Privacy Policy

Last updated: 14 October 2026

AMMO Group Corporate Services Limited ("AMMO", "we", "us" or "our") is committed to protecting the privacy of individuals who visit our website (www.ammo-group.com) and interact with us in the course of our ESG, internal control, corporate governance and related advisory services. This Privacy Policy explains how we collect, use, hold, disclose and protect personal data in accordance with the Personal Data (Privacy) Ordinance, Cap. 486 of the Laws of Hong Kong ("PDPO").

1. What Personal Data We Collect

We may collect the following categories of personal data:

Contact details you provide through our website forms, including name, company name, job title, email address and phone number
Information you submit when requesting a proposal, downloading a resource, subscribing to our newsletter, or completing a stakeholder questionnaire or materiality assessment survey on our behalf or on behalf of our clients
Correspondence and information you provide when engaging with us via email, phone or in-person meetings
Technical data collected automatically through our website, such as IP address, browser type, pages visited and time spent on our website, via cookies and similar technologies (see Section 10)

We do not knowingly collect personal data from minors, and our services are directed at corporate clients and professionals.

2. Purposes for Which We Collect and Use Personal Data

The personal data we collect is used for the following purposes:

To respond to your enquiries and requests for proposals
To provide, administer and improve our ESG, internal control, corporate governance, financial translation and valuation advisory services
To communicate with you regarding our services, including project updates and scheduling
To send you our newsletter, regulatory updates or other marketing communications, where you have consented to receive them
To conduct stakeholder engagement and materiality assessment surveys on behalf of our clients
To comply with our legal and regulatory obligations
To maintain business records and for internal administrative purposes
To organise client enquiries, emails and survey responses with AI or similar assistant tools under human supervision

3. Voluntary Nature of Data Provision

Provision of your personal data through our website is voluntary. However, if you do not provide the requested information (for example, your contact details when requesting a proposal), we may not be able to respond to your enquiry or provide the requested services.

4. Classes of Persons to Whom Data May Be Transferred

We may disclose or transfer your personal data to the following classes of persons, where necessary for the purposes set out above:

Our staff, contractors and sub-consultants engaged to assist in delivering our services (e.g. financial translators, valuers, or independent reviewers), who are bound by confidentiality obligations
Third-party service providers who support our website and business operations, such as web hosting providers, email service providers, and survey/questionnaire platforms
Professional advisers (including legal and accounting advisers), where necessary
Government or regulatory authorities, where required by law

We do not sell your personal data to third parties.

5. Cross-border Access

Where necessary for the purposes in Section 2, authorised staff at our Shenzhen office may access personal data held by AMMO from outside Hong Kong.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or professional record-keeping obligations. Where personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.

7. Data Security

We implement reasonable technical and organisational security measures to protect personal data against unauthorised or accidental access, processing, erasure, loss or use. These measures include access controls, secure storage and confidentiality obligations imposed on staff and contractors. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Use of Artificial Intelligence

We may use AI or similar assistant tools under human supervision to organise client enquiries, emails and survey content. We do not use AI to make automatic refuse or accept decisions about individuals without human involvement.

9. Use of Personal Data for Direct Marketing

If you have subscribed to our newsletter or otherwise consented to receive marketing communications, we may use your name and contact details to send you information about our services, industry updates and events. You may opt out of receiving such communications at any time by clicking the unsubscribe link in our emails or contacting us using the details in Section 12.

We will not use your personal data for direct marketing purposes without your consent, and we will not provide your personal data to third parties for their own direct marketing purposes without your prescribed consent.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve user experience, analyse website traffic and understand how visitors use our website. You can control or disable cookies through your browser settings; however, this may affect the functionality of our website.

11. Your Rights: Access and Correction

Under the PDPO, you have the right to:

Ascertain whether we hold your personal data
Request access to your personal data
Request correction of any personal data that is inaccurate

We will respond to a valid access or correction request within 40 days, in accordance with the PDPO. We may charge a reasonable fee for complying with a data access request, as permitted under the PDPO.

12. Contact Us / Data Protection Enquiries

If you have any questions about this Privacy Policy, or wish to make an access or correction request, please contact:

AMMO Group Corporate Services Limited
Email: [email protected]
Phone: +852 3686 1521

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised "Last updated" date. We encourage you to review this page periodically.

14. Governing Law

This Privacy Policy is governed by the laws of the Hong Kong Special Administrative Region, including the Personal Data (Privacy) Ordinance, Cap. 486.