Last updated: 24 February 2026

 

This Privacy Policy and Direct Marketing Statement (this “Policy”) is issued by the Institute for City Transformation ("ICT", "we", "us", or "our"). It explains how we collect, use, retain, disclose, and protect personal data when you use our website, submit information through our online forms, or communicate with us. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

​

We may collect personal data that you provide to us, including your name (or preferred name), email address, phone number, organisation or church (if provided), event registration details, preferences, and any information you submit in messages or forms. When you visit our website, we may also collect limited technical data such as IP address, browser type, device information, and pages visited through cookies or similar technologies, where used.

 

We collect and use personal data for purposes that are directly related to our functions and activities, including to process registrations, enquiries, and requests; to deliver updates about our programs, events, resources, and related activities; to maintain contact records and improve our website and services; to manage administration, security, and fraud prevention; to handle complaints; and to comply with legal and regulatory obligations. We will not use your personal data for a new purpose that is unrelated to the purposes stated above without notifying you and obtaining consent where required.

​

We use third-party service providers to help operate our website and communications, and thereby disclose personal data to these providers or other vendors strictly as necessary for them to provide services to us, and we require them to process personal data in accordance with our instructions and to apply appropriate safeguards. We may also disclose personal data where required by law, court order, or for the protection of our legal rights.

​

We retain personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable laws, after which we will securely delete or anonymise the data where practicable. We take reasonable steps to protect personal data from unauthorised or accidental access, processing, erasure, loss, or use; however, no method of transmission or storage is completely secure.

​

If we use cookies or analytics tools, they are used to understand website usage and improve performance. You can adjust your browser settings to block or delete cookies, but doing so may affect certain website functions.

​

Direct marketing

 

We may use your personal data for direct marketing only in accordance with the PDPO. For this purpose, “direct marketing” includes sending you promotional messages, invitations, newsletters, fundraising messages, and updates about our events, programs, services, publications, or related activities. The personal data we may use for direct marketing includes your name, email address, and phone number or messaging contact (if provided). We may contact you via email, SMS or messaging apps, phone calls, and/or mail.

​

We will not use your personal data for direct marketing unless we have provided you with the required information and obtained your consent (or your indication of no objection, where permitted under the PDPO). You may opt out of receiving direct marketing at any time and free of charge by using the unsubscribe link in our emails. We will process your request as soon as practicable.

​

We do not transfer your personal data to third parties for their own direct marketing use unless we have obtained your explicit consent as required under the PDPO (where applicable).

​

Your rights (access and correction)

 

Under the PDPO, you may request access to, and correction of, personal data we hold about you. Please submit requests to ict@icitytransformation.org. We may need to verify your identity before processing a request. A reasonable fee may be charged for a data access request as permitted under the PDPO.​