Privacy Policy Statement

PRIVACY POLICY STATEMENT

✓Business name (BR No. Business Registration (BR) number) Effective date: Effective date

This policy is maintained in accordance with Data Protection Principle 5 of the Personal Data Protection Ordinance (PDPO, Cap. 486), which requires an organisation to take practicable steps to make its personal data policies and practices generally available.

1. DATA WE COLLECT 1.1. Types of personal data typically collected

2. HOW WE USE IT 2.1. General purposes of use

3. SECURITY 3.1. Security measures

4. RETENTION 4.1. Retention policy

5. DISCLOSURE TO THIRD PARTIES 5.1. Disclosure to third parties

6. CCTV / VIDEO SURVEILLANCE 6.1. CCTV / video surveillance note (if applicable)

7. DIRECT MARKETING 7.1. Direct marketing policy

8. YOUR RIGHTS AND CONTACT 8.1. You may request access to, or correction of, your personal data by contacting: Contact for privacy enquiries / access and correction requests

— — — ⚠️ This is a boilerplate template, not legal advice. Hong Kong's Employment Ordinance, MPF, Employees' Compensation, and PDPO compliance regimes are subject to near-term and phased changes — including the abolition of MPF offsetting for severance/long service payments (in effect since 1 May 2025), the "468 rule" for continuous contracts (in effect from 18 January 2026), the Statutory Minimum Wage rising to HK$43.1/hour (from 1 May 2026, now subject to annual review), the growing statutory holiday schedule (15 days in 2026), and a pending public consultation on cooling-off periods for prepaid beauty/fitness contracts (29 June – 31 August 2026) — have this template reviewed and adapted by a lawyer before use, and confirm the current rules and thresholds at labour.gov.hk, mpfa.org.hk, pcpd.org.hk, and fehd.gov.hk on the date of use.