Privacy policy

Data controller

Datadriventools is the data controller for personal data collected through datadriventools.digital and through client engagements. Contact: info@datadriventools.digital, Manulife Financial Centre, 223 Wai Yip Street, Kwun Tong, +852 2512 8000.

Data we collect

• Enquiry forms — name, email, optional facility name, selected audit type, and message content
• Engagement materials — business contacts, and claim or clinical extracts you choose to share under the engagement letter
• Technical logs — IP address, browser type, and pages visited when essential or analytics cookies are active (see our cookies policy)

We do not ask website visitors for Hong Kong Identity Card numbers, full medical histories, or payment card details through the public contact form.

Purposes

• Responding to audit briefs and scheduling discussions
• Performing contracted healthcare billing audit reviews
• Improving site performance and understanding aggregate visit patterns when analytics are accepted
• Meeting legal and professional record-keeping duties

Retention

Enquiry emails are retained up to 24 months unless a longer period is required for an active engagement or dispute. Engagement working papers follow the retention period in the engagement letter, typically six years for professional records unless you instruct lawful earlier destruction of copies we hold.

Your rights

Subject to the Personal Data (Privacy) Ordinance and other applicable Hong Kong law, you may request access to personal data we hold about you, request correction, and withdraw consent where processing is consent-based. Contact us using the details above. You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.

International transfers

Our primary operations and storage are in Hong Kong. If a subcontractor outside Hong Kong is required (for example, encrypted email infrastructure), we take contractual and practical steps appropriate to the sensitivity of the data and inform clients when engagement materials are involved.

Sharing

We do not sell personal data. We share data with professional advisers or IT hosts only as needed to operate the practice, or when required by law.

Updates

We may revise this policy. The version on this page is the current one.