私隱政策

This Privacy Policy is provided in accordance with the Personal Data (Privacy) Ordinance (PDPO), Cap. 486 of the Laws of Hong Kong.

1. What we collect

(a) Voluntarily provided

• Email address — when you sign up for job alerts or purchase paid prep products
• WhatsApp / phone number — only if you opt in to alerts via that channel
• Name — for receipts when buying paid products
• Qualification profile data (degree, exams, language proficiency) when you use the gap-analysis tool — by default, this stays in your browser only and is never transmitted to our servers. We only retain a copy if you explicitly save your profile to a registered account.

(b) Automatically collected

• Browser type, language, referring URL, date/time of visit, IP address
• Standard server logs

2. Why we collect

• To deliver our free utility (gap-analysis, listings, alerts)
• To process purchases of paid prep products
• To send opt-in marketing — see the Direct Marketing section below
• To prevent abuse and ensure security

3. Direct Marketing Provisions (PDPO Part VIA)

Before we use your personal data for direct marketing (e.g. job-alert emails, new-product announcements), we will:

• Obtain your explicit opt-in via a separate consent step that is NOT bundled into general terms
• Tell you which kinds of data we use and via which channels (email, WhatsApp, etc.)
• Provide an easy opt-out mechanism in every direct-marketing message
• Honour every opt-out request within 30 days

We do not sell or transfer personal data to third parties for their direct marketing purposes.

4. Retention

• Voluntarily-provided data: retained while you maintain an active account or active subscription; deleted on request, or 24 months after inactivity, whichever comes first
• Server logs: 90 days
• Purchase records: retained as required by HK tax/accounting law (7 years)

5. Cross-border data transfer

Our website is hosted on Vercel (US) and our database on Neon (Singapore). By using this site, you acknowledge that your data is processed in these jurisdictions, which provide privacy protections substantially comparable to the PDPO.

6. Your rights under PDPO

You may at any time:

• Request access to data we hold about you
• Request correction of inaccurate data
• Withdraw consent for direct marketing
• Request erasure of your data

Email privacy@hkcareerpath.com to exercise any of these rights. We will respond within 40 days as required by the PDPO.

7. Cookies

We use minimal first-party cookies for session management and basic analytics. We do not use third-party advertising cookies or cross-site trackers.

8. Security

We use industry-standard security (HTTPS, encrypted database connections, restricted server access). No method of transmission over the internet is 100% secure.

9. Children

This service is not directed at persons under 18. We do not knowingly collect personal data from minors.

10. Changes

We may update this Policy. The “Last updated” date at the top will reflect any changes.

11. Contact

Privacy enquiries / data access requests: privacy@hkcareerpath.com