Privacy Policy

2. Personal Data We Collect

We collect personal data through the following means:

• Website enquiry form: Name, email address, phone number, and any message content you choose to include.
• Telephone and email enquiries: Name, contact details, and information relevant to your enquiry.
• Residence admission: For residents, we collect more detailed information including personal and family contact details, relevant health considerations communicated to us, and financial arrangements. This is collected directly from the resident or their authorised family member.
• Cookies and analytics: Technical data about how visitors use this website. See Section 5 for details.

Legal basis for processing: We process personal data either with the individual's consent, to fulfil a contract (or take steps prior to entering one), or in pursuit of our legitimate interest in managing and improving the residence. We do not sell or commercially exploit personal data.

Retention: Enquiry data not resulting in an arrangement is retained for up to 12 months. Resident data is retained for the duration of the arrangement and for 7 years thereafter, in accordance with applicable record-keeping requirements.

3. How We Use Personal Data

• Responding to enquiries and arranging visits to On Yin.
• Managing the admission process and ongoing residence arrangements.
• Communicating with residents and their families about daily life, arrangements, and any matters of concern.
• Maintaining and improving the quality of services offered at On Yin.
• Meeting legal or regulatory obligations applicable to residential service operators in Hong Kong.
• Analysing anonymised website usage data to improve the website experience.

We do not share personal data with third parties for marketing purposes. We may share data with trusted service providers (such as IT support or accountancy services) who process it on our behalf and are bound by confidentiality obligations. We may also disclose data where required by law or court order.

4. Data Protection Measures

• Access to personal data is restricted to staff members with a direct need to use it in carrying out their responsibilities.
• Physical records are stored securely and are not accessible to general staff or visitors.
• Digital systems are protected by access controls and updated regularly.
• In the event of a data breach that creates a real risk of harm to individuals, we will notify affected persons and, where appropriate, the Office of the Privacy Commissioner for Personal Data (PCPD) without undue delay.

5. Cookies

Our website uses cookies to function correctly and, with your consent, to understand how the site is used. Cookie types used include:

• Essential cookies: Required for the website to work; cannot be disabled.
• Analytics cookies: Help us understand how visitors navigate the site. Used only with your consent.
• Preference cookies: Remember settings such as your cookie consent choice.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Data Rights

Under the PDPO, you have the right to:

• Access personal data we hold about you, subject to applicable exemptions.
• Correct any inaccurate personal data we hold about you.
• Withdraw consent to the use of your personal data at any time (where processing is consent-based).
• Object to the use of your personal data for direct marketing (we do not currently conduct direct marketing).
• Complain to the Office of the Privacy Commissioner for Personal Data (PCPD) if you believe your rights under the PDPO have not been respected. The PCPD can be reached at pcpd.org.hk or by telephone at +852 2827 2827.

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required under the PDPO.

7. Third-Party Links

Our website may contain links to external websites. On Yin is not responsible for the privacy practices of those sites and encourages you to review their privacy policies separately.

8. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18 through this website. If you believe a minor has submitted personal data to us, please contact us and we will take steps to remove it.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or in applicable law. Updated versions will be published on this page with a revised date. Where changes are material, we will inform current residents and their families directly.

10. Contact Us

For any privacy-related query, data access request, or concern, please contact us through the following: