Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") explains how Goat Media Limited ("Goat Media", "we", "us", "our") collects, uses, discloses and protects personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the "PDPO") and the six Data Protection Principles ("DPPs") set out in Schedule 1 of the PDPO. Goat Media is the data user under the PDPO in respect of personal data collected through this website and in the course of our media buying services.

Registered office: 2301, 23/F Bayfield Building, 99 Hennessy Road, Wan Chai, Hong Kong.

2. Personal data we collect (DPP1)

• Identification and contact data: name, job title, employer, email address, telephone number.
• Correspondence: messages and attachments you send us via email or contact forms.
• Commercial data: information shared in the course of evaluating, scoping or delivering media buying engagements.
• Technical data: IP address, browser type, device identifiers, referring URLs and pages viewed, collected via cookies and analytics tools.

Providing personal data to us is voluntary. However, if you do not provide the data we request, we may be unable to respond to your enquiry or deliver our services.

3. Purposes of collection and use (DPP1 & DPP3)

We use personal data for the following purposes:

• Responding to enquiries and providing requested information.
• Negotiating, entering into and performing media buying contracts.
• Account management, invoicing, credit control and record keeping.
• Operating, securing and improving this website.
• Complying with applicable laws, regulations, court orders and lawful requests from authorities.
• Direct marketing of our services, where you have given consent (see Section 7).

We will not use personal data for any new purpose materially different from the above without first obtaining your prescribed consent, as required by DPP3.

4. Accuracy and retention (DPP2)

We take practicable steps to ensure personal data is accurate. Personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Hong Kong law (including statutory record keeping obligations under the Companies Ordinance and Inland Revenue Ordinance).

5. Disclosure and transfer (DPP3)

We do not sell personal data. We may disclose personal data to:

• Our staff, contractors and professional advisers, on a need-to-know basis.
• Service providers acting as our data processors (e.g. email, hosting, CRM, analytics), bound by written confidentiality and data-protection obligations.
• Media platforms and publishers strictly to the extent required to deliver campaigns you have engaged us to manage.
• Regulators, law enforcement or other authorities where required by law.

Some recipients may be located outside Hong Kong. Where we transfer personal data outside Hong Kong, we take reasonable steps to ensure the transfer complies with the PDPO and that the recipient affords protection comparable to that under the PDPO.

6. Security (DPP4)

We implement appropriate technical and organisational measures — including access controls, encryption in transit, vendor due diligence and staff confidentiality obligations — to protect personal data against unauthorised or accidental access, processing, erasure, loss or use.

7. Direct marketing

In accordance with Part 6A of the PDPO, we will not use your personal data for direct marketing of our services without first obtaining your consent or indication of no objection. You may at any time, free of charge, request us to cease using your personal data for direct marketing by emailing contact@goat.ad. We will comply promptly with any such opt-out request.

8. Your rights (DPP5 & DPP6)

Under sections 18, 22 and 38 of the PDPO you have the right to:

• Ascertain whether we hold personal data about you and request a copy of that data (data access request).
• Request correction of any personal data that is inaccurate (data correction request).
• Be informed of the kinds of personal data we hold and our main purposes of using such data.

Requests should be addressed to our Data Protection Officer at contact@goat.ad. We may charge a reasonable fee to comply with a data access request, as permitted by the PDPO. We will respond within 40 days of receipt of a compliant request.

9. Cookies and analytics

This website uses strictly necessary cookies to operate, and may use analytics cookies to understand aggregate usage. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

10. Changes to this Policy

We may update this Policy from time to time. The current version is always available on this page with the "Last updated" date.

11. Contact and complaints

Privacy enquiries, access or correction requests, and opt-out requests should be sent to the Data Protection Officer at contact@goat.ad or by post to Goat Media Limited, 2301, 23/F Bayfield Building, 99 Hennessy Road, Wan Chai, Hong Kong.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD) at www.pcpd.org.hk.