WSBC ("we", "us", or "our") operates as a private, invitation-only network based in Hong Kong. We are committed to protecting your privacy and handling any personal data we collect responsibly and in compliance with applicable laws, including the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO"), the General Data Protection Regulation (EU) 2016/679 ("GDPR") where applicable, and other relevant data protection regulations.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you interact with our website (wsbc.global), including when you submit an inquiry or express interest via our contact form.

1. Who We Are (Data Controller)

WSBC is controlled by William Steinle, operating from Hong Kong.

Contact details:

Email: info@wsbc.global

Address: Two IFC, Central, Hong Kong

For data protection inquiries, please contact us using the details above.

2. Personal Data We Collect

We collect only limited personal data, primarily through our "Express Interest" / contact form on the website. This may include:

• Full name
• Email address
• Phone number (optional)
• Any information you provide in the "Interest / Referral" message field (e.g., referral source, brief description of interest, or opportunity details)

We do not collect sensitive personal data (e.g., racial/ethnic origin, health, financial details) through the website. We do not use cookies or tracking technologies for profiling or advertising at this time.

3. How We Collect Personal Data

Personal data is collected directly from you when you voluntarily submit our inquiry form to express interest in WSBC membership, opportunities, or collaboration.

4. Purposes for Which We Use Your Personal Data

We process your personal data only for the following limited purposes:

• To review and respond to your inquiry or expression of interest
• To assess suitability for invitation to our private network (where applicable)
• To communicate with you regarding your submission (e.g., follow-up questions or invitation status)
• For internal administrative and record-keeping purposes related to the above

We do not use your data for marketing, profiling, automated decision-making, or any purpose unrelated to your inquiry.

5. Legal Basis for Processing (GDPR-relevant)

Where GDPR applies (e.g., if you are in the EU/EEA):

• Legitimate interests (Art. 6(1)(f) GDPR): Responding to your voluntary inquiry and managing potential membership interest is necessary for our legitimate interests in operating a private network. We have balanced this against your rights and freedoms.
• Consent (Art. 6(1)(a) GDPR): You provide explicit consent by submitting the form and checking the consent box.

Under PDPO, processing is lawful when it is directly related to the purpose for which the data was collected and is necessary for that purpose.

6. Sharing / Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may disclose your data only in these limited cases:

• To our trusted service providers (e.g., email/hosting providers) who act on our behalf under strict confidentiality agreements
• If required by law, court order, or regulatory authority
• In the event of a merger, acquisition, or sale of assets (with notice where feasible)

No international transfers occur outside Hong Kong unless necessary (e.g., to cloud providers with adequate safeguards like standard contractual clauses for GDPR compliance).

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected:

• Inquiry data is kept for up to 12–24 months after last contact (or longer if an active invitation process is ongoing)
• Data is securely deleted or anonymized once no longer required

8. Data Security

We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration, including secure form transmission (HTTPS) and restricted access.

9. Your Rights

Depending on applicable law (PDPO, GDPR, etc.), you may have rights including:

• Access to your personal data
• Correction of inaccurate data
• Erasure ("right to be forgotten" under GDPR)
• Restriction of processing
• Objection to processing
• Withdrawal of consent (where processing is based on consent)

To exercise these rights, contact us at the details in Section 1. We will respond within the timeframes required by law (e.g., 40 days under PDPO; 1 month under GDPR, extendable if complex).

10. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted here with an updated "Last updated" date. Significant changes may be notified via email if we have your contact details.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact: us via email: info@wsbc.global

Address: Two IFC, Central, Hong Kong

By using our website and submitting an inquiry, you acknowledge that you have read and understood this Privacy Policy.