01. About this policy
This policy explains how HKSIDataBase handles personal information when you visit hksidatabase.com, create an account, use our exam preparation services, purchase access or contact us. We handle personal data with reference to Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486). It also covers account, order and study records retained from earlier versions of our service.
This policy describes our information practices. It does not change your purchased access period or the terms of your purchase.
02. Information we collect
- Account details: your name, email, login identifier, password hash, language and account preferences. If you choose Google sign-in, we receive the identity information needed to verify and link your account, such as your Google account identifier, name and verified email. We do not receive your Google password.
- Purchases and access: selected courses, access periods, order totals, transaction references, payment status, billing information supplied at checkout and membership history.
- Study activity: submitted answers, quiz results, progress, wrong-question records, bookmarks and completed study resources. Free practice and free study flows may also record your chosen paper, language and originating page.
- Support and feedback: the name, email and message you submit, relevant exam or question details, request reference and submission time.
- Technical and communication records: session identifiers, request and security logs, network and browser information, delivery status, subscription preferences and unsubscribe records. Temporary abuse-prevention controls may use a keyed hash of your network address.
You can browse public pages without an account. Information requested for sign-in, a purchase, results delivery or a support reply is needed to provide that function. Optional fields are identified in the relevant form.
We record the time of your latest successful sign-in and the previous successful sign-in. These timestamps appear in your dashboard to help you recognise account activity. Continuing an existing session does not replace them.
03. How we use your information
We use your information to create and authenticate accounts, process payments, activate and renew course access, deliver study tools, save progress, send receipts and account messages, answer support requests, correct problems and protect the service from fraud or misuse. We also use course and language selections to make requested study communications relevant.
We may retain and use necessary records to meet accounting obligations, handle disputes and enforce our service terms. If we propose to use your personal data for a new purpose that requires consent, we will seek that consent.
05. Cookies and browser storage
When you visit a member's referral link, we use a secure referral cookie for up to 30 days to recognise that browser and attribute a new account to the first valid referral. We record the referring member, the visit and signup times, and whether a qualifying payment produces a study ticket. The referring member sees aggregate click, signup and paid-referral counts and their own ticket history; they do not receive your name, email, order amount or study records. Refund and dispute status is used to cancel ineligible rewards.
We use secure cookies for account sessions, Google sign-in and checkout continuity. Browser local storage remembers your cart and relevant interface preferences. Free practice can keep answers and progress in your browser until you submit them.
The support chat keeps drafts and conversation state in this tab’s session storage. Your message, name and email are sent to our support server when you complete the submission steps. Closing the chat keeps it available in the same tab; saved chat state is discarded after eight hours when reopened. Starting a new conversation clears the previous local conversation.
You can clear or block cookies and browser storage through your browser settings. Doing so may sign you out, empty your cart or remove unsent drafts and local progress. It does not delete information already submitted to us. Third-party resources may make requests or use their own storage when loaded.
Website-use and conversion measurement
We use Google Analytics 4 through Cloudflare Zaraz to understand visits and how people use practice, registration, course, cart and checkout features. Additional events can include the paper, study language, course identifier, browser/session identifiers, transaction reference and paid or refunded amount in HKD. Transaction references help avoid duplicate counting. These analytics event payloads do not include your name, email address, login credentials, card details, submitted question answers or support messages.
The additional events respect supported Do Not Track and Global Privacy Control browser signals and existing analytics opt-out settings. If analytics context is unavailable or opted out, a purchase can still complete without being attributed in analytics. Account, order, payment and study records used to provide the service are separate from this measurement.
06. Study emails and your preferences
Free trial, free study, checkout and support flows may add eligible contacts to our study follow-up or cart reminder sequences. These messages can include guidance and offers about our exam preparation services. Existing unsubscribe and suppression preferences are respected.
You can opt out of promotional study emails at any time, without charge, using the unsubscribe link in an email, your account’s email preferences or a request to [email protected]. We maintain a limited suppression record to respect that choice. Opting out does not prevent essential purchase, security or account messages, or a reply to a support request you make. Where the law requires consent for direct marketing, that requirement applies independently of this policy.
07. Retention and security
We retain information for as long as needed for the purpose for which it was collected, including providing your account and study history, handling support, meeting applicable record-keeping duties and resolving disputes. Different records may need different retention periods. Expiry of a course does not automatically delete your account, results or transaction history. Backup copies may remain for a limited recovery period after removal from active systems.
We use encrypted connections, restricted administrative access, password hashing, validation and controls against repeated abusive requests. No internet service can guarantee absolute security. Please keep your login credentials private and avoid sending passwords or full payment details in support messages.
08. Your rights and how to contact us
You may request access to, or correction of, the personal data we hold about you. You can also ask us to review whether information is still needed, request account closure or deletion, or withdraw marketing preferences. Some records may need to be retained for legal, accounting, security or dispute-related reasons; we will explain relevant limits when responding.
Send requests to [email protected] with the subject “Privacy request”. Include the email associated with your account and a description of your request. We may ask for proportionate verification to protect your information. We handle access and correction requests within the applicable statutory requirements and explain any permitted fee before proceeding.
If you have concerns, please contact us first. You can also contact Hong Kong’s Office of the Privacy Commissioner for Personal Data. We may update this policy when our services or practices change. The date above identifies the current version; material changes will be brought to your attention where appropriate.
繁体中文
私隐政策
最后更新：2026年10月18日
本政策说明 HKSIDataBase 在你浏览 hksidatabase.com、注册帐户、购买课程、使用温习服务或联络我们时如何处理个人资料。我们参照香港《个人资料（私隐）条例》（第486章）处理资料。本政策亦适用于旧有服务所保留的帐户、订单及学习纪录，并不更改已购课程的使用期或购买条款。
我们收集的资料及用途
资料包括姓名、电邮、登入识别资料、密码杂凑值、语言及帐户设定；订单、付款参考、课程权限及会籍纪录；已提交答案、测验成绩、进度、错题及书签；以及支援讯息、意见、试卷资料、来源页面与提交时间。我们亦处理工作阶段、网络、浏览器、安全日志、电邮传递及退订纪录。若你选用 Google 登入，我们会取得核实及连结帐户所需的识别资料、姓名和已验证电邮，不会取得你的 Google 密码。
我们使用资料提供登入、付款、课程开通及续期、温习工具、进度储存、收据、帐户通知、支援及保安服务，并按所选试卷和语言提供相关学习资讯。部分纪录亦用于法定记帐、处理争议及执行服务条款。如新的使用目的依法需要同意，我们会征求同意。你可在不注册的情况下浏览公开页面；特定功能所要求的资料则用于提供该功能。
服务供应商及资料披露
获授权员工及服务供应商会按工作需要处理资料。我们使用 Cloudflare 提供网站传递及网络保安、DigitalOcean 托管伺服器及资料库、Amazon SES 传送电邮、Stripe 处理结帐及付款，以及 Google 提供可选的登入功能。付款资料于 Stripe 结帐页面输入；我们取得订单及交易资料，不储存完整信用卡号码或安全码。旧订单可能包含当时付款平台的交易参考。
供应商可能在香港以外处理资料，其独立服务受各自私隐条款规管。我们可能因法律要求、合法请求或法律申索而披露必要资料。我们不出售你的个人资料。外部网站、考试机构及嵌入式第三方资源亦有其私隐安排。
Cookie、浏览器储存及支援对话
当你浏览会员的推荐连结时，我们会使用最多保留30天的安全 Cookie，识别该浏览器并将新账户归属于首个有效推荐。我们会记录推荐会员、浏览及登记时间，以及合资格付款是否产生学习券。推荐会员只会看到点击、登记及付费推荐的统计数字，以及自己的学习券纪录，不会取得你的姓名、电邮、订单金额或学习纪录。我们会使用退款及付款争议状态取消不再合资格的奖赏。
安全 Cookie 用于帐户登入、Google 登入及结帐连贯性；本机储存用于购物车和介面设定。免费练习可在提交前于浏览器保存答案及进度。支援聊天的草稿保存在目前分页的工作阶段储存空间，完成提交步骤后才将讯息、姓名及电邮传送至伺服器。关闭聊天面板会保留同一分页中的对话；重新开启时，超过八小时的储存状态会被清除。开始新对话会清除上一段本机对话。
你可透过浏览器清除或封锁 Cookie 及储存资料，但可能因此登出、清空购物车或失去未提交的草稿及进度。此操作不会删除已提交给我们的资料。第三方资源载入时可能发出网络请求或使用自己的储存空间。
电邮选择
免费试用、免费笔记、结帐及支援流程可能将合资格联络人加入学习跟进或购物车提醒电邮序列，内容可包括考试指引及课程优惠。我们尊重现有的退订及停止寄送设定。你可随时使用电邮中的退订连结、帐户电邮设定，或联络 [email protected] 免费停止推广电邮。我们会保留有限的停止寄送纪录以尊重你的选择。退订不影响必要的交易、保安、帐户通知或你所要求的支援回复。直接促销所需的法定同意要求，独立于本政策适用。
保存及保安
我们按收集目的所需的期间保存资料，包括提供帐户及学习纪录、支援、法定记帐及处理争议。不同纪录的保存需要可能不同，课程到期不会自动删除帐户或纪录。资料从使用中的系统移除后，备份可能在有限复原期间内保留。我们采用加密连线、管理权限限制、密码杂凑、资料验证及防滥用措施。互联网服务无法保证绝对安全，请勿在支援讯息中提供密码或完整付款资料。
查阅、更正及联络
你可要求查阅或更正个人资料，亦可要求我们检视保存需要、关闭帐户、删除资料或撤回推广偏好。部分资料可能因法律、记帐、保安或争议需要而保留；我们会说明适用限制。请以「私隐资料要求」为主旨电邮至 [email protected]，提供帐户电邮及要求内容。我们可能进行适度身份核实，按法定要求处理查阅及更正要求，并在处理前说明任何依法准许收取的费用。
如有疑虑，欢迎先联络我们，亦可联络香港个人资料私隐专员公署。我们可能因服务或处理方式改变而更新本政策，并在适当情况下通知重大改动。
我们会记录最近一次及上一次成功登入的时间，并在学习中心显示，方便你识别账户活动。继续使用现有登入状态不会覆写这些时间。
网站使用及转换量度
我们透过 Cloudflare Zaraz 使用 Google Analytics 4，了解网站浏览，以及练习、注册、课程、购物车和结帐功能的使用情况。新增的分析事件可包括试卷、温习语言、课程识别资料、浏览器及工作阶段识别资料、交易参考，以及以港元计算的实付或退款金额。交易参考用于避免重复计算。这些分析事件不包括姓名、电邮、登入凭证、信用卡资料、已提交的题目答案或支援讯息。
新增事件尊重支援的浏览器 Do Not Track、Global Privacy Control 讯号及现有分析退出设定。没有可用分析资料或已选择退出时，仍可完成购买，但可能无法于分析报表归属来源。提供服务所需的帐户、订单、付款及学习纪录与这些量度分开处理。