Goal Forward Holdings Limited (The “Company”) builds its business on trust between our customers and ourselves. To preserve the confidentiality of all personal data provided by any relevant parties through writing, email, fax or any other means, we maintain the following privacy principles under the provisions of the Personal Data (Privacy) Ordinance (the "Ordinance"):
The Company retains personal details of its customers relating to billing together with other information which may be necessary for the provision of the Company's services.
Customers are required to supply the Company with necessary and adequate data in connection with the opening or operations of accounts.
The purposes for which data may be used include:
(i) the daily operations of the Company's services and processing applications or requests relating to the Company's products and services
(ii) opening and maintaining accounts for customers
(iii) providing after-sales services
(iv) conducting customers, products and services surveys
(v) direct marketing of products and services
(vi) handling customer complaints and enquiries
(vii) calculating any amount of indebtedness owing to or from customers, and collecting debts from customers
(viii) making disclosure according to the requirements of any law, regulations, codes of conduct or guidelines applicable to any member of the Group
(ix) any other directly related matters.
Without such data, the Company may not be able to provide services to its customers.
Transfer of Personal Data
Personal data of customers held by the Company will be kept confidential but the Company may provide such information to the following persons (whether within or outside Hong Kong) to use in direct marketing. (The Company currently does not intend to transfer any customer information to other parties for direct marketing purposes):
(i) subsidiaries and associated companies of the Company (the Company and all its subsidiaries and associated companies collectively known as the "Group")
(ii) any agent, contractor or third-party service provider who provides services to the Group in connection with the operation of the Company's business
(iii) the media (only in relation to the handling of customer complaints and enquiries referred to the Company by the media)
(iv) any person to whom any Group member is under an obligation or is otherwise expected to make disclosure according to any law, regulations, codes of conduct or guidelines applicable to any Group member
(v) any person who owes a duty of confidentiality to any Group member (such as professional advisers of the Group).
Use of Your Personal Data in Direct Marketing
The Company is allowed to use your personal data in direct marketing only if consent is made or without objection.
In connection with direct marketing, the Company intends:
(i) to use your name and contact details, customer profiling and service portfolio information held by the Company from time to time in direct marketing
(ii) to market the following classes of products, services and subjects which may be offered or arranged by any member of the Group or business partners with which any member of the Group conducts cross or joint marketing activities:
a. supply and related products and services of the Company (including after-sales services)
b. contests, lucky draws, events and/or activities organised or sponsored by any member of the Group (including product demonstrations and members’ activities relating to membership programmes offered by any member of the Group)
c. environmentally friendly and health products and;
d. donations and contributions for charitable and/or non-profit making purposes.
If you do NOT wish the Company to use your personal data in direct marketing, you may exercise your opt-out right.
You may opt out at the time you registered for the Company’s services. You may also write to the Company at firstname.lastname@example.org or call the Company at 3553 0688 stating your account name and other necessary particulars to opt out from direct marketing at any time. The Company will then cease to use your personal data in direct marketing within 40 days upon receiving the request without any applicable charges.
Access to and Correction of Personal Data
Customers have the rights under the Ordinance:
- to check whether the Company holds records of their personal data
- to obtain a copy of that data
- to correct any data which is inaccurate
Requests for access to data or correction of data should be made in writing to email@example.com and may be asked to pay a reasonable handling charge to cover data access processing.
Retention of Personal Data
The Company keeps personal data for such period that is necessary for the fulfilment of the purposes for which the data was collected or as required or permitted by applicable laws.
The Company takes all reasonably practical measures to protect personal data, whether stored physically or electronically, and prevent unauthorized or accidental access, processing, erasure, loss or use (including transfer). Personal data is stored under lock or password-protected as necessary. When the Company engages a data processor to process personal data on its behalf, contractual or other means are adopted to prevent unauthorized or accidental access, processing, erasure, loss or use (including transfer) of the data transferred to the data processor.