What we hold, and why.

BearingBridge Ltd is registered in Hong Kong and operates bearingbridge.ai. We are the party responsible for the personal data described on this page. Throughout this policy, we and us mean BearingBridge Ltd.

Write to hello@bearingbridge.com with any question about how your data is handled. A person reads that inbox.

We keep collection deliberately narrow. There are two kinds of data on this site, and we treat them differently.

You give it to us

Your name, work email address, company, job title, phone number, and anything else you choose to write in the contact form, in an email, or in the course of an engagement. Nothing here is collected without you typing it or sending it.

The server records it

Technical details generated by the visit itself: IP address, browser and operating system, referring page, pages viewed, and time on page. This is aggregated and used to understand traffic, not to build a profile of you.

We do not collect special category data, we do not buy contact lists, and we do not run advertising trackers on this site. See our cookie policy for what is set in your browser.

Personal data you send us is used to answer your enquiry, to deliver a service you have asked for, to send you our insights where you have agreed to receive them, to raise and settle invoices, and to keep the record of an engagement that professional practice requires.

Technical data is used in aggregate: how many people read a piece, which pages get abandoned, whether a page loads acceptably from mainland China. Those reports describe traffic, not individuals.

Hong Kong’s Personal Data (Privacy) Ordinance governs our handling of personal data. Where a visitor or client is in the European Economic Area or the United Kingdom, we also apply the standards of the GDPR, and our grounds for processing are these.

• Contract. Data needed to scope, deliver, and invoice an engagement.
• Legitimate interest. Replying to a business enquiry, keeping the site secure, and understanding aggregate traffic.
• Consent. Marketing emails and any optional cookie. Consent can be withdrawn at any time, and every email carries a working unsubscribe link.
• Legal obligation. Accounting and tax records we are required to retain.

Our work often runs on client data, so this deserves its own paragraph rather than a footnote.

• Client data stays inside the environment agreed in the engagement letter. It is not copied into personal tooling.
• We do not train models on client data, and we do not use one client’s material to serve another.
• Where a third-party model provider is part of an agreed architecture, we name the provider, the region, and the retention setting before any data moves, and we prefer providers whose terms exclude training on submitted content.
• Anything sensitive is minimised or pseudonymised before it reaches a model, unless the engagement letter says otherwise in writing.

Engagement-specific terms, including data processing agreements, sit in the client agreement and take precedence over this page for that work.

Access is limited to the people who need it to do the work. Outside the team, data reaches only these parties.

• Service providers that run our hosting, email, and analytics, each bound by confidentiality and permitted to process data only on our instructions.
• Professional advisers such as accountants and lawyers, where their work requires it.
• Authorities, where a valid legal request or a court order obliges us.

Some of these providers operate outside Hong Kong, which means your data may be processed in another jurisdiction. Where that happens we require contractual safeguards equivalent to the protection described here.

We apply technical and organisational measures proportionate to the risk: encrypted transport, access limited by role, hosting with reputable providers, and periodic review of who holds what. No system is perfect and we will not claim otherwise, but we will tell you promptly if a breach affects your data.

Retention follows purpose. Enquiries that go nowhere are cleared within twenty-four months. Client records are kept for the duration of the engagement and for the period our accounting and professional obligations require afterwards. Marketing contacts are kept until you unsubscribe.

Depending on where you are, you can ask us to do the following with the personal data we hold about you.

• Confirm what we hold and give you a copy of it.
• Correct anything inaccurate or incomplete.
• Delete it, where we have no continuing legal reason to keep it.
• Restrict or object to a particular use, including profiling and direct marketing.
• Receive it in a portable, machine-readable form.
• Withdraw consent, without affecting what was lawful before.

Send the request to hello@bearingbridge.com. We answer within thirty days and we do not charge for a reasonable request. If our answer does not satisfy you, you may complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong, or to the supervisory authority where you live.

Our pages link out to other organisations, and our insights cite sources. Once you follow a link you are on someone else’s site, under their policy, and outside our control. We suggest reading theirs before you share anything with them.

This is a business-to-business site. It is not directed at children, and we do not knowingly collect data from anyone under sixteen. If you believe a child has sent us personal data, tell us and we will remove it.

We update this page when our practice changes, and the date at the top of the page moves with it. Material changes are flagged in the notice bar rather than slipped in quietly. Continuing to use the site after an update means the revised policy applies to you.