Privacy Policy

1. Introduction

Silk Bridge ("we", "us", "our") is committed to protecting the privacy of everyone who interacts with our programmes and website. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

Our data handling practices comply with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) (PDPO). If you have any questions about this policy or about how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

Enquiry and contact forms

When you submit an enquiry through our website, we collect your name, email address, and phone number (if provided), and any information you choose to include in your message.

Programme enrolment

When you enrol in a Silk Bridge programme, we collect your name, email address, billing address, and payment information (handled via our payment processor — we do not store card details).

Website usage

We use analytics cookies to collect anonymised data about how visitors use our website, including pages visited, time on site, and device type. This data does not identify individuals.

Communications

If you contact us by email or phone, we retain a record of that correspondence.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries about our programmes
• Processing programme enrolments and administering course access
• Sending programme-related communications, including module release notifications and live session scheduling
• Notifying you of content updates to programmes you have completed (during the 12-month update period)
• Understanding how our website is used so we can improve it
• Complying with legal obligations

We do not use personal data for direct marketing unless you have explicitly opted in to receive marketing communications from us. We do not sell personal data to third parties.

4. Legal Basis for Processing

• Consent: For analytics cookies and marketing communications, where you have given explicit consent
• Contract: For programme enrolment and delivery — processing is necessary to fulfil your enrolment
• Legitimate interests: For responding to enquiries and improving our services
• Legal obligation: Where required by applicable law

5. Data Retention

• Enquiry records: retained for 24 months from the date of enquiry
• Enrolment and programme access records: retained for 7 years from the date of enrolment for accounting and compliance purposes
• Marketing consent records: retained until consent is withdrawn
• Website analytics data: retained for 26 months in aggregated, anonymised form

6. Data Sharing

We share personal data only in the following limited circumstances:

• Payment processors: To facilitate enrolment payments. Our payment processor is subject to its own privacy and security obligations.
• Platform providers: We use third-party software to deliver programme content and schedule live sessions. These providers process personal data on our behalf under data processing agreements.
• Legal requirements: Where we are required to disclose data by law, court order, or other legal process.

We do not share personal data with advertisers or other commercial third parties.

7. Data Protection Measures

• Data transmitted via our website is encrypted using TLS
• Access to personal data is restricted to staff who need it to perform their roles
• We review our data handling practices annually
• In the event of a data breach that creates risk to affected individuals, we will notify the Privacy Commissioner for Personal Data and affected individuals as required under Hong Kong law

8. Cookies

We use cookies on our website. Essential cookies are required for the site to function. Analytics and preference cookies are optional and require your consent. You can manage your cookie preferences on our Cookie Policy page.

9. Your Rights Under the PDPO

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the right to:

• Request access to the personal data we hold about you
• Request correction of any personal data that is inaccurate
• Object to the use of your personal data for direct marketing
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required under the Ordinance. We may charge a reasonable fee for data access requests in accordance with the Ordinance.

If you believe we have not handled your personal data in accordance with the PDPO, you may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

11. Children's Privacy

Our programmes and services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are significant, we will notify active participants by email. Continued use of our website or programmes after changes have been posted constitutes acceptance of the updated policy.

13. Contact

Data Controller: Silk Bridge
25/F, The Hennessy, 256 Hennessy Road, Wan Chai, Hong Kong
Email: [email protected]
Phone: +852 2581 3946