Privacy Policy

Last updated: July 9, 2026

This Privacy Policy describes how lindenquill (lindenquill Limited) collects, uses, and protects your personal information when you use our platform. We are committed to protecting your privacy and handling your data responsibly. This policy explains what data we collect, how we use it, your rights, and how you can contact us with questions.

Who We Are

We operate a goal-setting and quarterly review framework designed for startups in Causeway Bay and beyond. Our platform helps organizations track measurable objectives and manage OKR processes effectively. We are the data controller responsible for your personal information, and we collect and process data in accordance with applicable privacy laws.

Information We Collect

We collect several types of information when you interact with our platform:

• Account Information: When you register, we collect your name, email address, company name, job title, and contact details.
• Usage Data: We track how you use our platform, including the features you access, pages you visit, and actions you perform.
• Technical Information: We automatically collect your IP address, browser type, device type, operating system, and referral source.
• Communication Data: If you contact us, we store your messages, inquiries, and our responses.
• Cookie Data: We use cookies and similar technologies to enhance your experience and track usage patterns.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: We obtain your explicit consent for marketing communications and non-essential cookies.
• Legitimate Interest: We process data to improve our services, prevent fraud, ensure security, and understand how users interact with our platform.
• Legal Obligation: We may process data when required by law or to comply with regulatory requirements.
• Contract Performance: We process information necessary to deliver our services and fulfill your requests.

How We Use Your Information

We use the information we collect for several purposes:

• Providing and maintaining our platform and services
• Creating and managing your account
• Personalizing your experience and improving our features
• Analyzing usage patterns to enhance performance and functionality
• Communicating with you about updates, security alerts, and support
• Sending marketing communications when you opt in
• Preventing fraud, abuse, and unauthorized access
• Complying with legal obligations and resolving disputes

Data Retention

We retain your personal information only for as long as necessary to achieve the purposes outlined in this policy. Our specific retention periods are:

• Account Information: Retained for the duration of your active account, plus 12 months after account closure or deletion.
• Contact and Support Messages: Retained for up to 24 months from your last interaction with our support team.
• Usage and Analytics Data: Retained for up to 14 months to allow trend analysis and service improvement.
• Server Logs and Technical Data: Retained for up to 12 months for security and troubleshooting purposes.
• Cookie Data: Retained according to cookie settings; session cookies are deleted when you close your browser.

Your Rights

You have several rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Correction: You can request that we correct inaccurate or incomplete information.
• Right to Deletion: You can request that we delete your personal information, subject to legal requirements.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Withdraw Consent: You can withdraw consent for marketing communications and non-essential cookies at any time.
• Right to Object: You can object to processing based on legitimate interest.

To exercise these rights, please contact us using the information provided below. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and analyze how you use our platform. Cookies are small files stored on your device that help us remember your preferences, maintain your session, and track usage patterns. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until you delete them). Essential cookies are required for platform functionality, while optional cookies are used for analytics and personalization. You can control cookie settings through your browser preferences, though disabling essential cookies may affect platform functionality.

Data Sharing and Third Parties

We do not sell or rent your personal information to third parties. However, we may share information in the following limited circumstances: with service providers who assist us in delivering our platform (such as hosting providers and payment processors), when required by law or to comply with legal processes, to protect our rights and prevent fraud, and with your explicit consent for specific purposes. All third-party service providers are contractually obligated to protect your data and use it only for authorized purposes.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, secure authentication mechanisms, regular security assessments, and limited employee access to personal data. However, no security measure is completely impenetrable, and we cannot guarantee absolute security. We encourage you to use strong passwords and keep your login credentials confidential.

International Data Transfers

Our platform is operated from Hong Kong and may transfer data to other jurisdictions for processing and storage. When we transfer personal information internationally, we implement appropriate safeguards such as standard contractual clauses to ensure your data receives adequate protection. By using our platform, you consent to the transfer of your information as described in this policy.

Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such data and terminate the minor's account. If you believe a minor has provided us with information, please contact us immediately.

Supervisory Authority

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the data protection authority in Hong Kong. The Personal Data Protection Commissioner (PDPC) oversees data protection matters and investigates complaints regarding mishandling of personal information. You can contact the PDPC directly if you wish to file a formal complaint about our data practices.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page. Your continued use of our platform after such modifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.