1. Who we are

Our website address is: https://yaula.com.hk.

2. Introduction & Purpose

YauLa (“we,” “us,” “our”) is committed to protecting your personal data and privacy. This Privacy Policy describes how we collect, use, store, disclose, and protect your personal data when you visit or use our website and related services, consistent with the PDPO and PCPD guidance.

3. Personal Data We Collect

• Data You Provide Voluntarily
  • Contact details: name, email address, phone number
  • Profile or account data: username, password, address, education/employment background
  • Transaction / service request data: course enrollments, job applications, housing requests
  • Communications: messages, feedback, support ticket content
• Technical / Usage Data
  • IP address, device type, browser version
  • Log data: pages visited, timestamps, referring URLs
  • Cookies and similar tracking technologies

4. Purposes of Use

We collect and use your personal data only for lawful, specific, and notified purposes, such as:

• Providing and managing our services (e.g. course registration, job matching, housing assistance)
• Verifying identity and performing user authentication
• Sending service-related communications (updates, confirmations, notices)
• Improving site experience: analytics and usage optimization
• Customer support and inquiries
• Direct marketing (only if you opt in; see section on Marketing below)
• Legal compliance, fraud prevention, and dispute resolution

We will not use your personal data for new or unrelated purposes without obtaining your express consent.

5. Legal Basis & Consent

• Where required, we will obtain your explicit and informed consent before collecting or using your personal data.
• You may withdraw your consent at any time by contacting us (see contact details below). Withdrawal of consent will not affect the lawfulness of prior processing.
• In some cases, consent is not required under PDPO (e.g. data required for performing contractual obligations, or where permitted by law).

6. Retention & Erasure

• We retain your personal data only for as long as necessary for the purposes for which it was collected (or as required by law).
• Once data is no longer needed, we will take all practicable steps to securely erase or anonymize it.
• If you request deletion of your data, we will process your request unless retention is required by law or for legitimate internal purposes.

7. Data Accuracy & Updates

• We will take reasonable steps to ensure that personal data held is accurate, complete, and up-to-date.
• You may request correction of inaccurate, incomplete, or out-of-date data at any time.

8. Data Security

• We adopt appropriate administrative, technical, and physical safeguards to protect personal data from unauthorized access, alteration, disclosure, loss or misuse.
• When we engage third-party service providers (e.g. cloud hosting, payment processors), we impose contractual or equivalent obligations to ensure they protect your data to standards consistent with PDPO.
• In the event of a data breach that poses a real risk to your rights, we will notify you and the PCPD as required by applicable laws and best practices.

9. Disclosure & Transfer of Data

• We may disclose personal data to third parties only for the purposes set out in this policy, and only when necessary (e.g. service providers, partners).
• Before transferring data to any third party (local or overseas), we will ensure they maintain comparable data protection standards and comply with PDPO obligations.
• In rare cases, we may be required by law, court order, or regulatory authority (including law enforcement) to disclose personal data. We will limit disclosure to the minimum required.

10. Direct Marketing

• We will only use your personal data for direct marketing if you have given express consent. Silence or inactivity cannot be construed as consent. pcpd.org.hk
• Our communications will clearly state how to opt-out, and you may withdraw from marketing at any time.
• If a third party is involved in direct marketing, we will inform you of their identity and the purpose of the transfer.

11. Access & Correction Rights

• You have the right to request access to your personal data we hold and to obtain a copy, subject to permitted exceptions under the PDPO. pcpd.org.hk
• You may also request correction of data.
• We will respond to access/correction requests within a reasonable time and may charge a reasonable fee if permitted under law.

12. Cookies & Tracking Tools

• We use cookies and similar technologies to collect usage data and improve functionality.
• You may disable or block cookies via your browser settings, though that may affect site features.
• We will provide appropriate notices about cookie use and obtain consent where needed.

13. Cross-border Transfers & Cloud Services

• When personal data is stored, processed, or backed up outside Hong Kong (e.g. via cloud servers), we will ensure similar levels of protection and inform you accordingly.
• We evaluate the jurisdictions and ensure contractual safeguards to maintain data privacy standards.

14. Changes to This Policy

• We may update this Privacy Policy periodically. The “Last updated” date will indicate the effective version.
• We will notify you of material changes by posting a prominent notice on our site or via email.

15. Contact & Complaints

If you have questions, request access or correction, withdraw consent, or wish to file a complaint about our data practices, please contact:

YauLa Data Protection Officer
Email: contactus.hk@yaula.com.hk

If you remain unsatisfied, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.