Your data, handled with care.

01Who we are

Glean and Gleam ("Glean", "we", "us") is a leadership learning and executive coaching practice based in Hong Kong. This policy explains how we handle personal data when you visit www.gleanandgleam.com (the "Site") or contact us. We handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the "PDPO").

You can reach us at hello@gleanandgleam.com for any question about this policy or your data.

02What we collect

The Site is an informational site. It does not have user accounts, does not set tracking cookies, and does not run advertising or analytics scripts. We collect personal data only when you choose to give it to us:

• Email enquiries: when you email hello@gleanandgleam.com we receive your name, email address, and whatever you write to us.
• Enquiry forms: if we enable an enquiry form on the Site, it will ask for your name, email address, organisation, role, and the size or type of engagement you are considering. The form will say clearly what is collected and why.
• Engagement records: if you become a client, we keep the information needed to design and deliver your programme, such as participant names, roles, and feedback.
• Technical data: our hosting provider records standard server logs, including IP address, browser type, and pages requested, for security and reliability.

03How we use it

We do not sell personal data. We do not use it for direct marketing unless you have asked to hear from us, and you can opt out at any time by emailing us.

• To respond to your enquiry and arrange a conversation.
• To scope, design, and deliver leadership learning and coaching engagements you have asked for.
• To keep the Site secure, available, and working correctly.
• To meet legal, accounting, and regulatory obligations.

04Third-party services

The Site relies on a small number of service providers who may process technical data on our behalf:

• Vercel Inc. hosts the Site and serves it through a global content delivery network. Your IP address and request details pass through Vercel servers, which may be located outside Hong Kong.
• Google Fonts delivers the typefaces used on the Site. When a page loads, your browser requests font files from Google servers and Google receives your IP address as part of that request. Google states it does not use this data to build profiles.
• Instagram: the Site links to our Instagram profile. Following that link takes you to Meta Platforms, whose own privacy policy applies.
• Email: enquiries sent to hello@gleanandgleam.com are handled by our email provider.

05Cookies

The Site does not set cookies for tracking, advertising, or analytics. Any cookies that appear are strictly necessary technical cookies set by our hosting provider to serve the Site. Your light or dark theme preference is kept only in your browser session and is not sent to us.

06Transfers outside Hong Kong

Because our hosting and font providers operate globally, personal data such as your IP address may be processed outside Hong Kong, including in the United States. We choose providers with recognised security practices and contractual commitments to protect data.

07How long we keep it

• Enquiry emails: for as long as needed to respond and, if a conversation continues, for the duration of our relationship plus a reasonable period afterwards.
• Client engagement records: for the duration of the engagement and up to seven years afterwards to meet accounting and legal obligations.
• Server logs: retained by our hosting provider for a limited period for security purposes.

08Your rights

Under the PDPO you have the right to ask whether we hold personal data about you, to request a copy of it, and to ask us to correct data that is inaccurate. We may charge a reasonable fee for supplying a copy. To exercise these rights, email hello@gleanandgleam.com. We will respond within 40 days as required by the PDPO. If you are located in another jurisdiction, you may have additional rights under local law, and we will honour them where they apply.

09Security

The Site is served only over HTTPS and uses modern browser security headers. We keep the personal data we hold to a minimum, restrict access to people who need it, and use reputable providers. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

10Children

The Site and our services are intended for working professionals and organisations. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

11Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be flagged on the Site.