(Effective date: 6 November 2026)
1. About this statement
This Privacy Policy Statement explains the general policies and practices of Hong Kong Design Centre Limited (“HKDC”, “we”, “us” or “our”) in relation to personal data. It applies to personal data collected through our website, programmes, events, registrations, subscriptions, purchases, enquiries and other interactions with us.
Where we collect personal data directly from you through a form, application, registration, subscription, purchase process or other collection channel, we will provide a separate Personal Information Collection Statement (PICS) at or before collection. That statement will explain the purposes for the particular collection, whether provision of particular data is obligatory or voluntary, the consequences of not providing obligatory data, relevant classes of transferees and how to make a data access or correction request.
2. Personal data we collect
Depending on how you interact with us, we may collect and hold the following categories of personal data:
identity and contact data, such as name, organisation, job title, postal address, email address and telephone number;
registration, programme, event, membership, subscription and attendance information;
purchase, payment-administration and transaction information;
correspondence, enquiries, feedback, complaint and support information;
marketing and communication preferences;
website, device and usage data, including IP address, browser/device information, pages viewed, time and date of visit, referral source, cookie identifiers and similar online identifiers, where collected; and
any other personal data that you voluntarily provide to us in connection with a service, programme, event or enquiry.
We may use personal data for the following main purposes:
administering and delivering our programmes, events, activities, services, memberships, registrations, subscriptions, purchases and requests;
communicating with you about a programme, event, activity, transaction, enquiry or service that you have requested, joined or attended;
managing payment administration, customer support, complaints, accounting, audit, legal compliance, security, fraud prevention and protection of our rights;
operating, maintaining, securing and improving our website, services, programmes, events and activities;
maintaining business, operational and audit records; and
sending direct-marketing communications where we have complied with the applicable requirements of the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”).
We will not use personal data for a new purpose unless the new purpose is directly related to the original purpose of collection, we have obtained the prescribed consent where required, or the use is otherwise permitted or required by law.
4 Cookies and website information
Our website uses cookies and similar technologies. Necessary cookies are used to operate, protect and maintain website functions. We may also use non-essential cookies and similar technologies, including analytics, preference and advertising technologies, to understand website usage, improve our website and services, and measure the effectiveness of our communications and campaigns.
You may manage or disable cookies through your web-browser settings. Disabling or restricting cookies may affect some website functions.
We may disclose or transfer personal data, on a need-to-know basis and for the purposes described in this statement or the applicable PICS, to the following classes of recipients:
information-technology, cloud-hosting, website, analytics, communications, printing, delivery and administrative service providers;
registration, ticketing, payment-administration, event-management and venue service providers;
co-organisers, programme partners and sponsors, where this is necessary for the relevant programme, event or activity and has been notified to you;
professional advisers, auditors and insurers; and
government authorities, regulators, law-enforcement bodies and other parties where disclosure is required or permitted by law.
We require service providers who process personal data on our behalf to process it only for authorised purposes and to maintain appropriate confidentiality and security safeguards. Where personal data is processed outside Hong Kong, we will take reasonably practicable steps to ensure protection appropriate to the nature of the data and processing.
6. Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including the administration of the relevant programme, event, service, transaction or subscription. We may retain data for a further period where reasonably necessary for legal, accounting, audit, security, fraud-prevention, dispute-resolution, record-keeping or other lawful purposes.
When personal data is no longer required, we will delete, anonymise or securely dispose of it in accordance with our retention procedures, unless retention is required or permitted by law. A request for deletion will be considered in accordance with applicable law and our continuing legitimate retention requirements.
7. Security
We take reasonably practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use. Our measures may include access controls, role-based permissions, authentication procedures, confidentiality obligations, staff training, supplier controls, appropriate technical safeguards and secure disposal procedures.
No system is completely secure. If a data-security incident occurs, we will investigate it, take reasonable containment and remediation steps, and assess whether notification to affected persons, the Privacy Commissioner for Personal Data or other parties is appropriate.
8. Direct marketing
We may use your name and contact details to send you information about HKDC’s design-related events, exhibitions, programmes, training, memberships, services, publications, initiatives, promotions and activities only where we have first given the required notice and obtained the consent or indication of no objection required by the PDPO.
Direct-marketing consent is voluntary and separate from your application, registration, purchase, subscription or use of services. You may, at any time and without charge, require us to cease using your personal data for direct marketing by using the unsubscribe facility in our communications, emailing privacy@hkdesigncentre.org, or writing to us at the address below.
9. Access, correction and contact
our policies and practices in relation to personal data and the kinds of personal data we hold. We may ask for information reasonably necessary to verify your identity. We may charge a fee for complying with a data access request where permitted by law; any such fee will not be excessive.
Please address requests and enquiries to:
Data Protection Lead
Hong Kong Design Centre Limited
4/F, Hong Kong Design Centre, DX design hub, 280 Tung Chau Street, Kowloon, Hong Kong
Email: privacy@hkdesigncentre.org
10. Changes to this statement
We may update this Privacy Policy Statement from time to time. The current version and its effective date will be published on our website. Where appropriate, we will give additional notice of material changes. Changes will take effect on the date stated in the updated Privacy Policy Statement, unless otherwise specified. We will not use personal data for a new purpose unless that use is permitted under the PDPO.
11. Language
If there is any inconsistency between the English version and any Chinese version of this Privacy Policy Statement, the English version shall prevail.