.

6. International transfers

We are established in Hong Kong. If you contact us from elsewhere, your personal data will be received and processed in Hong Kong. Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards for that transfer, and we will provide details of the safeguards applied on request.

7. How long we keep it

Email correspondence is retained for as long as needed to deal with the matter it concerns, and thereafter for as long as we may need it to establish, exercise or defend legal claims, or as required by law. Where an enquiry does not lead to an engagement, we delete the correspondence once it is no longer relevant.

Server logs are retained by our hosting provider for a limited period in accordance with their standard practice, and are not used by us for any purpose other than security and troubleshooting.

8. Security

The site is served over HTTPS. We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. Please do not send confidential documents or sensitive personal data by unencrypted email; tell us instead and we will arrange a secure method.

9. Your rights

Under the Hong Kong Personal Data (Privacy) Ordinance

You have the right to ask whether we hold personal data about you, to request a copy of it, and to request correction of any data that is inaccurate. We may charge a reasonable fee for complying with a data access request, as the Ordinance permits.

Under the GDPR, where it applies to you

You have the right to request access to your personal data, its rectification or erasure, restriction of processing, and portability, and to object to processing carried out on the basis of our legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out beforehand.

You also have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, place of work, or the place of the alleged infringement.

To exercise any of these rights, email info@goldenmonkey.io. We will respond within the period required by the applicable law. We may need to verify your identity before acting on a request.

10. Children

This website is directed at businesses and professional advisers. It is not intended for children, and we do not knowingly collect personal data relating to them.

11. Links to other sites

Where we link to an external website, that site is outside our control and is governed by its own privacy policy. We are not responsible for the content or data practices of third-party sites.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. Material changes will be reflected on this page; please check it periodically.

13. Contact

Golden Monkey Consulting Limited
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen's Road Central
Hong Kong
info@goldenmonkey.io