Legal information
Cookies Policy
Last updated: 22 October 2026
This cookie policy applies to www.imsg.com.hk. It should be read with our Privacy Policy and Personal Information Collection Statement at www.imsg.com.hk/privacy, and it forms part of our Website Terms of Use.
1.Who we are
This website is operated by IMSG Corporate Services Limited (“IMSG”, “we”, “us”, “our”). For the purposes of the Personal Data (Privacy) Ordinance (Cap. 486) (the “Ordinance”), we are the data user in respect of personal data collected through the technologies described in this policy. Our contact details are set out in section 13.
2.What cookies are, and why we use them
A cookie is a small text file placed on your computer or other device when you visit a website. Similar technologies, including browser local storage, pixels and tags, can store or access information on your device or transmit information to us or a third party. We use these technologies on this website to:
- store your language and consent choices in your browser so that the site works properly;
- allow our hosting and security providers to serve and protect the website;
- with your consent, measure pages, visits and permitted interaction events so that we can understand how the site is used and improve it;
- with your consent, measure the effectiveness of our advertising through our Google and Meta integrations; and
- with your consent, record how you reached the site (advertising attribution).
Necessary storage and technologies required to serve, secure and operate the website do not require your consent. Optional analytics, advertising measurement and attribution technologies are switched off by default and are activated only if you accept them.
3.Your consent
When you first visit the site, a banner asks whether you accept optional tracking. Optional analytics, advertising-measurement and attribution technologies are switched off by default and are not activated unless you accept them. You can reject optional tracking as easily as you can accept it, and you can withdraw your choice at any time using Cookie preferences in the footer. Forms and site search remain available whatever you choose. If you withdraw your choice, we stop the relevant optional technologies and delete the related optional cookies and browser storage that we control, so far as practicable. Withdrawal affects future collection and does not recall or automatically erase information already received by a provider.
4.Third-party providers
With your consent, we use Google Analytics 4, Google Ads and Meta Pixel for website analytics, advertising measurement and attribution. These integrations are deployed through Google Tag Manager. Providers may receive online identifiers, technical request and device information, page and referrer information, timestamps, advertising click identifiers and permitted interaction or conversion events. We do not send enquiry-form text or site-search questions to these analytics and advertising services. Our configuration controls are described in section 8.
If you use AI-powered site search, your question is sent to Cloudflare Workers AI to find relevant pages on this website. We do not include the question in analytics events or write it to the Cloudflare Worker application log. Enquiries are delivered through Resend to IMSG. These requested functions remain available when optional tracking is rejected.
Cloudflare also provides hosting and security services. Site fonts, images and application files are served through IMSG’s hosting. Following a link to an external website, WhatsApp or a video-meeting provider connects you to that provider.
Providers’ processing is subject to their applicable contracts, terms and privacy arrangements. The restrictions on IMSG’s configuration do not mean that providers cannot process permitted browser or advertising identifiers for their own purposes under those arrangements. Provider privacy notices: Google -https://policies.google.com/privacy?hl=en-US; Meta - www.facebook.com/privacy/policy/; Cloudflare - Cloudflare Privacy Policy; Resend - Privacy Policy · Resend
5.The technologies we use
| Category | Technology, information, purpose and retention |
|---|---|
| Necessary storage and operation | We store language and consent choices in browser local storage. The language preference, imsg-lang, has no automatic expiry. The consent record, imsg-consent-v1, is valid for 180 days from your latest explicit choice. Ordinary browsing does not extend that period; another explicit choice starts a new period. Functional storage also supports checklists, temporary search and enquiry information, and enquiry follow-up details in browser history. Hosting and security services process technical information to deliver and protect the website. Individual technologies and their retention behaviour are identified in the schedule below. |
| Optional analytics (with consent) | Google Analytics 4 measures visits and permitted interaction events. Our property is configured for two-month retention of non-key-event data and fourteen-month retention of user-level and key-event data. Reset on new activity is enabled for user identifiers, so further activity can extend their retention. Expired data is deleted through Google’s deletion cycle. These settings do not govern standard aggregated reports or browser-cookie lifetimes. |
| Optional advertising measurement (with consent) | Google Ads and Meta Pixel measure permitted visits and conversion events using the information described in section 4, subject to the controls in section 8. Individual browser-storage durations and refresh behaviour are set out in the schedule below. Those browser periods do not determine the retention of information already received by a provider. |
| Advertising attribution (with consent) | The browser record imsg-attribution-v1 stores campaign information, a reference, landing and referral information, and permitted advertising click identifiers. Its validity period is 90 days from the latest qualifying campaign update. A new, different campaign or advertising click can restart that period; ordinary direct visits and repeat visits from the same campaign do not. Original first-touch attribution and the associated lead identifier may be preserved across successive campaigns and can therefore remain for longer than 90 days. Attribution details may accompany an enquiry and permitted measurement events. Withdrawal clears the site-controlled attribution record. It does not erase copies already received by providers or included in an enquiry. Attribution retained with an enquiry forms part of that enquiry record and is subject to section 6 of our Privacy Policy. |
Expiry and deletion
A browser-storage validity period does not necessarily cause physical deletion at the moment it expires. Depending on the technology, expired records may be removed, ignored or replaced when the website or provider next accesses them. Records can remain on a device while the visitor is away. The schedule identifies the relevant behaviour.
6.Managing your choices
Use Cookie preferences in the footer to accept or reject optional analytics and advertising tracking together, or to withdraw your previous acceptance. Reject is presented as prominently as Accept. Optional tracking does not start before acceptance. Forms and site search remain available whichever option you choose.
Withdrawal refreshes the page to stop loaded tracking and clears related optional cookies and browser storage controlled by our website. Copy any unfinished enquiry before withdrawing. Withdrawal does not recall information already sent to providers or delete submitted enquiries.
You can also clear browser storage or use your browser’s cookie controls. Blocking functional storage may affect website features. Details of individual technologies appear in the Cookie and Storage Schedule in section 5.
7.Cookies and personal data
Where a cookie or similar technology collects personal data, we collect and handle that data in accordance with the Ordinance and our Privacy Policy. This includes limiting collection to what is necessary and not excessive for a lawful purpose directly related to our activities, collecting by fair means, and providing the information required by the Ordinance. Our Privacy Policy also explains retention (section 6), security (section 9), use for new purposes (section 4), and access and correction rights (section 10).
8.Direct marketing
IMSG uses these integrations to measure website use, advertising attribution and permitted conversion events. Our current setup does not enable remarketing campaigns, customer-list uploads or matching, Google Ads enhanced conversions, or Meta advanced matching. Google Signals and Meta automatic event detection are disabled, and Google advertising-personalisation consent remains denied.
9.Sending data outside Hong Kong
Some of our providers, including our hosting, analytics and advertising-measurement providers (including Google and Meta) and AI site-search provider (Cloudflare), may process or store data collected through this site outside Hong Kong. Those places may not offer the same level of protection as Hong Kong. Section 33 of the Ordinance is not in force, but we apply equivalent safeguards voluntarily, as described in section 11 of our Privacy Policy. The providers and classes of providers that may receive data are also identified in sections 4 and 5 of this policy.
10.Your right to see and correct your data
You may ask us whether we hold personal data about you, ask for a copy, and ask us to correct it. Contact the Com Sec team at comsec@imsg.com.hk or write to IMSG Corporate Services Limited, Suite 4002A, 40/F, Tower 1, Lippo Centre, 89 Queensway, Admiralty, Hong Kong. Data access requests should be made using the Data Access Request Form specified by the Privacy Commissioner, available at www.pcpd.org.hk. We respond within 40 days. We may charge a fee for complying with a data access request, which will not be excessive; we do not charge for a data correction request. Section 10 of our Privacy Policy explains these rights in full, and section 12 explains how to complain to the Privacy Commissioner.
11.Changes to this policy
We may update this policy. The date at the top shows when it was last changed. We review this policy and the itemised technology schedule whenever we materially change the website, our tag-management configuration or a third-party integration. If we make a change that materially affects how we use personal data we already hold, we will take reasonable steps to bring it to your attention, including through the cookie banner where appropriate.
12.Language
This policy is published in English, Traditional Chinese and Simplified Chinese, the Simplified Chinese version being derived from the Traditional Chinese version. If there is any inconsistency between them, the English version prevails. This policy is governed by the laws of the Hong Kong Special Administrative Region.
13.Contact
IMSG Corporate Services Limited, Suite 4002A, 40/F, Tower 1, Lippo Centre, 89 Queensway, Admiralty, Hong Kong. Telephone +852 2127 4237. Email comsec@imsg.com.hk.
Start with a free 20-minute call.
The call is free and covers general questions: how Hong Kong companies work, what we do and what it costs.Advice on your own company is a paid consultation at HK$2,500 an hour. First-hour fee credited towards IMSG service fees if you engage us within 30 days. No cash refund. Government fees and third-party charges are excluded from the credit.