NextPath HR Services Privacy Policy

NextPath Solutions Limited ("NextPath", "we", "us") is committed to protecting the privacy of all individuals whose personal data we handle in the course of providing HR consultancy and administration services. This policy explains how we collect, use, and safeguard personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of Hong Kong.

Our Role

We provide HR consultancy, payroll administration, and HRIS advisory services to business clients. We do not provide recruitment, placement, or staffing services, and we do not collect personal data for the purpose of finding employment for any person or supplying workers to employers.

We handle personal data in two capacities:

• As a data user — for our own business contacts, such as client representatives, prospective clients who contact us, and subscribers to our updates.
• As a service provider (data processor) on behalf of our clients — where a client engages us for payroll processing or HR administration, we process personal data of the client's employees on the client's instructions. In these cases, the client remains the data user responsible for that data, and we process it only as needed to deliver the agreed services.

Data We Collect

• Business contacts: name, company, job title, contact details, and correspondence records.
• Client employee data (processed on our clients' behalf): name, contact details, employment particulars, salary and benefits information, and identification documents where required for statutory payroll, MPF/ORSO, and Inland Revenue (IR56 series) filings.

We collect only the personal data necessary for these purposes.

How We Use Personal Data

We use personal data solely to: deliver the HR consultancy and administration services agreed with our clients (including payroll processing, MPF administration, and statutory tax filings); respond to enquiries; administer our client relationships; and comply with legal obligations under Hong Kong law.

We do not sell personal data. We do not share personal data with third parties except with service providers engaged to help us deliver our services (who are bound by confidentiality and data protection obligations), or where required by law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law in Hong Kong (for example, statutory record-keeping requirements for payroll and tax filings). Data that is no longer required is securely deleted or anonymised.

Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, and we require the same of any service provider that handles personal data on our behalf.

Your Rights

Under the PDPO, you have the right to request access to and correction of your personal data held by us. You may also request erasure of data that is no longer necessary for the purpose for which it was collected. Where we process data on behalf of a client as their service provider, we may refer your request to that client as the responsible data user, and will assist them in responding.

Contact

To exercise your rights or raise any privacy concern, contact our Data Protection Officer at privacy@nextpath.hk. We will respond within the timeframes required by the PDPO.