Registered Nurse & Counsellor
Member of ACA, HKPCA, HKSCP
Purpose
This policy provides guidance on the safe, secure and proper management of personal data. Personal data (“Personal Data”) is information that can be used to identify a person. This includes names, phone numbers, addresses, identity card numbers, photos and employment records.
Legislation
Applicable data protection and privacy laws.
Principles
3.1
We notify those users from whom we collect data (“Data Subjects”) of the purpose for collecting their data, how this data will be used and to whom it may be transferred. This is summarised in the Personal Information Collection Statement (PICS) which is maintained on the website. The PICS is included in the appendix of this document.
3.2
We take all practicable steps to safeguard personal data from unauthorised or accidental access, processing, erasure, loss or use. Steps we take include:
• Database software is modern and kept updated.
• Access to databases containing personal data is controlled through authorised management personnel.
• Emails to Data Subjects are sent from authorised email addresses.
• Mass emails are sent via email software that does not disclose the Data Subjects’ email addresses.
• Emails to multiple people not sent through mailing software are sent using BCC.
3.3
Data Subjects may, on written request, access their personal data held by us. If the personal data that we are holding is incorrect, users may request to have the information corrected. Users may also withdraw their consent to us using their personal data.
3.4
We may share your Personal Data with third parties as described in this section:
• Your representatives, advisers and others you have authorised to interact with us on your behalf.
• Our staff members who need the information to discharge their duties.
• Our affiliates within the same corporate group, third-party partners and/or business affiliates.
• Our agents and service providers that assist us in operating the website, providing services to you, or otherwise conducting our business.
• Competent courts of law, law enforcement agencies and/or regulatory bodies for compliance with applicable laws and regulations and protection of our legal rights.
3.5
Except as provided herein, we will not disclose your Personal Data to any third parties unless it is necessary to provide the services, when required by law, or if we have a good faith belief that such action is reasonably necessary to:
• Comply with current judicial proceedings, a court order or legal process served on us.
• Protect and defend our rights, property and interests, including by enforcing our policies.
• Respond to claims that any submitted content violates the rights of third parties.
• Respond to your requests.
• Protect the rights, property or personal safety of us its affiliates and the public.
3.6
Data Subjects have the choice to opt out from receiving direct marketing from us. Direct Marketing in the context of us includes:
(a) Offering or advertising services (and goods, if relevant) including training, information sessions, lectures, events.
(b) The solicitation of donations or contributions.
3.7
All direct marketing email communications contain a link to the Privacy Policy and the option to unsubscribe from receiving communications. Data Subjects who opt out are placed on the Opt-Out List and we will not send them any communications.
3.8
If you access our information or services through this website, you should be aware that the website uses cookies. Information that you supply in this way will not be shared with any third party except where needed to provide a requested service.
3.9
We use the information collected about you through this website to improve understanding of web visitors and to send information that you have requested or that may be considered of interest to you. As a general rule, we will not disclose any information identifying you personally, except with your permission or where required by law. Please refer to the PICS for more details on the third-party software used on this website.
Appendix
Personal Information Collection Statement
1.
We recognises our responsibilities in relation to the collection, holding, processing and use of personal data. Personal data will be collected only for lawful and relevant purposes and all practicable steps will be taken to ensure that personal data held by us is secure and accurate and to avoid unauthorised or accidental access, erasure or other use.
The personal data that we may collect from time to time includes your name, contact details, gender and date of birth.
2.
All personal data handled by us will be kept confidential and will be collected knowingly from you.
3.
The uses for which data may be collected are:
• Collecting and processing donations.
• Sending communications including newsletters, information about programmes, seminars, conferences, events and other activities delivered by us or other agencies in conjunction with us.
• Enrolling in training courses, programmes, conferences, lectures, seminars and other events.
• Accessing resources through the our website.
• Improving understanding of website traffic.
• Working with volunteers.
4.
We may share your Personal Information with third parties as described in this section:
a) Your representatives, advisers and others you have authorised to interact with us on your behalf.
b) Our staff members who need the information to discharge their duties.
c) Our affiliates within the same corporate group, third-party partners and/or business affiliates.
d) Our agents and service providers that assist us in operating the website, providing services to you, or otherwise conducting our business.
e) Competent courts of law, law enforcement agencies and/or regulatory bodies for compliance with applicable laws and regulations and protection of our legal rights.
f) Our website uses cookies with third-party software.
5.
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website and cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites.
Please note that we are not affiliated with, nor does it sponsor or endorse, any linking websites owned by third parties and it does not endorse any product or service offered by such linking sites.
6.
Individuals who have provided data to us may submit a written request to access or correct personal data held by us.
7.
If you do not wish to receive information from us you may choose to opt out from our communications. You may contact us through the contact details available on our website.