Privacy Policy

1. Who We Are

How to Job Group Ltd. is the data controller responsible for the personal information collected through our website and services. We operate the How to Job platform, including Howtojob Plus, Rezio, Interviewly, and HelloHR.

We are incorporated in the Hong Kong Special Administrative Regionand are subject to the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”). Where we serve individuals in the United Kingdom or European Economic Area, we also comply with the UK GDPR and EU GDPR respectively to the extent applicable.

2. Information We Collect

We collect the following categories of personal information:

3. How We Use Your Information

We use personal information to:

• Provide, operate, and improve our platform and services
• Process payments and manage your account
• Deliver coaching, personalised career strategies, and programme content
• Communicate with you about your account, sessions, or support requests
• Send you relevant updates, resources, and marketing communications (where you have opted in)
• Analyse usage patterns to improve the quality and relevance of our services
• Comply with legal obligations and enforce our Terms of Service
• Prevent fraud, abuse, and security incidents

We do not sell your personal data to third parties.

4. Legal Basis for Processing

Where UK GDPR or EU GDPR applies, we process your personal data on the following legal bases:

• Contract: Processing necessary to deliver the services you have purchased or enrolled in.
• Legitimate interests: Analytics, fraud prevention, platform security, and service improvement — where these interests are not overridden by your rights.
• Consent: Marketing communications and non-essential cookies, where you have opted in. You may withdraw consent at any time.
• Legal obligation: Where processing is required to comply with applicable law.

5. Sharing of Information

We do not sell, rent, or trade your personal data. We may share it with:

• Service providers who assist in operating our platform (e.g., payment processors, email delivery, hosting, video conferencing) — bound by confidentiality obligations
• Analytics providers (e.g., Google Analytics) — in anonymised or aggregated form where possible
• Professional advisers (lawyers, accountants) — where necessary and under appropriate obligations of confidentiality
• Law enforcement or regulatory authorities — where required by law or to protect our legal rights
• Successor entities — in the event of a merger, acquisition, or sale of assets, with notice provided to affected users

6. Cookies & Tracking

We use cookies and similar technologies to operate our website and understand how it is used. These include:

• Essential cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our site. We use tools such as Google Analytics for this purpose.
• Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness. Only set with your consent.

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our platform.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Typically:

• Account data is retained for the duration of your relationship with us and for up to 2 years thereafter
• Financial transaction records are retained for 7 years to comply with accounting and tax obligations
• Marketing consent records are retained for as long as you remain on our mailing list
• Coaching session notes and career materials are retained for the duration of your programme plus 12 months

When data is no longer required, we securely delete or anonymise it.

8. Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where there is no legitimate reason for us to continue processing it.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at legal@howtojob.io. We will respond within 30 days. We may need to verify your identity before processing your request.

9. International Transfers

We are based in Hong Kong and your data may be processed or stored in jurisdictions outside your country of residence. Where we transfer data internationally, we take appropriate steps to ensure it receives a comparable level of protection, including through contractual safeguards with our service providers.

If you are located in the UK or EEA and we transfer your data to a country not deemed adequate by the relevant authority, we will implement Standard Contractual Clauses or another approved transfer mechanism.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us immediately at legal@howtojob.io and we will take steps to delete it promptly.

11. Third-Party Links

Our website and platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any external sites you visit. We are not responsible for the content or privacy practices of third-party sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The effective date at the top of this page will be updated accordingly. Where changes are material, we will notify registered users by email or via a prominent notice on our platform prior to the change taking effect.

Your continued use of our services after any update constitutes your acceptance of the revised Policy.

13. Contact & Complaints

If you have questions, concerns, or complaints about how we handle your personal data, please contact us:

If you are in the UK or EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority — for example, the UK Information Commissioner's Office (ICO) at ico.org.uk.