Privacy Policy

1. Data We Collect

We collect personal data only when it is necessary for the purposes described in this Policy. The categories of data we may hold include:

• — Contact data: name, telephone number, email address, postal address.
• — Enquiry data: the content of messages submitted through our website contact form.
• — Resident data: details necessary to arrange and provide living support services, including dietary preferences and family contact information, collected directly from residents and their representatives.
• — Website usage data: IP address, browser type, pages visited, and session duration, collected automatically when you visit our website (see Cookie Policy).

Data is collected through: our website contact form; telephone or in-person conversations; and information provided during the resident intake process. The legal bases for processing are consent, contractual necessity (where a living arrangement is in place), and legitimate interest (for managing the safe and effective operation of the residence).

Retention: Enquiry and contact data is retained for up to 24 months. Resident records are retained for 7 years after the end of the arrangement, in line with standard practice for residential care services in Hong Kong.

2. How We Use Personal Data

• — To respond to enquiries and arrange visits to the residence.
• — To provide and manage living support arrangements for residents.
• — To communicate with family contacts named by residents.
• — To improve our website and understand how it is used.
• — To comply with legal and regulatory obligations.

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties. We may share data with service providers who assist in operating the residence (for example, a contracted IT provider), under data processing agreements that require them to handle data appropriately. We may also disclose data if required by law or regulatory authority.

We will only send marketing communications to individuals who have given clear consent. You may withdraw this consent at any time by contacting [email protected].

3. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include:

• — Access to personal data restricted to staff who require it for their role.
• — Website data transmitted over encrypted HTTPS connections.
• — Physical records stored securely on the premises.
• — Periodic review of data handling practices.

In the event of a data breach that is likely to result in risk to the rights of individuals, we will take prompt remedial action and, where required, notify the relevant parties and the Office of the Privacy Commissioner for Personal Data (PCPD).

4. Cookies

Our website uses cookies to function correctly and to understand how visitors use the site. Essential cookies are required for the site to operate; analytics and preference cookies are optional and only set with your consent. For full details, please see our Cookie Policy.

5. Your Rights

Under the Personal Data (Privacy) Ordinance, you have the following rights regarding your personal data:

• — Right of access: to request a copy of the personal data we hold about you.
• — Right of correction: to request that inaccurate data be corrected.
• — Right to object: to certain uses of your data, including direct marketing.
• — Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by law (generally within 40 days for data access requests under the PDPO).

If you believe we have not handled your data appropriately, you may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), accessible at pcpd.org.hk.

6. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites, and this Policy does not apply to them. We encourage you to review the privacy policy of any external site you visit.

7. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us so we can remove it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are significant, we will post a notice on our website and update the "Last Updated" date at the top. Your continued use of our services following any update constitutes acceptance of the revised Policy.

9. Contact for Privacy Matters