Privacy Policy

Last Updated: January 1, 2025

1. Introduction

Hong Kong Labor Insight ("we," "our," or "us") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information from visitors to our website and individuals who interact with our research publication services. This policy complies with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

2. Data Controller Information

Organization: Hong Kong Labor Insight
Address: 21/F, Tower 535, 535 Jaffe Road, Causeway Bay, Hong Kong
Email: contact@hongkonglaborinsight.hk
Phone: +852 3679 4421

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Contact Information: Name, email address, phone number, organizational affiliation, and mailing address when you contact us, subscribe to publications, or register for services.
  • Communication Content: Messages, inquiries, feedback, or other communications you send to us through contact forms, email, or other channels.
  • Professional Information: Job title, industry sector, research interests, and other professional details voluntarily provided for research collaboration or publication purposes.
  • Payment Information: Billing details and transaction information if you purchase services or publications (processed securely through third-party payment processors).

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, device information, and time zone settings.
  • Usage Data: Information about how you navigate our website, including pages visited, time spent on pages, links clicked, and referral sources.
  • Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies (see Section 9 for details).

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), we process personal data based on the following legal grounds:

  • Consent: You have given explicit consent for processing your personal data for specific purposes (e.g., newsletter subscriptions, marketing communications).
  • Contractual Necessity: Processing is necessary to fulfill contractual obligations or provide services you have requested.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, conducting research, ensuring website security, and maintaining business operations, provided such interests are not overridden by your data protection rights.
  • Legal Obligations: Processing is required to comply with legal or regulatory obligations.

5. How We Use Personal Data

We use collected personal data for the following purposes:

  • Service Provision: To respond to inquiries, provide requested information, deliver publications, facilitate research collaboration, and fulfill contractual obligations.
  • Communication: To send updates about our research, publications, events, and services that may be of professional interest to you.
  • Website Improvement: To analyze website usage patterns, improve user experience, enhance content, and optimize website functionality.
  • Research and Analysis: To conduct aggregated statistical analysis of user demographics and interests to improve our research focus and publication relevance.
  • Security and Fraud Prevention: To maintain website security, prevent fraudulent activity, and protect against unauthorized access.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
  • Business Operations: To manage our organizational activities, maintain records, process transactions, and conduct internal administrative functions.

6. Data Sharing and Disclosure

We do not sell personal data to third parties. We may share personal information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in website hosting, email delivery, payment processing, data analytics, and other operational functions, subject to contractual confidentiality obligations.
  • Research Collaborators: With academic institutions, research partners, or professional organizations when you have consented to such sharing for collaborative research purposes.
  • Legal Requirements: When required by law, legal process, litigation, or requests from governmental authorities, or when necessary to protect our legal rights, prevent fraud, or ensure safety.
  • Business Transfers: In connection with any merger, sale of assets, financing, or acquisition of all or part of our organization, subject to confidentiality requirements and notice to affected individuals.
  • With Your Consent: For any other purposes disclosed at the time of collection or with your explicit permission.

7. International Data Transfers

Personal data may be transferred to, stored, or processed in jurisdictions outside Hong Kong where our service providers operate. When we transfer data internationally, we implement appropriate safeguards to protect your personal information, including:

  • Standard contractual clauses approved by relevant data protection authorities
  • Ensuring recipients are in jurisdictions with adequate data protection frameworks
  • Obtaining your explicit consent for specific transfers where required

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on data categories:

  • Contact Information: Retained while you maintain an active relationship with us and for a reasonable period thereafter to manage potential future inquiries.
  • Communication Records: Retained for operational record-keeping and quality assurance purposes, typically 3-5 years.
  • Technical and Usage Data: Retained for periods necessary for analytics and security purposes, generally not exceeding 24 months.
  • Transaction Records: Retained as required by accounting and tax regulations, typically 7 years.

Following retention periods, personal data is securely deleted or anonymized.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and collect usage information. Cookies are small text files placed on your device that enable certain website features and analytics.

Types of Cookies We Use:

  • Essential Cookies: Required for website functionality, including navigation and access to secure areas. These cookies cannot be disabled.
  • Analytical Cookies: Help us understand how visitors use our website by collecting anonymized usage statistics.
  • Functional Cookies: Remember your preferences and choices to provide enhanced, personalized features.

Cookie Management: You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling certain cookies may limit website functionality. Our cookie banner provides options to accept or decline non-essential cookies upon your first visit.

10. Your Data Protection Rights

Under the Hong Kong PDPO and GDPR (where applicable), you have the following rights regarding your personal data:

  • Right of Access: Request confirmation of whether we process your personal data and obtain copies of such data.
  • Right to Rectification: Request correction of inaccurate or incomplete personal information.
  • Right to Erasure: Request deletion of your personal data under certain circumstances (e.g., data no longer necessary for its purpose, withdrawal of consent).
  • Right to Restriction: Request limitation of processing activities under specific conditions.
  • Right to Data Portability: Receive your personal data in a structured, commonly used format and request transfer to another controller (GDPR).
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Withdraw previously given consent for data processing at any time, without affecting the lawfulness of processing based on consent before withdrawal.

Exercising Your Rights: To exercise any of these rights, please contact us at contact@hongkonglaborinsight.hk with your request. We will respond within the legally required timeframe (generally one month for GDPR requests, 40 days for Hong Kong PDPO requests). We may require identity verification before processing requests.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Security measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and vulnerability testing
  • Secure data storage with backup and recovery procedures
  • Employee training on data protection and confidentiality obligations

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents affecting personal data.

12. Children's Privacy

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete such information promptly.

13. Third-Party Links

Our website may contain links to external websites not operated by us. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any external websites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated through website notices or direct communication to registered users. The "Last Updated" date at the top of this policy indicates the most recent revisions. Continued use of our website following policy updates constitutes acceptance of the revised terms.

15. Contact Information and Complaints

For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Email: contact@hongkonglaborinsight.hk
Phone: +852 3679 4421
Address: 21/F, Tower 535, 535 Jaffe Road, Causeway Bay, Hong Kong

Regulatory Complaints: If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with relevant data protection authorities:

  • Hong Kong: Office of the Privacy Commissioner for Personal Data (PCPD) - www.pcpd.org.hk
  • European Union: Your local Data Protection Authority (for GDPR-related complaints)

16. Consent

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. Where required by law, we will obtain explicit consent before processing personal data for specific purposes.