Cookie & privacy policy

Last update: 17th June 2026

At Gibbon, we believe that respecting your privacy starts with using as little of your data as necessary. This Policy explains what personal data we collect, why we collect it, and the rights you can exercise over it.

Article 1 – Context and Legal Basis

Gibbon Limited places great importance on the protection of personal data shared with us, and uses all means at its disposal to comply with applicable data protection laws. This Policy explains: (i) what personal data this website (https://gibbon-limited.com/) collects, how, and why, including in relation to cookies, and (ii) the rights available to you under applicable law.

Legal Compliance: our data processing is designed to comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”), which is the primary law governing our processing of personal data, and, to the extent applicable to visitors and clients located outside Hong Kong, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Gibbon Limited – a company with its registered office at Unit 2A, 17/F, No. 1 Glenealy, Central, Hong Kong (Company No. 77804998) – owns and operates the website https://gibbon-limited.com/. For any question regarding this Policy, you may contact us at [email protected].

You may also consult our Terms and Conditions of Service.

Article 2 – Definitions

Gibbon: “Gibbon Limited”, “the Agency”, “we”, “us” or “our” refers to Gibbon Limited as identified in Article 1.

User: “you” or “your” refers to any visitor of the website https://gibbon-limited.com/.

Client: refers to any individual or legal entity ordering goods or services from Gibbon Limited for exclusively professional purposes.

Personal Data: any data relating directly or indirectly to a living individual, from which it is practicable to ascertain that individual’s identity, in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

Policy: this Privacy & Cookie Policy.

Article 3 – Your Personal Data

3.1 How We Collect Your Data

In most cases, we collect certain data about you when you voluntarily get in touch with us, whether through this website, by email, by phone, or in person. Circumstances in which we may collect personal data about you include: when you request to speak with Gibbon, by any means; when you use one or more of our products or services; when a proposal is provided to us, or when products or services are provided to us; when you communicate with us by phone, in writing, by email, or other electronic means; when you browse this website, fill in a contact form, or otherwise interact with it; when you sign up to receive information or a newsletter from us; and by consulting public sources, such as a companies registry, in particular to confirm your company’s registration details.

3.2 Data Collected Through This Website

Personal data may be collected in the following cases: your IP address, when you access this website; your name, email address and phone number, when you contact us via the website’s contact form; and metadata (whether or not linked to your email address), when we exchange electronic messages with you.

We also collect anonymised, non-personal statistics through AnalyticsWP, a privacy-first analytics solution hosted directly on our own infrastructure. AnalyticsWP does not use cookies and does not link any data to your IP address or identity. The aggregated, anonymised statistics we may collect include: pages visited and time spent on them, referring website, search keywords used to reach this website, browser and operating system type, and approximate geographic region at country or city level.

3.3 Data Security

Gibbon Limited implements appropriate technical and organisational measures to protect your data against unauthorised access, unlawful use, loss, and alteration. For security reasons, the specific tools, techniques and procedures used are not detailed here. We also maintain confidentiality undertakings with our external service providers.

We do not use personal data collected through this website to train artificial intelligence models.

Article 4 – Cookies

This website uses a minimal-cookie approach. The only cookies placed on your device are strictly necessary security cookies set by Cloudflare, our content delivery and security provider, to protect this website against malicious traffic and automated bots:

__cf_bm – Cloudflare Bot Management cookie, used to distinguish legitimate visitors from automated traffic. Typically expires after 30 minutes.
cf_clearance – records that a visitor has successfully passed a security check, avoiding repeated challenges. Typically expires after a short period, depending on Cloudflare’s configuration.

Because these cookies are strictly necessary for the security of the website and are not used for advertising, profiling, or analytics purposes, no consent banner is required under the PDPO or applicable guidance on electronic communications. You remain free to block or delete these cookies through your browser settings, as described below, although this may affect the website’s security checks.

We do not use Google Analytics, advertising cookies, or other third-party tracking or profiling cookies on this website.

4.1 Managing Cookies on Your Device

If you wish to view or delete the cookies stored on your device, the process depends on your browser. This applies to the main browsers on the market – Chrome, Firefox, Safari and Microsoft Edge – on both desktop and mobile. For step-by-step instructions for your specific browser, you may consult the website All About Cookies: https://www.allaboutcookies.org/manage-cookies.

Article 5 – Third-Party Service Providers

We work with a limited number of service providers to operate this website: Cloudflare, for content delivery, performance, and protection against malicious traffic (see Article 4 above); and AnalyticsWP, for anonymised, cookieless website statistics, hosted on our own infrastructure and never shared with third parties.

Gibbon Limited does not sell, rent, or trade your personal data to any third party. Our service providers are contractually bound to confidentiality and may only process data to the extent necessary to perform their specific function.

Article 6 – Links to Other Websites

Our website, the pages it contains, and our external public platforms (social media, blogs) may contain links to other websites that we do not control. Gibbon Limited may in no event be held responsible for the content or privacy practices of such websites. You are responsible for reviewing the policies of those websites before using them.

Article 7 – Your Rights

Regardless of your location, Gibbon Limited grants you the following rights in relation to your personal data:

Access: the right to obtain a copy of the personal data we hold about you.

Rectification: the right to request correction of any inaccurate personal data concerning you.

Erasure: the right to request deletion of your personal data.

Restriction: the right, in certain circumstances, to request that we restrict the processing of your personal data.

Portability: the right to request your personal data in a commonly used, structured format, to the extent it relates to automated data sources.

Objection and opt-out: the right to object to the processing of your personal data, in particular for direct marketing purposes. Under the PDPO, you have a specific statutory right to require Gibbon Limited, free of charge, to cease using your personal data for direct marketing purposes.

Non-discrimination: we will not discriminate against you for exercising any of the above rights.

Article 8 – Complaints

8.1 Informal Complaint to Gibbon Limited

In the first instance, we invite you to raise any question, remark, or complaint directly with us at [email protected], so that we may seek an amicable resolution.

8.2 Formal Complaint in Hong Kong

You may contact the Office of the Privacy Commissioner for Personal Data (PCPD):

Website: https://www.pcpd.org.hk
Address: Unit 1303, 13/F, Dah Sing Financial Centre, 248 Queen’s Road East, Wanchai, Hong Kong
Email: [email protected]

8.3 Formal Complaint in Another Jurisdiction

If you are located outside Hong Kong, you may also lodge a complaint with the data protection authority of the country in which you reside, or in which you suspect a violation of your rights to have occurred. European Union residents may consult https://edpb.europa.eu for the relevant contact details.