Last updated: August 2026

This privacy policy explains how WhatInvestment (operated by an individual based in Hong Kong, reachable at [email protected]) collects, uses, and protects personal data when you visit whatinvestment.net.

This policy is written in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (PDPO) and takes into account the Australian Privacy Act 1988, given that this site primarily serves Australian users.

By using this site you agree to the practices described in this policy. If you do not agree, please stop using the site.

1. What Data We Collect and Why

Browsing data (collected automatically)

When you visit this site, standard technical information is collected automatically via Google Analytics 4. This includes your approximate location (country and city level), device type, browser, pages visited, time spent on pages, and how you arrived at the site. This data is anonymised and aggregated — it does not identify you personally.

Purpose: To understand which content is useful, identify pages that need updating, and improve the site over time.

Advertising data (collected by Google AdSense)

This site displays advertisements served by Google AdSense. Google may use cookies and similar tracking technologies to serve ads based on your browsing behaviour across websites. WhatInvestment does not control this data collection — it is governed by Google’s own privacy policy.

Purpose: To fund the operation of this free content site.

You can opt out of personalised advertising via Google’s Ad Settings or the Network Advertising Initiative opt-out page.

Email address (collected voluntarily)

If you subscribe to the WhatInvestment email newsletter or download a free resource from this site, your email address is collected and stored via MailPoet. This is entirely voluntary.

Purpose: To send you the resource you requested and, where you have consented, to send periodic emails about new content, gig economy news, and relevant offers.

You can unsubscribe at any time using the link at the bottom of any email. Your email address will be removed from our list within 7 days of your request.

Contact form submissions

If you use the contact form on this site, the message content and any contact details you provide (such as your name and email address) are collected and stored temporarily so we can respond to your enquiry.

Purpose: To respond to your question or feedback. Contact form data is not used for marketing unless you explicitly request to join the email list.

2. Cookies

This site uses cookies — small text files stored on your device. The cookies used are:

  • Google Analytics cookies — track anonymised browsing behaviour to help us understand site usage. These persist for up to 2 years.
  • Google AdSense cookies — used by Google to serve relevant advertisements. Persistence varies by cookie type.
  • WordPress session cookies — short-lived cookies used by WordPress to manage your session. These expire when you close your browser.

Most browsers allow you to refuse or delete cookies through their settings. Doing so may affect how some parts of this site function. For more information on managing cookies, visit allaboutcookies.org.

3. How We Share Your Data

WhatInvestment does not sell, rent, or trade your personal data to third parties. Data is shared only in the following limited circumstances:

  • Google — for Analytics and AdSense functionality as described above. Google’s privacy policy is available at policies.google.com/privacy.
  • MailPoet — your email address is stored and processed by MailPoet to manage newsletter delivery. MailPoet’s privacy policy is available at mailpoet.com/privacy-policy.
  • Legal obligations — if required by law or a valid legal process, we may disclose data to the appropriate authorities.

Affiliate links on this site lead to third-party platforms (such as Uber, DiDi, and accounting software providers). Clicking an affiliate link may result in that third party placing their own cookies on your device. WhatInvestment is not responsible for the privacy practices of those third parties — please review their individual privacy policies before signing up.

4. Your Rights Under Hong Kong PDPO

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

  • Request access to any personal data we hold about you
  • Request correction of any inaccurate personal data
  • Request deletion of your personal data where it is no longer needed for the purpose it was collected
  • Withdraw consent at any time where processing is based on consent (for example, unsubscribing from the email list)

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days in accordance with PDPO requirements.

5. Your Rights as an Australian User

If you are located in Australia, the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs) also apply to how your data is handled. You have the right to access and correct personal information we hold about you, and to complain about a breach of the APPs.

Complaints can be directed to us first at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

6. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

  • Analytics data — retained for up to 14 months within Google Analytics, then automatically deleted
  • Email addresses — retained until you unsubscribe, after which removal is completed within 7 days
  • Contact form submissions — retained for up to 6 months and then deleted

7. Data Security

This site uses HTTPS encryption for all data transmitted between your browser and our servers. WordPress and all plugins are kept up to date to minimise security vulnerabilities. Access to the WordPress admin is restricted and protected by strong credentials.

No method of transmission over the internet is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

8. Children’s Privacy

This site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to this site, please contact us at [email protected] and we will delete it promptly.

9. Links to Other Websites

This site contains links to external websites including affiliate partner sites, the ATO, and state transport authorities. Once you leave whatinvestment.net, this privacy policy no longer applies. We encourage you to read the privacy policy of any external site you visit.

10. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in how the site operates or changes in applicable law. The date at the top of this page shows when it was last updated. Continued use of the site after any changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, data access requests, or complaints, contact us at:

Email: [email protected]
Site: whatinvestment.net
Response time: Within 40 days for formal data requests, within 5 business days for general enquiries

This privacy policy was last reviewed in August 2026. We recommend checking this page periodically for updates.