01. About this policy
This policy explains how HKSIDataBase handles personal information when you visit hksidatabase.com, create an account, use our exam preparation services, purchase access or contact us. We handle personal data with reference to Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486). It also covers account, order and study records retained from earlier versions of our service.
This policy describes our information practices. It does not change your purchased access period or the terms of your purchase.
02. Information we collect
- Account details: your name, email, login identifier, password hash, language and account preferences. If you choose Google sign-in, we receive the identity information needed to verify and link your account, such as your Google account identifier, name and verified email. We do not receive your Google password.
- Purchases and access: selected courses, access periods, order totals, transaction references, payment status, billing information supplied at checkout and membership history.
- Study activity: submitted answers, quiz results, progress, wrong-question records, bookmarks and completed study resources. Free practice and free study flows may also record your chosen paper, language and originating page.
- Support and feedback: the name, email and message you submit, relevant exam or question details, request reference and submission time.
- Technical and communication records: session identifiers, request and security logs, network and browser information, delivery status, subscription preferences and unsubscribe records. Temporary abuse-prevention controls may use a keyed hash of your network address.
You can browse public pages without an account. Information requested for sign-in, a purchase, results delivery or a support reply is needed to provide that function. Optional fields are identified in the relevant form.
We record the time of your latest successful sign-in and the previous successful sign-in. These timestamps appear in your dashboard to help you recognise account activity. Continuing an existing session does not replace them.
03. How we use your information
We use your information to create and authenticate accounts, process payments, activate and renew course access, deliver study tools, save progress, send receipts and account messages, answer support requests, correct problems and protect the service from fraud or misuse. We also use course and language selections to make requested study communications relevant.
We may retain and use necessary records to meet accounting obligations, handle disputes and enforce our service terms. If we propose to use your personal data for a new purpose that requires consent, we will seek that consent.
05. Cookies and browser storage
When you visit a member's referral link, we use a secure referral cookie for up to 30 days to recognise that browser and attribute a new account to the first valid referral. We record the referring member, the visit and signup times, and whether a qualifying payment produces a study ticket. The referring member sees aggregate click, signup and paid-referral counts and their own ticket history; they do not receive your name, email, order amount or study records. Refund and dispute status is used to cancel ineligible rewards.
We use secure cookies for account sessions, Google sign-in and checkout continuity. Browser local storage remembers your cart and relevant interface preferences. Free practice can keep answers and progress in your browser until you submit them.
The support chat keeps drafts and conversation state in this tab’s session storage. Your message, name and email are sent to our support server when you complete the submission steps. Closing the chat keeps it available in the same tab; saved chat state is discarded after eight hours when reopened. Starting a new conversation clears the previous local conversation.
You can clear or block cookies and browser storage through your browser settings. Doing so may sign you out, empty your cart or remove unsent drafts and local progress. It does not delete information already submitted to us. Third-party resources may make requests or use their own storage when loaded.
06. Study emails and your preferences
Free trial, free study, checkout and support flows may add eligible contacts to our study follow-up or cart reminder sequences. These messages can include guidance and offers about our exam preparation services. Existing unsubscribe and suppression preferences are respected.
You can opt out of promotional study emails at any time, without charge, using the unsubscribe link in an email, your account’s email preferences or a request to [email protected]. We maintain a limited suppression record to respect that choice. Opting out does not prevent essential purchase, security or account messages, or a reply to a support request you make. Where the law requires consent for direct marketing, that requirement applies independently of this policy.
07. Retention and security
We retain information for as long as needed for the purpose for which it was collected, including providing your account and study history, handling support, meeting applicable record-keeping duties and resolving disputes. Different records may need different retention periods. Expiry of a course does not automatically delete your account, results or transaction history. Backup copies may remain for a limited recovery period after removal from active systems.
We use encrypted connections, restricted administrative access, password hashing, validation and controls against repeated abusive requests. No internet service can guarantee absolute security. Please keep your login credentials private and avoid sending passwords or full payment details in support messages.
08. Your rights and how to contact us
You may request access to, or correction of, the personal data we hold about you. You can also ask us to review whether information is still needed, request account closure or deletion, or withdraw marketing preferences. Some records may need to be retained for legal, accounting, security or dispute-related reasons; we will explain relevant limits when responding.
Send requests to [email protected] with the subject “Privacy request”. Include the email associated with your account and a description of your request. We may ask for proportionate verification to protect your information. We handle access and correction requests within the applicable statutory requirements and explain any permitted fee before proceeding.
If you have concerns, please contact us first. You can also contact Hong Kong’s Office of the Privacy Commissioner for Personal Data. We may update this policy when our services or practices change. The date above identifies the current version; material changes will be brought to your attention where appropriate.
繁體中文
私隱政策
最後更新：2026年9月14日
本政策說明 HKSIDataBase 在你瀏覽 hksidatabase.com、註冊帳戶、購買課程、使用溫習服務或聯絡我們時如何處理個人資料。我們參照香港《個人資料（私隱）條例》（第486章）處理資料。本政策亦適用於舊有服務所保留的帳戶、訂單及學習紀錄，並不更改已購課程的使用期或購買條款。
我們收集的資料及用途
資料包括姓名、電郵、登入識別資料、密碼雜湊值、語言及帳戶設定；訂單、付款參考、課程權限及會籍紀錄；已提交答案、測驗成績、進度、錯題及書籤；以及支援訊息、意見、試卷資料、來源頁面與提交時間。我們亦處理工作階段、網絡、瀏覽器、安全日誌、電郵傳遞及退訂紀錄。若你選用 Google 登入，我們會取得核實及連結帳戶所需的識別資料、姓名和已驗證電郵，不會取得你的 Google 密碼。
我們使用資料提供登入、付款、課程開通及續期、溫習工具、進度儲存、收據、帳戶通知、支援及保安服務，並按所選試卷和語言提供相關學習資訊。部分紀錄亦用於法定記帳、處理爭議及執行服務條款。如新的使用目的依法需要同意，我們會徵求同意。你可在不註冊的情況下瀏覽公開頁面；特定功能所要求的資料則用於提供該功能。
服務供應商及資料披露
獲授權員工及服務供應商會按工作需要處理資料。我們使用 Cloudflare 提供網站傳遞及網絡保安、DigitalOcean 託管伺服器及資料庫、Amazon SES 傳送電郵、Stripe 處理結帳及付款，以及 Google 提供可選的登入功能。付款資料於 Stripe 結帳頁面輸入；我們取得訂單及交易資料，不儲存完整信用卡號碼或安全碼。舊訂單可能包含當時付款平台的交易參考。
供應商可能在香港以外處理資料，其獨立服務受各自私隱條款規管。我們可能因法律要求、合法請求或法律申索而披露必要資料。我們不出售你的個人資料。外部網站、考試機構及嵌入式第三方資源亦有其私隱安排。
Cookie、瀏覽器儲存及支援對話
當你瀏覽會員的推薦連結時，我們會使用最多保留30天的安全 Cookie，識別該瀏覽器並將新賬戶歸屬於首個有效推薦。我們會記錄推薦會員、瀏覽及登記時間，以及合資格付款是否產生學習券。推薦會員只會看到點擊、登記及付費推薦的統計數字，以及自己的學習券紀錄，不會取得你的姓名、電郵、訂單金額或學習紀錄。我們會使用退款及付款爭議狀態取消不再合資格的獎賞。
安全 Cookie 用於帳戶登入、Google 登入及結帳連貫性；本機儲存用於購物車和介面設定。免費練習可在提交前於瀏覽器保存答案及進度。支援聊天的草稿保存在目前分頁的工作階段儲存空間，完成提交步驟後才將訊息、姓名及電郵傳送至伺服器。關閉聊天面板會保留同一分頁中的對話；重新開啟時，超過八小時的儲存狀態會被清除。開始新對話會清除上一段本機對話。
你可透過瀏覽器清除或封鎖 Cookie 及儲存資料，但可能因此登出、清空購物車或失去未提交的草稿及進度。此操作不會刪除已提交給我們的資料。第三方資源載入時可能發出網絡請求或使用自己的儲存空間。
電郵選擇
免費試用、免費筆記、結帳及支援流程可能將合資格聯絡人加入學習跟進或購物車提醒電郵序列，內容可包括考試指引及課程優惠。我們尊重現有的退訂及停止寄送設定。你可隨時使用電郵中的退訂連結、帳戶電郵設定，或聯絡 [email protected] 免費停止推廣電郵。我們會保留有限的停止寄送紀錄以尊重你的選擇。退訂不影響必要的交易、保安、帳戶通知或你所要求的支援回覆。直接促銷所需的法定同意要求，獨立於本政策適用。
保存及保安
我們按收集目的所需的期間保存資料，包括提供帳戶及學習紀錄、支援、法定記帳及處理爭議。不同紀錄的保存需要可能不同，課程到期不會自動刪除帳戶或紀錄。資料從使用中的系統移除後，備份可能在有限復原期間內保留。我們採用加密連線、管理權限限制、密碼雜湊、資料驗證及防濫用措施。互聯網服務無法保證絕對安全，請勿在支援訊息中提供密碼或完整付款資料。
查閱、更正及聯絡
你可要求查閱或更正個人資料，亦可要求我們檢視保存需要、關閉帳戶、刪除資料或撤回推廣偏好。部分資料可能因法律、記帳、保安或爭議需要而保留；我們會說明適用限制。請以「私隱資料要求」為主旨電郵至 [email protected]，提供帳戶電郵及要求內容。我們可能進行適度身份核實，按法定要求處理查閱及更正要求，並在處理前說明任何依法准許收取的費用。
如有疑慮，歡迎先聯絡我們，亦可聯絡香港個人資料私隱專員公署。我們可能因服務或處理方式改變而更新本政策，並在適當情況下通知重大改動。
我們會記錄最近一次及上一次成功登入的時間，並在學習中心顯示，方便你識別賬戶活動。繼續使用現有登入狀態不會覆寫這些時間。