Privacy Policy of Stratus Limited — data controller details, the information we collect through this website, purposes, retention, sharing, international transfers, your rights and how to contact us.

Services Suite About Insights Careers Clients & partners Book a briefing →

Privacy Policy

How Stratus Limited collects, uses, retains and protects the personal data you share with us through this website — stated plainly, without fine-print games.

Effective date: 2 July 2026

1. Who we are

Stratus Limited is the data controller for personal data collected through this website (stratus.limited).

  • Registered office: Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong
  • Company ID: 76091966
  • LEI: 98450093EKF0E6D49812
  • Contact: web [at] stratus.limited

This policy covers this public website only. Data processed inside the Stratus Suite and the client portal is governed by the agreements we hold with each client firm.

2. What we collect

2.1 Information you give us

  • Contact form data — your name, firm, email address, role and the content of your enquiry when you submit our contact form or request a briefing.
  • Correspondence — the content of emails and other messages you exchange with us, including any attachments you choose to send.
  • Career applications — information you provide when applying for a role listed on our careers page.

2.2 Information collected automatically

  • Technical logs — IP address, browser type and version, device and operating system information, referring pages, the pages you visit on this site and the date and time of each request. These logs are used for security, capacity planning and diagnostics.

We do not knowingly collect personal data from minors, and this website is not directed at them.

3. Why we process it

We process personal data for the following purposes:

  • To respond to enquiries and briefing requests, and to correspond with you afterwards.
  • To evaluate career applications.
  • To operate, secure and maintain this website, including detecting and preventing abuse, fraud and unauthorised access.
  • To understand, in aggregate, how the site is used so we can improve it.
  • To comply with legal and regulatory obligations that apply to us.

We process personal data in accordance with applicable data protection law, including the Hong Kong Personal Data (Privacy) Ordinance.

4. Retention

We keep personal data only as long as it is needed for the purpose it was collected for, and then delete or anonymise it. As a rule:

  • Enquiry and correspondence data is retained while the conversation, or any resulting engagement, remains active, and for a reasonable period afterwards to maintain business records.
  • Technical logs are retained for a limited period for security and diagnostic purposes and then deleted or aggregated.
  • Data we are legally required to keep is retained for the period the applicable law prescribes.

5. Sharing

We do not sell personal data. We share it only in the following limited circumstances:

  • Service providers — infrastructure, hosting and email providers that process data on our behalf, under contract and only to the extent needed to run this website and respond to you.
  • Legal requirements — where disclosure is required by law, regulation, court order or a lawful request from a competent authority.
  • Corporate events — in connection with a merger, acquisition or reorganisation, subject to appropriate confidentiality safeguards.

6. International transfers

Stratus Limited is based in Hong Kong, and our service providers may store or process data in other jurisdictions. Where personal data is transferred outside the jurisdiction in which it was collected, we take reasonable steps to ensure it receives a comparable standard of protection, including contractual safeguards with the providers that handle it.

7. Security

We apply the same discipline to this website that we apply to the systems we build for clients: encryption in transit, least-privilege access to stored data and logging of administrative access. No transmission over the internet is entirely free of risk, but we work to keep that risk low and to respond quickly if something goes wrong.

8. Your rights

Subject to applicable law, you may:

  • Request access to the personal data we hold about you.
  • Request correction of data that is inaccurate or incomplete.
  • Request deletion of data we no longer have a valid reason to keep.
  • Object to, or ask us to restrict, certain processing.
  • Withdraw consent where processing is based on consent, without affecting processing that took place before withdrawal.

To exercise any of these rights, write to web [at] stratus.limited. We may need to verify your identity before acting on a request, and we will respond within the timeframe applicable law requires.

9. Third-party links

This website links to external sites — including the websites of our partner firms — that operate under their own privacy policies. We are not responsible for their practices, and we encourage you to review their policies before providing personal data to them.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised. Material changes will be reflected here before they take effect.

11. Contact

Questions about this policy or about how we handle personal data should be directed to web [at] stratus.limited, or by post to Stratus Limited, Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong.