Who we are
We are the Institute of Leadership and Management Foundation. We are social enterprise registered in Hong Kong SAR as a non-profit under Section 88 of the Inland Revenue Ordinance. We aspire to offer a multitude of services to our community members, including empowerment, education and incubation. Our website address is: https://ilm.hk.
What personal data we collect and why we collect it
We collect personal data from you when you visit our website, leave comments, register an account, subscribe to our newsletter, participate in our events or programs, make a donation, or contact us. The types of personal data we collect may include your name, email address, phone number, address, IP address, browser user agent string, profile picture, and any other information you voluntarily provide to us.
We collect and process your personal data for the following purposes:
- To provide you with our services and fulfill our contractual obligations to you;
- To communicate with you and respond to your inquiries or requests;
- To send you newsletters, updates, invitations, and other information that may be of interest to you;
- To process your donations and issue receipts;
- To comply with our legal obligations and enforce our rights;
- To improve our website and services and measure our performance;
- To prevent fraud, spam, abuse, and other harmful activities;
- To protect our legitimate interests and those of our users and partners.
The legal basis for collecting and processing your personal data depends on the specific context in which we collect it. Generally, we rely on one or more of the following grounds:
- Your consent: We will ask for your consent before collecting or processing your personal data for certain purposes, such as sending you marketing communications or using cookies. You can withdraw your consent at any time by contacting us or following the instructions in our communications.
- Contract: We will collect and process your personal data when it is necessary to perform a contract with you or take steps at your request before entering into a contract with you, such as providing you with our services or registering you for our events or programs.
- Legal obligation: We will collect and process your personal data when it is necessary to comply with a legal obligation that we are subject to, such as reporting to the tax authorities or cooperating with law enforcement agencies.
- Legitimate interest: We will collect and process your personal data when it is necessary for our legitimate interests or those of a third party, provided that they are not overridden by your interests or rights. For example, we may use your personal data to improve our website and services, prevent fraud and abuse, protect our rights and property, or support our social mission.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
You can manage your cookie preferences by changing your browser settings or using the cookie consent tool on our website. However, please note that some cookies are essential for the operation of our website and disabling them may affect your user experience or access to certain features or services.
Embedded content from other websites Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Who we share your data with
We do not purposefully or knowingly share your data with any external parties, except as described below:
- Legal authorities: We may share your data with law enforcement agencies, courts, regulators, or other authorities when we are required or permitted by law to do so, such as in response to a subpoena, court order, warrant, or legal process; when we believe in good faith that it is necessary to protect our rights, property, safety, or interests; or when we cooperate with an investigation or a request from a public agency.
- Others: We may share your data with other parties with your consent or at your direction.
The servers hosting this website are located in Singapore, and we manage the website on our own.
How we protect your data
We take reasonable steps to protect your data from unauthorized access, use, disclosure, modification, or destruction. We use appropriate technical and organizational measures to safeguard your data against accidental loss, theft, misuse, interference, or damage. Some of the measures we use include encryption, firewalls, access controls, backups, audits, and training.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account password and any other authentication credentials that you use to access our website or services. You should also be careful about how you disclose or share your personal data online.
How long we retain your data
We retain your data for as long as it is necessary to fulfill the purposes for which we collected it, or as required or permitted by law. The retention period may vary depending on the type and nature of the data, the purpose and legal basis of processing, and our legal obligations and business needs. When we no longer need your data, we will delete it or anonymize it in a secure manner.
What rights you have over your data You have certain rights over your data under the PDPO and other applicable laws. These rights may include:
- The right to access: You have the right to request a copy of the personal data we hold about you and to verify its accuracy, completeness, and lawfulness.
- The right to correction: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- The right to erasure: You have the right to request that we erase any personal data we hold about you that is no longer necessary, relevant, or lawful, or that you have withdrawn your consent to.
- The right to object: You have the right to object to our processing of your personal data for certain purposes, such as direct marketing, profiling, or legitimate interests, unless we have compelling reasons to continue processing it.
- The right to restrict: You have the right to request that we restrict our processing of your personal data in certain circumstances, such as when you contest its accuracy, lawfulness, or necessity, or when we are considering your objection or erasure request.
- The right to data portability: You have the right to request that we provide you with a copy of your personal data in a structured, commonly used, and machine-readable format, or transmit it to another controller, where technically feasible and legally permissible.
- The right to withdraw consent: You have the right to withdraw your consent to our processing of your personal data at any time, without affecting the lawfulness of the processing before the withdrawal.
- The right to complain: You have the right to lodge a complaint with us or the PCPD if you believe that we have violated your privacy rights or breached the PDPO.
To exercise any of these rights, please contact us using the contact information below. We will respond to your request within a reasonable time and in accordance with our legal obligations and business policies. We may ask you to provide proof of your identity and sufficient details about your request before processing it. We may also charge a reasonable fee for handling your request if it is manifestly unfounded, excessive, or repetitive.
How to contact us