Privacy Policy

1. Introduction

Wah Yin ("we", "us", "our") is committed to protecting the personal data of every person who contacts us, visits our website or becomes a resident or family contact at our residence at 74 Kennedy Road, Wan Chai, Hong Kong.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have in relation to that data. It is prepared in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

If you have any questions about this policy, please contact us at [email protected].

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, postal address
• Enquiry details: the content of messages or requests submitted through our contact form or by telephone
• Resident information: health and lifestyle preferences shared to enable appropriate care and programme design (for residents and their authorised family contacts only)
• Website usage data: browser type, pages visited, time on site — collected via analytics cookies where consent has been given

We do not collect sensitive personal data unless it is necessary for the delivery of our residential services and only with explicit consent.

3. How We Collect Data

Data is collected through:

• The contact form on our website
• Telephone and email correspondence
• In-person conversations during visits to the residence
• Resident intake documentation
• Cookies and analytics tools on our website (where consent is given)

4. Legal Basis for Processing

Under the PDPO, we process personal data on the following bases:

• Consent: when you submit an enquiry form or agree to cookies
• Contractual necessity: to administer your residency or plan enrolment
• Legitimate interests: to respond to enquiries and improve our services
• Legal obligation: where retention or disclosure is required by Hong Kong law

5. How We Use Your Data

• To respond to enquiries and arrange visits
• To administer residency and plan arrangements
• To communicate updates to residents and authorised family contacts
• To improve our website and services through aggregate analytics data
• To comply with regulatory and legal obligations

We do not sell personal data to any third party, nor do we use personal data for direct marketing without explicit consent.

6. Data Retention

We retain personal data only for as long as necessary:

• Enquiry correspondence: 12 months from last contact
• Resident records: duration of residency plus 7 years (for legal compliance)
• Website analytics data: 26 months, or as configured by the analytics provider

7. Data Protection Measures

We take reasonable precautions to protect personal data from unauthorised access, loss or misuse:

• Access to resident and contact data is restricted to authorised staff only
• Website connections use industry-standard encryption (HTTPS/TLS)
• Physical documents are stored securely within the residence
• Staff receive training on data handling responsibilities
• In the event of a data breach, we will notify affected individuals and, where required, the Office of the Privacy Commissioner for Personal Data (PCPD) in accordance with the PDPO

8. Cookies

Our website uses cookies to support basic functionality and, with your consent, to understand how visitors use our site. You can manage cookie preferences at any time through our Cookie Policy page.

9. Your Rights

Under the PDPO, you have the right to:

• Request access to the personal data we hold about you
• Request correction of any inaccurate personal data
• Request erasure of personal data where retention is no longer justified
• Withdraw consent for processing at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD)

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days, as required by the PDPO.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If you believe we have inadvertently collected such data, please contact us promptly so that it can be removed.

12. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will notify residents and contacts directly. The most recent version will always be available on this page, with the date of last update noted at the top.

13. Contact

Data Controller: Wah Yin
74 Kennedy Road, Wan Chai, Hong Kong

Privacy enquiries: [email protected]
General enquiries: [email protected]
Telephone: +852 3072 5948

Regulatory authority: Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong
www.pcpd.org.hk