Privacy and Data Protection Statement

The Hong Kong University of Science and Technology Students' Union (HKUSTSU) and its affiliated societies (collectively referred to as "we", "our", or "the Union") respect the personal data privacy of all individuals. We are committed to complying with the requirements of the Personal Data (Privacy) Ordinance of Hong Kong (PDPO) to ensure your data is processed securely and transparently.

1. What Personal Data We Collect

We collect personal information necessary to manage user accounts, coordinate society activities, handle registrations, and process payments. This data may include, but is not limited to:

  • Identification Data: Your full name, HKUST Student Number, and HKUST ITSC email address.

  • Activity Data: Society memberships, event registration details, and participation records.

  • Transaction Data: Records of payments, fees, and transaction statuses (excluding raw credit card details, which are handled directly by our secure third-party payment gateway).

2. How We Use Your Data

The personal data collected will be used exclusively for administrative, operational, and student-support purposes directly related to our functions, including:

  • Verifying student eligibility for society registrations and memberships.

  • Managing event signups, communication updates, and activity logistics.

  • Auditing payment records and processing student activity documentation.

  • Generating anonymized statistical reports to improve student union services.

Your data will not be used for unrelated third-party marketing purposes without your explicit consent.

3. Data Security & Protection

We implement strict physical, technical, and administrative measures to safeguard your data against unauthorized or accidental access, erasure, processing, loss, or misuse:

  • Access to personal data in our backend system is strictly restricted to authorized administrators and society publishers on a need-to-know basis.

  • All online data submissions are transmitted via encrypted connection protocols (HTTPS).

  • Affiliated societies are permitted access only to data relevant to their own members and activities.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with University policies and accounting guidelines. Data that is no longer required will be securely destroyed or completely anonymized.

5. Your Rights: Access and Correction

Under the PDPO, you have the right to request access to, or correction of, any personal data we hold about you.

  • To update your profile: You can modify basic details directly within your user dashboard.

  • For formal requests or inquiries: Please contact the internal website administration team or the Executive Committee through our official student union support channels.

Last Updated: July 2026