隱私政策

This Privacy Statement sets out how we collect, use, manage and protect the personal data or information (“Data”) that we may collect from or about you. It applies to all individuals whose Data may be handled by Fonfair Technology Limited (“FONFAIR” or “OLAFIX”, “we”, “us” or “our”.

We are committed to processing your Data in accordance with the required standards. This includes protecting your privacy and ensuring the security of your Data in compliance with the requirements of the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (the “Ordinance.

Before using and providing your Data for the purposes as set out in this Privacy Statement, we may be required by law to obtain your written consent, and in such cases, only after having obtained such written consent, may we use your Data in the manner as specified.

We may collect, use and hold a range of different Data about you. For the purposes of carrying on our business (including the verification of your identity to detect, prevent and address fraud, security or technical issues, the registration, activation and management of your account with us, and the billing and charging of our products and services (collectively, “Service(s)”)) and complying with laws, rules, guidelines, regulations and/or requests issued by applicable government authorities, courts, law enforcement or other authorities or regulatory bodies, you may be requested to provide Data such as, but not limited to:

  1. the name, date of birth and other details documented on your Hong Kong Identity Card or other legal identity card, travel document, student card and/or driver’s license;
  2. contact details including name, address, phone number, mobile telephone number and/or email address;
  3. Data that you have shared with third party social media platform operators (e.g. account login name, profile picture, contact details);
  4. payment details including credit card, debit card and other electronic banking Data;
  5. account details or Data relating to Services registered with us including the relevant PIN, username or password, account numbers and/or service numbers;
  6. device specific information such as hardware model, operating system, version, unique device identifier, serial numbers, setting configurations and software and mobile network configuration;
  7. information about how you use our Services such as how you use our Services, and your location when you are using our Services;
  8. all Data requested by applicable government authorities, courts, law enforcement or other authorities or regulatory bodies to enable us to comply with or in connection with any law, rule, regulation, judgment or court order (whether within or outside of Hong Kong); and
  9. any other Data as may be required by any members of FONFAIR or OLAFIX and/or their respective contractors, sub-contractors, intermediaries, agents, business partners or representatives, from time to time and which is necessary for the provision of the Services.

In some instances, where required by law to do so, we may seek your consent to process the following types of “Special Data” so that we may further improve our Services and/or better tailor the type of information or content that we present to you:

  1. age;
  2. gender and ethnicity;
  3. marital status;
  4. education and profession; and
  5. hobbies and leisure activities; and

Provision of the Special Data mentioned immediately above is optional although, where the requested Service is a personalized Service or provision of a product is dependent upon your provision of all requested Data, failure to provide the requested Data may prevent us from providing those particular Services to you.

Occasionally, you may need to provide Data about other individuals to us. If so, we may require you to confirm your compliance with Part VIA of the Ordinance including confirming that you have informed those individuals of the use, disclosure and transfer of Data from you to us and from us to third parties and possible disclosure of the individual’s details by us to you; and that you have obtained those individuals’ authorization and/or consent to such use, disclosure and transfer (or the extent to which such authorization and/or consent was obtained). You should also advise them that we can be contacted for further information at the details stated under the “How to contact us” section below. Data supplied by you will be held by FONFAIR OR OLAFIX, and will be accessible by employees of FONFAIR or OLAFIX and authorized third parties (consistent with the situations or for the purposes set out in this Privacy Statement) or as otherwise indicated by prior notice to you or, where required, by obtaining your consent.

We collect Data in a number of ways, including from:

  1. you directly, for example, when you provide Data by phone or via email, attend our functions, complete an application form or agreement for one of our Services, or when you submit your Data through our websites, mobile or apps, or over any customer service hotlines or online chat sessions; or when you contact us with a query or request; or during the ordinary course of the continuation of our business relationship with you; or when we are legally required to do so;
  2. third parties such as related entities, business partners, or other customers, or your representatives with appropriate consent from you;
  3. publicly available sources;
  4. our own records of how you use our Services;
  5. your visits on our websites, or mobile or apps (see “Privacy Data” section below); and/or
  6. your participation in surveys or marketing promotions organized by us or on our behalf.

To better serve your needs and preferences, our web servers may collect Data relating to your website, device or app activity. We may also collect aggregated, anonymous, statistical data on the server’s usage so that we may better cater to the behavior of users of our websites and mobile and apps. This type of Data may include, but is not limited to:

  1. browser type, version and user agent;
  2. operating system;
  3. IP (Internet Protocol) address and/or domain name;
  4. connection data, statistics on page views and/or referral URLs;
  5. device ID, location and phone contacts;
  6. videos watched or searched for;
  7. songs listened to or searched for;
  8. links or images clicked on;
  9. cookies and/or browser, app or web server log data; and
  10. device and software characteristics and/or configuration.

Some of our websites use cookies or similar tracking tools on your machine or device in order for us to, for example, personalize your user experience and/or maintain your identity across multiple webpages and/or Internet sessions. This Data may include, but is not limited to, relevant login and authentication details as well as Data relating to your activities and the preference configurations on your device and across our websites and mobile and apps. Our websites are initially set up to accept cookies. You can opt-out of or delete historical cookies by changing the settings on your web browsers; however, if you do so, you may find that certain features on our website and/or our app do not work properly.

We may collect, retain and use your Data for the following purposes:

  1. to verify your identity;
  2. to process your application to subscribe to our Services and loyalty programs operated by us;
  3. to carry out matching procedures, as defined under the Ordinance;
  4. to verify your eligibility to our offers of Services, games and/or promotions or other events;
  5. to provide, activate and/or renew Services, loyalty programs operated by us that you may have subscribed for;
  6. to provide you with rewards, promotional benefits, updates, offers and invitation to events;
  7. to promote and market our Services to you;
  8. to conduct credit checks and detect fraudulent activities in compliance with the Anti-Money Laundering and Counter-Terrorist Financing (Financial Institutions) Ordinance (Cap. 615) and in relation to other compliance purposes;
  9. to perform research or analyses so that we may improve and optimize the Services and/or loyalty programs that can be made available to you;
  10. to conduct surveys and marketing, promotional, behavioral scoring for business operations and/or planning purposes;
  11. to carry out market and product analyses in order to generate statistical or actuarial reports (containing aggregated data that does not relate to any identified or identifiable individual);
  12. to enforce our contractual rights;
  13. to process any payment instructions, direct debit facilities and/or credit facilities in relation to our supply of Services to you;
  14. to maintain and develop our business systems and infrastructure, including testing and upgrading of these systems;
  15. to maintain, enhance and develop our products and service offerings;
  16. to develop financial services and products;
  17. to evaluate your financial needs and insurance claims made by or against you, and to process claims involving you (including but not limited to making, defending, analyzing, investigating, processing, assessing, determining, responding to, resolving or settling such claims);
  18. to comply with our telecommunications license obligations in respect of interconnection arrangements with other telecommunications operators and related industry practices;
  19. to comply with applicable laws in or outside Hong Kong as may be required by applicable government authorities, courts, law enforcement, or regulatory or investigation bodies, in relation to the supply of Services and/or loyalty programs to you, including to assist in the prevention, detection of crime or possible criminal activities; and
  20. to distribute our publications and research materials as well as those of our business partners and counterparties.

We have a legitimate interest in properly administering the Services. In addition, our use of your personal data may be necessary for the performance of the Services that you have requested. In order to provide the Services that you have requested, we may, to the extent permissible under applicable laws and regulations, disclose your Data to organizations or parties outside of FONFAIR (which may be within or outside of Hong Kong) (collectively, “Organizations”). Your Data is disclosed to these Organizations for the strict purpose of enabling us to supply our Services to you.

In some circumstances as mentioned above, we may need to ask for your consent to use your Special Data where required by law to do so.

  1. customer enquiries;
  2. courier, delivery, logistic and warehouse services;
  3. mailing operations;
  4. billing and debt-recovery functions;
  5. information technology services;
  6. installation, maintenance and repair services;
  7. marketing, advertising and telemarketing services;
  8. market research;
  9. customer usage and behavioral analysis;
  10. process management;
  11. after sale services;
  12. surveys;
  13. website usage analysis; and
  14. cloud storage services.

We take the required steps to ensure that these Organizations are bound by appropriate confidentiality and privacy obligations in relation to the protection of your Data and that they use your Data for the sole purpose of carrying out the services for which they have been engaged, and not for their own or other purposes (including direct marketing).

In addition, we may disclose your Data:

  1. to your authorized representatives and/or your legal advisers when requested by you to do so;
  2. for the purposes of providing administrative, payment, collection, business, legal and/or operational support, to the following parties:
    1. credit-reporting and fraud-checking agencies;
    2. to financial institutions, charge or credit card issuing companies, credit providers, credit bureau, collection agencies or security agencies;
    3. telecommunications network operators;
    4. our affiliates, overseas offices, assignees, transferees and representatives;
    5. our professional advisers, including our accountants, auditors, lawyers and insurers;
  3. to banks, hotels, insurance companies, insurance brokers, underwriters, billing agents and various business partners for reward redemption purposes and benefits applicable to members of the loyalty programs operated by us, including without limitation for the purpose of registering members for loyalty program related events;
  4. to government and regulatory authorities and other organizations, as required or authorized by law;
  5. to organizations who manage our business and corporate strategies, including those involved in a transfer or sale of all or part of our assets or business (including accounts and trade receivables) and those involved in managing our corporate risk and funding functions (e.g. securitization); (f) to any proposed or actual participant, assignee or transferee of all or any part of the relevant member of our operations or business; and/or (g) to charities or non-profit organizations.

We may, in compliance with applicable laws, rules, regulations and license requirements, use your Data (including without limitation name, contact information, phone number, residential/office address and email address and information about the Services you have purchased), for us and our respective dealers, suppliers, licensors, providers and/or business partners (collectively, “Service Providers”)) to provide you with direct marketing content (pursuant to which we may or may not receive remuneration in return), including sending to you notices and/or updates about gifts, discounts, privileged offers, benefits and promotions related to Services offered by us and/or the Service Providers. Marketing may be carried out in a variety of ways (such as in the form of a letter, bill insert/message, email, digital SMS, MMS, instant message, app push notification, targeted TV message, broadcast message on eye device, by telephone, social media or advertisements on websites or other means). Before using and providing your Data for the purposes as set out in this Privacy Statement, where we are required by law to obtain your written consent, and in such cases, only after having obtained such written consent, may we use and provide your Data for any promotional or marketing purpose. We will honor each individual’s request to not use his/her Data for the purposes of direct marketing. You may opt-out from receiving direct marketing material and/or communications from the relevant Service. At the same time, you may resume receiving the same (if you have previously opted-out of receiving such material and/or communications from the relevant Service) by making a written request to our Privacy Compliance Officer together with your registered name and service account number, registered telephone number or login name (as applicable).

At times it may be necessary and/or prudent for us to transfer your Data to places outside of Hong Kong or the country in which you receive our Service(s) (“your Country”), for instance, for the prevention, detection or investigation of crime or for storage, processing and other purposes for which the Data were collected. In the event that we do transfer your Data outside of Hong Kong or your Country, we will do so in compliance with the prevailing requirements of the Ordinance where applicable and all other applicable privacy and data protection laws and regulations of your Country. The safety of your Data is important to us All required efforts are made to ensure that any Data held by us is stored in a secure and safe place and is accessible only by our authorized employees or other Organizations referred to in this Privacy Statement.

When we pass your Data to third party Organizations for them to process, we seek to ensure that they have appropriate security measures in place to keep your Data safe and to comply with applicable principles in relation to data protection. Some of the people we share your Data with may process it overseas. You can contact us for more information about the safeguards we use to ensure that your Data is adequately protected in these circumstances.

We will retain your Data in accordance with our internal policies. Our policies are in compliance with the Ordinance, and cover the following principles:

  1. Data will only be retained for as long as is necessary to fulfil the original or directly related purposes for which it was collected, unless the Data is also retained to satisfy any applicable legal, regulatory or contractual obligations; and
  2. Data are purged from our electronic, manual and other filing systems based on the above criteria and our internal procedures.

Our website www.olafix.com and mobile applications (if any) may contain links to other websites, webpages and mobile applications operated by third parties. We have no control over the content of the linked websites, webpages and mobile applications or the way in which the operators of those websites, webpages and mobile applications deal with your Data, and are not responsible for the content of such third party websites, webpages or mobile applications. You should review the privacy policy of such third party websites, webpages and mobile applications to understand the ways in which your Data may be used by those third parties.

We take all reasonable precautions to ensure that the Data we collect, use and disclose is accurate, complete and up-to-date. However, the accuracy of that Data depends to a large extent on the Data you provide. You have a right to request access to, and correction of, your Data and we recommend that you:

  1. let us know if there are any errors in your Data; and
  2. keep us up-to-date with changes to your Data.

If you wish to access or amend any of your Data we hold, or request that we delete any of your information that is no longer necessary for the provision of our Services, you may contact us in the manner as set forth under the “How to Contact Us” section.

You may decline to share Data with us and/or withdraw any consents which you may have provided, in which case, we may not be able to provide you with some of our Services. At any time, you may object to us holding or processing your Data, on legitimate grounds, save and except as otherwise permitted by the applicable law.

For all issues and enquiries regarding our compliance with our obligations under the Ordinance, and any request for access to, correction or deletion of your Data, please contact us in writing via email to: support@olafix.com

To raise an issue regarding our handling of your Data, please contact us in order that we can attempt to resolve your issue. This Privacy Statement may be amended from time to time and all handling of Data will be governed by the most recent version of this Privacy Statement, available on our website at www.olafix.com.