私隱政策聲明及收集個人資料聲明

愛共融慈善協會有限公司LOVE INCLUSION CHARITY ASSOCIATION LIMITED（下稱「本會」）尊重並致力保障個人資料私隱。本會承諾按照香港法例第486章《個人資料（私隱）條例》及其他適用法律規定，妥善收集、持有、處理、使用、保存、披露及刪除個人資料，並採取一切合理可行的措施保障有關資料的保密性、完整性及安全性。

本聲明載述本會在處理個人資料方面的政策及實務，適用於本會透過網站、網上表格、紙本表格、電郵、電話、社交媒體、即時通訊工具、活動報名、捐款、義工登記、招聘程序、合作申請及其他渠道收集或接收的個人資料。

本會可不時修訂本聲明，以反映法律、監管要求、科技發展、服務安排或本會運作上的需要。經修訂版本將於本會網站或相關渠道公布，並於公布後生效。

1. 收集個人資料的原則

本會只會以合法、公平及與本會職能、服務或活動直接有關的方式收集個人資料，而所收集的資料須屬足夠但不超乎適度。當本會直接向資料當事人收集個人資料時，本會會在收集資料之時或之前，以適當形式向資料當事人提供本聲明或其他《收集個人資料聲明》。

2. 本會可能收集的個人資料種類

本會因應不同服務、活動或行政需要，可能收集以下類別的個人資料：

• 姓名、稱謂、性別、出生年份或年齡組別

• 聯絡資料，包括電話號碼、電郵地址及郵寄地址

• 身份證明或核實資料（如活動、保險、僱傭、報銷或法定合規需要）

• 緊急聯絡人資料

• 報名、捐款、義工、招聘、合作或查詢所需資料

• 付款、收據或交易相關資料

• 活動參與、出席、訓練、服務使用、回饋及評估資料

• 相片、影片、錄音或活動紀錄

• 網站使用紀錄、裝置及瀏覽數據

• 其他你自願向本會提供的資料

如個別表格或程序列明某些資料屬必須提供，而你未能提供完整或準確資料，會可能無法處理你的申請、登記、查詢、捐款、招聘申請或服務要求。

3. 收集個人資料的目的

本會收集及使用個人資料，主要用於以下一項或多項用途：

1) 處理活動、課程、服務、比賽、工作坊、培訓或計劃的申請、登記及行政安排

2) 提供、管理、監察、檢討及改進本會的服務、項目及活動

3) 處理捐款、發出收據、鳴謝、捐款者關係管理及相關行政工作

4) 處理義工招募、配對、培訓、保險及服務安排

5) 處理招聘、聘用、人力資源管理及相關行政安排

6) 與參加者、家長、監護人、捐款人、義工、合作夥伴、申請人或查詢人士聯絡及跟進

7) 編製統計、進行研究、服務檢討、成效評估及內部管理分析

8) 處理保險、風險管理、事故記錄、投訴及爭議處理

9) 遵守法律、法庭命令、政府部門、監管機構或執法機關的要求

10) 在你同意的情況下，向你提供本會的活動、課程、服務、義工招募、籌款、宣傳及最新消息

4. 提供個人資料是否自願

除非相關表格、申請程序、法定要求或合約安排另有註明，否則你向本會提供個人資料一般屬自願性質。然而，如你未能提供所需資料，本會可能無法向你提供有關服務、處理你的申請，或完成相關行政及法定程序。

5. 個人資料的使用及披露

本會會將收集所得的個人資料保密處理，並僅限於有需要知悉該等資料的本會董事、員工、獲授權人員、義工、顧問、承辦商、服務提供者或資料處理者，在其履行職務或提供服務所需的範圍內使用。

除以下情況外，本會不會向任何第三方出售、租借、交換或以其他方式披露你的個人資料：

1) 已取得你的明確同意；

2) 屬提供服務、行政支援、資訊科技支援、雲端儲存、支付處理、保險、審計、法律、顧問或其他支援服務所合理需要，而有關接收方須受保密責任及資料保障要求約束；

3) 因應法律規定、法庭命令、監管要求、執法要求或為確立、行使或維護本會的合法權利而作出披露；

4) 為保障資料當事人或其他人士的重要利益而在合理情況下作出披露；

5) 依據適用法律可獲准許或規定的情況。

6. 直接促銷及宣傳資訊

在符合適用法律規定的前提下，本會擬使用你的姓名、電話號碼、電郵地址、通訊地址及你與本會互動的基本紀錄，向你發送有關本會活動、課程、服務、義工招募、籌款、宣傳及最新消息。

本會在未取得你的同意前，不會將你的個人資料用於直接促銷用途。如需要取得你的同意，本會會在收集資料時或之前，透過相關的登記表格、申請表格或其他適當渠道徵求你的同意。

如你先前已表示同意但其後不再希望接收上述資訊，可隨時按有關訊息所載方式取消訂閱，或以書面或電郵通知本會停止使用你的個人資料作相關推廣用途。

7. 網站紀錄、Cookies及網絡保安

當你瀏覽本會網站或使用本會網上服務時，本會或本會的技術服務供應商可能記錄一般瀏覽資料，例如瀏覽時間、頁面、裝置類型、瀏覽器資料、IP位址、網域名稱及點擊紀錄等。此等資料一般用於維持系統保安、分析網站流量、改善網站設計、提升用戶體驗及服務質素。

本會網站可能使用 cookies 或類似技術，以支援網站正常運作、保安、偏好設定及數據分析。你可透過瀏覽器設定管理 cookies，但此舉可能影響網站部分功能。

如你透過本會網站提交表格、報名、捐款或付款，本會會在合理可行範圍內採用適當保安措施處理有關資料。

8. 人工智能（AI）及生成式人工智能的使用

為提升行政效率、服務質素、資訊整理、內容草擬、翻譯、數據分析、研究支援、流程優化及內部運作，本會可能在適用情況下使用人工智能系統，包括生成式人工智能工具。

就本會使用人工智能的安排，本會會按情況採取以下原則及措施：

a) 最少資料使用原則

本會只會在合理、必要及相稱的範圍內，把個人資料用於人工智能輔助用途，並盡量避免向人工智能系統輸入不必要、過量、敏感或高風險的個人資料。

b) 去識別化及資料最小化

如屬可行情況，本會會先行移除姓名、身份證明資料、聯絡方式及其他可直接識別個人身份的資料，或以匿名化、假名化、摘要化方式處理後，才交由人工智能系統作分析、整理或草擬支援。

c) 不作唯一依據

除法律另有容許或資料當事人已獲適當通知外，本會一般不會僅依賴人工智能系統就對個人有重大影響的決定作出最終裁決，而會保留適當的人手監督、覆核及判斷。

d) 準確性及人工覆核

人工智能生成內容可能出現偏差、遺漏或不準確。本會會按需要由獲授權人員進行人工核實、編輯及覆核，方會用作正式溝通、服務安排、紀錄或決策參考。

e) 第三方平台及服務供應商

如本會使用第三方人工智能平台、雲端服務或技術供應商，本會會在合理可行範圍內考慮其資料保障、保安、存取控制、保密責任、資料保存安排及合規水平，並透過合約條款、內部政策或其他適當措施作出管理。

f) 風險管理及持續檢討

本會會按實際情況，就人工智能工具帶來的私隱、保安、偏見、錯誤輸出、資料外洩及合規風險作持續檢視，並在有需要時更新內部程序、系統設定及使用限制。

9. 個人資料的保安

本會採取一切合理可行的步驟保障個人資料，以防止未經授權或意外查閱、處理、刪除、喪失、使用或披露，包括但不限於權限管理、保密要求、員工培訓、加密、防火牆、防毒、文件及裝置保安，以及資料處理者及服務供應商管理。

10. 個人資料的保存

本會只會在為達成收集資料的原來目的，或與之直接有關之目的所需的期間內，保留有關個人資料；其後，本會將按適用法律、合約要求、保險、審計、資助、行政或內部保存政策，在合理可行範圍內安全刪除、銷毀、匿名化或去識別化有關資料。

11. 查閱及更正個人資料

根據適用法律，資料當事人有權要求查閱及更正本會所持有其個人資料。本會可按照適用法律及有關規定處理有關要求，並在適用情況下收取合理行政費用。

如你欲提出查閱或更正個人資料要求，請以書面聯絡本會，並提供足夠資料以核實身份及處理有關要求。

12. 聯絡我們

如你對本聲明有任何查詢，或欲提出查閱、更正、停止接收宣傳資訊或其他與個人資料有關的要求，請聯絡：

愛共融慈善協會有限公司LOVE INCLUSION CHARITY ASSOCIATION LIMITED

電郵：info@loveinclusion.org

電話：+852 9816-2172

地址：香港北角英皇道83號聯合出版大廈14樓1402室

13. 生效日期

本私隱政策聲明及收集個人資料聲明自二零二六年四月一日起生效。

LOVE INCLUSION CHARITY ASSOCIATION LIMITED (“the Association”, “we”, “our” or “us”) respects and is committed to protecting personal data privacy. We undertake to collect, hold, process, use, retain, disclose and delete personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) and other applicable laws, and to take all reasonably practicable steps to safeguard the confidentiality, integrity and security of such data.

This Statement sets out the policies and practices of the Association in relation to the handling of personal data. It applies to personal data collected or received by us through our website, online forms, paper forms, email, telephone, social media, instant messaging tools, event registrations, donations, volunteer registrations, recruitment processes, collaboration applications and other channels.

We may amend this Statement from time to time to reflect changes in law, regulatory requirements, technology, service arrangements or our operational needs. The revised version will be published on our website or through other appropriate channels and shall become effective upon publication.

1. Principles of Collection of Personal Data

We will only collect personal data by lawful and fair means and where such data is directly related to our functions, services or activities. The data collected shall be adequate but not excessive. Where we collect personal data directly from a data subject, we will provide this Statement or another Personal Information Collection Statement at or before the time of collection in an appropriate manner.

2. Types of Personal Data We May Collect

Depending on the nature of the services, activities or administrative needs, we may collect the following categories of personal data:

• name, title, gender, year of birth or age group;

• contact information, including telephone number, email address and mailing address;

• identity verification information where required for activities, insurance, employment, reimbursement or legal compliance;

• emergency contact information;

• information required for registration, donation, volunteering, recruitment, collaboration or enquiries;

• payment, receipt or transaction-related information;

• participation, attendance, training, service usage, feedback and evaluation records;

• photographs, videos, audio recordings or event records;

• website usage logs, device information and browsing data; and

• any other information voluntarily provided by you.

Where certain information is marked as mandatory in a form or process and you fail to provide complete or accurate data, we may not be able to process your application, registration, enquiry, donation, job application or service request.

3. Purposes of Collection of Personal Data

We may collect and use personal data for one or more of the following purposes:

1) processing applications, registrations and administrative arrangements for events, programmes, services, competitions, workshops, training sessions or projects;

2) providing, managing, monitoring, reviewing and improving our services, programmes and activities;

3) processing donations, issuing receipts, acknowledgements, donor relationship management and related administration;

4) handling volunteer recruitment, matching, training, insurance and service arrangements;

5) handling recruitment, employment, human resources management and related administration;

6) communicating and following up with participants, parents, guardians, donors, volunteers, partners, applicants or enquirers;

7) compiling statistics, conducting research, service reviews, impact evaluation and internal management analysis;

8) handling insurance, risk management, incident records, complaints and dispute resolution;

9) complying with legal obligations, court orders, requirements of government departments, regulators or law enforcement agencies; and

10) subject to your consent where required, providing you with information about our events, programmes, services, volunteer opportunities, fundraising activities, publicity and updates.

4. Voluntary Provision of Personal Data

Unless otherwise specified in the relevant form, application procedure, legal requirement or contractual arrangement, the provision of personal data is generally voluntary. However, if you do not provide the required data, we may not be able to provide the relevant service, process your application, or complete the relevant administrative or legal procedures.

5. Use and Disclosure of Personal Data

Personal data collected by us will be kept confidential and will only be accessible to our directors, staff, authorised personnel, volunteers, consultants, contractors, service providers or data processors on a need-to-know basis for the performance of their duties or provision of services.

We will not sell, rent, exchange or otherwise disclose your personal data to any third party except in the following circumstances:

1) where we have obtained your explicit consent;

2) where disclosure is reasonably necessary for the provision of services or support such as administration, information technology support, cloud storage, payment processing, insurance, audit, legal, consultancy or other supporting services, and the recipient is subject to duties of confidentiality and data protection requirements;

3) where disclosure is required by law, court order, regulatory requirement, law enforcement request, or is necessary for the establishment, exercise or defence of our legal rights;

4) where disclosure is reasonably necessary to protect the vital interests of the data subject or another person; or

5) where otherwise permitted or required under applicable law.

6. Direct Marketing and Communications

Subject to applicable legal requirements, we may wish to use your name, telephone number, email address, correspondence address and basic records of your interactions with us to send you information relating to our events, programmes, services, volunteer recruitment, fundraising activities, publicity and updates.

We will not use your personal data for direct marketing purposes unless we have obtained your consent. Where your consent is required, we will seek it at or before the time of collection through the relevant registration form, application form, or other appropriate channel.

If you have previously given consent but no longer wish to receive such communications, you may unsubscribe through the means indicated in the relevant message, or notify us in writing or by email to stop using your personal data for such purposes.

7. Website Logs, Cookies and Cybersecurity

When you browse our website or use our online services, we or our technical service providers may record general browsing information such as browsing time, pages visited, device type, browser information, IP address, domain name and clickstream records. Such information is generally used for system security, traffic analysis, website improvement, user experience enhancement and service quality improvement.

Our website may use cookies or similar technologies to support normal website operation, security, preference settings and data analytics. You may manage cookies through your browser settings, although doing so may affect certain website functions.

Where you submit forms, registrations, donations or payments through our website, we will take reasonably practicable security measures to handle such data appropriately.

8. Use of Artificial Intelligence (AI) and Generative AI

To enhance administrative efficiency, service quality, information organisation, drafting support, translation, data analysis, research support, workflow optimisation and internal operations, we may use artificial intelligence systems, including generative AI tools, where appropriate.

In relation to our use of AI, we may adopt the following principles and measures as appropriate:

a) Data Minimisation

We will only use personal data for AI-assisted purposes to the extent that is reasonable, necessary and proportionate, and will seek to avoid inputting unnecessary, excessive, sensitive or high-risk personal data into AI systems.

b) De-identification

Where practicable, we will remove names, identity information, contact details and other directly identifying information, or use anonymisation, pseudonymisation or summarisation, before using data for AI-assisted analysis, organisation or drafting support.

c) No Sole Reliance

Unless otherwise permitted by law or where the data subject has been appropriately informed, we will generally not rely solely on AI systems to make final decisions that have significant effects on individuals. Appropriate human oversight, review and judgment will be retained.

d) Accuracy and Human Review

AI-generated content may contain bias, omissions or inaccuracies. Where appropriate, such content will be subject to human verification, editing and review by authorised personnel before it is used for formal communication, service arrangements, record-keeping or decision-making reference.

e) Third-party Platforms and Service Providers

Where we use third-party AI platforms, cloud services or technology vendors, we will, where reasonably practicable, take into account their data protection, security, access control, confidentiality obligations, data retention arrangements and compliance standards, and manage such use through contractual terms, internal policies or other appropriate measures.

f) Risk Management and Ongoing Review

We will keep under review the privacy, security, bias, erroneous output, data leakage and compliance risks arising from the use of AI tools and update our internal procedures, system settings and usage restrictions where necessary.

9. Security of Personal Data

We take all reasonably practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss, use or disclosure, including but not limited to access control, confidentiality obligations, staff training, encryption, firewalls, anti-virus protection, document and device security, and management of data processors and service providers.

10. Retention of Personal Data

We will retain personal data only for as long as is necessary to fulfil the original purpose of collection or a directly related purpose. Thereafter, we will securely delete, destroy, anonymise or de-identify such data in accordance with applicable legal requirements, contractual obligations, insurance, audit, funding, administrative needs or internal retention policies.

11. Access to and Correction of Personal Data

Subject to applicable law, data subjects have the right to request access to and correction of personal data held by us. We may process such requests in accordance with applicable legal requirements and may charge a reasonable administrative fee where permitted.

If you wish to request access to or correction of your personal data, please contact us in writing and provide sufficient information for identity verification and processing of your request.

12. Contact Us

If you have any questions regarding this Statement, or wish to request access, correction, cessation of communications, or otherwise make a request relating to your personal data, please contact:

LOVE INCLUSION CHARITY ASSOCIATION LIMITED

Email: info@loveinclusion.org

Telephone: +852 9816-2172

Address: Room 1402, 14/F, SUP Tower, 83 King's Road, North Point, Hong Kong

13. Effective Date

This Privacy Policy Statement and Personal Information Collection Statement shall take effect on 1 April 2026.