Complaint records are handled on a proportionate basis. Relevant information may
include complainant identity, contact details, correspondence, relevant URLs, rights
documentation, supporting evidence, decisions taken and dates of action.
Personal information is collected only where reasonably necessary and is handled in
accordance with applicable privacy law, including Hong Kong's
Personal Data (Privacy) Ordinance (Cap. 486) where relevant.
This policy does not promise absolute secrecy, nor that the identity of a claimant
will never be disclosed: disclosure may be necessary or legally required in certain
circumstances. Complainants' personal information will not be published in a public
register without an appropriate lawful basis.
Personal information will be processed only for legitimate and relevant purposes
connected with this policy, including examining a claim, corresponding with the
parties, preserving evidence and fulfilling applicable legal obligations. Routine
identity documents are not required.
Personal data is retained only for as long as reasonably necessary for the
legitimate purposes set out in this policy, including any applicable legal,
regulatory or evidentiary preservation obligations, and is handled in a manner
consistent with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486),
including Data Protection Principle 2. The operator does not commit to a
specific retention period beyond this standard and does not represent that any
particular complaint-management system has been implemented, beyond what is
reasonably available to it. Where a public /privacy
page is available, additional information on personal-data handling may be
found there.
Any future actual complaint-submission mechanism introduced by the operator should
be accompanied by appropriate personal-data collection information before it is
brought into operation.