Privacy policy

1. Scope

This policy applies to aonecpa.com and to personal data we process in the course of providing professional services. If you contact us on behalf of a company, it also applies to you as the individual contact.

2. What we collect

• Enquiry data: name, company, role, email, telephone, the content of your enquiry and any attachments you choose to send.
• Engagement data: identity and address documents, shareholder and beneficial ownership information, financial and tax records, employment and immigration documents, and other information required to provide the service.
• Website technical data: our hosting provider may record IP address, browser type, request time and referring page for security and troubleshooting.

3. How we use it

• To respond to enquiries, assess whether to accept an engagement and prepare an engagement letter.
• To provide accounting, audit, tax, company secretarial, immigration support and related advisory services.
• To meet anti-money-laundering, client due diligence, record-keeping and other legal or professional requirements.
• To contact you, arrange meetings, send deadline reminders and service-related notices.
• To improve our website and processes. We do not use your data for advertising tracking.

4. Sharing and transfers

We do not sell personal data. Data may be shared, where needed, with team members working on your matter; licensed professionals handling local statutory audit, tax, legal or immigration work; service providers for hosting, email, document storage or IT support; and authorities where required by law, regulation or professional standards.

Some collaborating professionals or providers may be located outside Hong Kong. We use reasonable contractual, confidentiality and access controls and provide only the data needed for the relevant work.

5. Retention

We retain data according to the nature of the service, professional record-keeping requirements and applicable law. General enquiries are kept for a reasonable period after resolution. Engagement records and working papers are kept as required. Data is deleted or anonymised when no longer needed.

6. Security

We apply reasonable technical and organisational measures, including access controls, password management, backups and transmission protection, to prevent unauthorised access, loss or misuse. Internet transmission is not absolutely secure; if you are unsure how to send sensitive documents, contact us first.

7. Your rights

Under the Hong Kong Personal Data (Privacy) Ordinance, you may request access to and correction of personal data we hold, and ask us to stop using your data for direct marketing where applicable. Email [email protected]; we may need to verify your identity. You may also complain to the Office of the Privacy Commissioner for Personal Data.

8. Cookies and website

This website does not currently set advertising or cross-site tracking cookies. Our hosting provider may keep necessary technical logs for security and performance. If analytics are added, we will update this page and provide a choice.

9. Market observation data

Our market observations use the Overture Maps Places open dataset (CDLA-Permissive 2.0) to identify publicly listed accounting locations in Hong Kong, then analyse firms' publicly available homepages and up to two inner pages. We respect robots.txt, limit request rates and do not collect content behind logins, paywalls or access restrictions.

Published pages contain aggregate statistics only. We do not publish the name, email, telephone, address or verbatim content of any individual firm. Raw snapshots and firm-level records remain in a local analysis environment and are not uploaded to the public website or public code repository. A firm that wishes to correct or remove data about itself may email [email protected].

Place data source: Overture Maps Foundation Places (release 2026-10-21.0), which includes OpenStreetMap and other sources. See Overture attribution.

10. Contact

For questions about this policy or our handling of personal data, email [email protected]. We will respond within a reasonable time.

This policy may be updated as our services or the law change. Material changes will be reflected in the effective date above. A Chinese version is available at /privacy.