General privacy policy statement setting out the business's overall personal data policies and practices, required by Data Protection Principle 5 (openness) of the Personal Data Protection Ordinance (PDPO, Cap. 486).
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone.
Required fields not filled: 8. The PDF will have blank lines in their place to fill in by hand.
Click a field label in the text and type, or use the form. Empty fields become blank lines in the PDF.
PRIVACY POLICY STATEMENT
(BR No. ) Effective date:
This policy is maintained in accordance with Data Protection Principle 5 of the Personal Data Protection Ordinance (PDPO, Cap. 486), which requires an organisation to take practicable steps to make its personal data policies and practices generally available.
1. DATA WE COLLECT 1.1.
2. HOW WE USE IT 2.1.
3. SECURITY 3.1.
4. RETENTION 4.1.
5. DISCLOSURE TO THIRD PARTIES 5.1.
6. CCTV / VIDEO SURVEILLANCE 6.1.
7. DIRECT MARKETING 7.1.
8. YOUR RIGHTS AND CONTACT 8.1. You may request access to, or correction of, your personal data by contacting:
This is a boilerplate template, not legal advice. Hong Kong's Employment Ordinance, MPF, Employees' Compensation, and PDPO compliance regimes are subject to near-term and phased changes — including the abolition of MPF offsetting for severance/long service payments (in effect since 1 May 2025), the "468 rule" for continuous contracts (in effect from 18 January 2026), the Statutory Minimum Wage rising to HK$43.1/hour (from 1 May 2026, now subject to annual review), the growing statutory holiday schedule (15 days in 2026), and a pending public consultation on cooling-off periods for prepaid beauty/fitness contracts (29 June – 31 August 2026) — have this template reviewed and adapted by a lawyer before use, and confirm the current rules and thresholds at labour.gov.hk, mpfa.org.hk, pcpd.org.hk, and fehd.gov.hk on the date of use.
Documents that are usually drawn up in the same process.
Personal Information Collection Statement issued at the point personal data is collected from a customer (booking form, e-shop registration, salon intake form, Wi-Fi log-in) — required by Data Protec…
Terms and conditions for online sales / online ordering. There is no general statutory cooling-off right for online purchases in Hong Kong — return conditions are set by contract, subject to the Sale…
Terms for prepaid service packages and gift cards/vouchers (salons, restaurants, shops) — drafted with a voluntary cooling-off block in anticipation of the Trade Descriptions Ordinance (TDO, Cap. 362…
1 of 11 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.