This Privacy Policy Statement sets out the policies and practices of HelioCore Energy Limited (hereinafter “HelioCore”, “we”, “us” or “our”), a company incorporated in Hong Kong with its registered office at Room 701, 7/F, Lucky Centre, 165-171 Wanchai Road, Wan Chai, Hong Kong, in relation to the collection, holding, processing and use of personal data in the course of its business and in connection with its website at www.heliocoreenergy.hk (the “Website”). HelioCore is engaged in client acquisition, business development and intermediary activities in the energy sector, including in relation to hydroelectric power plant construction and cable authorisation projects, and its authorised representatives identify and pursue new business opportunities, meet with prospective clients and partners, and represent the company in business related matters. This Privacy Policy Statement is made in accordance with the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (the “Ordinance”) and the six Data Protection Principles set out in Schedule 1 to the Ordinance. We are committed to ensuring that personal data is handled in a manner consistent with the requirements of the Ordinance. For any matter relating to this Privacy Policy Statement or to your personal data, you may contact us at info@heliocoreenergy.hk.

In this Privacy Policy Statement, “personal data” has the meaning given to it in the Ordinance, namely any data relating directly or indirectly to a living individual, from which it is practicable for the identity of the individual to be directly or indirectly ascertained, and in a form in which access to or processing of the data is practicable. “You” refers to any individual whose personal data we collect, including prospective and existing clients, the representatives and contact persons of our clients, business partners, counterparties and suppliers, visitors to the Website, and any other individual who interacts with us in connection with our business.

We collect and hold various kinds of personal data depending on the nature of your interaction with us. In respect of prospective and existing clients, business partners, counterparties and their representatives and contact persons, we may collect your name, position, employer, business and where relevant personal contact details (including email address, telephone number and postal address), correspondence and communications with us, records of meetings, discussions and negotiations, and information relevant to the identification, assessment and facilitation of business opportunities and projects in the energy sector. In respect of authorised representatives and, where required, beneficial owners of corporate counterparties, we may collect, in connection with a specific project or transaction, identification and due diligence information to the extent necessary and required by applicable law or by the banks, financiers or other parties involved in the transaction. In respect of visitors to the Website, we may collect technical data automatically generated through your use of the Website, including your IP address, browser type, operating system, referring website, pages accessed and the date and time of access, together with any information you voluntarily submit through any enquiry or contact function on the Website. We do not intentionally collect personal data from children, and the Website is not directed at children.

We collect personal data by lawful and fair means and only for purposes directly related to our functions and activities. The purposes for which personal data may be collected, held, processed and used include the following: providing client acquisition, business development and intermediary services in the energy sector; identifying, pursuing and facilitating business opportunities, including in relation to hydroelectric power plant construction and cable authorisation projects; establishing, developing and maintaining relationships with clients, business partners and counterparties; arranging and conducting meetings, negotiations and communications, and representing the company in business related matters; facilitating the introduction of parties and the negotiation, conclusion and performance of agreements in connection with which we act as intermediary; verifying identity and conducting such due diligence as may be required in connection with a project or transaction; issuing and processing invoices and receiving fees, commissions and other payments; maintaining our business records and accounts; complying with applicable laws, regulations, codes of practice and lawful requests of governmental, regulatory or law enforcement authorities in Hong Kong and elsewhere; and, subject to the specific requirements described below, conducting direct marketing. Where the provision of personal data is required in order for us to provide a service, act as intermediary or enter into a transaction, and you fail to provide that data, we may be unable to provide the relevant service or to proceed with the relevant matter.

Under the Ordinance, we may use your personal data only for the purpose for which it was collected or a directly related purpose, unless we have obtained your voluntary and express consent to use it for a new purpose. We will not use your personal data for a purpose that is not consistent with this Privacy Policy Statement without first obtaining your consent, save where such use is permitted or required by the Ordinance or by other applicable law.

We may disclose or transfer your personal data, on a need-to-know basis and for the purposes described above, to the following classes of persons or entities: our staff, officers, authorised representatives and agents who require access to the data in the performance of their duties; the clients, business partners, counterparties and other parties whom we introduce to one another or between whom we act as intermediary, to the extent necessary for the relevant project or transaction; our banks, financiers, insurers, accountants, auditors, legal and other professional advisers; our data processing, information technology, hosting and administrative service providers acting on our behalf; any actual or proposed assignee, transferee or successor in respect of our business or any part of it; and any governmental, regulatory, law enforcement or other authority, court or tribunal, where such disclosure is required or permitted by law or is made in response to a lawful request. Where we engage a data processor to process personal data on our behalf, we adopt contractual or other means to ensure that the processor complies with the requirements of the Ordinance, including the requirements relating to the security and retention of personal data.

Personal data held by us may be transferred to, or accessed from, places outside Hong Kong, including where our clients, business partners, counterparties or service providers are located or operate outside Hong Kong, which is inherent in the cross-border nature of our activities in the energy sector. Where personal data is transferred outside Hong Kong, we take reasonable steps to ensure that the data is afforded a level of protection comparable to that required under the Ordinance, including by adopting appropriate contractual arrangements with the recipients of the data and by having regard to the recommended good practices issued by the Privacy Commissioner for Personal Data in relation to cross-border data transfers. Such transfers are made only to the extent necessary for the purposes described in this Privacy Policy Statement.

We take all reasonably practicable steps to ensure that personal data held by us is protected against unauthorised or accidental access, processing, erasure, loss or use. These steps include physical, technical and administrative security measures, restrictions on access to personal data on a need-to-know basis, the use of secure systems for the transmission and storage of data, and the imposition of confidentiality obligations on our staff and on the data processors we engage. We take all reasonably practicable steps to ensure that personal data held by us is accurate having regard to the purpose for which it is used.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or a directly related purpose, and to satisfy any applicable legal, accounting, contractual or regulatory requirements. Personal data that is no longer required for any such purpose is erased or otherwise disposed of in a secure manner. In determining the appropriate retention period we have regard, among other things, to the duration of our relationship with you, the nature and status of the relevant business opportunity, project or transaction, the limitation periods applicable to potential legal claims under Hong Kong law, and the record-keeping requirements imposed by applicable tax and companies legislation.

We may use your personal data, in particular your name and business contact details, to conduct direct marketing in relation to our services, business opportunities and related information in the energy sector. In accordance with the requirements of the Ordinance, we will not so use your personal data unless we have received your consent or an indication of no objection to such use, and we will inform you of the kinds of personal data to be used and the classes of marketing subjects in relation to which the data will be used before using it for direct marketing. If you do not wish to receive direct marketing communications from us, or if having consented you subsequently wish to cease receiving such communications, you may at any time and without charge request us to stop using your personal data for direct marketing by contacting us at info@heliocoreenergy.hk, and we will act upon your request without delay. We will not provide your personal data to any other person for that person’s use in direct marketing unless we have received your written consent to do so.

Under sections 18 and 22 and Data Protection Principle 6 of the Ordinance, you have the right to ascertain whether we hold your personal data, to request access to that data, and to request the correction of any of your personal data that is inaccurate. A data access request or a data correction request should be made in writing to us at info@heliocoreenergy.hk. In accordance with the Ordinance, we will respond to a data access request or a data correction request within forty days of receiving it. We are entitled to impose a reasonable fee, not exceeding the cost directly related to and necessary for complying with a data access request, for the processing of that request. If we are unable to comply with a data access request or a data correction request within forty days, we will notify you in writing of that fact before the expiry of the period and will comply with the request to the extent possible as soon as practicable thereafter.

The Website uses cookies and similar technologies to enable its proper functioning and to collect information about how visitors use the Website. Detailed information about the cookies we use, their purposes and how you may manage your cookie preferences is set out in our separate Cookies Policy, which forms part of this Privacy Policy Statement and should be read together with it.

If you have any complaint regarding the manner in which we handle your personal data, you may contact us at info@heliocoreenergy.hk, and we will investigate and respond to your complaint. You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong, whose contact details are as follows: Office of the Privacy Commissioner for Personal Data, Hong Kong, Unit 1303, 13/F, Dah Sing Financial Centre, 248 Queen’s Road East, Wan Chai, Hong Kong; telephone +852 2827 2827; email complaints@pcpd.org.hk; website www.pcpd.org.hk.

We may revise this Privacy Policy Statement from time to time to reflect changes in our practices, in applicable law or in the guidance of the Privacy Commissioner for Personal Data. The most current version is available on the Website and takes effect from the date on which it is posted. We encourage you to review this Privacy Policy Statement periodically. In the event of any inconsistency between the English language version of this Privacy Policy Statement and any translation into another language, the English language version shall prevail.

For any question, request or complaint relating to this Privacy Policy Statement or to the personal data we hold about you, please contact us by email at info@heliocoreenergy.hk or by post at Room 701, 7/F, Lucky Centre, 165-171 Wanchai Road, Wan Chai, Hong Kong.

This Privacy Policy Statement was last updated on 1 July 2026.