Privacy Policy

Cheun Fung ("we", "us", "our") is committed to handling personal data responsibly and in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. This policy describes what personal data we collect, how we use it, and how it is protected.

This policy applies to all personal data collected through our website at cheun-fung.blog, our contact forms, telephone enquiries, and data held in connection with residence and programme arrangements.

For questions about this policy, please write to [email protected].

We collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Enquiry content: any information provided in written or spoken enquiries
• Website usage data: IP address, browser type, pages visited, via cookies and analytics tools (where consent is given)
• Resident and programme member data: where a person joins a plan, additional information is collected as required for the arrangement (dietary requirements, emergency contacts, and similar practical details)

We collect this data through our website contact form, telephone calls, in-person conversations, and written correspondence. We do not collect sensitive personal data (such as medical records) without a specific lawful basis and separate consent.

We process personal data on the following bases:

• Consent: when you submit the contact form or agree to marketing communications
• Contract: when data is necessary for the arrangement of a residence or programme plan
• Legitimate interest: for operational purposes such as improving our services and ensuring the safety and wellbeing of residents
• Legal obligation: where required by Hong Kong law, including the Personal Data (Privacy) Ordinance

We use personal data for the following purposes:

• Responding to enquiries and arranging visits
• Managing residence and programme plan arrangements
• Communicating with residents and their families on matters relating to daily life and welfare
• Improving our website and services through analytics (where consent is given)
• Complying with legal and regulatory obligations

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

We share personal data only in the following circumstances:

• Service providers: third-party companies that help operate our website or communications, such as email hosting providers, who process data on our behalf under appropriate data processing agreements
• Analytics services: where you have consented to cookies, limited usage data may be shared with Google Analytics or similar services
• Legal authorities: where required by law or court order
• Emergency contacts: named by the resident, in circumstances affecting the resident's welfare

We do not share personal data with advertising networks, data brokers or any unrelated third parties.

We retain personal data only as long as necessary for the purposes described:

• Enquiry data: up to 12 months from last contact, unless an arrangement is made
• Resident and programme data: for the duration of the arrangement and up to 7 years thereafter, in line with standard record-keeping obligations
• Website analytics data: up to 26 months, as configured in analytics tools

After retention periods expire, data is securely deleted or anonymised.

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. These include:

• Secure, encrypted connections (HTTPS) on our website
• Access controls limiting who within our organisation can access personal data
• Regular review of data handling practices

No transmission of data over the internet can be completely secure. If a data breach occurs that is likely to affect your rights, we will notify you and the Office of the Privacy Commissioner for Personal Data (PCPD) as required by law.

Our website uses cookies to support its operation and, where you have consented, to analyse site usage. For full information on the cookies we use, please see our Cookie Policy. You can manage cookie preferences at any time through the cookie settings on this site.

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

• Request access to personal data we hold about you
• Request correction of any personal data that is inaccurate
• Object to processing in specific circumstances
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD): www.pcpd.org.hk

To exercise your rights, write to us at [email protected]. We will respond within 40 days as required by the Ordinance.

For any questions or requests relating to this policy or your personal data:

Cheun Fung
23 Robinson Road, Mid-Levels, Hong Kong
Email: [email protected]
Tel: +852 3194 6207