Privacy Statement

 

Last Updated: 11 May 2026

1. Introduction

 

This privacy notice explains how Bestar collects, uses, and protects your personal data, as well as the rights you have regarding that information. In this document, “Bestar,” “our”, “we” or “us” refers to the global organization of member firms and affiliates.

​

Bestar processes personal data for various purposes, including:

​

• Direct Interaction: Information provided when engaging us for services (e.g., tax returns), visiting our website (bestar-hk.com), or applying for jobs.

• Professional Services: Data processed while providing services to your employer, such as auditing or payroll.

• Public Sources: Information obtained from public platforms like LinkedIn.

​​

​

2. What Data is Covered?

​

“Personal data” refers to any information that can identify an individual directly or indirectly. This includes:

​

• Standard Identifiers: Name, identification numbers, location data, and online identifiers.

• Special Category Data: Information revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic/biometric data, health conditions, or sexual orientation.

• Criminal Records: Data relating to criminal convictions and offenses.

​​

3. Your Rights

 

You have specific rights regarding your personal data held by Bestar:

​

• Access and Correction: The right to access your data and have it corrected if it is incomplete or inaccurate.

• Objection and Erasure: The right to restrict or object to processing, or request data deletion under certain circumstances.

• Portability: The right to receive a copy of your data in a structured, machine-readable format.

• Withdraw Consent: The right to withdraw consent at any time for data provided voluntarily.

• Marketing Opt-out: The right to stop receiving marketing communications at any time.

​​

4. Data Processing by Category

​

Website Visitors 

Typical Data Collected:  IP address, device type, browser type, and pages visited.                                                                           Purpose of Processing:  Analytics, site improvement, and personalizing user experience.

​

Clients                 

Typical Data Collected:  Name, job title, contact details, and financial/payment information. 

Purpose of Processing:  Providing professional services, relationship management, and regulatory compliance.

​

Job Applicants

Typical Data Collected:  Resumes, academic records, work history, and background check results.

Purpose of Processing:  Matching skills to roles and making hiring decisions.

​

Event Participants

Typical Data Collected: Name, dietary restrictions, flight/hotel info, and images/recordings.

Purpose of Processing: Managing registrations, event logistics, and marketing materials.

​​

​

5. Data Transfers and Security

​

• Global Transfers: As Bestar operates in over 150 countries, your data may be transferred and stored outside your home country. We use Binding Corporate Rules (BCRs) to ensure all entities apply the same high standards of protection.

• Security Measures: We use strict policies and technical procedures to safeguard information from loss, misuse, or unauthorized disclosure.

• Retention: Data is only kept for as long as necessary to fulfill the described purposes or to meet legal and professional requirements.

  ​

6. Complaints and Contact Information

 

If you have concerns about a breach of privacy law or wish to exercise your rights:

​

• Primary Contact: Speak with your usual Bestar representative or contact the Bestar Data Protection Team.

• Global Privacy Leader: Singapore Office: 23 New Industrial Road, #04-08 Solstice Business Center, Singapore 536209.​

• Regulatory Authorities: You also have the right to lodge a complaint with the data protection authority in your country.

  ​