The Hop Lun group of companies including its affiliated or related companies (“Hop Lun”, “we”, “us”, or “our” the “Company”) as the case may be, is the controller, user, and processor of your personal data. You may reach us via email at email@example.com or contact us at our physical / postal address listed in the “Enquiries” section below.
We are committed to conducting business in accordance with global and local best practices and standards. We also recognize and understand that our various stakeholders including employment candidates, employees, suppliers, business partners, customers, website visitors, and mobile application users are concerned about the privacy of personal data.
The Company pledges to comply with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486) (the “PDPO”) of the Laws of the Hong Kong Special Administrative Region of the People’s Republic of China (“Hong Kong”), the EU General Data Protection Regulation (GDPR) and/or China Mainland's Personal Information Protection Law (PIPL) ( See: “Privacy Addendum for mainland China”).
2. Collection of Information
You may be invited to provide the Company with your personal data on the Company's relevant website(s) or mobile application(s), or through other media on a voluntary basis for different purposes at different times. If you are under the age of eighteen (18), you should obtain consent from your parents or guardian before you provide our Company with your personal data. Regardless, the Company will ensure full transparency and communication with the Data Subject on the collection of the Data Subject’s personal data and processing activities relating to related to its personal data in the following manner:
3. Log Files
Cookies are alphanumeric identifiers that we transfer to your computers, mobile phones or other devices through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate the Company’s website(s) and/or mobile application(s), while others are used to enable a faster log-in process, or to allow us to store and track information about your interests and preferences at our Company’s website(s) and/or the Company’s mobile application(s).
We may also engage third parties to track and analyze non-personally identifiable data from the website(s) or mobile application(s). We use the data collected by such third parties to help us administer and improve the quality of the Company’s website(s) (e.g., www.hoplun.com) or mobile application(s) and to analyze usage of the same. This is unrelated to and separate from your personal data. Such third parties may combine the non-personally identifiable data that we provide about you with other information that they have collected. You can edit your browser settings to disable cookies but to do so you may not be able to utilize certain functionality of the website(s) and/or mobile application(s) (where applicable) of the Company. For further information, visit www.allaboutcookies.org .
If you interact with the Company on social media platforms (for example if you “Like” the Company’s LinkedIn or Facebook page), the Company can interact with you and send you messages via these platforms. The Company will interact with you in accordance with the social media platform’s rules, but we are not responsible for how the platform operators collect and handle your personal data. We are not responsible for what third parties post on our social media accounts.
5. Kinds of Information Collected
For the different purposes in the course of conducting our Company's business, you may be required to provide to our Company your personal data, which may include your name, gender, age (or age range), month of birth, contact details, e-mail address, mailing/residential/correspondence address, contact number, relevant account or membership number, marital status, family status, educational level, occupation, username and password, Log Files, Tracking Data, interests and favorite activities, transaction information (including your characteristics and transaction behavior), social media account information, etc. Details of personal data to be collected will also be set out in the relevant PICS provided to you on or before collection of such personal data.
6. Purposes and Uses of Personal Data Collected
The Company will use your personal data for specific purposes identified in the PICS provided to you on or before the time your personal data is collected. This includes sharing your personal data with, and your personal data being used by, third parties as set out in the PICS for those purposes.
We collect the Sensitive Personal Data only for specific purposes, such as administering of employment related matters such as remuneration, expense reimbursement, medical insurance claims or pension / mandatory provident fund (MPF) administration and to ensure proper notification in the event of an emergency.
7. Accuracy of Information
You may be requested to provide the Company with certain personal data for specific services. If you fail to provide accurate or current information as requested for each specific service, the provision of such services by the Company may be affected.
8. Retention of Information
The Company will retain your personal data for a period no longer than necessary for the fulfillment of the purposes for which it is to be used. If you are a candidate, employee or subscriber of the Company services, your personal data will be retained for a reasonable period after separation or termination of your subscription for verification and audit purposes. The above is subject to any legal, statutory, regulatory, or accounting
9. Third Party Merchants
The Company may be affiliated with third-party on-line stores or some services and/or products which are hosted on such affiliated the website(s) and/or mobile application(s) of the Company but are operated by third party merchants. If you provide your personal data to the third-party merchants in order to use, order or receive any services and/or products from the third-party merchants, please note that your personal data is beyond the control of the Company and thus is outside the scope of protection afforded by the Company.
10. Third Party Websites and/or Mobile Applications
11. Service Providers
12. Security and Transfer of Information
Your personal data may be stored by us in physical locations and/or servers located within or outside the HKSAR (or EEA as the case may be) and/or shared with third parties with physical locations and/or servers located within or outside the original jurisdiction, in each case in accordance with the relevant PICS. However, we will take all reasonable measures to ensure that your personal data is stored and processed securely, regardless of the place or country in which it is stored, and we will procure by contract or use reasonable endeavors to ensure that any third parties will do the same. Our cross-border transfer of your personal data will be conducted in accordance with the PICS and applicable laws for the protection of your personal data.
No data transmission over the internet or any other public network can be guaranteed to be completely secure, and privacy cannot be assured in your communications to us. You are encouraged to protect against unauthorized access to your password. You are advised to sign out from your account when finished, particularly when using a shared computer.
The Company may disclose your personal data as required by law, any government departments, regulatory authorities, enforcement agencies and courts of competent jurisdiction. The Company excludes all liability for disclosure of your personal data in this manner.
14. Use in Legal Proceedings etc.
If it becomes necessary for the Company to take action against you to recover debt you owe to the Company, you agree that your personal data can be used by the Company to identify and take legal action against you.
15. Access and Correction of Information and Withdrawal of Consent
You have the right to request in writing to the Personal Data Privacy Officer of the Company to:
All such requests will be handled promptly in accordance with the requirements of the relevant Data Privacy Authority (DPA). The Company may charge you a reasonable fee for processing your personal data access request.
16. Automated Processing
All processing will be lawful, fair, transparent, and necessary for a specific purpose. You have the right not to be subject to decisions based solely on automated data processing, including profiling, which produces legal effects or similarly affects the person. The Company will ensure relevant opt-in/ opt-out options concerning automated individual decision-making and profiling when a Data Subject visits the Company’s website and/or mobile application(s), its social media platform(s).
Note that this objection right will not apply to the situation where it is:
17. Breach Notification
When a personal data breach is likely to result in a high risk to the Data Subject, the Company will notify the Data Subject of the breach as soon as reasonably practicable but not later than 72 hours after becoming aware of such breach.
18. Direct Marketing
We cannot use or provide to third parties (whether intra-group and/or external parties) your personal data for direct marketing purposes without your consent. Subject to your consent, we may use or provide to third parties (whether intra-group and/or external parties) your personal data for direct marketing purposes in accordance with the PICS provided to you on or before collection of your personal data. You may withdraw your consent any time by writing to the Data Protection Officer of the Company at 32/F, 9 Wing Hong Street, Cheung Sha Wan, Kowloon, HONG KONG or by email at: firstname.lastname@example.org
19. Lawful Grounds for Processing
The Company will process the Data Subject’s personal data based on the following lawful grounds:
21. Change of Control
In the event of any actual or proposed transfer of business, transfer of shares, re-structuring, amalgamation, merger, sale, transfer, or purchase of us or our business or our affiliates or our affiliates’ businesses, the Company may need to transfer your
personal data to the new entity in accordance with the PICS. You will be notified of such an event, and you may decide to withdraw your consent to the use of your personal data.
If you have any questions, concerns or wish to access or correct your personal data or withdraw your consent to the use of your personal data held by the relevant Company for direct marketing purposes, please contact the Personal Data Privacy Officer of the Company at: 32/F, 9 Wing Hong St., Cheung Sha Wan, Hong Kong Attention: Personal Data Privacy Officer (Legal Department) (Marked Confidential, and with the name of the relevant Company) or by email at: email@example.com
23. Inconsistency or Conflict
24. PRC Addendum
If you are:
your personal data will be processed by the Company in accordance with The Company Privacy Addendum for mainland China and the relevant PICS, as well as the applicable data protection laws and regulations in Mainland China.
The Hop Lun Group of companies, (hereinafter also referred to as “we”, “us”, “our” or the “Company”), as the case may be, is the controller and processor of your personal data and you may reach us via firstname.lastname@example.org. This Privacy Addendum forms part and parcel of the Company’s Personal Information Collection Statement and specific to any individual (including individual directors and employees of a corporate customer) who are located in mainland China and receiving our products and/or services from outside of mainland (including, but not limited to Hong Kong/Macau).
As required by the laws of mainland China, we may need to seek your consent on how we use your personal data and, in relation to certain personal data which is considered sensitive based on the laws in mainland China, we may need your separate consent. Your personal data will be collected, accessed, processed, used, stored, and/or transferred outside of, mainland China. If you do not consent to this Privacy Addendum (or relevant
Personal Information Collection Statement) we may not be able to provide certain administration or other, such as providing product(s) you wish to acquire from us along with related customer support. Under the applicable data protection laws in mainland China, we will process your personal data based on your consent, unless your personal data are:
Certain personal data that we collect about you is sensitive personal data as defined in the applicable data protection laws in mainland China (“Sensitive Personal Data”), which is personal data that may materially impact your rights and interests, if breached or unlawfully used, including but not limited to financial accounts, national identification number, health-related information, or any personal data of minors under the age of fourteen (14). We collect the Sensitive Personal Data only for specific purposes, such as administering of employment related matters such as remuneration, expense reimbursement, medical insurance claims or pension / mandatory provident fund (MPF) administration and to ensure proper notification in the event of an emergency.
We will retain your personal data for the period necessary to fulfill the purposes outlined in the Company’s relevant Personal Information Collection Statement and this Privacy Addendum. The criteria used to determine our retention periods may include one or more of the following: as long as we have an ongoing relationship with you; as required by a legal obligation to which we are subject; and as advisable in light of our legal position (such as in regard of the applicable statute of limitation, litigation, audits, or regulatory investigation).
We may also provide your personal data with our insurers, third party service providers, medical institutions, parent companies, subsidiaries and affiliated companies, auditors, legal advisors, regulators, banks, (each, a “recipient”, collectively, “recipients”) for the purpose of employment or customer service fulfillment administration.
The recipient(s) of your personal data may collect and process your personal data and return it to us for the purpose of employment administration or customer service fulfillment. The types of personal data that we may provide to the recipients include without limitation personal identifiable information and others (as listed above). We may deliver your personal data through electronic means or other mode of dispatch to the recipients. In compliance with the applicable rules and regulations of mainland China, we implement maximum security in controlling, processing, and transferring of your personal data and Sensitive Personal Data. We also adopt our own security policies to safeguard your personal data and Sensitive Personal Data.
In addition to the access rights set forth in the Company’s Personal Information Collection Statement, you have the right to obtain a copy of your personal data held by us
and the right to request us to delete such personal data under any of the following circumstances:
To the extent inconsistent with the provisions of this Privacy Addendum, including but not limited to definitions (e.g., sensitive personal information), China’s Cybersecurity Law, Personal Information Protection Law, Data Security Law, their implementing measures and other Chinese laws and regulations in relation to cybersecurity and data protection will prevail.
We have the right to update this Privacy Addendum from time to time and we will notify you of our updates to this Privacy Addendum by posting it on our website or application platforms (as the case may be). You may withdraw your consent to our use of your personal data by contacting us through the contact details set out in this Privacy Addendum. If you withdraw your consent to our processing of your personal data, we may not be able to provide the relevant products and/or services to you.