Who we are

We are the Institute of Leadership and Management Foundation. We are social enterprise registered in Hong Kong SAR as a non-profit under Section 88 of the Inland Revenue Ordinance. We aspire to offer a multitude of services to our community members, including empowerment, education and incubation. Our website address is: https://ilm.hk.

What personal data we collect and why we collect it

We collect personal data from you when you visit our website, leave comments, register an account, subscribe to our newsletter, participate in our events or programs, make a donation, or contact us. The types of personal data we collect may include your name, email address, phone number, address, IP address, browser user agent string, profile picture, and any other information you voluntarily provide to us.

We collect and process your personal data for the following purposes:

  • To provide you with our services and fulfill our contractual obligations to you;
  • To communicate with you and respond to your inquiries or requests;
  • To send you newsletters, updates, invitations, and other information that may be of interest to you;
  • To process your donations and issue receipts;
  • To comply with our legal obligations and enforce our rights;
  • To improve our website and services and measure our performance;
  • To prevent fraud, spam, abuse, and other harmful activities;
  • To protect our legitimate interests and those of our users and partners.

The legal basis for collecting and processing your personal data depends on the specific context in which we collect it. Generally, we rely on one or more of the following grounds:

  • Your consent: We will ask for your consent before collecting or processing your personal data for certain purposes, such as sending you marketing communications or using cookies. You can withdraw your consent at any time by contacting us or following the instructions in our communications.
  • Contract: We will collect and process your personal data when it is necessary to perform a contract with you or take steps at your request before entering into a contract with you, such as providing you with our services or registering you for our events or programs.
  • Legal obligation: We will collect and process your personal data when it is necessary to comply with a legal obligation that we are subject to, such as reporting to the tax authorities or cooperating with law enforcement agencies.
  • Legitimate interest: We will collect and process your personal data when it is necessary for our legitimate interests or those of a third party, provided that they are not overridden by your interests or rights. For example, we may use your personal data to improve our website and services, prevent fraud and abuse, protect our rights and property, or support our social mission.


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.


If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

We also use cookies and similar technologies to collect information about how you use our website, such as the pages you visit, the time and duration of your visit, the links you click, and the device you use. We use this information to analyze our website traffic, improve our website functionality and performance, and deliver relevant content and advertisements to you.

Some of the cookies we use are provided by third-party service providers, such as Google Analytics, Facebook Pixel, and Mailchimp. These service providers may use cookies and other technologies to collect information about your online activities across different websites and platforms over time. They may also use this information to provide us with reports and insights on our website performance and user behavior, or to display targeted ads to you on other websites or platforms. You can learn more about how these service providers use cookies and how to opt out of their cookies by visiting their respective privacy policies or opt-out pages.

You can manage your cookie preferences by changing your browser settings or using the cookie consent tool on our website. However, please note that some cookies are essential for the operation of our website and disabling them may affect your user experience or access to certain features or services.

Embedded content from other websites Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

This privacy policy does not apply to any third-party websites or services that we link to or use. We are not responsible for the privacy practices or content of such websites or services. We encourage you to read the privacy policies of these websites or services before accessing or using them.

Who we share your data with

We do not purposefully or knowingly share your data with any external parties, except as described below:

  • Service providers: We may share your data with third-party service providers that we engage to perform certain functions or provide certain services on our behalf, such as hosting our website, sending emails, processing payments, providing analytics, or delivering ads. We only share the data that is necessary for them to perform their functions or provide their services, and we require them to protect your data in accordance with this privacy policy and applicable laws.
  • Partners: We may share your data with our partners who collaborate with us in delivering our services or programs to you, such as sponsors, donors, mentors, trainers, or facilitators. We only share the data that is necessary for them to perform their roles or provide their support, and we require them to protect your data in accordance with this privacy policy and applicable laws.
  • Legal authorities: We may share your data with law enforcement agencies, courts, regulators, or other authorities when we are required or permitted by law to do so, such as in response to a subpoena, court order, warrant, or legal process; when we believe in good faith that it is necessary to protect our rights, property, safety, or interests; or when we cooperate with an investigation or a request from a public agency.
  • Others: We may share your data with other parties with your consent or at your direction.

The servers hosting this website are located in Singapore, and we manage the website on our own.

How we protect your data

We take reasonable steps to protect your data from unauthorized access, use, disclosure, modification, or destruction. We use appropriate technical and organizational measures to safeguard your data against accidental loss, theft, misuse, interference, or damage. Some of the measures we use include encryption, firewalls, access controls, backups, audits, and training.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account password and any other authentication credentials that you use to access our website or services. You should also be careful about how you disclose or share your personal data online.

How long we retain your data

We retain your data for as long as it is necessary to fulfill the purposes for which we collected it, or as required or permitted by law. The retention period may vary depending on the type and nature of the data, the purpose and legal basis of processing, and our legal obligations and business needs. When we no longer need your data, we will delete it or anonymize it in a secure manner.

What rights you have over your data You have certain rights over your data under the PDPO and other applicable laws. These rights may include:

  • The right to access: You have the right to request a copy of the personal data we hold about you and to verify its accuracy, completeness, and lawfulness.
  • The right to correction: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • The right to erasure: You have the right to request that we erase any personal data we hold about you that is no longer necessary, relevant, or lawful, or that you have withdrawn your consent to.
  • The right to object: You have the right to object to our processing of your personal data for certain purposes, such as direct marketing, profiling, or legitimate interests, unless we have compelling reasons to continue processing it.
  • The right to restrict: You have the right to request that we restrict our processing of your personal data in certain circumstances, such as when you contest its accuracy, lawfulness, or necessity, or when we are considering your objection or erasure request.
  • The right to data portability: You have the right to request that we provide you with a copy of your personal data in a structured, commonly used, and machine-readable format, or transmit it to another controller, where technically feasible and legally permissible.
  • The right to withdraw consent: You have the right to withdraw your consent to our processing of your personal data at any time, without affecting the lawfulness of the processing before the withdrawal.
  • The right to complain: You have the right to lodge a complaint with us or the PCPD if you believe that we have violated your privacy rights or breached the PDPO.

To exercise any of these rights, please contact us using the contact information below. We will respond to your request within a reasonable time and in accordance with our legal obligations and business policies. We may ask you to provide proof of your identity and sufficient details about your request before processing it. We may also charge a reasonable fee for handling your request if it is manifestly unfounded, excessive, or repetitive.

How to contact us

If you have any questions, comments, or concerns about this privacy policy or our privacy practices, please contact us at: admin@ilm.org.hk

We welcome your feedback and suggestions on how we can improve our privacy policy and practices. We will do our best to address your concerns and resolve any issues you may have.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our privacy practices, legal requirements, or business operations. We will notify you of any material changes by posting the updated version on our website and indicating the date of revision. We encourage you to review this privacy policy periodically to stay informed of how we collect, use, and share your personal data. Your continued use of our website or services after we post the updated privacy policy constitutes your acceptance of the changes.

This privacy policy was last updated on August 8th 2023.