GDPR & Your Data Rights

Scope and applicability

Where the GDPR or UK GDPR applies — for example, where you are based in the EEA or the UK, or where AGM offers services to people in those territories — we comply with it directly. Outside those territories, we apply the same standards as a baseline to all candidates and additionally comply with the Hong Kong Personal Data (Privacy) Ordinance, which governs AGM as a Hong Kong establishment.

Who is the data controller?

AGM Consulting Limited is the data controller for personal data processed through the Platform. Registered office: Unit B, 11/F, 23 Thomson Road, Wan Chai, Hong Kong SAR, China. UBI: 80172790. Contact for data-protection matters: alex@agm.careers.

Lawful bases we rely on

We process your personal data on one or more of the following lawful bases:

• Performance of a contract — to deliver the consultancy, training, agreement-signing, and payment services you have signed up for.
• Legal obligation — to retain audit, invoice, and tax records, and to comply with anti-fraud and regulatory requirements.
• Legitimate interest — to keep the Platform secure, prevent abuse, and improve reliability. We balance our interest against your rights and freedoms.
• Consent — for any processing where we ask for it explicitly (for example, opting into non-essential email categories). You can withdraw consent at any time without affecting prior processing.

Your rights

Subject to applicable law, you have the following rights:

• Right of access — to receive a copy of the personal data we hold about you, together with information about how we process it.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to ask us to delete your personal data where one of the GDPR grounds applies. Where the law requires us to retain certain data (for example, audit and tax records), we will tell you and continue to keep only the legally required minimum.
• Right to restrict processing — to limit how we use your data while a query, correction, or objection is being investigated.
• Right to data portability — to receive your data in a structured, commonly used, machine-readable format, where the processing is based on consent or contract and is carried out by automated means.
• Right to object — to object to processing based on legitimate interest, including profiling. We will stop unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

How to exercise your rights

Some rights you can exercise yourself: visit your profile page to correct your details, change your language, or update your notification preferences. For any other request — access, erasure, portability, objection, or restriction — email alex@agm.careers from the address registered to your account, or write to us at the registered office above. We will reply within thirty days. If we need more time because the request is complex, we will tell you within that period and explain why. Exercising your rights is free; we may charge a reasonable fee or refuse manifestly unfounded or excessive requests, and will explain our reasoning if we do.

International transfers

Your data is processed across borders by design. Where we transfer personal data outside the EEA or the UK to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and, for UK transfers, the UK International Data Transfer Addendum) with our sub-processors.

Automated decision-making

We do not make decisions that produce legal or similarly significant effects for you based solely on automated processing. Quiz scoring is automated, but it does not by itself decide whether you are placed with an employer — that decision is made by humans, including by parties outside AGM.

Right to complain

If you are not satisfied with how we have handled your data, you can complain to a supervisory authority. In the EU, this is the data protection authority of the country where you live, work, or where the alleged infringement took place. In the UK it is the Information Commissioner's Office (ico.org.uk). In Hong Kong it is the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk). We would also appreciate the chance to address your concerns first — please contact alex@agm.careers.

Contact

Privacy and data-protection contact: alex@agm.careers. Postal address: AGM Consulting Limited, Unit B, 11/F, 23 Thomson Road, Wan Chai, Hong Kong SAR, China.