ASEAN Chamber of Commerce (Hong Kong) Limited ("Chamber", “ACCHK”, "we", "our") collects personal data (including but not limited to your name, email address, and telephone number) provided by you (whether as a user of our member portal, a participant in our functions and activities, an applicant for Chamber membership or a Chamber member, collectively, the "associates") via various means, including our member portal, social media platforms, questionnaires, Chamber application forms and registration forms for our functions and activities, including symposiums and guided tours.

This Policy will help you understand the followings:

1. Collection of personal data
2. Use of personal data
3. Use of cookies
4. Disclosure and transfer of personal data
5. Retention of personal data
6. Security of personal data
7. Links to other websites
8. Direct marketing
9. Access to and correction of personal data
10. Addendum – Applicable to Personal Information Received from the PRC
11. Enquiries

1. Collection of personal data

The collection of any personal data will be subject to this Policy and any separate Personal Information Collection Statement ("PICS") provided on or before data collection. Personal data is stored securely in our system and we will take all practicable steps to ensure that personal data is not kept longer than is necessary for the fulfillment of the purpose (including any directly related purpose) for which the data is or is to be used. Only trained, authorized staff shall have access to the data, and we do not release personal data to third parties except as set out in this Policy and any separate PICS.

If associates apply to become a member of the Chamber or sign up for our functions or activities, the associates are required to supply all the personal data and other information requested in the relevant form in order to enable the Chamber to consider his/her application or participate in the Chamber activities. The provision of personal data is voluntary, however, failure to do so may result in the Chamber being unable to process the application or allow participation in the Chamber activities (as the case may be).

2. Use of personal data

The Chamber will use your personal data for specific purposes identified in the PICS provided to you on or before your personal data is collected. The purposes of collecting personal data also include:

1. Identifying you and verifying your identity;
2. Processing membership applications for the Chamber;
3. Communicating with you in respect of your use of Chamber services, products and/or the member portal;
4. Daily operation and administration of the Chamber, including but not limited to account creation and maintenance, processing and provision of benefits and services;
5. Monitoring and analysing usage of Chamber services, products and/or the member portal to help the further development and improvement of Chamber services, products and/or the member portal;
6. Research and development in relation to behaviour of the associates;
7. Information management and database administration;
8. With your consent, marketing products, services and other subjects to you (please refer to Direct Marketing section below);
9. Identifying, contacting or bringing legal action against someone who may be violating these terms or may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users, or anyone else that could be harmed by such activities;
10. Complying with disclosure requirements under applicable law;
11. Any other purpose directly relating to the above purposes.

3. Use of Cookies

Generally, we may use 'cookies' on our website to estimate our audience size; to track user’s progress and number of entries in our promotional activities; to assist us in tracking visits; to measure user’s traffic patterns; to customise website content specific to user’s interests; to ensure that user does not see the same advertisement repeatedly; to store user’s password so user does not have to re-enter it each time using the website; and to improve and update the website. We use such data only for website enhancement and optimization purposes. We do not use, and have no intention to use the viewer’s data to personally identify anyone. However, in case any cookies collecting personally identifiable information are used, we will provide details and purposes of these cookies in this Privacy Policy .

By using our website, you are consenting to and are deemed to consent to our use of cookies. If you do not agree to our use of cookies, you are advised to leave our website and do not use our website further.

4. Disclosure and transfer of personal data

The Chamber will keep the personal data and information relating to the associates confidential but we may disclose, transfer (whether within or outside the Hong Kong Special Administrative Region) and/or exchange any such data and information to or with any and all of the following persons or entities for the purposes set out above:

1. any firm, company, corporation, body or organisation providing Chamber services, including providing privileges, benefits and other advantages to associates ("Relevant Person");
2. any agent, contractor or third party service provider who provides administrative, management, computer technology outsourcing, cloud services, payment processing, data processing, marketing and research, distribution, telecommunications, accounting, auditing and other services to the Chamber in connection with our operation and the provision of our facilities, services and/or products to associates; or
3. government, law enforcement, regulatory or other authorities, as required by law or where permitted by law.

5. Retention of personal data

The Chamber will retain associates’ personal data for a period no longer than necessary for the fulfillment of the purposes for which the data is or is to be used. If associates have joined membership of the Chamber, their personal data will be retained for a reasonable period after termination of their membership for verification and audit purposes. If deletion is technically difficult, we will adopt necessary security measures to ensure data security. The above is subject to any legal, statutory, regulatory or accounting requirements.

Termination of membership
You have the right to terminate your membership. You may contact us through the channels set out in the "Enquiries" section below to submit a membership termination request. Unless otherwise required by applicable laws and regulations (for example, where retention is necessary for performance of contracts or provision of services within the relevant term), upon termination of membership we will cease to provide services to you, and, subject to the minimum retention period required by applicable laws and regulations, we will delete, anonymise, or cease processing (other than storage and taking necessary security measures) your personal data, and we will not use your personal data for commercialisation.

6. Security of Personal Data

We will take appropriate measures to safeguard data security. However, no data transmission over the internet can be guaranteed to be 100% secure. Accordingly, despite our effort to protect your personal information, we cannot guarantee or warrant the security of any information you transmit to us, or to or from our online products or services. You transmit all such information at your own risk. However, once we receive your transmission, we use our best endeavours to ensure its security on our own systems.

Associates are responsible for protecting their account password against unauthorized access. Members are advised to sign out from their account when finished with online account activities, particularly when using a shared computer.

7. Links to other websites

The Chamber may have some services and/or products which are hosted in the member portal but are operated by third party merchants. If associates provide their personal data to any third party merchants in order to use, order or receive any services and/or products from the third party merchants, please note that such collection of personal data is beyond the control of the Chamber and associates should review the respective privacy policies of third party merchants.

The member portal may from time to time contain links to other third party websites that are independent from the member portal. We have no control or management over the contents of such third party websites or their privacy policies or compliance with the law. Associates should be fully aware that the provision of such links does not constitute an endorsement, approval, or any form of association by or with the Chamber. We have no control over the personal data submitted by associates, if any, to third party websites. This Policy only applies to the member portal. Associates should review the respective privacy policies of third party websites.

If you interact with any social media platforms of the Chamber, the Chamber can interact with you, for examples, sending messages to you on the platforms and following the rules of the social media platforms. We are not responsible for how the social media operators collect, handle and use your personal information and what third parties post on our social media platforms.

8. Direct marketing

The Chamber intends to use your name, contact number and/or email address for direct marketing purpose with your consent (which includes an indication of no objection), which is required before doing so. You may withdraw your direct marketing consent at any time by:

1. following the unsubscribe instructions or hyperlink in the marketing communication; or
2. contacting us via the email address or postal address stated in the "Enquiries" section below to tell us that you no longer wish to receive marketing communications through any channel.

9. Access to and correction of personal data

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to access and correct your personal data held in our database. You should update us whenever there is any change to your personal data.

If you wish to check whether we hold your personal data, or to access or correct any inaccurate personal data, please make such request by email or in writing to our Data Protection Officer through the channels set out in the "Enquiries" section below.

To enable us to respond to your request more efficiently and to safeguard your interests, we may request proof of identity or other information necessary to verify your identity.

We may charge a reasonable administrative fee for processing a data access request.

10. Addendum – applicable to personal information received from the PRC

In the course of providing services, we may collect personal information from individuals located within the territory of the People’s Republic of China (“PRC” or “Chinese Mainland”, excluding Hong Kong and Macau). If you are individual within the PRC’s territory receiving our services, we will implement personal information protection measures to safeguard your privacy in compliance with the personal information protection principles set forth in the Personal Information Protection Law (“PIPL”) of the PRC.

In principle, personal information collected by us within the Hong Kong Special Administrative Region (“Hong Kong”) will be retained in Hong Kong. As we may utilize resources, browsers, servers, etc. located outside Hong Kong to provide our products or services, this means that your personal information may be transferred to or accessed from jurisdictions outside the country/region where you use our products or services.

Your rights: Apart from the rights mentioned in other sections of this Policy, you are conferred with the following rights under the PIPL:-

• Deletion. You have the right to request us to delete your personal information. However, this will need to be balanced against other factors such as statutory data retention.
• Restriction of processing. You have the right to request us to restrict processing your personal information. However, we may not be able to provide your requested service/product if you do not allow us to process necessary personal information.
• Data Portability. You have the right to request us to transfer your personal information that you have provided to us to a third party of your choice. This right can only be exercised in certain circumstances where applicable.
• Automated decision-making. You have the right not to be subjected to automated decision-making including profiling.
• Withdrawing consent. We may ask for your consent to process your personal information where consent is necessary as the lawful basis for processing personal information. In such case, you have the right to withdraw your consent.
• Access and Correction. You have the right to request access to and correction of your personal information held by us. You may submit your request to our Data Protection Officer. If you wish to check whether we hold any of your personal information, or wish to access or correct any inaccurate personal information relating to you.

We may charge a reasonable fee for processing your request depending on the circumstances. We may refuse requests that are unreasonably repetitive, require disproportionate technical means (such as developing new systems or fundamentally altering existing practices), jeopardize the legitimate rights and interests of others, or are extremely impractical (such as involving information stored on backup tapes).

In the following circumstances, we will be unable to respond to your request in accordance with legal and regulatory requirements:

• matters directly related to national security or defense security;
• matters directly related to public safety, public health, or significant public interests;
• matters directly related to criminal investigations, prosecutions, trials, or the enforcement of judgments;
• where there is sufficient evidence indicating your subjective malice or abuse of rights;
• where responding to your request would cause serious harm to the legitimate rights and interests of you or other individuals/organizations;
• where it involves trade secrets;
• other circumstances stipulated by laws and regulations.

11. Enquiries

Each associate has the right to request access to and correction of any of his/her personal data established to be inaccurate, or to exercise other rights relating to such customer’s personal data. The Chamber will comply with any such request unless it may or is required to refuse to do so under the applicable laws and regulations. The Chamber has the right to charge a reasonable fee for processing a data access request. If an associate intends to make any data access request or data correction request or to opt out of receiving promotional message from the Chamber, please inform us via email at contact@acchk.com.hk This Privacy Policy may from time to time be updated, revised and amended. Any update, revision or amendment will be effective immediately upon being posted on the Chamber’s website. Where legally required, we shall notify you and/or obtain your consent where we seek to use your personal data for a new purpose(s). You are advised to check our website for any updates to this Privacy Policy periodically.

In case of discrepancies between the English version and Chinese version of this Policy, the English version shall prevail.

Effective date: 30 June 2026