Privacy Policy

1. Introduction

This Privacy Policy explains how TARA Ratings Limited ("TARA", "we", "us" or "our") collects, uses, retains and discloses personal data in connection with tararatings.com, our enquiries and business relationships, and related services. We handle personal data in accordance with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) and other applicable requirements.

Any personal information collection statement provided for a particular service or activity should be read together with this Policy. If the English and Chinese versions of this Policy are inconsistent, the English version prevails.

2. Data User

The data user for the personal data described in this Policy is:

3. Personal Data We Collect

Depending on your interaction with us, we may collect:

• Contact and business identity information, such as your name, work email address, company name and organisation type, and any job title or telephone number you provide in other communications.
• Enquiry and communication information, such as enquiry details, meeting arrangements, correspondence and language used.
• Technical and usage information, such as IP addresses, browser and device information, page views, referral sources, access times and approximate location. This information may be processed by us or providers of hosting, security and analytics services.
• Service-related information, such as business or property information relating to identifiable individuals obtained in connection with the provision or use of TARA Lighthouse and related services.

You may choose whether to submit an enquiry or request a service. Information marked as required is needed to process the relevant request. If it is not provided, we may be unable to process your enquiry, arrange a meeting or provide the relevant service.

If you provide personal data about another person, please ensure that you are authorised to do so and have provided any required notices and obtained any required consent.

4. Purposes of Collection and Use

We may use personal data for the following purposes and purposes directly related to them:

• Handling and following up enquiries, arranging meetings, providing requested information and managing related business communications;
• Providing and administering services, including TARA Lighthouse and related analytics, customer support, service notices and associated administration;
• Operating, maintaining and improving our website and services, analysing usage and preventing misuse;
• Keeping necessary business, accounting and transaction records, and complying with applicable laws, regulatory requirements and legal processes;
• Handling complaints, disputes and legal claims, and establishing, exercising or defending our legal rights; and
• Conducting direct marketing in accordance with section 5.

5. Use of Data and Direct Marketing

We use personal data for the purposes notified when it was collected or purposes directly related to them. For other purposes, we will obtain any required consent or otherwise process the data as permitted or required by applicable law.

If we propose to use your name, business contact details and organisation information to market our building risk intelligence, data analytics and related services directly to you, we will provide the required notices and obtain consent where required by applicable law. You may request that we stop using your personal data for direct marketing by contacting enquiries@tararatings.com.

6. Data Retention

We retain personal data for no longer than is needed for the purposes set out in this Policy or the relevant collection statement and directly related purposes. In determining retention periods, we consider the relevant service and business record requirements, legal, regulatory and accounting requirements, and the need to deal with actual or reasonably anticipated disputes or legal claims.

When personal data is no longer needed, we take reasonably practicable steps to delete or anonymise it.

7. Data Security

We take reasonably practicable technical and organisational measures, having regard to the nature of the personal data and associated risks, to protect it against unauthorised or accidental access, processing, erasure, loss or use.

Internet transmission and electronic storage have inherent limitations, and we cannot guarantee absolute security.

8. Disclosure and Transfer of Data

To the extent needed for the purposes set out in this Policy or the relevant collection statement, we may disclose personal data to:

• Providers of website hosting, email delivery, IT support, security, data processing and website analytics services;
• Professional advisers and insurers providing services to us in connection with relevant business matters, transactions, disputes or claims;
• Regulators, law enforcement or other government authorities, courts and persons involved in legal proceedings, where permitted or required by applicable law; and
• Parties and their advisers involved in an actual or proposed merger, acquisition, reorganisation or transfer of all or part of our business, to the extent permitted by applicable law and consistent with the relevant purposes.

Recipients may be located in or outside Hong Kong, and personal data may be processed or stored in those locations. For service providers processing personal data on our behalf, we adopt contractual or other measures to address applicable data security and retention requirements.

9. Website Analytics and Cookies

This Website uses Vercel Web Analytics to understand aggregate website usage. According to Vercel's service documentation, the tool distinguishes visitors using a hash generated from requests rather than third-party cookies and provides aggregated statistics.

As at the date this Policy was last updated, this Website does not use cookies for advertising tracking. Hosting or security providers may use cookies or similar technologies needed for website security and operation. The purposes for processing associated technical information are described in sections 3 and 4.

If these technologies or their purposes change, we will update this Policy as appropriate, provide required notices and obtain consent where required by applicable law. You can also manage cookies through your browser settings; restricting cookies may affect some website functions.

10. Access, Correction and Related Requests

You may request access to or correction of your personal data held by us in accordance with applicable law. Please send requests to the Privacy Contact in section 13.

We may request information reasonably needed to verify the requestor's identity or authority, or to clarify the scope of a request. We handle requests in accordance with applicable legal procedures and time limits and may refuse a request or limit the information provided where permitted by law. For data access requests, we may charge a fee permitted by law.

Requests to stop direct marketing may be made as described in section 5.

11. Third-Party Websites

This Website may link to websites independently operated by third parties. Their handling of personal data is governed by their own privacy policies. We do not control those websites and are not responsible for their privacy practices. Please review their policies before providing personal data to them.

12. Changes to This Policy

We may revise this Policy from time to time. The current version and its update date will be posted on this page. Where applicable law requires a separate notice or consent for a particular change, we will address those requirements.

13. Contact Us

For enquiries about this Policy or our handling of personal data, or to request access to or correction of personal data, please contact: