Your privacy is of paramount importance to us. The purpose of this Privacy Policy is to inform you of how this site : GirlBoss on FIRE 理財投資 | 提早退休 (under IEQ Investment Centre, collectively referred to as \”GirlBoss on FIRE\”,  \”Girlboss\”, \”GirlBoss\”, \”財女\”, \”投智財女\”, \”us\”, \”we\” or \”our\”) collect, use and process your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (“ PDPO”), the associated regulations and guidelines as may from time to time be issued by the Privacy Commissioner for Personal Data, Hong Kong.

IEQ Investment Centre is the controller who determines the purposes and means of processing of your personal data collected through websites owned and/or operated by us or other channels described in paragraph 2 of this Privacy Policy.

This Privacy Policy is designed to assist you in understanding how we collect, use, disclose and/or process the personal data you have provided to us, as well as to help you to make an informed decision before providing us with your personal data.

1. Introduction
We intend to collect, use, process and disclose your personal data in the manner set forth in this Privacy Policy.

2. Information We Collect
There are two broad categories of information that we collect from you – (A) personal data and online identifiers and (B) non-personal data.

A. Personal Data and Online Identifiers

1. \”Personal data\” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly.

2. We collect certain types of personal data, including your name, gender, date of birth, identification numbers, company (if applicable), contact information (e.g. address, phone number, email address), payment information (e.g. credit or debit card information), photographs and video footages taken at events organized by us and/or our business partners and any other information which you may provide in any forms submitted to us or via other forms of interaction with us.

3. Personal data is collected by us in various circumstances, including the following:

• When you register for or use any of our services on our websites (e.g. subscription to e-newsletter or services);
• When you register as a member of our websites or use services on our websites;
• When you take part in any contest, survey or promotion conducted by us and/or our business partners;
• When you participate in events, exhibitions or roadshows organized by us and/or our business partners;
• When we receive references from business partners and third parties, for example, where you have been referred by them;
• When you submit an application to us for employment or an internship; and
• When you submit your personal data to us for any other reason.

4. It is voluntary for you to supply your personal data to us, although you may not be able to use our services or access to full functions on our site if you do not supply your personal data. We may not process your order and no contract for provision of such goods and/or services will be formed, if you do not supply the personal data required on our relevant order/subscription forms.

5. Only when needed shall your personal data about you from other sources be combined with information you provide to us. If you provide us with any personal data relating to a third party by submitting such information to us, you represent to us that you have obtained the consent of the third party to you providing us with their personal data for the respective purposes.

6. When you visit and use our websites, we may also collect information about you using online identifiers such as cookies:

(a) Cookies

(i) Cookies are small data files sent to your browser or device to store information about you when you visit our websites. Cookies will do a lot of different jobs, such as letting you navigate between pages efficiently, identify your behavior, remembering your preferences and generally improving your user experience. They can also help to ensure that the advertisements you see online are more relevant to you and your interests.

(ii) Most browsers automatically accept cookies. You can, however, modify your browser settings to disable cookies. If you choose to do so, some of the functionality of our websites may be impaired.

(iii) We may also use cookies from third parties to help us provide you and others with social plugins and other customized content and experiences.

(iv) Some cookies will not collect information that personally identifies you. They will collect more general information such as how users arrive at and use our websites, or a user’s general location. However, some other cookies can identify you and may contain or collect personal data. The type of information we collect as a result of a cookie is specific to your computer and may include, without limitation, the Internet Protocol (IP) address and the date and time you accessed our websites. The data stored on a \”cookie\” can be retrieved by us when you visit our websites.

B. Non-Personal Data
We also collect certain non-personal data when you visit and use our websites. Such data is entirely anonymous and is aggregated for statistical analysis (\”Aggregate Information\”).

Like many website operators, we may use an independent company (the \” Third Party Market Research Company\”) to measure and analyze usage across our websites. We use the Third Party Market Research Company’s services to collect Aggregate Information on the usage of our websites, including the following:

• The number of page views (or page impressions) that occur on our websites;
• The number of visitors to our websites;
• How long these visitors (on average) spend on our websites when they do visit; and
• Common entry and exit points into our websites.
• This Aggregate Information is collated by the Third Party Market Research Company and provided to us to assist in analyzing the usage of our websites. This is so that we can improve the content and navigability of our websites as well as our services and facilities.

3. Purposes and legal bases for collection, use, disclosure and processing of Personal Data 

Your personal data may be collected, used, disclosed and/or processed mainly for internal use of IEQ Investment Centre. When we partner with other businesses we would normally prevent sharing the whole set of your personal data to the third parties. At this point our subscribers or visitors were not directly contacted by third parties.

4. Legal bases
Where you are a data subject in the EEA, the legal bases for our processing and use of your personal data are set out in paragraph 3 above and further elaborated as follows:

(a) Consent: where you have consented to our use of your personal data. You may withdraw your consent to the use of your personal data by contacting us.

(b) Contract performance: where processing of your personal data is necessary for the performance of our contract with you or in order to take steps at your request prior to entering into a contract with us;

(c) Legal obligation: where we need to use your personal data to comply with our legal obligations;

(d) Legitimate interests: where our use of your personal data is necessary for our legitimate interests. We will only rely on this basis if we consider that such legitimate interests are not overridden by any interests or fundamental rights and freedoms that you may have, or any prejudice that you may suffer, from the relevant use of your personal data; and

(e) Legal claims: where your personal data is necessary for us to establish, exercise or defend any legal claims.

5. Sharing of Personal Data

A. In order to facilitate our business operations and provision of goods and services, your personal data may be disclosed, for one or more of the purposes listed in paragraph 3 above, to the following third parties (whether located in Hong Kong or abroad):

1. Agents, contractors or third party service providers (“ Service Providers”) who provide operational services to us, such as information technology, training, market research, administration of our websites, or other communications to you about our products, services or events, as well as storage and archival services;

2. our subsidiaries and holding companies, and the subsidiaries of our companies (collectively, our “Associated Companies ”);

3. The credit bureau, or in the event of default or disputes, any debt collection agencies or dispute resolution centres;

4. Anyone to whom we transfer or may transfer our rights and duties;

5. Banks, credit card companies and their respective service providers;

6. Our professional advisors such as our auditors and lawyers;

7. Relevant government regulators or authority or law enforcement agency to comply with any laws or rules and regulations imposed by any governmental authority; and

8. Any other party to whom you authorize us to disclose your personal data

B. In situations in which the above third parties receive your personal data from us, we will require the third parties to exercise reasonable care in protecting your personal data so that it is in compliance with the PDPO and (where applicable) the GDPR.

6. Direct marketing

We intend to use your personal data for direct marketing purpose. Our direct marketing may be conducted via various communication channels such as your email address, correspondence address, phone number, WhatsApp or Telegram. In this connection, please note that:

(a) Your name, email address, correspondence address, home phone number, mobile phone number, fax, gender, date of birth, and age may be included by us in direct marketing.

(b) The following classes of goods and services may be marketed by us using your personal data: airlines, art, automobiles, beauty products, charity, digital and print media, education, electronics, entertainment, events, fashion and accessories, financial services, food and beverage, home appliances, hotels, household goods, jets, jewellery, kitchen, luxury and lifestyle products, property and real estate, public transport, shopping malls, spa, sports, travel, watches, weddings, wine and alcohol, and yachts.

Please refer to paragraph 10 below on how to opt out of our direct marketing communications.

7. Your rights
You may request to access or correct your information in accordance with the PDPO. We may charge a reasonable fee for the processing of such data access request(s).

In addition, where you are a data subject in the EEA, in certain circumstances you have the right under the GDPR to:

(a) access and rectify your personal data;

(b) request us to erase your personal data without undue delay;

(c) restrict how we process your personal data;

(d) where our processing of your personal data is based on consent, withdraw your consent at any time;

(e) object to our processing of your personal data on the basis of legitimate interests, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims;

(f) object to direct marketing (including any profiling for such purposes) at any time;

(g) receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format and to transmit such data to another data controller without hindrance from us; and

(h) lodge a complaint with a supervisory authority.

Where you are a data subject in the EEA, we will not charge a fee when we deal with your requests to exercise the rights (a) to (g) above.

You may do so by submitting your request to us via email or letter. Please refer to our contact details at paragraph 15 of this Privacy Policy.

8. Retention of Personal Data

A. We will retain your personal data collected for as long as it is necessary to fulfill the purpose for which it is collected, the legal and/or business purposes of IEQ Investment Centre, and/or as may be required by applicable law.

B. When destroying personal data, we will take commercially reasonable and technically feasible measures to make the data irrecoverable or irreproducible, as may be required by applicable law.

9. Security

A. We take the security and protection of your personal data very seriously. As such, we store your personal data on secure servers and have put in place appropriate security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal of your personal data.

B. However, we cannot assume responsibility for any unauthorized use of your personal data by third parties which are wholly attributable to factors beyond our control.

10. Opt-Out

A. If you do not wish to receive any further information from us regarding our magazines, offers, promotions or events via email, you may unsubscribe by clicking the unsubscribe link included in our email correspondence.

B. If you do not wish to be contacted via voice call, text message and/or fax message regarding our magazines, offers, promotions or events, you may inform us via email or letter. Please refer to our contact details at paragraph 15 of this Privacy Policy.

C. If you do not want your personal data to be provided to our Associated Companies for their use in direct marketing, you may opt-out of such provision by contacting us via email or letter. Please refer to our contact details at paragraph 15 of this Privacy Policy.

D. Please note that if you withdraw your consent for a limited purpose, we may still contact you or use your information for other purposes for which you have not withdrawn your consent and such personal data may still be shared, as permitted under the PDPO, (where applicable) GDPR and other applicable law.

11. Automated decision making and profilingIn connection with our business, we will use your personal data to make various decisions about you and your eligibility to access our services, to prevent abusive use of our services, to determine what marketing offers are most likely to be of interest, to ensure security of our systems, to detect fraud or to profile you or assign you to a particular segment. Some of these decisions may be taken on an automated basis including by matching your personal data against other information in our possession or against data models created for us. If you are assigned to a segment, we may use the segment information to tailor our marketing communications (if permitted under applicable laws) to include offers and content that are more relevant to you. You will not be subject to automated decisions that produce legal effects concerning you or similarly significantly affect you, unless we have a lawful basis for doing so.

12. Cross border data transfer
The personal data that we collect or obtain from you may be transferred to jurisdictions that offer lesser protection of personal data than that provided in your jurisdiction. In particular, we may transfer your personal data to Service Provider(s) in jurisdictions outside the EEA and Hong Kong. Such transfer, if subject to the GDPR, would be made with appropriate or suitable safeguards (the details of which can be obtained from our Data Protection Officer) or with your explicit consent. Such transfer may present possible risks for you due to the lack of an adequacy decision or appropriate safeguards.

13. Third Party Sites
Our websites may contain links to other websites operated by third parties such as our business partners. We are not responsible for the privacy practices of websites operated by third parties that are linked to our websites. You are encouraged to learn about the privacy policies of such third party websites. Some of these third party websites may be co-branded with our logo or trademark, even though they are not operated or maintained by us. Once you have left our websites, you should check the applicable terms, conditions and policies of the third party website to determine how they will handle any information they collect from you.

14. Children’s Data We permit a child under the age of 16 to use our websites and to provide his/her personal data to us provided that the child has obtained his/her parent’s or legal guardian’s consent. If you are a child under the age of 16, you warrant and represent that your parent/legal guardian has consented to your use of our websites and your provision of personal data.

Once you are an individual in the EEA and reach the age of 16, you obtain the right to make decisions in relation to the processing of your personal data, although in some countries such right may arise before the age of 16. When such right arises, you should access the latest version of this Privacy Policy and ensure that you are personally happy for your personal data to continue to be processed by us.

15. Contact Details

A. If you, at any time, wish to:

1. enquire about this policy or about how we may manage, protect and/or process your personal data;

2. complain about the way we manage, protect and/or process your personal data;

3. access or correct your personal data in our control or possession;

4. exercise any other rights you have under the PDPO and (where applicable) the GDPR; or

5. withdraw your consent for us to collect, use, disclose and/or process your personal data;you may contact us by email at [email protected]

B. Such enquiry / complaint / request / withdrawal shall be deemed to have been made when received by IEQ Investment Centre.

C. Please indicate in the subject header the nature of your correspondence. We strive to revert to you.

16. Changes to Policy

A. As part of our efforts to ensure that we properly manage, protect and process your personal data, we will be reviewing our policies, procedures and processes from time to time.

B. We reserve the right to amend the terms of this Privacy Policy at our absolute discretion. We will notify you of changes to this Privacy Policy by posting the amended policy with the date it was revised on our websites.

C. You are encouraged to visit the websites from time to time to ensure that you are well informed of our latest policy in relation to personal data protection.

中文版（所有詳列以英文版為準）

（一） 資料收集目的
此活動報名透過閣下之輸入從而收集閣下之個人資料。根據個人資料（私隱）條例《香港法律》第 486 章，有關閣下之資料可能會用作下列目的：

• 促進提供的日常運作服務；
• 推廣有關服務或產品；
• 符合一切由適用的有關法律、條例、規定或監管機構所實施有關於披露責任之法律規定
• 統計及研究用途；及
• 與任何前述部份有關之任何用途。

（二） 披露資料
所持有之閣下資料將被保密但活動主辦單位可能向下列人士提供此等資料：

• 相關單位而其宣傳或給予之產品或服務可能由活動主辦單位所提供；
• 任何有責任為活動主辦單位保密之人士；或
• 適用於上述（一）的目的之任何人士。

（三） 權利
有關於個人資料，閣下將擁有下列權利：

• 檢查活動主辦單位是否持有有關閣下之資料、是否有權使用此等資料及要求更改有關閣下之任何錯誤資料；
• 查詢活動主辦單位有關資料之政策及做法、以及獲知活動主辦單位持有有關閣下之個人資料種類。

Last updated on Jun 2023