Waterfall Sports & Wellness (the “Company”) is committed to protecting the privacy, confidentiality and security of the personal information we hold by complying with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (“Ordinance”). The Company is equally committed to ensuring that all our employees, officers and agents uphold these obligations. This Personal Information Collection Statement (the “Statement”) is to notify you of the Company’s collection, usage, storage, transfer and disclosure of your personal data.
1. Collection of your Personal Data and Purpose
(a) From time to time, it is necessary for us to collect your personal data (“Personal Data”) as follows for processing your application to register as a member, providing you with services and/or products, and carrying out other activities described in Paragraphs 1(b) and/or 1(c) below.
(b) The Company may collect your full name, gender, HKID/passport number, date of birth, mobile number, email address and/or residential address for one or more of the following purposes:
A. for the facilities and/or services provided by the Company;
B. for communication, promotional, customer relationship management and/or public relations;
C. for application, creation, operation and administration of accounts and records for customers, members or users;
D. to handle comments, enquiries and complaints;
E. to process or request billing and payment, determining amounts outstanding, and if necessary, collection of outstanding payments;
F. for identification and verification of your identity;
G. designing, reviewing, evaluating and enhancing our services, products, facilities or activities (including conducting research, survey and analysis for those purposes);
H. making disclosure when required by any law, regulation, court order, direction, code or guideline applicable in or outside Hong Kong; and/or
I. for purposes directly relating to any of the above purposes.
You are not obliged to provide your Personal Data; however, the Company may not be able to process your registration, provide services and/or products to you, and/or carry out such other activities.
(c) It is necessary for the Company to collect your palm vein and image of your face (“Biometric Data”) for the purpose of identification and verification and venue management (e.g., self check-in, wristbands and towels borrowing and returning, classroom and gym room management), providing a contactless check-in and paperless experience. If you do not consent to provide such kind of information, your membership application/membership may be rejected/terminated, and the Company may not be able to provide the relevant services and/or products to you.
2. Use of your Personal Contact Information in Direct Marketing
(a) The Company intends to use your full name, contact information and address (collectively the “Personal Contact Information”) to send you direct marketing communications regarding products and/or services of fitness, healthcare and lifestyle. The Company may not use your Personal Contact Information in such manner unless we have received your express consent or your indication of no objection before using your Personal Contact Information.
(b) You have the right to choose whether your Personal Contact Information is used for direct marketing purposes. If at any time you consent to the use of your Personal Contact Information in direct marketing but subsequently changes your mind, you have the right to write to the Data Protection Officer via the email address provided below to inform the Company that you no longer wish the Company to use your Personal Contact Information in direct marketing.
3. Disclosure or Transfer
(a) The Company will take all practicable steps to keep your Personal Data confidential. Your Personal Data collected by us will not be disclosed to any third party for direct marking or other irrelevant purposes without your prior consent, except for the situations as below:
A. The Company may provide to any agent, contractor or third party who provides administrative, technology or other services to the Company and has a duty of confidentiality to the same, and provide to and any of our subsidiaries, holding companies, associated companies or affiliated companies,
(i) your Personal Data collected for the purpose(s) set out in Paragraph 1(b) in order to achieve such purpose(s); and/or
(ii) your Personal Data collected for the purpose(s) set out in Paragraph 1(c) in order to achieve such purpose(s)；
B. The Company may disclose your Personal Data to any governmental or law enforcement agency, judicial body or regulatory authority to whom we are required to make disclosure according to any law, regulation, court order, direction, code or guideline.
(b) As the parties mentioned above may be located outside Hong Kong, your Personal Data may be transferred out of Hong Kong.
4. Security
(a) The Company maintains appropriate security measures to protect your Personal Data against any accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure, or use.
(b) Regarding the Biometric Data, such would be first converted into encrypted digital feature codes specific to our system for storage and subsequent use. Without the key, encrypted palm vein and face images could not be read, processed, recognized or used. The encrypted signature is stored in the company’s local server, and data verification is done through SSL communication.
(c) All our employees, agents, Affiliates and services providers are bound by confidentiality. Only authorised persons may handle your Personal Data on a “need-to-know” basis in accordance with the Ordinance and this Statement.
5. General Matters
(a) You have the right to request to (i) access and correct your Personal Data held by the Company and (ii) opt-out from receiving direct marketing communications. To exercise your rights and avoid potential miscommunication or misunderstanding, please send a request in writing via email to our Data Protection Officer at info@waterfall.com.hk. The Company will comply with your request(s) as soon as reasonably practicable.
(b) We will keep your Personal Data for so long as is necessary to fulfill the purpose for which the data was collected. If you terminate your membership, the Company will permanently erase your Personal Data as soon as practicable.
(c) In case of any discrepancy between the English and Chinese versions, the English version shall prevail.
Waterfall Sports & Wellness（「本公司」）致力遵守《個人資料（私隱）條例》（香港法例第486章）（「該條例」）的規定，以保障本公司所持有的個人資料的私隱性、保密性及安全性。本公司同樣致力於確保我們的所有員工、高級職員和代理人遵守這些義務。本個人資料收集聲明（「本聲明」）旨在通知閣下有關本公司收集、使用、儲存、轉移及披露閣下的個人資料相關安排。
1. 個人資料的收集與目的
(a) 在處理您的註冊成為會員的申請、向閣下提供服務及/或產品、及進行下述第1(b)及/或1(c)段所述之其他活動時，我們需不時收集閣下之個人資料 (「個人資料」) 如下。
(b) 本公司可能會收集閣下的全名、性別、香港身份證/護照號碼、出生日期、流動電話號碼、電郵地址及/或住址，用於以下一個或多個用途：
A. 使用公司提供的設施和/或服務；
B. 用於通訊、宣傳、客戶關係管理和/或公共關係；
C. 用於客戶、會員或使用者帳戶和記錄的申請、建立、操作和管理；
D. 處理意見、查詢和投訴；
E. 處理或要求開單和付款，確定未付金額，必要時收取未付款項；
F. 用於識別和驗證您的身份；
G. 設計、檢討、評估及改進本公司的服務、產品、設施或活動 (包括就此等目的進行研究、意見調查及分析)；
H. 在香港境內或境外適用的任何法律、規例、法院命令、指令、守則或指引要求下作出披露；和/或
I. 用於與上述任何目的直接相關之目的。
閣下可自願選擇提供個人資料；然而，若閣下拒絕提供，本公司可能無法處理您的申請、向您提供服務及/或產品，及/或進行其他相關活動。
(c) 本公司需要收集您的掌靜脈及人臉影像(「生物特徵數據」)，以用於會員身份識別及驗證及場所管理 (如自助入場登記、手環及毛巾借用及回收、課室與健身室人流管控)，提供無接觸簽到及無紙化體驗。如果您不同意提供此類資料，您的會員申請/資格可能會被拒絕/終止，且本公司可能無法向您提供相關服務及/或產品。
2. 直銷中使用您的個人聯絡資訊
(a) 本公司擬使用您的全名、聯絡資訊和地址（「個人聯絡資訊」）向您寄送有關健身、保健及生活方式之產品和/或服務的直銷通訊。除非本公司在使用您的個人聯絡資訊前已獲得您的明確同意或不反對通知，否則本公司不得如此使用您的個人聯絡資訊。
(b) 您有權選擇您的個人聯絡資訊是否用於直接促銷目的。如您在任何時間同意您的個人聯絡資訊用於直接促銷但後來您改變主意，您可按下文所提供的電郵地址致函資料保障主任，通知本公司您不再希望本公司將您的個人聯絡資訊用於直接促銷。
3. 披露或轉移
(a) 本公司將採取所有切實可行的步驟，對閣下的個人資料保密。本公司在未取得您的同意前，不會向第三者提供您的個人資料作直接促銷或其他不相關的用途，除因下列情況：
A. 向本公司提供行政、技術或其他服務並對個人資料負有保密義務的任何代理、承包商或第三方，以及任何本公司的附屬公司、控股公司、關聯公司或聯營公司，提供
(i) 為第1(b)段所述目的所收集之您的個人資料，以達到上文第1(b)段的目的；及/或
(ii) 提供為第1(c)段所述目的所收集之您的個人資料，以達到上文第1(c)段的目的；
B. 在任何法律、規例、法院命令、指令、守則或指引下，本公司可能向任何政府或執法機構、司法機關或監管機構披露個人資料。
(b) 由於上述單位可能身處香港境外，您的個人資料亦可能被轉移至香港以外地區。
4. 安全性
(a) 本公司採取適當的安全措施，以保護您的個人資料不受意外、非法或未經授權的破壞、遺失、篡改、存取、披露或使用。
(b) 就生物特徵數據而言，其將會先被轉換為本公司系統專用之加密特徵編碼，以作儲存及使用，經過加密的掌靜脈及人臉影像在未經解密的情況下，不能被讀取、處理、辨識或使用。加密特徵編碼存儲於本公司的本地伺服器，資料驗證通過SSL加密通信。
(c) 我們的所有員工、代理人、關聯公司和服務供應商均受保密約束。只有獲授權人士可根據該條例和本聲明，在「有需要知道」的基礎上處理您的個人資料。
5. 一般事項
(a) 您有權 (i) 查閱或改正本公司所持有您的個人資料；及/或 (ii) 選擇不接收直銷通訊。為了行使您的權利，並避免潛在的誤傳或誤解，請您將書面請求寄至info@waterfall.com.hk 與本公司資料保護主任聯絡。本公司將在合理可行的情況下盡快滿足您的要求。
(b) 本公司保留您個人資料的時間，以達成收集資料之目的所需為限。如果您終止會員資格，本公司將在切實可行的範圍內盡快永久刪除您的個人資料。
(c) 中英文版本如有歧異，概以英文版本為準。
