The Hong Kong Musculoskeletal Health Foundation
Last updated: [Insert Date]
The Hong Kong Musculoskeletal Health Foundation (the “Foundation”) is committed to protecting the privacy of personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. This Privacy Policy explains how we collect, use, retain, disclose and protect your personal data when you interact with our website and related services.
By using our website, you agree to the practices described in this policy. If you do not agree, please do not provide any personal data to us.
1. Scope of this Policy
This Privacy Policy applies to the Foundation’s official website and any online forms, contact channels or digital services operated by us.
It does not cover third‑party websites that may be linked from our site; we encourage you to read the privacy policies of those sites before providing any information.
2. Personal Data We Collect
We only collect personal data that you voluntarily provide to us through our website, such as via contact forms, enquiry forms, newsletter sign‑ups, or expressions of interest in volunteering or events.
The types of personal data we may collect include:
Name
Email address
Phone number (if provided)
Message content (e.g., comments, enquiries, feedback, or expressions of interest in volunteering or participating in Foundation activities).
We do not intentionally collect sensitive personal data such as medical records, identity card numbers, or payment information through this website.
3. Purpose of Data Collection
Your personal data is collected only for lawful and relevant purposes directly related to the Foundation’s charitable and educational activities.
We may use your personal data for the following purposes:
To respond to your enquiries, comments or feedback.
To communicate with you about Foundation activities, events, educational initiatives, and public health campaigns.
To process expressions of interest in volunteering or participating in Foundation activities.
To send newsletters, updates, or other information about musculoskeletal health and related topics (if you have subscribed).
To improve our services, website content, and community engagement.
To comply with legal, regulatory, or reporting requirements (e.g., under the Personal Data (Privacy) Ordinance).
We will not use your personal data for any other purpose without your prior consent.
4. Legal Basis for Processing
We rely on the following lawful bases under Hong Kong data protection principles to process your personal data:
Your consent (e.g., when you sign up for newsletters or volunteer opportunities).
The need to perform a service or respond to your request (e.g., replying to an enquiry).
Our legitimate interests in operating and promoting our charitable mission, provided that these do not override your rights and freedoms.
Where consent is required, you may withdraw it at any time (see section 8 below).
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.
When personal data is no longer needed, it will be securely deleted or anonymised in accordance with our internal data retention schedule.
As a general guideline:
Enquiry and contact records: retained for up to 3 years from the last interaction.
Volunteer and event participant records: retained for up to 3 years from the last activity.
Newsletter subscriber records: retained until you unsubscribe or for up to 3 years of inactivity, whichever is earlier.
Specific retention periods may vary depending on the nature of the activity and legal requirements.
6. Disclosure of Personal Data
We will not sell, rent, trade or otherwise disclose your personal data to third parties for their own marketing or commercial purposes.
Your personal data may be disclosed only in the following limited circumstances:
To authorised staff, committee members, or volunteers of the Foundation who need the data to carry out their duties.
To trusted third‑party service providers (e.g., website hosting, email marketing, or event management platforms) strictly for operational purposes, under confidentiality and security obligations.
When required by law, court order, or a government authority (e.g., in response to a lawful request from a regulator or law enforcement agency).
All parties to whom we disclose personal data are required to handle it in a confidential and secure manner and only for the agreed purposes.
7. Data Security
We take reasonable and appropriate technical and organisational measures to protect your personal data against:
Unauthorised access, use or disclosure.
Accidental loss, destruction or damage.
Misuse, alteration or unlawful processing.
These measures may include access controls, encryption, secure storage, and staff training on data protection.
However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights under the Personal Data (Privacy) Ordinance
In accordance with the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:
Request access to your personal data held by the Foundation.
Request correction of inaccurate or incomplete personal data.
Request information about our data protection policies and the types of data we hold.
Withdraw consent for specific uses of your data (e.g., for newsletters or promotional communications).
To exercise any of these rights, please contact us using the details in section 10 below.
We may ask for proof of identity and may charge a reasonable fee to cover administrative costs for access requests, in line with accepted practice.
9. Cookies and Website Analytics
Our website may use basic cookies and analytics tools to:
These cookies do not collect personally identifiable information and are used in aggregate form only.
You may adjust your browser settings to refuse or delete cookies if you prefer, but this may affect some website features.
10. Links to External Websites
Our website may contain links to third‑party websites (e.g., partner organisations, government health portals, or media outlets).
We are not responsible for the privacy practices or content of those websites, and we encourage you to review their privacy policies before providing any personal data.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
Any changes will be posted on this page with an updated revision date.
Your continued use of the website after changes are posted will constitute acceptance of the revised Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, please contact us at:
The Hong Kong Musculoskeletal Health Foundation
Email: SUPPORT@hkmshf.com
Website: [website URL]
For data access or correction requests, please provide your full name and contact details so we can assist you effectively.
13. Governing Law
This Privacy Policy is governed by the laws of the Hong Kong Special Administrative Region and the Personal Data (Privacy) Ordinance (Cap. 486).