CSSCSsolution
Privacy notice · 私隱聲明

PRIVACY NOTICE FOR CSSOLUTION CSsolution 私隱聲明

Last updated: October 2026 · 最後更新：2026年10月。

1. This notice, and who gives it · 本聲明及發出者

This notice is given by CS Solution Limited — "CSsolution", "we", "our", "us" — under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. It describes how personal data is handled in the CSsolution service at app.cssolution.hk and on this website, cssolution.hk. Our terms of service are a separate document (Terms of service).

For anything in this notice, write to enquiry@cssolution.hk, or use WhatsApp / phone 852 9237 1858.

本聲明由 CS Solution Limited（以下稱「CSsolution」或「我們」）根據香港《個人資料 （私隱）條例》（第 486 章）發出。本聲明說明 CSsolution 服務（app.cssolution.hk） 及本網站（cssolution.hk）如何處理個人資料。我們的服務條款為另一份文件 （服務條款）。

就本聲明的任何事宜，請電郵 enquiry@cssolution.hk，或使用 WhatsApp／電話 852 9237 1858。

2. Two roles, kept apart · 兩個角色，涇渭分明

The firm decides; we operate the platform. A firm that uses CSsolution decides what is put into it about its own clients, and why. For those records the firm is the data user, and its professional and statutory duties — the customer due diligence it performs, the registers it keeps, what it files at the Companies Registry or the Inland Revenue — remain the firm's. CS Solution Limited operates the platform and holds those records for the firm, on the firm's instructions; we keep them for the firm and use them for no purpose of our own.

Our own records about you. For the firm's own account data — the details an applicant gives at registration, and each user's own login record — CS Solution Limited is the data user.

If you are a client of a firm. Where the record you are asking about was put in by a firm, the firm answers; we help it answer.

事務所決定，我們營運平台。使用 CSsolution 的事務所，自行決定在其系統內就其客戶輸入 什麼資料及原因。就該等紀錄而言，事務所是資料使用者，其事務所本身的專業及法定責任——所 進行的客戶盡職審查、所備存的登記冊、向公司註冊處或稅務局提交的申報——仍屬事務所。CS Solution Limited 營運平台，並代事務所持有該等紀錄，一切依事務所的指示；我們代事務所保存，並不 會為自身任何目的使用。

我們本身關於 閣下的紀錄。就事務所本身的帳戶資料——申請人在登記時所提供的資料，以及 每位使用者本身的登入紀錄——CS Solution Limited 為資料使用者。

如 閣下是事務所的客戶。如 閣下所查詢的紀錄由事務所輸入，則由該事務所回覆；我們會協助 其處理。

3. What the system holds · 系統所載的個人資料

(a) About a firm's clients — put in by the firm, as its own records:

  • a person's name in English and in Chinese, the kind of identification document and its number (HKID, passport, China ID or other), the issuing country, the passport's expiry date, sex, date of birth and date of death, nationality, and whether the person is politically exposed;
  • mobile, telephone, e-mail, WeChat, and residential and correspondence addresses;
  • identity checks and screening: what was checked against which lists, when, by whom, the result, and any remark; and the source of funds and source of wealth recorded in a risk assessment;
  • for a company: its names, CR and BR numbers, type, place and date of incorporation, registered office and business addresses, its contact person, telephone, e-mail and cc e-mails, website, bank accounts and charges, and the services it takes;
  • the appointments, shareholdings and share movements that make up its officers, shareholders and significant controllers, and the CR e-Services / TPSI account IDs of the people who sign for it;
  • documents and the register of them, the CR forms prepared, the minutes and resolutions, and the e-filings made (with the Registry's receipts).

（a）有關事務所的客戶——由事務所輸入，作為其事務所的本身紀錄：

  • 人士的姓名（英文及中文）、身份證明文件類別及號碼（香港身份證、護照、 中國身份證或其他）、簽發國家、護照到期日、性別、出生日期及死亡日期、國籍，以及是否 政治人物；
  • 手提電話、電話、電郵、微信，以及住址及通訊地址；
  • 身份核實及篩查：曾以何名單核查、何時、由誰進行、結果及備註；以及風險評估中所記錄的 資金來源及財富來源；
  • 就公司而言：其名稱、公司註冊處號碼及商業登記號碼、類別、成立地點及日期、註冊辦事處及業務地址、聯絡 人、電話、電郵及副本電郵、網站、銀行帳戶及押記，以及所需的服務；
  • 構成其董事、股東及重要控制人的委任、持股及股份轉讓紀錄，以及代表該公司簽署者的 公司註冊處電子服務／TPSI 帳戶編號；
  • 文件及文件登記冊、已擬備的公司註冊處表格、會議紀錄及決議，以及已作的電子提交 （連公司註冊處收據）。

(b) About the firm's own people. A user's name, the e-mail address, which is the login, whether two-factor is required of that login, when they last signed in, and the sessions they have open — the browser in words, the IP address the session started from, and when it started. The app keeps no password: it keeps only a one-way value it can check a password against.

(c) At registration. The firm's name (English and Chinese), its Business Registration No., the type of firm, a contact person and that person's e-mail and mobile / WhatsApp, how many companies the firm will manage, and anything typed into the message box. The picture code is checked and not kept. No password is asked for at registration.

(d) The audit log. Every change to a record, every sign-in and failed sign-in, every sign-out, every Excel export and every visit by our own staff, with who did it, when, what changed (the old and the new value) and the IP address it came from. The address an application is registered from is written there too.

(e) Our own firm. Our own practice also uses the system, so the app holds our staff's own records where we have switched those parts on — leave and its supporting documents, tax-form income and spouses' names. They are covered by everything else in this notice.

（b）有關事務所本身的人員。使用者的姓名、作為登入名稱的電郵地址、 該登入是否強制使用雙重認證、上次登入時間，以及目前開啟中的工作階段——所用的瀏覽器（文字描述）、該工作階段 開始時的 IP 位址，以及開始時間。系統不儲存密碼：只儲存一個單向值，用以核對密碼。

（c）登記時。事務所名稱（英文及中文）、商業登記號碼、事務所類別、 聯絡人及其電郵與手機／WhatsApp、將管理的公司數目，以及輸入「其他資料」欄的任何內容。 圖像驗證碼只作核對，不會保存。登記時不設定密碼。

（d）審計紀錄。每項紀錄修改、每次登入及登入失敗、每次登出、每次匯出 Excel，以及 我們本身員工的每次進入，均記錄：由誰進行、何時、新舊值，以及來源 IP 位址。遞交登記申請 時的位址亦會記錄在內。

（e）我們本身的事務所。我們本身的事務所亦使用本系統，因此在我們已開啟的範圍內， 系統載有我們員工本身的紀錄——假期及其證明文件、稅表收入及配偶姓名。該等資料同樣受本聲明其他部分涵蓋。

4. What is encrypted, and what is not yet · 已加密及尚未加密的部分

Encrypted field by field in the database — a copy of the database, or of a backup, shows nothing readable without the key:

  • identification numbers (a member's, and an employee's on leave and tax-form records);
  • dates of birth, mobile numbers and sources of wealth;
  • sick-leave supporting documents (medical certificates), private e-mail addresses and a spouse's name on tax forms;
  • changes waiting for a supervisor's review, and the old and new values recorded for a change of particulars;
  • the firm's own CR deposit account number for e-filing;
  • and the old and new values of all of the above in the audit log.

The key is one per installation and is kept outside the database (in Google Cloud's Secret Manager). Records are found without decrypting them: an identification number or a mobile number is looked up through one-way codes, a list shows only the partial number (A123) as the Registry's forms do, and the full number is shown only on request.

The limits, said plainly. Encryption protects the data against copies of the database and its backups, and against reaching the database without the app; it does not hide a record from a user your firm has allowed to see it. Residential addresses and salary / income figures are not yet encrypted field by field. The key must not be lost — without it the encrypted values cannot be read.

在資料庫內逐欄加密——沒有密鑰，資料庫或其備份的副本無法讀出任何內容：

  • 身份證明文件號碼（成員的，以及員工在假期及稅表紀錄上的）；
  • 出生日期、手提電話號碼及財富來源；
  • 病假證明文件（醫生證明書）、私人電郵地址，以及稅表上的配偶姓名；
  • 等待主管覆核的修改，以及更改詳情所記錄的新舊值；
  • 事務所本身的電子提交用公司註冊處入帳帳戶號碼；
  • 以及上述各項在審計紀錄中的新舊值。

密鑰按安裝各有一把，並存放在資料庫以外（Google Cloud 的 Secret Manager）。系統無須解密即可 找到紀錄：身份證號碼或手機號碼透過單向編碼查找，列表只顯示部分號碼（A123），與公司註冊處表格的做法一樣； 完整號碼只在要求時顯示。

限制，如實說明。加密保護資料，免遭資料庫及其備份被複製，以及免遭繞過系統直接接觸資料庫； 但對於 貴公司已准許查看該紀錄的使用者，加密並不能隱藏該紀錄。住址及薪酬／收入數字尚未逐欄加密。 密鑰必須妥善保存——一旦遺失，已加密的數值便無法讀出。

5. Who else sees it · 其他可見資料的人

  • Our own staff, and only to run and support the service. A support view is read-only, works in one firm at a time, and every entry into a firm's records is written to that firm's own audit log.
  • The Companies Registry of Hong Kong. A firm's Business Registration number is looked up in the Registry's open data — when the firm registers and when a user searches — and a CR form is e-filed through the Registry's TPSI service when a user of the firm files one. What is filed is the form's own contents, which are the firm's clients' particulars; the Registry's receipts are kept in the app.
  • Google Cloud, as the service and database provider.
  • Stripe, where a card payment link is issued for an invoice: the link and the payment are Stripe's. Card details never reach the app or us; we do not hold them.
  • Our own mail host, for the e-mails the app sends — an invitation, a set-up link, invoices and receipts, and the reminders and notices a firm switches on for itself.

We do not sell personal data, we do not use it for purposes of our own, and we do not give it to anyone else except as this notice says or the law requires.

  • 我們本身的員工，且僅為營運及支援本服務。支援檢視為唯讀，每次只可進入一間事務所，而 每次進入事務所的紀錄均寫入該事務所本身的審計紀錄。
  • 香港公司註冊處。事務所的商業登記號碼會在公司註冊處的公開資料中查閱——事務所登記時及 使用者搜尋時；當事務所的使用者提交公司註冊處表格，會經該處的 TPSI 服務作電子提交。所提交的是表格本身的 內容，亦即事務所客戶的詳情；該處的收據會保留在系統內。
  • Google Cloud，作為服務及資料庫供應商。
  • Stripe，在發票附有信用卡付款連結時：連結及付款均由 Stripe 處理。信用卡資料不會到達系統 或我們，我們並不持有。
  • 我們本身的郵件主機，用於系統發出的電郵——邀請、開通連結、發票及收據，以及事務所 自行開啟的提醒及通知。

我們不會出售個人資料、不會為自身目的使用個人資料，亦不會向任何其他人提供， 除非本聲明所述或法律要求。

6. How long it is kept, and how it is deleted · 保留多久及如何刪除

The principles. The PDPO does not allow personal data to be kept longer than is necessary. Two other periods bear on a company-secretarial practice: a TCSP licensee's customer due diligence and transaction records must be kept at least five years after the relationship or the transaction ends, and accounting and tax records for seven years. CSsolution is built so that a firm can keep what it must — and it never deletes a firm's records on its own.

What the system does today.

  • A company a user deletes goes to a recycle bin for 30 days, can be restored, and is then removed for good together with its records.
  • A sent e-filing's filed copy is emptied as soon as it is sent, and its own record is kept one month; one never sent and untouched for 48 hours is deleted.
  • A member's history of changes of particulars is removed after the firm's own record-keeping period (ten years by default).
  • Everything else — the firm's records and the audit log — is kept while the firm uses the service, and after it: the ending of a trial or of a subscription deletes nothing. The audit log is kept for twelve months, and the system deletes each entry once it passes them, day by day; if that purge has not run, we are alerted and it is put right. Our platform's own log is not deleted this way — it is what records that a firm's data was deleted.

Deleting a whole firm. We delete a firm's data only when its status is Closed — a firm does not have to ask us, and nothing is deleted by itself: the deletion is ours to make. The month is counted from the day its service ends: within that month the data is deleted, and we are alerted if a closed firm's service ended over a month ago and its data is still held. Every row of that firm in every table is deleted, together with its audit-log entries and any login that belongs to no other firm. Kept: the firm's name (its status Closed), our invoices and receipts to it — our own accounting records — and one line in our platform's log recording that the deletion happened. A backup taken before the deletion keeps the data until that backup expires.

原則。《私隱條例》不允許保存個人資料超過所需時間。另有兩個期限與公司秘書實務有關：信託或 公司服務持牌人的客戶盡職審查及交易紀錄，須在關係或交易結束後保留至少五年；會計及稅務紀錄則為 七年。CSsolution 的設計讓事務所可保留其必須保留的紀錄——而系統本身從不會自行刪除事務所的紀錄。

系統今日的做法。

  • 使用者刪除的公司會進入回收箱 30 日，可還原；其後連同其紀錄一併永久移除。
  • 已送出的電子提交，其已提交副本即時清空，該筆紀錄保留一個月；從未送出且 48 小時未再處理者 會予刪除。
  • 成員的更改詳情歷史，在事務所本身的紀錄保存期（預設十年）後移除。
  • 其餘一切——事務所的紀錄及審計紀錄——在事務所使用本服務期間及其後一直保留：試用期或訂閱期結束不會刪除 任何資料。審計紀錄保留十二個月，每項紀錄屆滿後系統會逐日刪除；如清理未執行，我們會收到警示並 予以更正。我們平台本身的紀錄不會如此刪除——它正是記載事務所資料已被刪除之處。

刪除整間事務所。只有在事務所狀態為已結束時，我們才會刪除其事務所的資料——事務所 無須提出要求，而系統本身不會自行刪除，刪除由我們執行。一個月由服務結束之日起計：於該個月內完成刪除； 如事務所已結束而服務結束逾一個月仍未刪除，我們會收到警示。屆時該事務所在各表中的每一行、其審計紀錄，以及不屬於其他任何 事務所的登入帳戶，均會刪除。保留：事務所名稱（狀態為已結束）、我們向其發出的發票及收據——我們本身的 會計紀錄——以及平台紀錄中一行記載該次刪除曾發生。刪除前已製的備份會保留該等資料，直至該備份到期為止。

7. Cookies, and this website · Cookies 與本網站

This website is static. cssolution.hk is hand-written pages: no script runs on it, it sets no cookie, and it loads nothing from another site. There is no analytics, no tracking and no advertising on it, and no form to fill in — the only way to send us anything from here is the WhatsApp link or the e-mail address in the footer.

The app sets these cookies, and no others.

  • A session cookie — what keeps a user signed in. It holds which firm and user they are working as, the language they chose, and (for the session screen) the browser they use and the address they signed in from. It is unreadable by scripts and sent only over HTTPS, and it ends when the browser is closed, after twelve hours at the latest, or sooner when the firm's own idle limit is reached (ten hours by default).
  • A CSRF cookie — HTTPS only, and what stops another site posting a form as the signed-in user.
  • A "trust this browser" cookie, only where a user chooses it after entering a two-factor code: HTTPS only, unreadable by scripts, up to 180 days, and ended when the password or the two-factor set-up changes.
  • On a copy of the app that is closed to the public, a pass cookie for the address gate (one year). The live service is not closed.

There is no analytics, advertising or third-party cookie anywhere in the app. We send no marketing: the website has no sign-up form and there is no mailing list. The app's e-mails are service e-mails — registration, activation, invoices and receipts, and the reminders and notices a firm switches on for itself.

本網站是靜態的。cssolution.hk 是手寫的頁面：不執行任何程式碼、不設定 cookie，亦不載入任何 來自其他網站的內容。網站上沒有分析工具、沒有追蹤、沒有廣告，也沒有表格——由此處向我們傳送資料的唯一途徑， 是頁尾的 WhatsApp 連結或電郵地址。

應用程式只設定下列 cookies，並無其他。

  • 工作階段 cookie——讓使用者保持登入。它載有使用者正以哪間事務所及哪個使用者身分工作、 所選語言，以及（供工作階段畫面顯示）所用的瀏覽器及登入時的位址。它不可由程式碼讀取，且只經 HTTPS 傳送； 當瀏覽器關閉、最遲十二小時後，或事務所本身的閒置時限（預設十小時）到達時即告結束。
  • CSRF cookie——只經 HTTPS 傳送，用以阻止其他網站以已登入使用者的身分提交表格。
  • 「信任此瀏覽器」cookie——僅在使用者輸入雙重認證碼後選擇時設定：只經 HTTPS 傳送、不可由 程式碼讀取、最長 180 日，並在密碼或雙重認證設定更改時結束。
  • 在未開放予公眾的系統副本上，另設一個通行 cookie 用於位址閘門（一年）。正式服務並非 封閉。

應用程式內並無任何分析、廣告或第三方 cookie。我們不發送任何推廣訊息：本網站沒有登記表格， 亦沒有郵寄名單。系統發出的電郵均屬服務性質——登記、開通、發票及收據，以及事務所自行開啟的提醒及通知。

8. How the service is protected · 本服務的保安

  • Each firm's records are kept apart by the database itself — row-level security under an ordinary application role — so one firm's rows cannot be reached by another firm's logins, whatever a screen does.
  • Two-factor sign-in is required of every user of this service, with an authenticator app or a passkey; Google sign-in is available where a firm offers it. A session ends after a period without use.
  • Rights per user: who may export, who may e-file, who may only read.
  • HTTPS for every page, with the session and CSRF cookies sent only over it.
  • The audit log. Each change, sign-in, export and support visit is written to it. The app provides no way to change or remove an entry — no screen offers one, and none is built.

No system is perfect, and we do not claim otherwise. What is written here is what is built; where something is not done yet, this notice says so (§4, §6).

  • 各事務所的紀錄由資料庫本身分隔——在一般應用程式角色下以列級保安（row-level security） 實現——因此無論畫面如何，某事務所的登入也無法接觸另一事務所的資料列。
  • 本服務的每位使用者均須使用雙重認證登入，可透過驗證器應用程式或通行密鑰；如事務所提供， 亦可使用 Google 登入。閒置一段時間後，工作階段即告結束。
  • 按使用者設定的權限：誰可匯出、誰可作電子提交、誰只可閱讀。
  • 每一頁均使用 HTTPS，工作階段及 CSRF cookie 亦只經 HTTPS 傳送。
  • 審計紀錄。每項修改、登入、匯出及支援檢視均寫入其中。系統不提供任何修改或刪除 紀錄項目的途徑——沒有畫面提供，亦沒有相關功能。

沒有系統是完美的，我們亦不作此聲稱。此處所寫的，都是已建成的事實；尚未完成的部分，本聲明會如實說明 （第 4、6 節）。

9. Changes to this notice · 本聲明的更改

We will update this notice whenever what the system does changes, and the date at the top says which version this is. Where a change matters to you, we will say so plainly, and a firm is told by e-mail when this notice changes.

If a firm and we have agreed something different in writing, or the law requires something different, that stands in place of this notice for that firm.

當系統的做法有變，我們會更新本聲明，頁首日期即顯示版本。如某項更改對 閣下有影響，我們會清楚說明，並以 電郵通知事務所本聲明已更改。

如事務所與我們另以書面約定不同的安排，或法律另有要求，則就該事務所而言，以該安排或法律為準。

10. Contact, and the law that applies · 聯絡方法及適用的法律

CS Solution Limited, Unit S, 11/F, One Midtown, 11 Hoi Shing Road, Tsuen Wan, Hong Kong. E-mail enquiry@cssolution.hk; WhatsApp / phone 852 9237 1858.

This notice, and the handling of personal data described in it, are governed by the laws of Hong Kong.

CS Solution Limited，地址：Unit S, 11/F, One Midtown, 11 Hoi Shing Road, Tsuen Wan, Hong Kong。電郵 enquiry@cssolution.hk；WhatsApp／電話 852 9237 1858。

本聲明及其中所述的個人資料處理，均受香港法律管轄。