Privacy Policy
Effective Date: 01.07.2025
Last Updated: 05.10.2026
Global Future Nexus (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in compliance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”), the EU General Data Protection Regulation (“GDPR”), and other applicable global privacy laws. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit https://www.globalfuturenexus.com/ (the “Site”) or use our services (the “Service”).
1. Information We Collect
We may collect the following types of personal data:
Identity Data
Examples: Name, title, company name, job title.
How Collected: Account registration, contact forms.
Contact Data
Examples: Email address, telephone number, postal address.
How Collected: Registration, newsletter sign-up, support requests.
Technical Data
Examples: IP address, browser type, device ID, OS, cookies, usage logs.
How Collected: Automatically via server logs and cookies.
Financial Data
Examples: Payment card details (tokenized by our payment gateway), billing address, transaction history.
How Collected: Payment processing (via Stripe).
Usage Data
Examples: Pages visited, time on site, clickstream, feature usage.
How Collected: Analytics cookies, server logs.
Marketing Data
Examples: Preferences for receiving promotional material, survey responses.
How Collected: Opt-in forms, email engagement tracking.
We do not knowingly collect sensitive personal data (e.g., health, biometric data) unless explicitly required for a specific service and with your explicit, informed consent. We never collect confidential data such as racial, ethnic origin, religious beliefs data.
2. Legal Basis and Purpose of Processing (PDPO & GDPR)
We process your personal data only for specified, explicit, and legitimate purposes, including:
Performance of a Contract: To provide the Service, manage your account, and process payments.
Legal Obligation: To comply with tax, accounting, and anti-money laundering laws (e.g., Hong Kong Inland Revenue Ordinance).
Legitimate Interests: To improve the Site, prevent fraud, and ensure network security, provided our interests do not override your fundamental rights.
Consent: For marketing communications, non-essential cookies, and sharing with third-party partners (which you may withdraw at any time).
3. Sharing & Disclosure
We may share your personal data with:
Service Providers: Payment processors, hosting, analytics, and email marketing providers who act on our behalf under strict data processing agreements.
Professional Advisers: Auditors, legal counsel, and insurers as needed for compliance or business operations.
Competent Authorities: Tax, law-enforcement, or regulatory bodies when required by law or a valid legal request.
Business Transfers: Potential buyers in the event of a merger, acquisition, or sale of assets, subject to strict confidentiality obligations.
We do not sell your personal data to third parties.
4. International Transfers
As a global service, your data may be transferred to, stored, or processed in jurisdictions outside your country of residence (e.g., United States, Vietnam, Singapore, EEA). Where transfers occur, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses (SCCs) approved by the European Commission (for EEA transfers).
Ensuring the recipient jurisdiction provides an adequate level of data protection, or obtaining your explicit consent prior to transfer, in accordance with PDPO DPP3 and GDPR Chapter V.
5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:
Account & Transaction Data: Minimum of 7 years after the end of the customer relationship (to satisfy tax and commercial record-keeping obligations under Hong Kong law), or as required by applicable law, whichever is longer.
Marketing Data: Until you withdraw consent or opt out; thereafter, deleted within 30 days.
Usage & Analytics Data: Aggregated and anonymized after 24 months; raw logs deleted after 6 months.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access & Rectification: Request a copy of your data and correction of inaccurate information.
Erasure (“Right to be Forgotten”): Request deletion where we no longer need the data or processing is unlawful.
Restriction & Objection: Request limitation of processing or object to processing based on legitimate interests or direct marketing.
Data Portability: Receive your data in a structured, machine-readable format.
Withdraw Consent: Withdraw any consent previously given, without affecting the lawfulness of prior processing.
To exercise these rights, contact our Data Protection Officer (DPO) at legal@globalfuturenexus.com. We will respond within one (1) month. You also have the right to lodge a complaint with the Hong Kong Privacy Commissioner for Personal Data (PCPD) at https://www.pcpd.org.hk or your local EU Data Protection Authority (DPA).
7. Security
We implement appropriate technical and organizational measures to protect your data, including encryption of data in transit (TLS 1.2+) and at rest (AES-256), regular security testing, and strict role-based access controls. However, no method of transmission over the Internet is 100% secure.
8. Children’s Privacy
Our Service is not directed to children under the age of 16 (or the applicable age of digital consent in your jurisdiction, up to 18). We do not knowingly collect personal data from children. If we become aware of such collection, we will delete it promptly.
9. Links to Third-Party Sites
Our Site may contain links to third-party websites. This Privacy Policy does not apply to those external sites. We encourage you to review their respective privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The “Last Updated” date at the top indicates the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
Data Protection Officer – Global Future Nexus
Email: legal@globalfuturenexus.com
Phone: +852 2866 3139 (Hong Kong)
Address: Suite A, 14/F, Bangkok Building, 29 Des Voeux Road Central, Central, Hong Kong SAR