It is the policy of Hong Kong Living Foundation Limited 香港生活基金有限公司 to comply with the applicable requirements of the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (the “Privacy Ordinance”). Set out below is our Privacy Policy Statement.

1. What personal data do we collect and hold?

Circumstances under which we may collect or hold your personal data include, among others:

· you are invited to attend, intend to attend or attend our events;

· we, or you request us to, provide grants, goods or services to you;

· you deal with us (for example, you are our supplier);

· you are involved in a matter in relation to which we provide grants, goods or services or otherwise work on;

· you deal with or are related to a person to whom we provide grants, goods or services;

· you subscribe to our mailing list or newsletter;

· you apply for employment or volunteering with us;

· you make a donation to us;

· you make an enquiry with or complaint against us; or

· we conduct researches or statistical analyses.

The type of personal data we collect or hold depends on the reason for collecting or holding it. For example, if you are a person to whom we provide grants, goods or services or a person who is invited to attend, intends to attend or attends one of our events, we may collect and hold your personal details (such as your name, gender and date of birth), contact details (such as address, telephone number and email address), credit card details, bank account details and other relevant information about you.

2. How do we collect personal data?

We collect your personal data directly from you, or from our related bodies corporate which collected your personal data, whenever it is reasonable and practical to do so. We may also collect your personal data from third parties in the course of providing grants, goods or services to you. Your personal data may also be provided by other persons to us if they want us to provide grants, goods or services to you or want to invite you to attend our events.

We may also install and operate security surveillance cameras on our premises, and by entering onto our premises you consent to our doing so.

Provision of personal data to us is generally voluntary, unless otherwise specified. However, if you do not provide some personal data to us, this may affect our ability to provide grants, goods or services to or otherwise deal with you.

3. Why do we collect personal data?

We collect personal data in connection with carrying out our activities, such as to understand the needs of the persons with whom we come into contact in order to provide grants, goods or services to them.

4. How do we use personal data?

We use your personal data in the following ways:

· to provide grants, goods or services to you;

· to invite you to attend our events;

· for the purposes for which the information is provided to or collected by us;

· for purposes to which you have consented, expressly or impliedly;

· for purposes in connection with legal proceedings;

· for the purposes of direct marketing (such as through mail, telephone, SMS, messaging app, email or other electronic means), including to provide you with information about our events and services; and

· for purposes otherwise permitted or required by law.

5. When do we disclose personal data?

We may disclose your personal data to:

· persons or organisations to whom we refer you;

· our related bodies corporate which may provide grants, goods or services to you;

· donors who support us;

· third party service providers, suppliers and contractors who provide goods or services (such as cloud services and other information technology and telecommunication services) to us, including those who are not in Hong Kong;

· credit reporting agencies; and

· other persons or organisations the disclosure to whom is permitted by law or you have consented, expressly or impliedly.

We may also disclose your personal data where:

· disclosure is required or desirable to lessen or prevent a serious threat or harm to an individual’s or public life, health or safety;

· there are serious concerns about the safety or wellbeing of any person;

· the information is subpoenaed, is required to be disclosed by law or a court or tribunal, or is disclosed in relation to legal proceedings;

· the information is required by a law enforcement agency or a competent authority; or

· disclosure is required by mandatory regulatory requirements or professional codes by which we or our staff are bound.

You consent to the disclosure of your personal data to third party service providers, suppliers and contractors who are not in Hong Kong.

6. Direct marketing

In addition to the purposes specified in the section headed “How do we use personal data” above, we intend to use your personal data (including your personal details (such as your name, gender and date of birth) and contact details (such as address, telephone number and email address)) in direct marketing, including to seek donations and support from you and to market and promote our offering of grants, goods and services. Unless we receive your consent or you do not object to the intended use, we may not so use your personal data in direct marketing. We will not provide your personal data to non-associated parties for the purposes of their direct marketing of their grants, goods or services to you, unless you agree for us to do so.

If you do not wish us to so use your personal data in direct marketing, you may contact us via the contact details set out below under the heading “Contact Us” to request us to cease using your personal data in direct marketing. We will then cease such use as soon as practicable. We will not charge any fee for handling such request.

7. Links

Our website, emails and other electronic messages and the posts on our social media may contain links to other apps, websites or webpages operated by third parties. We have no control over the contents of such linked apps, websites or webpages or how their operators may collect, hold or use your personal data. You should review the privacy policies on such apps, websites or webpages to understand how such third parties may collect, hold and use your personal data.

8. How do we ensure your personal data is accurate?

We take reasonable steps to ensure that your personal data is accurate, complete and up-to-date. To assist us, please contact us if any personal data you have provided is inaccurate, incomplete, misleading or has changed.

9. How long will we retain your personal data?

We take reasonably practicable steps to ensure that your personal data will not be kept longer than is necessary for fulfilling the purposes for which they are collected, held and used (or other directly related purposes), except for archival purposes, to protect us and our staff or as otherwise permitted or required by law.

10. How do we keep your personal data secure?

We are committed to keeping your personal data secure. We take reasonable steps to protect your personal data when it is in our possession from misuse and loss and from unauthorised access, modification or disclosure. However, as data transmission via electronic means (such as the internet) cannot be guaranteed to be totally secure, we do not accept responsibility for the security of information transmitted to or by us via electronic means. In addition, we are unable to ensure that third parties to whom we disclose your personal data will keep your information secure or otherwise comply with the Privacy Ordinance.

11. How can you access or correct your personal data?

You have the right to access your personal data held by us in accordance with the Privacy Ordinance. We are committed to giving you access within a reasonable time frame. You can also make a request for us to correct any of your personal data held by us which is incorrect, misleading, incomplete or obsolete.

We will not refuse your request for access or correction unless there are legal reasons for doing so. In such circumstances, we will explain those reasons to you. We may charge a reasonable fee for access to or correction of your personal data.

If you wish to access or correct your personal data, please contact us via the contact details set out below under the heading “Contact Us”. For security reasons, a written request will be required to access or correct your personal data. All data access requests must be made using the form specified by the Privacy Commissioner for Personal Data, which may be found on the website of the Office of the Privacy Commissioner for Personal Data, Hong Kong.

12. Updates to this Privacy Policy Statement

We may review and amend this Privacy Policy Statement from time to time without prior notice. Up-to-date version of this Privacy Policy Statement will be available on our website (www.lf.org.hk) or upon request. Your continued access to our website or your continued relationship with us will be deemed to be your acceptance of and consent to this Privacy Policy Statement as amended from time to time.

13. Complaints

Privacy related complaints can be made via the contact details set out below under the heading “Contact Us”.

If we receive a complaint, we will take the following steps:

· If we consider necessary, request further information from you;

· conduct internal investigations in relation to the matter;

· notify you of the results of our investigation of your complaint and endeavour to do so within 30 days of receiving your complaint, unless it is complex or otherwise requires extensive investigation in which case the period of time may be longer; and

· if applicable and we consider necessary, we will take steps to remedy the breach as soon as reasonably practicable.

14. Contact Us

For your privacy related requests, questions or complaints, please contact our Operations Manager by email at admin@lf.org.hk.

15. Language versions

To the extent of any inconsistency between the English and Chinese versions of this Privacy Policy Statement, the English version will prevail.