Privacy Policy
Last updated: June 2026.
1. Who we are
Lockhart & Yip (“the firm”, “we”) is an independent firm of international and cross-border counsel based in Hong Kong. For the purposes of this policy we are the data user under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and, where it applies to visitors from the European Economic Area or the United Kingdom, the data controller under the General Data Protection Regulation (“GDPR”).
2. What we collect
The only personal data this website collects is what you choose to send through the contact form: your name, company, email address, the type of matter and your message. The site sets no analytics or marketing cookies and uses no third-party tracking. See the cookie policy.
3. Why we collect it and on what basis
We use the data you send to respond to your enquiry, to run a conflict check and, if an engagement follows, to deliver legal services. Under the GDPR the bases are our legitimate interest in responding to enquiries addressed to us and, after engagement, the performance of a contract. We do not use your data for marketing and we do not sell or share it for advertising.
4. Where the data goes
Form submissions are delivered to info@lockhartyip.com and are not stored in any customer-relationship-management system. Data may be processed by our email infrastructure providers, acting as data processors. Where a matter requires it and you instruct us accordingly, relevant information may be shared with locally licensed firms or other professional advisers working on your matter, under duties of confidence.
5. International transfers
We operate from Hong Kong; if you write to us from another jurisdiction, your data will be transferred to and processed in Hong Kong. Where the GDPR applies, we rely on the safeguards available under it for such transfers.
6. Retention
Enquiries that do not lead to an engagement are retained for as long as needed to respond and for conflict-checking purposes, then deleted. Engagement files are retained for the periods required by professional obligations and limitation rules.
7. Your rights
Under the PDPO you may request access to and correction of your personal data. Where the GDPR applies, you additionally have the rights to erasure, restriction, portability and objection, and the right to complain to your supervisory authority. To exercise any right, write to info@lockhartyip.com.
8. Security
Personal data never appears in URLs or query strings on this site. Access to enquiry data is limited to the people who need it to respond.
9. Changes
We will post any changes to this policy on this page with an updated date.