私隱政策


本私隱政策聲明概述我們如何管理閣下的個人資料及其他相關資料,並適用於所有梓峰教育(以及其附屬公司及關聯公司)之學員及其家長。學員及家長於報名參加課程時,亦有責任提供真確及齊全之個人資料,讓梓峰教育能夠為學員提供最合適的服務(例如通知學員有關取消課程之事宜)及建議(例如能夠配合小孩的能力及發展之課程)。梓峰教育竭力為學員及家長提供最高水平的服務,其中包括保障閣下的私隱。梓峰教育尊重您的私隱權,並承諾嚴格遵守《個人資料(私隱)條例》的條款及履行其所定下的有關義務。所有個人資料將予以保密,我們確保在收集、使用、保存、披露、轉移、保密及查閱個人資料的政策及常規,均符合香港法例規定。請您詳細閱讀本聲明。您一旦提供個人資料予我們,即視同您同意我們按本私隱政策中所述的方式,並為其中所述的有關目的,蒐集和使用或另行處理(包括披露)您的個人資料。

本私隱政策亦適用於我們通過即時通訊應用程式(包括但不限於 WhatsApp、Telegram、Signal 或其他類似平台)所進行的任何通訊、推廣或資料收集活動。就本私隱政策而言,「WhatsApp」包括 WhatsApp Business(商業版)及一般消費者版 WhatsApp;個別梓峰教育分校可能因應實際營運安排,使用其中一種或兩種版本與閣下進行通訊。


閣下的個人資料


我們或會收集及保留閣下各種包括但不限於下列的個人資料:

  1. 身份證或旅遊證明文件所登記的姓名;
  2. 聯絡資料,包括閣下姓名、聯絡電話號碼、電郵地址、通訊地址、帳單地址或地址證明;
  3. 用以核實身份的資料,包括出生日期、身份證明文件及號碼,例如身份證或旅遊證明文件;
  4. 付款資料,包括信用卡、扣帳卡及銀行資料;
  5. 學員/會員帳戶資料,包括帳戶號碼、學員/會員號碼、用戶帳號、登入資料、電子教學設備序號;
  6. 不論何時與梓峰教育所登記之課程或服務(例如定期刊物、會員計劃)的有關資料;
  7. 為使我們能進一步改善課程質素、因材施教及提供更合適的建議或資訊所須之資料,包括但不限於學員的年齡、性別及種族,家長的教育程度、專業資格、薪金水平及就業資料,以及家庭/家居統計資料和課程報讀紀錄;及/或
  8. 為確保梓峰教育能夠遵從法例、法規、規則、判決或法院命令(不論在香港或海外),而提供予合適的政府相關部門、法院、執法或有關當局及監管機構要求的所有資料。

閣下可選擇是否提供某些個人資料,尤其是列於上述第(7)項的資料。惟若閣下未能提供此等所需的個人資料,可能會有礙我們向閣下提供相關協助、履行某些責任及/或提供個人化教授及支援。


收集資料的方式


我們通過各種方式收集個人資料,包括:


某些活動所需收集的資料種類,將視乎有關活動而定。在某些特殊情況下,我們還可能訂立其他適用的額外政策和條款,或針對特定目的採用各種表格形式的私隱聲明,作為對本私隱政策的補充。


個人資料的使用


通過以上各種方式和渠道所收集到的您的資料,會用作:


您所提供的資料將予以保密,並只會用來支援梓峰教育與學生及家長之間的關係,或用作上述說明的目的。


資訊披露


我們可能會向梓峰教育以外的其他機構(不論位於香港境內或境外),根據有關法例及法則所容許的範圍,因應上述「個人資料的使用」所列出的有關用途,披露閣下的個人資料。閣下的個人資料只會在有必要的情況下,披露予有關機構用作客戶諮詢、郵件操作/速遞/送貨服務、資訊科技配置服務、市場推廣及電話促銷、市場調查及網站使用量分析,以及提供行政、付款、收款、商業、法律及/或業務運作,並用於管理我們的業務及企業策略。一般情況下,我們會採取適當措施,以確保該等機構受有關保障閣下個人資料的保密及私隱責任所約束,且該等機構僅可就上述目的使用有關資料,不得自用或用於其他目的(包括直接促銷)。未經您同意,我們從不同渠道所收集的個人資料,均不會洩露予外部組織單位作市場推廣或徵集用途。梓峰教育可能會將於網站上收集的有關您個人的資料,與我們合作夥伴的資料合併,以便就課程或服務向您作出個人化建議;我們亦可能允許我們的關聯公司、零售商及業務合作夥伴運用您的個人資料進行直接推廣。在使用您的資料或將資料提供予其他機構時,我們可能因應法例規定須取得閣下的書面同意;在此情況下,除非條例另有豁免規定,否則我們只會在取得閣下同意後,才將您的個人資料用於任何促銷或市場推廣用途。此外,我們可能會向下列各方披露閣下的個人資料:

此外,當閣下通過即時通訊應用程式(包括 WhatsApp)與我們聯絡時,該等應用程式的服務供應商及其關聯公司(包括 Meta Platforms, Inc. 及其全球集團公司)可能會收集、處理及儲存相關通訊內容、帳戶資料、技術資料及使用紀錄。就 WhatsApp 而言,不論屬商業版或一般消費者版,相關資料均可能由其服務供應商 Meta Platforms, Inc. 處理;如適用,亦可能涉及其授權之第三方企業解決方案供應商(Business Solution Providers)。該等資料可能會被傳送至香港特別行政區以外的地方(包括但不限於美國)作處理及儲存。


轉移個人資料至香港以外地方


梓峰教育在有需要時,會審慎地將若干個人資料轉移至香港特別行政區以外的地方,以預防、偵測或調查犯罪行為,或達成收集該等資料的目的,或與其直接有關的目的。該等轉移將遵守條例現行的規定。


取消接收有關市場推廣的訊息


梓峰教育會定時向您傳遞有關梓峰教育之最新消息,以及我們認為您可能感興趣的最新課程、活動、產品及服務資訊。只有梓峰教育(或為梓峰教育服務並同樣受保密協議約束的代理商與合作夥伴),會在取得您的同意後,或在法律規定的情況下,直接向您傳送該等資訊。我們尊重所有停止使用個人資料作直接促銷的要求,閣下可隨時告知我們不願意收取直接促銷資料及/或訊息。與此同時,閣下亦可以書面方式要求重新收取有關資訊(僅適用於以往曾經拒絕接收該類資訊的學員/家長)。我們會按照個別要求作出相應處理。如閣下透過即時通訊應用程式(包括 WhatsApp)收到梓峰教育發出的推廣訊息,可隨時回覆「STOP」「取消」「UNSUBSCRIBE」等關鍵字,或直接聯絡我們(見下方聯絡資料),要求即時停止接收。日後如欲重新接收,亦可以書面方式向我們提出。我們承諾於收到閣下要求後,即時停止相關通訊。


資料保安及保存


我們盡力確保所有客戶的個人資料均儲存於可靠安全的地方。該等個人資料只有經我們授權的僱員,或本私隱政策聲明中提及的第三者方可查閱。然而,閣下應知悉,沒有電腦系統是無法破解的,而且通過網絡傳輸的資料亦無法保證完全安全;因此,當您在傳送資料時,請閣下自行承擔相關風險。一旦我們接收到您傳送的資料,我們會盡一切努力確保該資料在我們系統內的安全。我們會在不需要使用時,將載有個人資料的實體記錄妥善存放於上鎖的儲存器內,而電腦數據則存放於設有進出限制的電腦系統及儲存媒體內,取用資料亦受嚴格監管。未經管理層正式授權的人士,不得取用有關記錄及數據;相關權限只在「須知」原則下授予,並根據個別人士在校的職責及受訓情況而定。梓峰教育在儲存、使用和/或傳送客戶個人資料時,將採取合理及足夠的保護措施,以防止未經准許及/或意外的披露、更改及/或破壞。梓峰教育將根據內部政策,銷毀所持有的個人資料,基本政策宗旨包括:

為保障通過即時通訊應用程式(包括 WhatsApp)所收集的個人資料,我們會按實際使用的平台版本及營運需要,採取合理及適當的保安措施。就相關商業帳戶而言,我們已:

如個別分校暫時使用一般消費者版 WhatsApp,其帳戶安全設定將受該版本本身之保安功能所限;在此情況下,梓峰教育仍會盡力採取合理措施,加強相關帳戶及通訊紀錄的保安。

我們亦建議客戶勿將即時通訊應用程式作為與梓峰教育通訊的唯一渠道,請同時保留電郵、電話或網站表單等聯絡方式,以便於緊急或帳戶發生問題時與梓峰教育聯絡。


即時通訊應用程式使用條款

9.1 適用範圍

本節適用於我們通過即時通訊應用程式(包括但不限於 WhatsApp、Telegram、Signal 或其他類似平台,以下統稱「即時通訊平台」)所進行的所有通訊、客戶服務、市場推廣及資料收集活動。就本節而言,「WhatsApp」包括 WhatsApp Business(商業版)及一般消費者版 WhatsApp;個別梓峰教育分校可能因應實際營運安排,使用其中一種或兩種版本與閣下進行通訊。

9.2 客戶同意

當閣下透過即時通訊平台向我們提供閣下的電話號碼或個人資料,或向我們作出課程、報名、產品或服務的查詢時,即視同閣下同意我們按本私隱政策所述方式處理閣下的個人資料,並通過該平台與閣下通訊。我們不會將閣下的電話號碼或個人資料用於閣下事前未同意的市場推廣用途。如我們計劃將閣下的資料用於持續性推廣,我們會事先取得閣下的明確同意(opt-in)。

9.3 客戶要求停止接收訊息

如閣下透過即時通訊平台要求停止接收任何訊息,我們會即時停止相關通訊。閣下可回覆「STOP」「取消」「UNSUBSCRIBE」等關鍵字,或以書面方式聯絡我們(見「聯絡我們」部分)提出要求。

9.4 梓峰教育上載內容

我們尊重梓峰教育擁有或獲授權使用的內容(包括但不限於標誌、產品相片、影片及文字內容)的版權。惟請注意,當我們透過即時通訊平台傳送或分享上述內容時,相關平台的服務供應商可能就該等內容取得一定範圍的使用授權(用於提供、改善及推廣其服務)。閣下不應透過該等平台向我們提供未獲當事人授權的客戶相片或其他敏感資料。

9.5 跨境資料傳輸

即時通訊平台的服務供應商(包括 WhatsApp 不論商業版或一般消費者版之服務供應商 Meta Platforms, Inc.)可能會將閣下透過相關平台提供的資料傳送至香港以外的地方(包括但不限於美國)作儲存及處理。如屬商業版 WhatsApp,亦可能涉及其授權的第三方企業解決方案供應商(Business Solution Providers)。該等傳輸將受相關服務供應商本身的私隱政策約束。

9.6 帳戶安全

我們會按實際使用的平台版本及營運需要,採取合理及適當的保安措施。就相關即時通訊商業帳戶而言,我們已啟用雙重驗證,並定期審視存取權限。如個別分校暫時使用一般消費者版 WhatsApp,其帳戶安全設定將受該版本本身之保安功能所限;在此情況下,梓峰教育仍會盡力採取合理措施,加強相關帳戶及通訊紀錄的保安。然而,閣下應注意,即時通訊平台的服務供應商可能因應其政策或技術原因,限制、暫停或終止商業帳戶或其他帳戶。我們建議閣下透過電郵、電話或網站表單等多個渠道,與我們保持聯絡。

9.7 服務供應商責任限制

即時通訊平台服務供應商對其服務中斷、資料傳輸錯誤或帳戶終止所引致的損失,承擔有限責任。梓峰教育概不對因即時通訊平台服務供應商行為所引致的任何間接、附帶或後續損失負責。

9.8 我們的最佳實務


網頁瀏覽資料及「曲奇」(COOKIES)


我們的網頁伺服器會收集有關閣下在線期間的資料,以提供伺服器使用量的(不記名的)集體統計資料,藉以更適合地滿足我們網站訪客的需要及期待。該等資料可包括但不限於瀏覽器類型及版本、操作系統、IP 地址及/或網域名稱,以及全球資源定位器。為提供更貼切及個人化的服務,我們可能會利用「曲奇」存儲或追蹤有關顧客在網站內活動的資料。「曲奇」是從網站伺服器傳送至瀏覽器並保存於電腦硬碟上的少量資料。藉此,當閣下使用我們的網站時,我們可向閣下提供個人化的服務,及/或在閣下於同一次或多次在線期間瀏覽各網頁時進行身份識別,以及記錄閣下在我們網站內的活動和喜好。閣下可於網頁瀏覽器上刪除曲奇,惟此舉可能導致閣下無法進入我們網站的所有部份。


連結至其他網站


我們的網站、網上社交平台、應用程式或即時通訊應用程式(包括 WhatsApp)所發出的訊息,或包含通往其他地址、頁面及由第三者營運的流動應用程式的鏈接。我們對該等第三方(包括即時通訊應用程式服務供應商及其關聯公司)就閣下個人資料的處理方式,概不負責;閣下應審閱該等第三方的私隱政策,以瞭解其可能使用閣下個人資料的方式。


資料查詢、準確及更新


您有權隨時電郵,以查閱、更改或永久刪除任何儲存於梓峰教育有關您的個人資料。惟閣下所要求個人資料的存在形式,須讓我們能夠切實可行及合理地存取或處理。我們可就處理索取個人資料的申請,收取合理的費用。我們採取一切合理的預防措施,以確保我們所收集、使用及披露的個人資料準確、完整及最新;然而,個人資料的準確性很大程度上取決於閣下所提供的資料。當閣下發現個人資料記錄有任何錯誤時,請通知我們;並請於閣下的地址、聯絡電話或電郵地址等個人資料有所改變或更新時,一併告知我們。閣下有權要求查閱及更改個人資料,請聯絡:

若您有任何以上要求,請以書面形式與我們聯絡。


CCTV政策

梓峰教育在其部分營運的中心(統稱「梓峰教育中心」)安裝了閉路電視監控系統(以下簡稱「CCTV系統」),旨在確保教育中心環境更安全,並保護所有同事和學生的權益。本政策旨在闡明梓峰教育中心CCTV系統的目的、使用及管理,以及應遵循的程序,並參考《個人資料(私隱)條例》(第486章)(以下簡稱「PDPO」)及個人資料私隱專員發出的相關指引,包括私隱專員公署於2025年10月更新發出的《使用閉路電視監察指引》。所有負責管理CCTV系統或錄像資料的員工和人員,均應熟悉並全面遵守本政策及下列相關要求和程序。

目的

梓峰教育安裝CCTV系統的目的如下(「指定目的」):

梓峰教育已致力確保安裝的CCTV系統對達成上述指定目的具有最大效能,但無法保證該系統能覆蓋或偵測到監察範圍內的每一事件。梓峰教育認識到CCTV攝錄機僅能用於安全監控的合法目的,並已審慎衡量監控需求(風險評估)與個人私隱之間的平衡,以確保所有安裝均屬必要而不過度。

政策概述/範圍

梓峰教育中心內安裝的所有CCTV系統,由梓峰教育管理層(DMO)的安全團隊(以下簡稱「DMO安全團隊」)進行集中管理。本政策涵蓋梓峰教育中心所有具備查看和錄製錄像資料功能的CCTV攝錄機及任何網絡攝錄機/錄製設備(統稱「CCTV系統」)。

CCTV系統的運作

只有經梓峰教育管理層高級經理(「DMO安全團隊」)指定的工作人員,方可操作CCTV系統。梓峰教育將根據個別職位及頭銜,規定指定工作人員的操作範圍及權限限制。指定工作人員須嚴格遵守指定範圍及限制操作CCTV系統。

CCTV部署和操作

安裝於梓峰教育中心的CCTV系統設有錄音功能,可從系統的錄像檔案擷取個人影像和音頻,系統鏡頭只採用固定拍攝角度,並於指定時間內運作。CCTV系統僅為指定目的,於適當位置部署及安裝,包括課室、走廊;CCTV系統不會安裝於個人預期享有隱私的區域,例如洗手間、更衣設施等。在特定位置安裝CCTV系統的決定,屬於管理風險與對個人資料私隱潛在影響之間的平衡結果。在安裝任何CCTV系統前,須事先取得高級經理(「DMO安全團隊」)的批准。任何未經適當授權安裝的CCTV系統,將被立即拆除而不另行通知。在CCTV系統鏡頭附近或監控區域入口附近,應放置顯眼告示,列明監察目的、負責操作CCTV系統的機構身份,以及就個人資料私隱作出查詢的聯絡方式,以通知梓峰教育中心人員、學生及訪客CCTV系統正在運作。除與犯罪調查或嚴重不當行為有關並經高級管理層書面批核的特殊情況外,不得使用隱藏式攝錄機。

CCTV錄像資料的保留和刪除

所有CCTV錄像資料及CCTV系統的數據,應由DMO安全團隊於安全的伺服器上進行集中及遠端儲存,並設有適當的存取及安全安排,包括但不限於密碼設置及加密。除涉及調查事件的特殊情況外,所有CCTV錄像資料僅保留自錄製日期起計30天,並於期限屆滿後自動、永久及安全地刪除。

CCTV錄像資料的存取

只有經DMO安全團隊高級經理授權的人員,方可存取及觀看實時和錄製的CCTV錄像資料,且只可用於獲授權的目的。錄像資料的觀看應於指定的安全辦公室內進行。一般情況下,不會向梓峰教育成員提供觀看實時CCTV錄像資料的存取權限,除非經DMO安全團隊高級經理特別批准,並設有適當的安全控制措施以保護數據,例如員工需即時應對緊急事件,或須具備專業技能進行實時監控。一般情況下,亦不會向梓峰教育成員提供觀看錄製CCTV錄像資料的存取權限,除非涉及特殊情況,例如與健康、安全或保安有關的事件調查。DMO安全團隊將審核每一項申請,並根據PDPO的要求處理有關申請。

技術

梓峰教育中心部署及安裝的所有CCTV系統,須符合指定的規格及標準,並不得侵犯個人資料私隱。雖然CCTV系統可生成高清圖像並具備分析功能,惟該等功能僅於調查事件時使用。

培訓

所有負責管理CCTV系統,或有權存取CCTV錄像資料的員工及人員,均應接受適當培訓,以確保理解並能完全遵守本政策下的私隱義務及程序。

CCTV系統審查

梓峰教育將定期進行審查,以確保CCTV系統的部署符合本政策所訂的預定目的,且仍屬必要及適當。

本政策的審查

梓峰教育將定期檢討CCTV的使用及本政策的內容,並會因應當時有效的相關法規或指引,以及當前情況作不時修訂。

查詢

任何有關梓峰教育使用CCTV系統的查詢或投訴,應以書面形式提交予梓峰教育高級經理(「DMO安全團隊」),發送至 info@dunn.hk。梓峰教育安全高級經理(「DMO安全團隊」)將於有需要時諮詢法律顧問。


影像聲明

梓峰教育會在不影響課堂的情況下,拍攝學生或老師的照片或錄像,並可能透過即時通訊應用程式(包括 WhatsApp)分享相關影像。該等照片或影像可能出現於公共場所、網絡或即時通訊應用程式平台上。如您拒絕該等照片或影像出現於公共場所、網絡或即時通訊應用程式平台,請以電郵方式(info@dunn.hk)告知我們,電郵內容須包括:


聯絡我們

若您對我們的私隱政策有任何查詢或疑慮,可隨時以電郵與我們聯絡:

本私隱政策聲明或會不時修訂,所有個人資料之處理均受本私隱政策聲明最新版本所規範(詳見我們的官方網頁)。

私隱政策聲明


更新日期:2026年9月




Privacy Policy


This Privacy Policy Statement outlines how we manage your personal data and other related information, and applies to all students and their parents of Dunn Education (as well as its subsidiaries and affiliated companies). When enrolling in courses, students and parents are also responsible for providing true and complete personal data so that Dunn Education can provide the most appropriate services (such as notifying students of course cancellations) and recommendations (such as courses that match the child's abilities and development). Dunn Education strives to provide the highest level of service to students and parents, which includes protecting your privacy. Dunn Education respects your right to privacy and is committed to strictly complying with the provisions of the Personal Data (Privacy) Ordinance and fulfilling its obligations thereunder. All personal data will be kept confidential, and we ensure that our policies and practices in the collection, use, retention, disclosure, transfer, confidentiality, and access of personal data comply with the laws of Hong Kong. Please read this statement carefully. By providing your personal data to us, you are deemed to have agreed to our collection, use, or otherwise processing (including disclosure) of your personal data in the manner and for the purposes described in this Privacy Policy.

This Privacy Policy also applies to any communications, promotions, or data collection activities we conduct through instant messaging applications (including but not limited to WhatsApp, Telegram, Signal, or other similar platforms). For the purposes of this Privacy Policy, "WhatsApp" includes WhatsApp Business and the general consumer version of WhatsApp; individual Dunn Education branches may use one or both versions to communicate with you depending on their actual operational arrangements.


Your Personal Data


We may collect and retain various types of your personal data, including but not limited to the following:

  1. Name as registered on identity card or travel document;
  2. Contact details, including your name, contact phone number, email address, correspondence address, billing address, or proof of address;
  3. Information used for identity verification, including date of birth, identity document type and number, such as identity card or travel document;
  4. Payment information, including credit card, debit card, and bank details;
  5. Student/Member account information, including account number, student/member number, user account, login details, and serial number of electronic teaching equipment;
  6. Information related to courses or services (e.g., periodicals, membership programs) registered with Dunn Education at any time;
  7. Information necessary for us to further improve course quality, teach according to students' aptitudes, and provide more appropriate recommendations or information, including but not limited to the student's age, gender, and race, parents' education level, professional qualifications, salary level, and employment information, as well as family/household statistical data and course enrollment records; and/or
  8. All information required to be provided to relevant government departments, courts, law enforcement or competent authorities, and regulatory bodies to ensure Dunn Education's compliance with laws, regulations, rules, judgments, or court orders (whether in Hong Kong or overseas).

You may choose whether to provide certain personal data, especially the information listed in item (7) above. However, if you fail to provide such required personal data, it may hinder us from providing you with relevant assistance, fulfilling certain responsibilities, and/or providing personalized teaching and support.


Methods of Data Collection


We collect personal data through various means, including:


The types of data required to be collected for certain activities will depend on the relevant activity. Under certain special circumstances, we may also establish other applicable additional policies and terms, or adopt privacy statements in various forms for specific purposes to supplement this Privacy Policy.


Use of Personal Data


Your data collected through the various means and channels above will be used for:


The information you provide will be kept confidential and will only be used to support the relationship between Dunn Education and students and parents, or for the purposes described above.


Information Disclosure


We may disclose your personal data to other organizations outside Dunn Education (whether located within or outside Hong Kong) to the extent permitted by relevant laws and regulations, for the purposes listed under "Use of Personal Data" above. Your personal data will only be disclosed to relevant organizations when necessary for customer inquiries, mail operations/courier/delivery services, IT configuration services, marketing and telemarketing, market research and website usage analysis, as well as for providing administrative, payment, debt collection, commercial, legal, and/or business operations, and for managing our business and corporate strategies. Generally, we will take appropriate measures to ensure that these organizations are bound by confidentiality and privacy obligations regarding the protection of your personal data, and that they may only use the data for the aforementioned purposes and not for their own or other purposes (including direct marketing). Without your consent, the personal data we collect from various channels will not be disclosed to external organizations for marketing or solicitation purposes. Dunn Education may merge your personal data collected on the website with data from our partners to make personalized recommendations regarding courses or services; we may also allow our affiliates, retailers, and business partners to use your personal data for direct marketing. When using your data or providing it to other organizations, we may be required by law to obtain your written consent; in such cases, unless otherwise exempted by the Ordinance, we will only use your personal data for any promotional or marketing purposes after obtaining your consent. In addition, we may disclose your personal data to the following parties:

Furthermore, when you contact us through instant messaging applications (including WhatsApp), the service providers of such applications and their affiliates (including Meta Platforms, Inc. and its global group companies) may collect, process, and store the relevant communication content, account data, technical data, and usage records. Regarding WhatsApp, whether it is the Business version or the general consumer version, the relevant data may be processed by its service provider Meta Platforms, Inc.; where applicable, it may also involve their authorized third-party Business Solution Providers. Such data may be transferred to places outside the Hong Kong Special Administrative Region (including but not limited to the United States) for processing and storage.


Transfer of Personal Data outside Hong Kong


When necessary, Dunn Education will carefully transfer certain personal data to places outside the Hong Kong Special Administrative Region to prevent, detect, or investigate criminal acts, or to fulfill the purposes for which such data was collected, or for directly related purposes. Such transfers will comply with the current provisions of the Ordinance.


Opt-out of Marketing Communications


Dunn Education will periodically send you the latest news about Dunn Education, as well as information on the latest courses, events, products, and services that we believe you may be interested in. Only Dunn Education (or agents and partners serving Dunn Education and equally bound by confidentiality agreements) will send such information directly to you after obtaining your consent or where required by law. We respect all requests to cease using personal data for direct marketing, and you may inform us at any time that you do not wish to receive direct marketing materials and/or messages. At the same time, you may also request in writing to resume receiving such information (applicable only to students/parents who have previously refused to receive such information). We will process these requests individually. If you receive promotional messages sent by Dunn Education via instant messaging applications (including WhatsApp), you may reply with keywords such as "STOP", "CANCEL", or "UNSUBSCRIBE" at any time, or contact us directly (see contact details below) to request an immediate stop to receiving them. Should you wish to resume receiving them in the future, you may also submit a written request to us. We promise to stop relevant communications immediately upon receiving your request.


Data Security and Retention


We make every effort to ensure that all customers' personal data is stored in a reliable and secure location. Such personal data can only be accessed by our authorized employees or third parties mentioned in this Privacy Policy Statement. However, you should be aware that no computer system is unbreakable, and data transmitted over the internet cannot be guaranteed to be completely secure; therefore, when you transmit data, you do so at your own risk. Once we receive the data you transmitted, we will make every effort to ensure its security within our systems. When not in use, we will securely store physical records containing personal data in locked cabinets, while computer data will be stored in computer systems and storage media with restricted access, and data retrieval is also strictly regulated. Persons without formal authorization from management are not allowed to access the relevant records and data; such permissions are granted strictly on a "need-to-know" basis, depending on the individual's role and training within the school. Dunn Education will take reasonable and sufficient protective measures when storing, using, and/or transmitting customers' personal data to prevent unauthorized and/or accidental disclosure, alteration, and/or destruction. Dunn Education will destroy the personal data it holds in accordance with its internal policies, the basic tenets of which include:

To protect personal data collected via instant messaging applications (including WhatsApp), we will take reasonable and appropriate security measures based on the platform version actually used and operational needs. Regarding the relevant business accounts, we have:

If individual branches temporarily use the general consumer version of WhatsApp, their account security settings will be limited by the security features of that version itself; in such cases, Dunn Education will still make every effort to take reasonable measures to strengthen the security of the relevant accounts and communication records. We also recommend that customers do not use instant messaging applications as the sole channel of communication with Dunn Education; please also retain contact methods such as email, phone, or website forms, so as to contact Dunn Education in case of emergencies or account issues.


Terms of Use for Instant Messaging Applications

9.1 Scope of Application

This section applies to all communications, customer service, marketing, and data collection activities we conduct via instant messaging applications (including but not limited to WhatsApp, Telegram, Signal, or other similar platforms, hereinafter collectively referred to as "Instant Messaging Platforms"). For the purposes of this section, "WhatsApp" includes WhatsApp Business and the general consumer version of WhatsApp; individual Dunn Education branches may use one or both versions to communicate with you depending on their actual operational arrangements.

9.2 Customer Consent

When you provide us with your phone number or personal data, or make inquiries about courses, enrollment, products, or services via Instant Messaging Platforms, you are deemed to have consented to our processing of your personal data in the manner described in this Privacy Policy, and to our communicating with you via the platform. We will not use your phone number or personal data for marketing purposes without your prior consent. If we plan to use your data for ongoing promotions, we will obtain your explicit consent (opt-in) in advance.

9.3 Customer Requests to Stop Receiving Messages

If you request to stop receiving any messages via Instant Messaging Platforms, we will immediately cease the relevant communications. You may reply with keywords such as "STOP", "CANCEL", or "UNSUBSCRIBE", or contact us in writing (see the "Contact Us" section) to make the request.

9.4 Content Uploaded by Dunn Education

We respect the copyright of the content owned or authorized for use by Dunn Education (including but not limited to logos, product photos, videos, and text content). Please note, however, that when we transmit or share the aforementioned content via Instant Messaging Platforms, the service providers of those platforms may obtain a certain scope of usage license for such content (for providing, improving, and promoting their services). You should not provide us with customer photos or other sensitive data that are not authorized by the parties involved through these platforms.

9.5 Cross-Border Data Transfer

Service providers of Instant Messaging Platforms (including Meta Platforms, Inc., the service provider of WhatsApp whether Business or general consumer version) may transfer the data you provide via the relevant platforms to places outside Hong Kong (including but not limited to the United States) for storage and processing. If it is the Business version of WhatsApp, it may also involve their authorized third-party Business Solution Providers. Such transfers will be subject to the respective service providers' own privacy policies.

9.6 Account Security

We will take reasonable and appropriate security measures based on the platform version actually used and operational needs. Regarding the relevant instant messaging business accounts, we have enabled two-factor authentication and regularly review access permissions. If individual branches temporarily use the general consumer version of WhatsApp, their account security settings will be limited by the security features of that version itself; in such cases, Dunn Education will still make every effort to take reasonable measures to strengthen the security of the relevant accounts and communication records. However, you should note that service providers of Instant Messaging Platforms may restrict, suspend, or terminate business or other accounts due to their policies or technical reasons. We recommend that you stay in touch with us through multiple channels such as email, phone, or website forms.

9.7 Limitation of Liability of Service Providers

Service providers of Instant Messaging Platforms bear limited liability for losses caused by service interruptions, data transmission errors, or account terminations. Dunn Education shall not be liable for any indirect, incidental, or consequential losses caused by the actions of Instant Messaging Platform service providers.

9.8 Our Best Practices


Web Browsing Data and "Cookies"


Our web servers will collect information regarding your time online to provide anonymous, aggregated statistical data on server usage, thereby better meeting the needs and expectations of our website visitors. Such information may include, but is not limited to, browser type and version, operating system, IP address, and/or domain name, as well as Uniform Resource Locators (URLs). To provide a more relevant and personalized service, we may use "cookies" to store or track information regarding customers' activities on the website. "Cookies" are small amounts of data sent from a web server to a browser and stored on a computer's hard drive. Thereby, when you use our website, we can provide you with personalized services, and/or identify you as you navigate across multiple pages during a single or multiple online sessions, as well as record your activities and preferences on our website. You may delete cookies on your web browser, but doing so may prevent you from accessing all parts of our website.


Links to Other Websites


Our website, social media platforms, applications, or messages sent via instant messaging applications (including WhatsApp) may contain links to other addresses, pages, and mobile applications operated by third parties. We are not responsible for the manner in which such third parties (including instant messaging application service providers and their affiliates) handle your personal data; you should review the privacy policies of these third parties to understand how they may use your personal data.


Data Access, Accuracy and Updates


You have the right to email at any time to access, correct, or permanently delete any of your personal data stored by Dunn Education. However, the requested personal data must exist in a format that allows us to practicably and reasonably access or process it. We may charge a reasonable fee for processing data access requests. We take all reasonable precautions to ensure that the personal data we collect, use, and disclose is accurate, complete, and up-to-date; however, the accuracy of personal data largely depends on the information you provide. Please notify us if you find any errors in your personal data records; and please also inform us whenever there are changes or updates to your personal data, such as your address, contact phone number, or email address. You have the right to request access to and correction of your personal data, please contact:

If you have any of the above requests, please contact us in writing.


CCTV Policy

Dunn Education has installed Closed-Circuit Television (CCTV) surveillance systems (hereinafter referred to as "CCTV Systems") in some of its operating centers (collectively referred to as "Dunn Education Centers") with the aim of ensuring a safer educational center environment and protecting the rights and interests of all colleagues and students. This policy aims to clarify the purpose, use, and management of the CCTV Systems in Dunn Education Centers, as well as the procedures to be followed, with reference to the Personal Data (Privacy) Ordinance (Cap. 486) (hereinafter "PDPO") and relevant guidelines issued by the Privacy Commissioner for Personal Data, including the "Guidance on CCTV Surveillance and Use of Drones" updated and issued by the Office of the Privacy Commissioner for Personal Data in October 2025. All employees and personnel responsible for managing the CCTV Systems or video footage should be familiar with and fully comply with this policy and the relevant requirements and procedures below.

Purpose

The purposes for which Dunn Education installs CCTV Systems are as follows ("Specified Purposes"):

Dunn Education has strived to ensure that the installed CCTV Systems have maximum efficacy in achieving the aforementioned Specified Purposes, but cannot guarantee that the systems will cover or detect every incident within the surveillance area. Dunn Education recognizes that CCTV cameras can only be used for the lawful purpose of security surveillance and has carefully balanced the need for surveillance (risk assessment) against personal privacy to ensure that all installations are necessary and not excessive.

Policy Overview / Scope

All CCTV Systems installed in Dunn Education Centers are centrally managed by the Security Team of Dunn Education Management Office (DMO) (hereinafter "DMO Security Team"). This policy covers all CCTV cameras with viewing and recording capabilities and any network cameras/recording equipment (collectively "CCTV Systems") across Dunn Education Centers.

Operation of CCTV Systems

Only staff designated by the Senior Manager of Dunn Education Management Office ("DMO Security Team") are permitted to operate the CCTV Systems. Dunn Education will specify the operation scope and permission limits for designated staff based on individual roles and job titles. Designated staff must strictly adhere to the specified scope and limits when operating the CCTV Systems.

CCTV Deployment and Operation

The CCTV Systems installed in Dunn Education Centers are equipped with audio recording functions; personal images and audio can be extracted from the system's video files. The system cameras use only fixed viewing angles and operate within specified hours. CCTV Systems are deployed and installed in appropriate locations solely for the Specified Purposes, including classrooms and corridors; CCTV Systems will not be installed in areas where individuals have a reasonable expectation of privacy, such as restrooms or changing facilities. The decision to install CCTV Systems in specific locations is the result of balancing the management of risk against the potential impact on personal data privacy. Prior approval from the Senior Manager ("DMO Security Team") must be obtained before installing any CCTV Systems. Any CCTV Systems installed without proper authorization will be immediately dismantled without prior notice. Conspicuous notices must be placed near CCTV cameras or near the entrances to surveillance areas, stating the purpose of surveillance, the identity of the organization responsible for operating the CCTV Systems, and contact information for inquiries regarding personal data privacy, to inform Dunn Education Center personnel, students, and visitors that CCTV Systems are in operation. Except under special circumstances related to criminal investigations or serious misconduct and with the written approval of senior management, hidden cameras shall not be used.

Retention and Deletion of CCTV Footage

All CCTV footage and data from CCTV Systems should be stored centrally and remotely on secure servers by the DMO Security Team, with appropriate access and security arrangements, including but not limited to password protection and encryption. Except for special circumstances involving incident investigations, all CCTV footage will only be retained for 30 days from the date of recording, and will be automatically, permanently, and securely deleted upon expiration of this period.

Access to CCTV Footage

Only personnel authorized by the Senior Manager of the DMO Security Team may access and view live and recorded CCTV footage, and only for authorized purposes. The viewing of footage should be conducted within designated secure offices. Generally, members of Dunn Education will not be granted access to view live CCTV footage, unless specifically approved by the Senior Manager of the DMO Security Team with appropriate security controls in place to protect the data, such as for staff who need to respond immediately to emergencies or possess professional skills for live monitoring. Generally, access to view recorded CCTV footage will also not be granted to members of Dunn Education, unless involving special circumstances, such as investigations of incidents related to health, safety, or security. The DMO Security Team will review every application and process such applications in accordance with the requirements of the PDPO.

Technology

All CCTV Systems deployed and installed in Dunn Education Centers must meet specified specifications and standards, and must not infringe upon personal data privacy. Although CCTV Systems may generate high-definition images and possess analytical functions, such functions are only to be used when investigating incidents.

Training

All employees and personnel responsible for managing CCTV Systems or having access to CCTV footage should receive appropriate training to ensure they understand and can fully comply with the privacy obligations and procedures under this policy.

CCTV Systems Review

Dunn Education will conduct regular reviews to ensure that the deployment of CCTV Systems aligns with the intended purposes stipulated in this policy, and remains necessary and appropriate.

Review of this Policy

Dunn Education will regularly review the use of CCTV and the content of this policy, and will make amendments from time to time in response to relevant laws or guidelines in force at the time, as well as current circumstances.

Inquiries

Any inquiries or complaints regarding the use of CCTV Systems by Dunn Education should be submitted in writing to the Senior Manager ("DMO Security Team") of Dunn Education at info@dunn.hk. The Security Senior Manager ("DMO Security Team") of Dunn Education will consult legal counsel when necessary.


Image Statement

Dunn Education will take photos or videos of students or teachers without affecting classes, and may share such images via instant messaging applications (including WhatsApp). Such photos or images may appear in public places, on the internet, or on instant messaging application platforms. If you object to such photos or images appearing in public places, on the internet, or on instant messaging application platforms, please inform us by email (info@dunn.hk), and the email content must include:


Contact Us

If you have any inquiries or concerns regarding our Privacy Policy, you may contact us by email at any time:

This Privacy Policy Statement may be amended from time to time, and all processing of personal data will be governed by the most recent version of this Privacy Policy Statement (please refer to our official website for details).

Privacy Policy Statement


Last updated: September 2026