1. Document Ownership & Confidentiality
Any documents that you receive or upload to Confermax.com or Auditessential.com are considered your private property. Confermax Limited will process such information strictly within legal boundaries and solely when initiated by you.
Your uploaded audit confirmations, trial balances, workpapers, and client financial schedules remain strictly confidential. We never inspect, utilize, or monetize your documents for commercial or advertising purposes.
We handle your personal information with the utmost discretion and care. All processing aligns with our explicit declarations and global information security standards.
2. Who is Responsible for Data Processing?
Confermax Limited owns and operates both Confermax.com and Auditessential.com, serving as the responsible data controller for our platforms. We process personal data resulting from users accessing and operating our services worldwide.
Our data processing practices comply with applicable United States federal and state privacy laws (including CCPA/CPRA), the Hong Kong Personal Data (Privacy) Ordinance (PDPO), and international regulations such as the EU GDPR. We uphold consistent data protection standards across all regions where our clients operate.
3. Purpose of Processing Personal Data
Personal data processing across Confermax.com and Auditessential.com fulfills the rights and obligations arising from our platform terms of use. It enables secure audit confirmations, workpaper preparation, and analytical workflows for our users.
We also process data to manage and develop services, diagnose technical issues, and communicate essential system updates. Any direct marketing is conducted strictly in accordance with user consent and applicable statutory rules.
- Service Execution: Facilitates dispatching confirmations, managing audit engagements, signing, and archiving records for designated entities.
- User Communication: Provides critical alerts, platform notices, verification reminders, and optional product updates.
- Platform Analytics: Aggregates anonymized performance metrics to enhance system usability and streamline navigation.
- Security & Fraud Defense: Monitors suspicious activities and validates business identities to protect corporate assets.
4. Legal Justification for Data Processing
Data processing is justified by voluntary consent provided by the data subject when accessing our services. This allows Confermax Limited to attend to legitimate interests while respecting individual privacy rights.
Processing is also legally grounded in contractual necessity to perform requested audit and confirmation operations. We ensure that our legitimate interests never override your fundamental privacy expectations.
5. What Personal Data We Collect & Process
Confermax Limited processes both personally identifiable information and non-personally identifiable technical metrics across Confermax.com and Auditessential.com. Providing personal information is voluntary, but registration is required to use our services.
- User Registration Data: First name, last name, office affiliation, email address, and phone number, authenticated via recognized digital ID methods.
- Signing Party Information: Corporate signer credentials used where factual need exists for legally enforceable identification under US, Hong Kong, and international privacy laws.
- Support & Inquiries: Contact details and message records stored when you submit questions via email, forms, or web customer chat.
- Technical IP Logging: IP addresses logged during portal access to manage servers, diagnose security threats, and optimize delivery without personal profiling.
6. Cookies & Web Analytics
Confermax Limited collects and processes de-identified information about visitors using standard internet cookies across Confermax.com and Auditessential.com. Cookies are small text files stored on your computer or mobile device.
We use first-party cookies to compile anonymous statistical reports that help us improve user experience. We also use functional cookies to retain form entries as you navigate between multi-step workflows.
You can reject or delete cookies through your web browser settings at any time. Please note that disabling cookies may limit the range of features available on our platforms.
7. Disclosing Information to Third Parties
Personal information is disclosed to third parties only when necessary for transmitting, receiving, or archiving documents within our services. We never sell, rent, or disclose your personal data to external parties for commercial marketing.
Confermax Limited enters into strict service agreements with trusted providers for hosting, server infrastructure, and customer support. These partners are legally restricted from using your data for any unauthorized purpose.
8. Right to Access, Rectify & Delete Data
Under US, Hong Kong, and international data privacy laws, you possess the right to access, inspect, and rectify your personal records. If any stored information is incorrect, you may request prompt correction or deletion.
You can review and update information directly through your account dashboard on Confermax.com or Auditessential.com. To permanently delete your user profile and history, please send a request to .
9. Information Security & Data Safeguards
Confermax Limited implements robust administrative, technical, and physical security measures across both Confermax.com and Auditessential.com. We aim for our platforms to remain among the most secure financial workspaces in the industry.
All information exchange is encrypted using modern cryptographic protocols, including AES-256 for stored documents and TLS 1.3 for data in transit. Certified secure data centers and strict employee access controls ensure your data remains confidential.
10. Consent, Jurisdiction & Applicable Law
This Privacy Statement applies to all users of Confermax.com and Auditessential.com, both owned and operated by Confermax Limited. By using our websites or services, you accept that your personal information may be processed in accordance with this policy.
Confermax Limited complies with applicable laws across the United States, Hong Kong, and international jurisdictions where it operates. Any disputes shall be resolved in accordance with the governing laws of the applicable operating jurisdiction, unless otherwise required by mandatory local law.
11. Contact Information & Inquiries
If you have any questions regarding this Privacy Policy or wish to exercise your data rights, you are welcome to send a request to us. Please email us directly at and we will respond promptly to assist you.