Scope and management
This notice covers FOA website self-checks, resource requests, relevant follow-up and privacy requests. FOA manages these entry points. A specific engagement will identify its service entity, recipients and data arrangements separately. Self-checks identify preparation priorities; they are not comprehensive legal, tax or investment assessments.
Information and minimisation
Resource requests store the name, email, service interest, timing, processing consent, optional one-time follow-up consent and submission time that you provide. Privacy requests also include a request type and short description. Network addresses used for submission limits are hashed; the hosting platform may retain operational and security logs. Browsing and self-checks do not require asset amounts.
Purpose and consent
Information is used to handle resource requests, identify service interests, respond within your consent and maintain website security. Processing consent and optional relevant follow-up are separate. Declining follow-up does not prevent access to templates. A request does not automatically enrol you in marketing; contact details are not sold or used for advertising-audience matching.
Sensitive information
Do not submit passports, identity documents, bank statements, full account numbers, asset schedules, private keys or recovery phrases through public forms. Describe only your needs. If a formal review requires KYC, SOF or SOW evidence, the purpose, access and secure delivery method will be explained before separate collection. This notice does not replace engagement-specific authorisation.
Access and cross-border processing
Requests are stored in the website backend and available to authorised administrators after authentication. Hosting and storage may process data outside your location. If an engagement requires disclosure to banking, compliance, legal or other professionals, recipients and necessary scope will be explained and appropriate authority obtained, except where legally required or necessary to protect legitimate rights.
Retention, deletion and security
Information is retained for resource delivery, follow-up, security and necessary records. After a matter ends or a deletion request is received, administrators review remaining needs and handle deletion or restricted use. Records needed for legal, dispute or security matters may remain. Deletion is administered rather than instantaneous removal of every system log. Access controls and secure transport reduce risk but cannot eliminate it.
Preferences, cookies and external tools
Your language preference is stored locally in this browser and can be removed by clearing site data. Administrator sign-in may use essential identity-service cookies. This website does not include advertising-tracking scripts. LiquidityRadar, TranScan and DAC are presented through on-site interface concepts without external tool links. Official news opens separate sites with their own notices; following a link does not automatically send your resource-request record.
Access, correction and withdrawal
You may request access, correction, withdrawal of follow-up consent, deletion or restricted use. Use the email associated with your earlier request; administrators may verify identity to prevent unauthorised disclosure. Withdrawal does not undo prior processing. Necessary retention or identity checks may limit some requests. The outcome will be explained through the response channel you authorise.
Notice updates and languages
Last updated: 15 October 2026. Simplified Chinese, Traditional Chinese and English describe the same arrangements. Report any language inconsistency through the privacy-request pathway. Material purpose changes will be explained at the relevant entry point, with renewed consent where needed.
Want to manage your information?
Choose access, correction, consent withdrawal or deletion. Your request is sent to the administrator for verification and handling.
No identity documents or banking details required here.