Privacy Policy

1. Who we are

Hong Kong Arabic Language Institute Limited (the Institute, we, us) operates Arabic language teaching and related services in the Hong Kong Special Administrative Region.

For privacy enquiries you may contact us using the details in the website footer (including contact@arabic.hk) or the communication channels we provide to students and enquirers.

2. Hong Kong privacy law

We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (PDPO) and applicable guidance issued from time to time by the Privacy Commissioner for Personal Data, Hong Kong (PCPD).

Where this policy uses words such as personal data, data subject, or data user, they should be read consistently with the PDPO unless the context requires otherwise.

3. Personal data we may collect

Depending on how you interact with us, we may collect categories of personal data such as: name; contact information (for example email address, telephone number); course interests, enrolment details and attendance information; messages you send to us; and limited technical information relating to your visit to our website (for example IP address, browser type, device identifiers and server logs) where this is generated in the ordinary course of providing online services.

If you make a payment, payment card or transaction details are typically processed by regulated payment service providers. We do not ask you to send full payment card details by unsecured email.

4. Purposes of collection and use

We collect and use personal data for purposes that are lawful and compatible with the PDPO, including: responding to enquiries; processing course registrations; delivering classes and related administration; communicating with students about schedules, venues and academic matters; internal record keeping and accounting; improving our services and website security; complying with legal, regulatory or law enforcement requests; and handling complaints.

We will not use your personal data for a new purpose that is incompatible with the original purpose of collection unless we are permitted to do so under the PDPO (for example with your prescribed consent where consent is required).

5. Cookies and similar technologies

Our website may use cookies or similar technologies that are strictly necessary for operation (for example language preferences or session security) and, where deployed, analytics that help us understand aggregate traffic.

You can manage many cookies through your browser settings. Where Hong Kong law requires consent for non-essential cookies or similar technologies, we will obtain consent in an appropriate manner before activating them.

6. Disclosure, transfers and service providers

We may disclose personal data to employees, contractors and service providers who need the information to perform services for us (for example IT hosting, email delivery, payment processing, classroom venue partners where relevant to your booking), subject to confidentiality and data protection safeguards appropriate to the risk.

We may also disclose personal data where required by law, court order, or lawful request by Hong Kong authorities.

If personal data is transferred outside Hong Kong, we will take steps that are required or appropriate under the PDPO and related regulations (including, where applicable, compliance with data transfer mechanisms or safeguards introduced under Hong Kong law).

7. Retention and security

We retain personal data only for so long as is reasonably necessary for the purposes set out in this policy, including to satisfy legal, accounting or reporting requirements, and then we will delete or anonymise it where practicable.

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised or accidental access, processing, erasure, loss or use. No internet transmission is completely secure; you should also take care when transmitting information to us.

8. Your rights and complaints

Under the PDPO you may have the right to request access to, and correction of, your personal data held by us, subject to the exceptions set out in the PDPO. Requests should be sent using the contact details in the footer and may need to be supported by reasonable evidence of identity.

If you consider that we have mishandled your personal data, you may lodge a complaint with the PCPD in Hong Kong. Information about the PCPD is available at https://www.pcpd.org.hk/

We may charge a fee permitted by law for complying with an access request.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, our practices, or our services. The updated version will be posted on this page with a revised last updated date. Where a change materially affects you and the law requires a further step, we will take that step.