Legal, Privacy and Advertising Notice
法律、隐私及广告通知
English
1. Definitions and Interpretation
1.1 In this Notice, unless the context otherwise requires:
- “Applicable Data Protection Law” means the Personal Data (Privacy) Ordinance (Chapter 486) (“PDPO”) and, where applicable, the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR and the UK Data Protection Act 2018.
- “Cap. 621” means the Residential Properties (First-hand Sales) Ordinance (Chapter 621).
- “Controller”, “Data Subject”, “Personal Data”, “Processing” and “Processor” bear the meanings given in the Applicable Data Protection Law.
- “Estimated Material Date” and “Saleable Area” bear the meanings given in Cap. 621 and the relevant Sales Brochure.
- “Independent Advisor” means a third-party estate agent, salesperson or contact on the Operator’s roster who is not an employee, agent, partner, franchisee or representative of the Operator.
- “Notice” means this Legal, Privacy and Advertising Notice, as amended from time to time.
- “Operator”, “we”, “us” and “our” mean Prephrok Network Ltd, incorporated in the Republic of the Marshall Islands.
- “Sales Brochure” means the sales brochure for a development published by or on behalf of the vendor under Cap. 621.
- “Services” means the information, matching, contact, mapping, download and related functions of the Website.
- “Website” means iCITY 葵涌 and all its pages, subdomains and content.
1.2 In this Notice: (a) headings are for convenience only; (b) “including” means “including without limitation”; (c) the singular includes the plural and vice versa; (d) a reference to a statute includes amendments, re-enactments, replacements and subsidiary legislation; (e) a reference to a person includes a body corporate, unincorporated body and partnership; and (f) “writing” includes email.
1.3 This Notice is drafted in English and translated into Traditional Chinese and Simplified Chinese. In the event of inconsistency or ambiguity, the English version prevails, save where mandatory law requires otherwise.
2. Operator, Legal Status and Contact
2.1 The Website is owned and operated by Prephrok Network Ltd, incorporated in the Republic of the Marshall Islands. The Operator is not incorporated in Hong Kong, is not licensed as an estate agent under the Estate Agents Ordinance (Chapter 511), and does not carry on estate agency work in Hong Kong.
2.2 The Operator is not the vendor, developer, authorized person, building contractor or selling agent of any development referred to on the Website. Nothing in this Notice creates, or is intended to create, an agency, fiduciary, partnership, joint venture, employment or franchise relationship between the Operator and any user, vendor, developer, estate agent or Independent Advisor.
2.3 The Operator has no establishment in the European Union or the United Kingdom and has not appointed a Data Protection Officer, no statutory obligation having arisen. All requests and complaints concerning this Notice or Personal Data shall be addressed to [email protected]. The Operator’s registration number and registered office are available on request. Correspondence is normally acknowledged within five (5) business days, without prejudice to any period prescribed by law.
2.4 The Operator is incorporated in the Republic of the Marshall Islands. Its registered office and the address of its registered agent are available on request, as is its company registration number. The Operator’s corporate status, capacity and internal affairs are governed by the laws of the Republic of the Marshall Islands.
2.5 The Republic of the Marshall Islands has not enacted data protection legislation equivalent to the PDPO or the GDPR. The Operator nevertheless applies this Notice contractually and, where applicable, the PDPO and the GDPR. The absence of equivalent legislation in the Republic of the Marshall Islands does not diminish the protections described in this Notice or any right available under mandatory law.
2.6 The Operator does not maintain a branch or registered office in Hong Kong and is not a licensed estate agent. Legal process may be served on the Operator at its registered office or registered agent in the Republic of the Marshall Islands (address available on request) or by email to [email protected]. Disputes arising under this Notice are governed by section 28.
3. Scope, Acceptance and Order of Precedence
3.1 This Notice applies to the Website and the Services, including the collection of Personal Data through the contact form, matching function, map function, downloads and correspondence. It does not apply to any third-party website or service, including any website or channel of an Independent Advisor.
3.2 By accessing the Website or submitting a form, you acknowledge that you have read and understood this Notice and agree to be bound by it. If you do not agree, you must refrain from using the contact functions. Acceptance does not constitute acceptance of any offer and creates no contract for the sale, purchase, lease or financing of property.
3.3 This Notice is read together with: (a) the notice displayed at the point of collection, including the Personal Information Collection Statement attached to the contact form; (b) the accessibility statement at accessibility.html; and (c) any statement required by Cap. 621 and displayed on a project page.
3.4 In the event of conflict: (a) mandatory law prevails; (b) then this Notice in English; (c) then the Chinese translations; (d) then any other page or statement. A point-of-collection notice prevails only in respect of the collection to which it relates.
4. Personal Data Collected
4.1 The Operator may collect the following categories of Personal Data:
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name or form of address; telephone number; language; preferred contact method | Provided by you |
| Enquiry | Requirements, budget, property plan, district or project, free-text message | Provided by you |
| Technical | IP address, browser and device type, operating system, screen size, time zone | Collected automatically |
| Usage | Page and referring URL, landing page, UTM parameters, click identifiers, session identifier, page views, language | Collected automatically |
| Location | Latitude, longitude, accuracy, where you expressly opt in | Provided with consent |
| Verification | Result of the human-verification challenge and request metadata | Generated by the provider |
| Consent records | Notice version, time and date, language, marketing and transfer preferences | Generated on submission |
| Advisor roster | Name, telephone or messaging number, agency, public licence number, source URL, collection and verification dates | Public sources |
4.2 The Operator does not request identity card numbers, bank or payment card details, full residential addresses, medical records, biometric data or other Personal Data unnecessary for the purposes in section 7. You must not enter such information in free-text fields. If you volunteer special category data within Article 9 GDPR, you do so at your own risk; the Operator processes it only as necessary to respond to your enquiry and on the basis of your explicit consent given by voluntary submission.
4.3 The Operator does not knowingly collect Personal Data of persons under eighteen (18). Section 22 applies.
5. Sources of Personal Data
5.1 The Operator obtains Personal Data: (a) directly from you; (b) automatically from your browser or device; (c) from its hosting, content-delivery, verification, notification and analytics providers; (d) from records of your interactions with an Independent Advisor, where shared for follow-up; and (e) from publicly accessible sources, including agency websites, directories, public registers and social-media pages, for the advisor roster.
5.2 Project information is compiled from developer websites, the Sales of First-hand Residential Properties Electronic Platform, government announcements, Sales Brochures, price lists and media reports. It does not identify any user and is not used for that purpose.
5.3 The Operator does not use covert collection methods, does not access private messages or address books, and does not knowingly acquire Personal Data from unlawful sources.
6. Legal Bases and Conditions for Processing
6.1 Under the PDPO, the Operator collects Personal Data for purposes that are lawful and directly related to its functions, and collects data that is necessary, adequate and not excessive. It takes all practicable steps to ensure collection is lawful and fair.
6.2 The Operator relies on the following bases: (a) consent — for disclosure to one Independent Advisor, location, direct marketing and any non-essential cookies; (b) pre-contractual and contractual steps — to respond to enquiries and arrange introductions; (c) legitimate interests — security, fraud and abuse prevention, service improvement, roster verification and legal claims; and (d) legal obligation — compliance with law, court orders and lawful authority requests.
6.3 For the avoidance of doubt, the PDPO does not prescribe a closed list of legal bases. References to legitimate interests describe the Operator’s assessment of its lawful purposes and do not displace the requirements of the PDPO, including DPP1.
6.4 Consent must be voluntary, specific, informed and unambiguous. It may be withdrawn at any time by written notice to [email protected], without affecting processing before withdrawal. The Operator will not make the Services conditional on consent to processing that is not necessary for them.
6.5 The Operator does not carry out automated decision-making producing legal effects or similarly significant effects within Article 22 GDPR. Section 9 describes rule-based matching.
7. Purposes of Processing
7.1 The Operator processes Personal Data for the following purposes:
| Purpose | Data | Basis |
|---|---|---|
| Receiving, assessing and responding to enquiries | Identity, enquiry, technical, consent records | Pre-contractual steps; consent where required |
| Selecting and introducing one Independent Advisor | Identity, enquiry, location (optional), consent records | Consent |
| Arranging viewings and coordinating follow-up | Identity, enquiry, location (optional) | Pre-contractual steps; consent |
| Operating, securing and improving the Website | Technical, usage, verification | Legitimate interests |
| Measuring enquiry and advertising performance | Usage, technical | Legitimate interests; consent for non-essential technologies |
| Preventing and investigating fraud, abuse and incidents | Technical, usage, verification, consent records | Legitimate interests; legal obligation |
| Compiling, verifying, correcting and removing roster entries | Advisor roster | Legitimate interests; legal obligation |
| Complying with legal and regulatory requirements; legal claims | Any category as necessary | Legal obligation; legitimate interests |
| Sending project information and promotions (where elected) | Identity, consent records | Consent |
7.2 The Operator will not process Personal Data for a new and unrelated purpose without prescribed consent or lawful authority. Where a new purpose arises, it will notify you and obtain fresh consent before processing begins.
8. Mandatory and Voluntary Provision
8.1 The following are mandatory for submission of the contact form: (a) name or form of address; (b) telephone number; and (c) affirmative consent to disclosure to one Independent Advisor. Without them, the Operator cannot process the enquiry, arrange an introduction or arrange a viewing.
8.2 Requirements, budget, property plan, district or project preference, preferred contact method and location are voluntary. Failure to provide them does not prevent submission but may reduce the accuracy of the introduction. Location permission may be refused or revoked at browser or device level at any time.
8.3 Consent to direct marketing is voluntary, separately requested and not a condition of submission. Refusal or withdrawal does not affect the enquiry.
9. Rule-Based Matching and Human Review
9.1 The Operator may apply deterministic rules to the project, district, language, stated requirements and advisor availability to identify an appropriate recipient for an enquiry. The rules are reviewed periodically for relevance and fairness. The Operator does not use the output to make decisions producing legal or similarly significant effects.
9.2 You may request human review of, or object to, a matching outcome by writing to [email protected]. A member of staff will review the matter within a reasonable period and communicate the outcome in writing.
9.3 If machine learning, profiling or generative artificial intelligence is introduced, the Operator will, before deployment: (a) update this Notice and the point-of-collection notice; (b) conduct and document a data protection impact assessment; (c) implement risk-appropriate human oversight; (d) explain the logic in a concise, transparent and intelligible form; and (e) provide a mechanism to object to decisions based solely on automated processing.
10. Independent Advisors; No Agency or Partnership
10.1 Independent Advisors are third parties and are not employees, agents, partners, joint venturers, franchisees or representatives of the Operator. The Operator has no authority to act for or bind them, and they have no authority to act for or bind the Operator, to make representations on its behalf or to receive money for it.
10.2 Advisor particulars are compiled from publicly accessible sources, including agency websites, directories, public registers and social-media pages. The Operator takes reasonable steps to verify them at collection and periodically thereafter but does not warrant their accuracy, completeness, currency or that any licence remains in force. You should independently verify identity, licence and disciplinary record with the Estate Agents Authority before transacting or paying money.
10.3 Where you have affirmatively consented, the Operator discloses your name, telephone number, requirements, language and optional location to one Independent Advisor so that the advisor may contact you. The advisor then acts as an independent controller. The Operator does not control and is not responsible for the advisor’s subsequent processing, retention, security or disclosure practices, which are governed by the advisor’s own privacy policy and Applicable Data Protection Law.
10.4 The Operator receives no monetary or other benefit in exchange for disclosing Personal Data to an Independent Advisor, does not sell Personal Data, and receives no consideration for the transfer of Personal Data as such.
10.5 An Independent Advisor may request access to, correction of, or removal from the roster by writing to [email protected]. The Operator will verify the request, respond within thirty (30) days and update or delete the record within a reasonable period. A minimal record of the request may be retained for evidentiary purposes.
10.6 Complaints about an advisor’s professional conduct should be directed to the Estate Agents Authority. The Operator will cooperate with regulatory enquiries as required by law.
11. Disclosure, Recipients and Service Providers
11.1 The Operator may disclose Personal Data, to the extent necessary for the purposes in section 7, to: (a) one Independent Advisor, only with your affirmative consent; (b) Cloudflare, Inc., for hosting, content delivery, Turnstile verification and cookieless analytics; (c) an instant-messaging notification service used to transmit form notifications; (d) Google Fonts (fonts.googleapis.com) and jsDelivr (cdn.jsdelivr.net), to which your browser makes direct requests transmitting your IP address and the referring URL, but not your name, telephone number or enquiry content; (e) professional advisers under confidentiality duties; (f) courts, regulators and law-enforcement authorities where required by law or necessary for legal claims or safety; and (g) a prospective or actual successor to the Operator’s business, subject to equivalent obligations.
11.2 The Operator requires Processors to act only on documented instructions, implement appropriate security, assist with data subject requests, delete or return data at the end of the engagement, and permit audit to the extent required by law. A current list of Processors is available from [email protected].
11.3 The Operator does not sell Personal Data. Save for the introduction in section 10, it does not disclose Personal Data for a third party’s direct marketing without prescribed consent and prior notice of the classes of recipients and marketing subjects.
12. International and Cross-Border Transfers
12.1 Personal Data may be transferred to, stored in or accessed from jurisdictions outside Hong Kong, including the United States, the EEA, the United Kingdom and other jurisdictions where service providers maintain infrastructure. The purposes are those in section 7.
12.2 Section 33 of the PDPO has not been brought into operation; Hong Kong law therefore imposes no general prohibition on cross-border transfers. The Operator nonetheless: (a) selects providers offering appropriate security; (b) imposes written confidentiality, security, purpose-limitation, retention and deletion obligations; and (c) where the GDPR or UK GDPR applies, puts in place the Standard Contractual Clauses and, where applicable, the UK Addendum or another lawful mechanism.
12.3 You acknowledge that cross-border processing may expose Personal Data to the laws, lawful access requests and surveillance regimes of the receiving jurisdiction, whose protections may differ from those in Hong Kong. A summary of the safeguards for a particular transfer is available from [email protected].
13. Retention and Erasure
13.1 The Operator retains Personal Data only for as long as necessary for the purposes of collection or as required or permitted by law:
| Category | Retention | On expiry |
|---|---|---|
| Enquiry records | 24 months from last follow-up | Secure deletion or anonymisation |
| Consent and version records | Enquiry period + 12 months | Secure deletion |
| Location data | 90 days from submission | Secure deletion |
| Advisor roster entries | 12 months from last verification | Re-verification or deletion |
| Server and security logs | 30 days | Automatic rotation |
| Analytics events (cookieless) | 14 months | Aggregation and deletion |
| Notification messages | 7 days | Deletion or disabling of history |
| Complaints and legal records | 7 years | Archival |
13.2 On expiry, the Operator erases or anonymises the data. Where backup or technical constraints prevent immediate erasure, it restricts access and completes erasure within ninety (90) days. Data required for legal proceedings or claims may be retained until conclusion.
13.3 Section 26 of the PDPO requires all practicable steps to erase data no longer required, unless erasure is prohibited by law or not in the public interest. The Operator will comply and will consider erasure requests made to the Operator.
14. Cookies, Session Storage and Similar Technologies
14.1 The Website uses the following first-party technologies:
| Name | Type | Purpose | Duration |
|---|---|---|---|
cw_agent_* | First-party cookie | Remembers the matched advisor to avoid repeated matching | 48 hours |
cw_lead_* | First-party cookie | Prevents duplicate form submission | 48 hours |
sessionStorage | First-party session storage | Records referrer, UTM parameters, session identifier, page views and device information | Until tab closes |
14.2 Your browser also makes direct requests to third-party resources: Google Fonts (fonts.googleapis.com), jsDelivr (cdn.jsdelivr.net) and Cloudflare. Those requests transmit your IP address and the referring URL but not your name, telephone number or enquiry content.
14.3 The Operator does not use advertising, profiling or cross-site tracking cookies. As only strictly necessary technologies are used, no consent banner is displayed. If non-essential technologies are introduced, the Operator will obtain prior consent, offer equally prominent “reject all” and “accept all” options, refrain from setting them before consent and update this section.
14.4 You may clear, block or restrict cookies and third-party requests in your browser. This will not prevent access to public content but may impair matching and contact functions. The Operator does not respond to “Do Not Track” signals because it does not conduct cross-site tracking.
15. Location Data
15.1 Location data is collected only where you expressly opt in and grant permission at browser or device level. It is used solely to assist in arranging a viewing route, to respond to enquiries in your area and, with your consent, to transmit the location to the Independent Advisor with your enquiry.
15.2 The Operator does not use location data for continuous tracking, does not build a movement profile and does not infer your home or workplace address. Location data is retained for ninety (90) days and then deleted.
15.3 Accuracy depends on your device, network and environment; the Operator does not warrant the coordinates or accuracy radius. You may provide a district only or decline to provide location without affecting form submission or other functions.
16. Security and Access Control
16.1 The Operator implements reasonable technical and organisational measures to protect Personal Data against unauthorised or accidental access, processing, erasure, loss, use, alteration or disclosure, having regard to the nature of the data, the harm that may result and the state of technological development. Measures include HTTPS/TLS encryption, access controls and least privilege, logging and monitoring, human verification and rate limiting, secure hosting configuration and contractual obligations on Processors.
16.2 No internet transmission or electronic storage is completely secure. The Operator cannot guarantee absolute security. You are responsible for the security of your device, browser and credentials and for ensuring that submitted information is accurate and does not contain third-party confidential information.
16.3 Access is restricted to personnel and Processors who require it for the purposes in section 7 and who are subject to confidentiality obligations. Access rights are reviewed periodically and revoked when the relevant role ends.
17. Personal Data Breach Handling and Notification
17.1 The Operator maintains a breach response procedure. On becoming aware of a suspected or actual breach, it will, without undue delay: (a) contain the breach and preserve evidence; (b) assess its nature, scope, categories and volume of data and the likelihood and severity of harm; (c) determine whether notification to the Privacy Commissioner for Personal Data, affected individuals or other regulators is required or appropriate; and (d) document the incident, decisions, notifications and remediation.
17.2 Where a breach is likely to result in a real risk of harm, the Operator will notify the Privacy Commissioner for Personal Data and affected individuals as soon as practicable. It has adopted an internal target of seventy-two (72) hours for significant incidents. That target is a service commitment, not a statutory deadline under the PDPO.
17.3 Notifications will describe, so far as known, the nature of the breach, the data affected, likely consequences, measures taken and the contact point, without disclosing information that would prejudice a criminal investigation or compromise security.
17.4 Suspected vulnerabilities may be reported to [email protected]. The Operator welcomes good-faith research, will acknowledge receipt within a reasonable period and will not pursue action against researchers who act in good faith, avoid privacy violations, do not degrade the Services and allow reasonable remediation time.
18. Accuracy, Verification and User Responsibilities
18.1 The Operator takes reasonable steps to ensure that Personal Data it holds and uses is accurate, complete and up to date, having regard to the purpose of holding it. You are responsible for ensuring that the particulars you provide are accurate, current and complete and for notifying changes.
18.2 Project information is compiled from public sources and may change without notice. The Operator does not warrant its accuracy, completeness, currency or reliability, including any statement as to price, Saleable Area, Estimated Material Date, unit count, view, school net, decoration, facilities, completion or sales arrangement. The latest information published by the vendor, developer, relevant authority and the Sales Brochure prevails.
18.3 You acknowledge that you have not relied on any statement on the Website as a representation of fact and that you will independently verify all material information and obtain professional advice before making any property, financial, legal or tax decision.
19. Data Subject Rights under the PDPO
19.1 Under the PDPO, you have the right: (a) to be informed whether the Operator holds Personal Data of which you are the data subject; (b) to be supplied with a copy; and (c) to require correction of inaccurate data. Requests should be addressed in writing to [email protected].
19.2 The Operator will comply with a data access request within forty (40) days of receipt or, if unable to do so, will inform you in writing within that period of the reasons and comply to the extent possible. A fee may be charged but must not be excessive and is limited to the direct and necessary cost of compliance.
19.3 The Operator may refuse a request where the PDPO permits, including where identity cannot be verified, where compliance would disclose another individual’s Personal Data without consent, or where an exemption applies. Refusals will be given in writing with reasons within the prescribed period and recorded.
19.4 In addition: (a) you may withdraw consent at any time by written notice, without affecting prior lawful processing; (b) you may request erasure of data no longer required, and the Operator will comply where required by section 26 of the PDPO or where no other retention basis applies; and (c) you may request human review of a matching outcome under section 9.2.
19.5 Complaints may be made to the Office of the Privacy Commissioner for Personal Data (www.pcpd.org.hk).
20. Additional Provisions for the EEA and the United Kingdom
20.1 This section applies where you are in the EEA or the UK and the GDPR or UK GDPR applies. The Operator is the controller and may be contacted at [email protected].
| Processing | Legal basis |
|---|---|
| Responding to enquiries and pre-contractual steps | Article 6(1)(b) |
| Disclosure to one Independent Advisor; location; marketing; non-essential cookies | Article 6(1)(a) — consent |
| Security, abuse prevention, service improvement, roster verification, legal claims | Article 6(1)(f) — legitimate interests |
| Legal obligations and lawful authority requests | Article 6(1)(c) |
20.2 Recipients are described in section 11; transfers in section 12; retention in section 13.
20.3 Subject to the GDPR or UK GDPR, you have the rights of access, rectification, erasure, restriction, objection (including profiling), portability, withdrawal of consent and complaint to a supervisory authority. The Operator will respond within one month, extendable by two further months for complex or numerous requests, with notice.
20.4 The Operator does not make decisions based solely on automated processing, including profiling, producing legal or similarly significant effects. Section 9 describes rule-based matching and human review.
20.5 Provision of name, telephone number and consent to disclosure is necessary to arrange an introduction; other information is voluntary.
20.6 Where roster data is obtained from public sources, the Operator relies on legitimate interests in identifying and verifying Independent Advisors, balanced against the rights of the individuals concerned.
20.7 No EU or UK representative has been appointed. If the Operator becomes subject to Article 27 of the GDPR or the corresponding provision of the UK GDPR, it will appoint a representative and update this Notice. No Data Protection Officer has been appointed, no statutory obligation having arisen.
21. Direct Marketing and Opt-Out
21.1 The Operator will not use Personal Data for direct marketing without consent. Where you elect to receive project information and promotions, it may use your name and telephone number to send information about first-hand residential properties, launches, viewing invitations and promotions.
21.2 Before obtaining consent, the Operator will inform you: (a) of its intention to use Personal Data for direct marketing; (b) that it cannot do so without consent; (c) of the kinds of data to be used; (d) of the classes of marketing subjects; and (e) of your right to opt out at any time free of charge.
21.3 You may withdraw consent by replying “STOP”, writing to [email protected] or asking any Independent Advisor to stop. Withdrawal does not affect prior lawful marketing or service messages necessary to handle the enquiry.
21.4 The Operator receives no monetary or other benefit for disclosing Personal Data to an Independent Advisor and does not sell Personal Data. Any disclosure for a third party’s direct marketing will be preceded by prescribed consent and notice of the classes of recipients and marketing subjects.
22. Children and Minors
22.1 The Website is not directed at persons under eighteen (18). The Operator does not knowingly collect or process children’s Personal Data.
22.2 If the Operator becomes aware that it has collected such data without parental or guardian consent, it will take reasonable steps to delete it promptly. Reports may be made to [email protected] with sufficient information to identify and remove the data.
23. Third-Party Websites and Content
23.1 The Website may link to or embed content from third-party websites and services, including developer websites, the Sales of First-hand Residential Properties Electronic Platform, media, map providers and Independent Advisors. Such links are for convenience only and do not constitute endorsement, approval or warranty.
23.2 The Operator does not control and is not responsible for the content, accuracy, availability, security or privacy practices of third-party websites or services. Use of them is at your own risk and subject to their terms and privacy policies. The Operator is not liable for loss arising from such use.
24. Acceptable Use and Prohibited Conduct
24.1 You must use the Website only for lawful purposes and in accordance with this Notice. You must not: (a) breach any applicable law or order; (b) scrape, crawl, harvest or collect content, contact details or Personal Data by automated means without prior written consent; (c) bypass or interfere with verification, rate limits, access controls or security measures; (d) introduce viruses, malware or other harmful material; (e) gain or attempt to gain unauthorised access to the Website, its server or any connected system; (f) send unsolicited advertising or spam; (g) impersonate any person or submit false information; (h) infringe any intellectual-property, privacy or confidentiality right; or (i) damage, disable, overburden or impair the Website or interfere with other users.
24.2 The Operator may, without notice and without liability, restrict, suspend or terminate access, refuse enquiries, remove content and report suspected unlawful conduct where it reasonably believes that this section has been breached.
24.3 You agree to indemnify the Operator against loss, liability, cost and expense (including reasonable legal fees) arising from your breach of this section or infringement of third-party rights.
25. Intellectual Property, Imagery and Takedown
25.1 The design, layout, text, source code, databases and original visual assets of the Website are owned by the Operator or the relevant rights holders and are protected by copyright, trade mark, database and other laws. Subject to compliance with this Notice, the Operator grants a limited, revocable, non-exclusive, non-transferable licence to access and view the Website for personal, non-commercial use.
25.2 Project names, development names, trade marks, logos and project images belong to their respective owners and are used for identification and information only. No licence is granted in respect of third-party intellectual property. Content may not be copied, reproduced, adapted, distributed, published, sold, licensed or commercially exploited without prior written consent.
25.3 Computer-generated images, artists’ impressions, illustrations and photographs may be edited, retouched or produced using imaging technology. They are illustrative only and do not represent actual appearance, dimensions, view, finishes, surroundings or facilities. The statement required by Cap. 621 is displayed on the relevant project page.
25.4 If you believe content infringes your rights, write to [email protected] with: (a) your identity and contact details; (b) identification and proof of the right relied on; (c) the URL and description of the content; (d) a good-faith statement that the use is unauthorised; and (e) your signature or that of an authorised representative. The Operator will review the notice and may remove or restrict access pending resolution.
26. First-Hand and Second-Hand Property Disclosures
26.1 Only pages for uncompleted first-hand residential developments are intended to comply with Cap. 621. Each such page displays, to the extent applicable: (a) the Estimated Material Date; (b) “Please refer to the sales brochure for details.”; (c) where the page contains photographs, images, drawings or sketches showing an artist’s impression, the statement prescribed by Cap. 621; (d) where the page is published by the vendor or with the vendor’s consent, a statement of that fact; and (e) where the page is an independent compilation, a statement to that effect.
26.2 The prescribed artist’s impression statement is:
The photographs, images, drawings or sketches shown in this advertisement/promotional material represent an artist’s impression of the development concerned only. They are not drawn to scale and/or may have been edited and processed with computerized imaging techniques. Prospective purchasers should make reference to the sales brochure for details of the development. The vendor also advises prospective purchasers to conduct an on-site visit for a better understanding of the development site, its surrounding environment and the public facilities nearby.
26.3 Area is expressed in Saleable Area only. No construction floor area, gross floor area or other measurement is used to describe size or price per square foot or square metre.
26.4 The Operator is not the vendor or developer. Project information is compiled from public sources and is subject to the latest announcements of the vendor, developer, relevant authorities and the Sales Brochure. The Operator does not warrant that any project page has been authorised by the vendor as an advertisement; where a page is not so authorised, it is described as an independent compilation and is not represented as published by or on behalf of the vendor.
26.5 Nothing in this section limits obligations under Cap. 621, the Trade Descriptions Ordinance (Chapter 362) or any other law, or the rights of the Sales of First-hand Residential Properties Authority or any regulator.
26.6 Completed developments, second-hand residential estates and commercial properties are presented as independent property information, not as first-hand sales advertisements. Such pages may state prices, transactions, rents, yields and comparisons compiled from the Land Registry, the Rating and Valuation Department, developers, letting particulars and public market sources. Figures are indicative, may not reflect the latest transaction, and are subject to the official records and the relevant lease or sale documents.
26.7 The Operator does not provide valuation, investment, legal or tax advice. Any yield, return or price comparison is an arithmetic illustration based on the stated assumptions and is not a forecast or guarantee.
27. Disclaimer, No Offer and Limitation of Liability
27.1 The Website is an independent information platform. It does not constitute and shall not be construed as an offer, invitation, solicitation, recommendation, warranty or representation to buy, sell, lease, finance or invest in property, or as legal, tax, financial, investment or professional advice.
27.2 All project information is provided “as is” and “as available”. To the maximum extent permitted by law, the Operator disclaims all warranties, conditions and representations, express or implied, including accuracy, completeness, fitness for purpose, title and non-infringement.
27.3 To the maximum extent permitted by law, the Operator is not liable for: (a) indirect, incidental, special, consequential or punitive loss; (b) loss of profit, revenue, business, opportunity, goodwill, data or anticipated savings; or (c) loss arising from reliance on project information, from any transaction with an Independent Advisor, vendor, developer or third party, or from interruption, error, omission or unavailability of the Website.
27.4 To the maximum extent permitted by law, the Operator’s aggregate liability arising out of or in connection with the Website or this Notice, whether in contract, tort (including negligence), statute or otherwise, shall not exceed the greater of (a) HK$10,000 and (b) the amount (if any) paid by you to the Operator in connection with the relevant enquiry.
27.5 Nothing excludes or limits: (a) liability for death or personal injury caused by negligence; (b) liability for fraud or fraudulent misrepresentation; (c) liability under the Control of Exemption Clauses Ordinance (Chapter 71); or (d) any liability that cannot lawfully be excluded. If a limitation is held unenforceable, the remaining provisions continue.
27.6 You agree to indemnify the Operator against loss, liability, cost and expense arising from your breach of this Notice, infringement of third-party rights, or inaccurate or unlawful content you submit.
28. Governing Law, Jurisdiction and Language
28.1 This Notice and any dispute or claim arising out of or in connection with it or the Website, including non-contractual disputes, are governed by the laws of the Hong Kong Special Administrative Region.
28.2 The parties submit to the exclusive jurisdiction of the Hong Kong courts, save that: (a) the Operator may bring proceedings in any jurisdiction where you reside or hold assets to protect its rights; and (b) nothing deprives a consumer of the protection of mandatory provisions of the law of their habitual residence or of the right to bring proceedings before a court with jurisdiction under applicable law.
28.3 This Notice is drafted in English. The Chinese versions are translations for convenience. In the event of inconsistency or ambiguity, the English version prevails, save where mandatory law requires otherwise. A copy of the English version is available on request.
29. Amendments, Severability, Entire Agreement and Notices
29.1 This Notice is version 3.2, last updated on 2026-10-25 and effective from 2026-01-01. The Operator may amend, supplement or replace it from time to time. The current version, effective date and a summary of material changes will be published on this page.
29.2 Where an amendment materially affects the purposes of processing, the categories of recipients, transfers outside Hong Kong or your rights, the Operator will give at least thirty (30) days’ prior notice by a prominent website notice or by email or messaging service to the contact details last provided, and will obtain fresh consent where required. No amendment retrospectively authorises a use that was not permitted at the time of collection.
29.3 If any provision is held invalid, illegal or unenforceable, it shall be severed and the remaining provisions shall continue in full force. If a provision could be made valid by limitation, it shall be construed with the minimum limitation necessary.
29.4 This Notice, together with the point-of-collection notices and the accessibility statement, constitutes the entire agreement in respect of the Website and supersedes prior statements. Failure or delay in exercising a right is not a waiver. You may not assign your rights or obligations without prior written consent. The Operator may assign to a successor in title.
29.5 Notices to the Operator must be in writing to [email protected]. Notices to you may be given by email, SMS or messaging service to the details last provided, or by a prominent website notice, and are deemed received on the next business day after transmission absent a delivery failure notification.
29.6 A person who is not a party has no right under the Contracts (Rights of Third Parties) Ordinance (Chapter 623) to enforce any provision.
30. Complaints, Accessibility and Contact
30.1 Questions, concerns or complaints about this Notice, the processing of Personal Data or the Website should be addressed to [email protected]. The Operator will acknowledge receipt within five (5) business days and endeavour to resolve the matter within a reasonable period having regard to its complexity.
30.2 Complaints about an Independent Advisor’s professional conduct may be made to the Estate Agents Authority; complaints about first-hand residential property advertising to the Sales of First-hand Residential Properties Authority; and complaints about Personal Data to the Office of the Privacy Commissioner for Personal Data (www.pcpd.org.hk).
30.3 The Operator is committed to accessibility. The accessibility statement at accessibility.html describes the applicable standard, the measures implemented, known limitations and the feedback mechanism. Requests for alternative formats, and reports of accessibility barriers, should be sent to [email protected]; the Operator will respond within ten (10) business days and remedy the issue within a reasonable period.
30.4 This Notice is available in English, Traditional Chinese and Simplified Chinese. The English version prevails in accordance with section 28.3.
简体中文
1. 定义与解释
1.1 于本通知中，除文义另有所指外：
- 「适用资料保障法」指《个人资料（隐私）条例》（第 486 章）（「隐私条例」），并在适用范围内指《一般资料保护规例》（欧盟）2016/679（「GDPR」）、英国 GDPR 及英国《2018 年资料保护法》。
- 「第 621 章」指《一手住宅物业销售条例》（第 621 章）。
- 「控制者」、「资料当事人」、「个人资料」、「处理」及「处理者」具有适用资料保障法所赋予的涵义。
- 「预计关键日期」及「实用面积」具有第 621 章及有关售楼说明书所赋予的涵义。
- 「独立专员」指本公司名册上的第三方地产代理、营业员或联络人，并非本公司的雇员、代理人、合伙人、特许经营者或代表。
- 「本通知」指本法律、隐私及广告通知，并不时修订。
- 「本公司」及「我们」指 Prephrok Network Ltd，于马绍尔群岛共和国注册成立。
- 「售楼说明书」指卖方根据第 621 章就发展项目发布或代其发布的售楼说明书。
- 「服务」指本网站的资讯、配对、联络、地图、下载及相关功能。
- 「本网站」指 iCITY 葵涌 及其所有页面、子网域及内容。
1.2 于本通知中：(a) 标题仅为方便阅读；(b)「包括」指「包括但不限于」；(c) 单数包括复数，反之亦然；(d) 对法例的提述包括修订、重新制定、取代及附属法例；(e) 对人士的提述包括法团、非法团团体及合伙；及 (f)「书面」包括电邮。
1.3 本通知以英文草拟，并翻译为中文（繁体）及中文（简体）。如有不一致或歧义，以英文版本为准，惟强制性法律另有规定者除外。
2. 营运者、法律地位与联络
2.1 本网站由 Prephrok Network Ltd（「本公司」）拥有及营运。本公司于马绍尔群岛共和国注册成立，并非在香港注册成立，亦未根据《地产代理条例》（第 511 章）获发地产代理牌照，并不在香港进行地产代理工作。
2.2 本公司并非本网站所提述任何发展项目的卖方、发展商、认可人士、承建商或销售代理。本通知不构成亦无意构成本公司与任何使用者、卖方、发展商、地产代理或独立专员之间的代理、受信、合伙、合资、雇佣或特许经营关系。
2.3 本公司并未在欧盟或英国设立机构，亦未指定资料保护主任，因并无产生相关法定义务。所有与本通知或个人资料有关的请求及投诉，应发送至 [email protected]。本公司的注册编号及注册办事处可应要求提供。本公司通常于五（5）个工作日内确认收到通讯，但不影响法律订明的期间。
2.4 本公司于马绍尔群岛共和国注册成立。其注册办事处及注册代理人地址可应要求提供，公司注册编号亦可应要求提供。本公司的法人地位、能力及内部事务受马绍尔群岛共和国法律管辖。
2.5 马绍尔群岛共和国并未制定与隐私条例或 GDPR 同等水平的资料保障法例。本公司仍以合约方式适用本通知，并在适用范围内适用隐私条例及 GDPR。该地缺乏同等法例，并不削减本通知所述的保障或任何强制性法律下的权利。
2.6 本公司并无在香港设立分行或注册办事处，亦非持牌地产代理。法律程序文件可送达本公司于马绍尔群岛共和国的注册办事处或注册代理人（地址可应要求提供），或发送至 [email protected]。本通知下的争议受第 28 节规管。
3. 适用范围、接受与优先次序
3.1 本通知适用于本网站及服务，包括透过联络表单、配对功能、地图功能、下载及通讯而收集个人资料。本通知不适用于任何第三方网站或服务，包括任何独立专员的网站或渠道。
3.2 阁下浏览本网站或提交表单，即确认已阅读并理解本通知，并同意受其约束。如不同意，必须停止使用联络功能。接受本通知不构成接受任何要约，亦不构成任何物业买卖、租赁或融资合约。
3.3 本通知应与下列文件一并阅读：(a) 收集资料时展示的通知，包括随联络表单附上的收集个人资料声明；(b) 于 accessibility.html 刊载的无障碍声明；及 (c) 第 621 章所规定并于项目页展示的任何声明。
3.4 如有冲突：(a) 以强制性法律为准；(b) 其次为本通知英文版本；(c) 其次为中文译本；(d) 其次为任何其他页面或声明。收集点通知仅就其相关的收集事项优先。
4. 所收集的个人资料
4.1 本公司可能收集下列类别的个人资料：
| 类别 | 例子 | 来源 |
|---|---|---|
| 身分及联络 | 姓名或称谓；电话号码；语言；偏好联络方式 | 由阁下提供 |
| 查询 | 需求、预算、置业计划、地区或项目、自由文字讯息 | 由阁下提供 |
| 技术 | IP 位址、浏览器及装置类型、操作系统、萤幕尺寸、时区 | 自动收集 |
| 使用 | 页面及来源网址、登陆页、UTM 参数、点击识别码、工作阶段识别码、页面浏览次数、语言 | 自动收集 |
| 位置 | 经度、纬度、准确度（经阁下明确选择加入） | 经同意提供 |
| 验证 | 人机验证结果及请求元资料 | 由服务商产生 |
| 同意纪录 | 通知版本、时间及日期、语言、推广及转介偏好 | 提交时产生 |
| 专员名册 | 姓名、电话或通讯号码、所属代理公司、公开牌照号码、来源网址、收集及核实日期 | 公开来源 |
4.2 本公司不要求身份证号码、银行或支付卡资料、完整住宅地址、病历、生物识别资料，或第 7 节目的并非必要的其他个人资料。阁下不得于自由文字栏位输入该等资料。如阁下自愿提供 GDPR 第 9 条所指的特别类别资料，须自行承担风险；本公司仅在回应查询所需范围内，并以自愿提交所构成的明确同意为基础处理。
4.3 本公司不会在知情情况下收集十八（18）岁以下人士的个人资料。第 22 节适用。
5. 个人资料来源
5.1 本公司从下列来源取得个人资料：(a) 阁下直接提供；(b) 浏览器或装置自动提供；(c) 托管、内容传送、验证、通知及分析服务商；(d) 为跟进查询而共享的独立专员互动纪录；及 (e) 公开来源，包括代理公司网站、名录、公开登记册及社交媒体专页，用于专员名册。
5.2 项目资料整理自发展商网站、一手住宅物业销售资讯网、政府公布、售楼说明书、价单及媒体报导。该等资料并不识别任何使用者，亦不会用于该目的。
5.3 本公司不采用隐蔽收集方法，不查阅私人讯息或通讯录，亦不会在知情情况下从非法来源取得个人资料。
6. 处理的法律基础与条件
6.1 根据隐私条例，本公司为合法并与其职能直接相关的目的收集个人资料，所收集的资料属必要、足够而不超乎适度。本公司采取所有切实可行步骤，确保收集合法及公平。
6.2 本公司依赖下列基础：(a) 同意 — 向一位独立专员披露、位置、直接促销及任何非必要性 cookie；(b) 合约前及合约步骤 — 回应查询及安排介绍；(c) 合法权益 — 保安、防止欺诈及滥用、改善服务、核实名册及法律申索；及 (d) 法律义务 — 遵守法律、法院命令及主管机关的合法要求。
6.3 为免疑问，隐私条例并无订明封闭式的法律基础清单。文中对合法权益的提述，描述本公司对其合法目的的评估，并不取代隐私条例（包括保障资料第 1 原则）的规定。
6.4 同意必须自愿、具体、知情及明确。阁下可随时以书面通知 [email protected] 撤回，而不影响撤回前的处理。本公司不会以同意非必要的处理作为提供服务的条件。
6.5 本公司不会进行 GDPR 第 22 条所指、产生法律效果或类似重大影响的自动化决策。第 9 节说明规则式配对。
7. 处理目的
7.1 本公司为下列目的处理个人资料：
| 目的 | 资料 | 基础 |
|---|---|---|
| 接收、评估及回应查询 | 身分、查询、技术、同意纪录 | 合约前步骤；如需同意则以同意为基础 |
| 选择及介绍一位独立专员 | 身分、查询、位置（可选）、同意纪录 | 同意 |
| 安排参观及协调跟进 | 身分、查询、位置（可选） | 合约前步骤；同意 |
| 营运、保障及改善本网站 | 技术、使用、验证 | 合法权益 |
| 衡量查询及广告成效 | 使用、技术 | 合法权益；非必要性技术须经同意 |
| 防止及调查欺诈、滥用及事故 | 技术、使用、验证、同意纪录 | 合法权益；法律义务 |
| 编制、核实、更正及移除名册纪录 | 专员名册 | 合法权益；法律义务 |
| 遵守法律及监管要求；法律申索 | 所需的任何类别 | 法律义务；合法权益 |
| 发送项目资讯及推广（如选择接收） | 身分、同意纪录 | 同意 |
7.2 本公司不会在未经订明同意或合法授权的情况下，将个人资料用于新的无关目的。如有新目的，本公司会在处理开始前通知阁下并取得新的同意。
8. 必须与自愿提供的资料
8.1 就提交联络表单而言，下列属必须：(a) 姓名或称谓；(b) 电话号码；及 (c) 明确同意向一位独立专员披露。如欠缺任何一项，本公司无法处理查询、安排介绍或安排参观。
8.2 需求、预算、置业计划、地区或项目偏好、偏好联络方式及位置属自愿。未能提供不会妨碍提交，但可能降低介绍的准确性。阁下可随时在浏览器或装置层面拒绝或撤回位置权限。
8.3 同意直接促销属自愿、分开征求，并非提交的条件。拒绝或撤回不影响查询。
9. 规则式配对与人手覆核
9.1 本公司可能对项目、地区、语言、所述需求及专员可联络情况应用确定性规则，以识别适合接收查询的人士。该等规则会定期就相关性及公平性检视。本公司不会使用结果作出产生法律或类似重大影响的决定。
9.2 阁下可书面致 [email protected]，要求对配对结果进行人手覆核或提出反对。职员会在合理期间内覆核，并以书面通知结果。
9.3 如引入机器学习、剖析或生成式人工智能，本公司将在部署前：(a) 更新本通知及收集点通知；(b) 进行并记录资料保障影响评估；(c) 实施与风险相称的人手监督；(d) 以简洁、透明及易明方式解释逻辑；及 (e) 提供反对仅基于自动化处理的决定的机制。
10. 独立专员；并无代理或合伙
10.1 独立专员属第三方，并非本公司的雇员、代理人、合伙人、合资方、特许经营者或代表。本公司无权代表彼等行事或约束彼等；彼等亦无权代表本公司行事或约束本公司、代本公司作出陈述或代收款项。
10.2 专员资料整理自公开来源，包括代理公司网站、名录、公开登记册及社交媒体专页。本公司于收集时及之后定期采取合理步骤核实，但不保证其准确、完整、最新或牌照仍然有效。阁下在交易或付款前，应自行向地产代理监管局核实身分、牌照及纪律纪录。
10.3 在阁下明确同意后，本公司向一位独立专员披露姓名、电话号码、需求、语言及（如提供）位置，以便该专员联络阁下。该专员其后成为独立控制者。本公司不控制亦不负责该专员其后的处理、保留、保安或披露实务；该等实务受其隐私政策及适用资料保障法规管。
10.4 本公司不会为向独立专员披露个人资料而收取任何金钱或其他利益，不出售个人资料，亦不会就个人资料的转移本身收取对价。
10.5 独立专员可致函 [email protected]，要求查阅、更正或从名册移除。本公司将核实请求，于三十（30）日内回复，并在合理期间内更新或删除纪录。本公司可能保留最低限度的请求纪录以备举证。
10.6 有关专员专业操守的投诉，应向地产代理监管局提出。本公司会在法律要求范围内配合监管查询。
11. 披露、接收者及服务供应商
11.1 本公司可在第 7 节目的所需范围内，向下列人士披露个人资料：(a) 一位独立专员，仅在阁下明确同意后；(b) Cloudflare, Inc.，用于托管、内容传送、Turnstile 验证及无 cookie 分析；(c) 用于传送表单通知的即时通讯通知服务；(d) Google Fonts（fonts.googleapis.com）及 jsDelivr（cdn.jsdelivr.net），阁下的浏览器直接向其请求，传送 IP 位址及来源网址，但不包括姓名、电话或查询内容；(e) 负保密义务的专业顾问；(f) 法律要求或为法律申索或安全所需的法院、监管机构及执法机关；及 (g) 本公司业务的潜在或实际承继人，惟须受同等义务约束。
11.2 本公司要求处理者仅按书面指示行事、实施适当保安、协助资料当事人请求、于合作结束时删除或交还资料，并在法律要求范围内允许审计。最新处理者名单可向 [email protected] 索取。
11.3 本公司不出售个人资料。除第 10 节的介绍外，本公司不会在未取得订明同意及未事先通知接收者类别及促销标的类别的情况下，为第三方的直接促销披露个人资料。
12. 国际及跨境转移
12.1 个人资料可能被转移至香港以外、在该等地区储存或从该等地区查阅，包括美国、欧洲经济区、英国及服务供应商设有基础设施的其他司法管辖区。目的为第 7 节所列者。
12.2 隐私条例第 33 条并未生效，香港法律因此并无一般性跨境转移禁令。尽管如此，本公司：(a) 选择提供适当保安的供应商；(b) 施加书面保密、保安、目的限制、保留及删除义务；及 (c) 如适用 GDPR 或英国 GDPR，订立标准合约条款及（如适用）英国增补条款或其他合法机制。
12.3 阁下明白跨境处理可能使个人资料受接收司法管辖区的法律、合法查阅要求及监察制度约束，其保障可能与香港不同。有关特定转移保障的摘要，可向 [email protected] 索取。
13. 保留与删除
13.1 本公司仅在收集目的所需或法律要求或允许的期间内保留个人资料：
| 类别 | 保留期 | 期满处理 |
|---|---|---|
| 查询纪录 | 最后跟进日起 24 个月 | 安全删除或匿名化 |
| 同意及版本纪录 | 查询期 + 12 个月 | 安全删除 |
| 位置资料 | 提交日起 90 日 | 安全删除 |
| 专员名册 | 最后核实日起 12 个月 | 重新核实或删除 |
| 伺服器及安全日志 | 30 日 | 自动轮替 |
| 分析事件（无 cookie） | 14 个月 | 聚合后删除 |
| 通知讯息 | 7 日 | 删除或关闭历史 |
| 投诉及法律纪录 | 7 年 | 封存 |
13.2 期满后，本公司删除或匿名化资料。如因备份或技术限制未能即时删除，将限制查阅并于九十（90）日内完成删除。法律程序或申索所需的资料可保留至结束。
13.3 隐私条例第 26 条要求采取所有切实可行步骤删除不再需要的资料，除非法律禁止或不符合公众利益。本公司将遵守，并会考虑向本公司提出的删除请求。
14. Cookie、工作阶段储存及同类技术
14.1 本网站使用下列第一方技术：
| 名称 | 类型 | 目的 | 有效期 |
|---|---|---|---|
cw_agent_* | 第一方 cookie | 记住已配对专员，避免重复配对 | 48 小时 |
cw_lead_* | 第一方 cookie | 防止重复提交表单 | 48 小时 |
sessionStorage | 第一方工作阶段储存 | 记录来源、UTM 参数、工作阶段识别码、页面浏览及装置资料 | 直至关闭分页 |
14.2 阁下的浏览器亦会直接向第三方资源请求：Google Fonts（fonts.googleapis.com）、jsDelivr（cdn.jsdelivr.net）及 Cloudflare。该等请求传送 IP 位址及来源网址，但不包括姓名、电话或查询内容。
14.3 本公司不使用广告、剖析或跨网站追踪 cookie。由于仅使用严格必要技术，本网站不显示同意横幅。如引入非必要性技术，本公司将事先取得同意、以同等显眼程度提供「拒绝全部」及「接受全部」、在同意前不设置，并更新本节。
14.4 阁下可在浏览器清除、封锁或限制 cookie 及第三方请求。此举不会妨碍查阅公开内容，但可能影响配对及联络功能。本公司不回应「Do Not Track」讯号，因其不进行跨网站追踪。
15. 位置资料
15.1 仅在阁下明确选择加入并于浏览器或装置层面授予权限后，方会收集位置资料。该资料仅用于协助安排参观路线、回应阁下所在地区的查询，并在同意下随查询传送予独立专员。
15.2 本公司不会使用位置资料进行持续追踪、建立移动轨迹或推断住所或工作地址。位置资料保留九十（90）日后删除。
15.3 准确度取决于装置、网络及环境；本公司不保证座标或准确度半径。阁下可仅提供地区或拒绝提供位置，而不影响提交或其他功能。
16. 保安与存取控制
16.1 本公司考虑资料性质、可能损害及科技发展水平，实施合理技术及组织措施，保护个人资料免受未经授权或意外的查阅、处理、删除、遗失、使用、更改或披露。措施包括 HTTPS/TLS 加密、存取控制及最低权限、日志及监察、人机验证及速率限制、安全托管配置，以及对处理者的合约义务。
16.2 互联网传输及电子储存并非绝对安全。本公司无法保证绝对安全。阁下有责任维护装置、浏览器及凭证安全，并确保提交资料准确且不含第三方机密资料。
16.3 查阅仅限于为第 7 节目的而需要，并受保密义务约束的人员及处理者。存取权限定期检视，并在职务终止时撤销。
17. 个人资料外泄的处理与通报
17.1 本公司设有外泄应变程序。知悉怀疑或实际外泄后，将在没有不当延误下：(a) 控制外泄并保存证据；(b) 评估性质、范围、资料类别及数量，以及伤害的可能性及严重程度；(c) 决定是否须或适合向个人资料隐私专员公署、受影响人士或其他监管机构通报；及 (d) 记录事件、决定、通报及补救。
17.2 如外泄可能造成真实伤害风险，本公司将在切实可行范围内尽快通知个人资料隐私专员公署及受影响人士。本公司就重大事件采取七十二（72）小时内部目标。该目标属服务承诺，并非隐私条例下的法定限期。
17.3 通报将在已知范围内说明外泄性质、受影响资料、可能后果、已采取措施及联络点，但不披露可能妨碍刑事调查或危害安全的资料。
17.4 怀疑漏洞可报告至 [email protected]。本公司欢迎善意研究，会在合理期间内确认收到，并不会对善意行事、避免侵犯隐私、不削弱服务及给予合理补救时间的研究人员采取行动。
18. 准确性、核实及使用者责任
18.1 本公司考虑持有目的，采取合理步骤确保所持有及使用的个人资料准确、完整及最新。阁下有责任确保所提供资料准确、最新及完整，并在变更时通知本公司。
18.2 项目资料整理自公开来源，可随时更改而不作通知。本公司不保证其准确性、完整性、时效性或可靠性，包括价格、实用面积、预计关键日期、单位数目、景观、校网、装修、设施、落成或销售安排的陈述。卖方、发展商、相关主管机关公布的最新资料及售楼说明书为准。
18.3 阁下确认并无依赖本网站任何陈述作为事实陈述，并会在作出任何物业、财务、法律或税务决定前，自行核实所有重要资料并取得专业意见。
19. 隐私条例下的资料当事人权利
19.1 根据隐私条例，阁下有权：(a) 获告知本公司是否持有阁下作为资料当事人的个人资料；(b) 获提供副本；及 (c) 要求更正不准确资料。请求应以书面发送至 [email protected]。
19.2 本公司将于收到查阅请求后四十（40）日内遵从，或如未能遵从，会在该期间内书面通知原因并在可行范围内遵从。本公司可收取费用，但不得过高，并限于遵从的直接及必要成本。
19.3 本公司可在隐私条例允许下拒绝请求，包括无法核实身分、遵从会未经同意披露另一名个人的个人资料，或适用豁免。拒绝将在订明期间内书面说明理由并记录。
19.4 此外：(a) 阁下可随时书面撤回同意，而不影响先前的合法处理；(b) 阁下可要求删除不再需要的资料，本公司将在隐私条例第 26 条要求或并无其他保留基础时遵从；及 (c) 阁下可根据第 9.2 节要求人手覆核配对结果。
19.5 投诉可向个人资料隐私专员公署提出（www.pcpd.org.hk）。
20. 欧洲经济区及英国的附加条文
20.1 本节适用于阁下位于欧洲经济区或英国，且 GDPR 或英国 GDPR 适用的情况。本公司为控制者，联络方式为 [email protected]。
| 处理 | 法律基础 |
|---|---|
| 回应查询及合约前步骤 | 第 6(1)(b) 条 |
| 向一位独立专员披露；位置；推广；非必要性 cookie | 第 6(1)(a) 条 — 同意 |
| 保安、防止滥用、改善服务、核实名册、法律申索 | 第 6(1)(f) 条 — 合法权益 |
| 法律义务及主管机关合法要求 | 第 6(1)(c) 条 |
20.2 接收者见第 11 节；转移见第 12 节；保留见第 13 节。
20.3 在 GDPR 或英国 GDPR 规限下，阁下有查阅、更正、删除、限制、反对（包括剖析）、可携性、撤回同意及向监管机构投诉的权利。本公司将于一个月内回复；如请求复杂或众多，可再延长两个月并通知阁下。
20.4 本公司不会仅基于自动化处理（包括剖析）作出产生法律或类似重大影响的决定。第 9 节说明规则式配对及人手覆核。
20.5 提供姓名、电话号码及同意披露，属安排介绍所需；其他资料属自愿。
20.6 如名册资料来自公开来源，本公司依赖识别及核实独立专员的合法权益，并已平衡有关人士的权利。
20.7 本公司未指定欧盟或英国代表。如本公司日后受 GDPR 第 27 条或英国 GDPR 相应条文约束，将指定代表并更新本通知。本公司未指定资料保护主任，因并无产生相关法定义务。
21. 直接促销与退出
21.1 本公司不会在未经同意的情况下使用个人资料作直接促销。如阁下选择接收项目资讯及推广，本公司可能使用姓名及电话号码，发送一手住宅物业、新盘、参观邀请及推广资讯。
21.2 取得同意前，本公司会告知：(a) 拟使用个人资料作直接促销；(b) 未经同意不得如此使用；(c) 将会使用的资料种类；(d) 促销标的类别；及 (e) 可随时免费退出的权利。
21.3 阁下可回复「STOP」、致函 [email protected] 或要求任何独立专员停止，以撤回同意。撤回不影响先前的合法促销或处理查询所需的服务讯息。
21.4 本公司不会为向独立专员披露个人资料而收取金钱或其他利益，亦不出售个人资料。任何为第三方直接促销的披露，均会先取得订明同意并通知接收者及促销标的类别。
22. 儿童及未成年人
22.1 本网站并非以十八（18）岁以下人士为对象。本公司不会在知情情况下收集或处理儿童的个人资料。
22.2 如本公司知悉在未经父母或监护人同意下收集该等资料，将采取合理步骤尽快删除。可致函 [email protected] 报告，并提供足够资料以识别及移除。
23. 第三方网站及内容
23.1 本网站可能连结或嵌入第三方网站及服务的内容，包括发展商网站、一手住宅物业销售资讯网、媒体、地图供应商及独立专员。该等连结仅为方便而设，并不构成认可、批准或保证。
23.2 本公司不控制亦不负责第三方网站或服务的内容、准确性、可用性、安全性或隐私实务。使用该等网站或服务须自行承担风险，并受其条款及隐私政策约束。本公司不会对因该等使用而产生的损失负责。
24. 可接受使用及禁止行为
24.1 阁下只可为合法目的并按照本通知使用本网站。阁下不得：(a) 违反任何适用法律或命令；(b) 未经事先书面同意，以自动化方式爬取、抓取、收集内容、联络资料或个人资料；(c) 绕过或干扰验证、速率限制、存取控制或保安措施；(d) 引入病毒、恶意软件或其他有害材料；(e) 取得或试图取得本网站、伺服器或相连系统的未经授权存取；(f) 发送未经邀请的广告或垃圾讯息；(g) 冒充任何人或提交虚假资料；(h) 侵犯任何知识产权、隐私或保密权利；或 (i) 损害、禁用、过度负荷或削弱本网站，或干扰其他使用者。
24.2 如本公司合理相信本节被违反，可在不作通知及不承担责任下限制、暂停或终止查阅、拒绝查询、移除内容及向主管机关报告怀疑违法行为。
24.3 阁下同意就因违反本节或侵犯第三方权利而产生的损失、责任、成本及开支（包括合理法律费用），向本公司作出弥偿。
25. 知识产权、图像及下架
25.1 本网站的设计、版面、文字、原始码、资料库及原创视觉资产，由本公司或相关权利人拥有，受版权、商标、资料库及其他法律保护。在遵守本通知的前提下，本公司授予有限、可撤回、非专属、不可转让的许可，供阁下为个人非商业用途查阅及浏览。
25.2 项目名称、发展项目名称、商标、标志及项目图片属各自权利人所有，仅作识别及资讯用途。本公司不就第三方知识产权授予任何许可。未经事先书面同意，不得复制、重制、改编、分发、发布、出售、特许或商业利用。
25.3 电脑合成图像、画家想像、插图及照片可能经编辑、修饰或使用影像技术制作，仅供说明，不代表实际外观、尺寸、景观、装修、周边环境或设施。第 621 章规定的声明刊载于相关项目页。
25.4 如阁下认为内容侵犯权利，请致函 [email protected]，提供：(a) 身分及联络资料；(b) 权利的识别及证明；(c) 内容网址及描述；(d) 善意相信使用未经授权的陈述；及 (e) 阁下或授权代表签署。本公司将审视通知，并可能在争议解决前移除或限制查阅。
26. 一手及二手物业资料披露
26.1 仅未落成的一手住宅项目页面按第 621 章处理。每一该等页面在适用范围内展示：(a) 预计关键日期；(b)「详情请参阅售楼说明书。」；(c) 如载有显示画家想像的相片、图像、绘图或素描，第 621 章规定的声明；(d) 如由卖方或获卖方同意发布，述明该事实；及 (e) 如属独立资料整理，述明该事实。
26.2 法定画家想像声明如下：
本广告╱宣传资料内载列的相片、图像、绘图或素描显示纯属画家对有关发展项目之想像。有关相片、图像、绘图或素描并非按照比例绘画及╱或可能经过电脑修饰处理。准买家如欲了解发展项目的详情，请参阅售楼说明书。卖方亦建议准买家到有关发展地盘作实地考察，以对该发展地盘、其周边地区环境及附近的公共设施有较佳了解。
26.3 面积仅以实用面积表达。本公司不以建筑面积、总楼面面积或任何其他量度描述面积或每平方呎／每平方米价格。
26.4 本公司并非卖方或发展商。项目资料整理自公开来源，受卖方、发展商、相关主管机关最新公布及售楼说明书所限。本公司不保证任何项目页已获卖方授权作为广告；如未获授权，该页描述为独立资料整理，并不表示由卖方或代卖方发布。
26.5 本节不限制本公司根据第 621 章、《商品说明条例》（第 362 章）或其他法律承担的义务，亦不限制一手住宅物业销售监管局或任何监管机构的权利。
26.6 已落成项目、二手住宅屋苑及商业物业以独立物业资料形式展示，并非一手销售广告。该等页面可载列价格、成交、租金、回报及比较，资料整理自土地注册处、差饷物业估价署、发展商、租约资料及公开市场来源。数字仅供参考，未必反映最新成交，并以官方纪录及相关租约或买卖文件为准。
26.7 本公司不提供估价、投资、法律或税务建议。任何回报、收益率或价格比较均为基于所述假设的算术示例，并非预测或保证。
27. 免责声明、非要约及责任限制
27.1 本网站为独立资讯平台。本网站不构成亦不得解释为任何物业买卖、租赁、融资或投资的要约、邀请、招揽、建议、保证或陈述，亦不构成法律、税务、财务、投资或专业意见。
27.2 所有项目资料按「现状」及「现有」基础提供。在法律允许的最大范围内，本公司不作任何明示或默示保证、条件或陈述，包括准确性、完整性、特定用途适用性、所有权及不侵权。
27.3 在法律允许的最大范围内，本公司不对下列负责：(a) 间接、附带、特殊、后果性或惩罚性损失；(b) 利润、收入、业务、机会、商誉、资料或预期节省的损失；或 (c) 因依赖项目资料、与独立专员、卖方、发展商或第三方的交易，或本网站中断、错误、遗漏或不可用而产生的损失。
27.4 在法律允许的最大范围内，本公司因本网站或本通知产生或相关的责任总额（不论合约、侵权（包括疏忽）、法规或其他），不得超过下列较高者：(a) 港币一万元（HK$10,000）；及 (b) 阁下就相关查询支付的金额（如有）。
27.5 本通知不排除或限制：(a) 因疏忽导致死亡或人身伤害的责任；(b) 欺诈或欺诈性失实陈述的责任；(c) 《管制免责条款条例》（第 71 章）下的责任；或 (d) 任何法律上不能排除的责任。如限制被裁定不可执行，其余条文继续适用。
27.6 阁下同意就因违反本通知、侵犯第三方权利，或提交不准确或违法内容而产生的损失、责任、成本及开支，向本公司作出弥偿。
28. 管辖法律、司法管辖权及语言
28.1 本通知及因本通知或本网站产生或相关的任何争议或申索（包括非合约争议），受香港特别行政区法律管辖并据此解释。
28.2 双方接受香港法院的专属管辖，惟：(a) 本公司可在阁下居住或持有资产的任何司法管辖区提起程序以保障权利；及 (b) 本节不剥夺消费者在其惯常居住地法律强制性条文下的保障，或向具有管辖权的法院提起程序的权利。
28.3 本通知以英文草拟。中文版本为方便而设的译本。如有不一致或歧义，以英文版本为准，惟强制性法律另有规定者除外。本公司可应要求提供英文版本副本。
29. 修订、可分性、完整协议及通知
29.1 本通知为版本 3.2，最后更新于 2026-10-25，自 2026-01-01 起生效。本公司可不时修订、补充或取代。最新版本、生效日期及主要变更摘要将于本页刊载。
29.2 如修订对处理目的、接收者类别、香港以外的转移或阁下权利造成重大影响，本公司将于生效前至少三十（30）日，透过本网站显眼通知或发送至最近提供的联络资料作出通知，并在法律要求时取得新的同意。任何修订均不追溯授权收集时未获准许的使用。
29.3 如任何条文被裁定无效、违法或不可执行，该条文将被分割，其余条文继续完全有效。如条文可透过限制而有效，则以所需的最低限制解释。
29.4 本通知连同收集点通知及无障碍声明，构成有关本网站的完整协议，并取代先前的陈述。未行使或延迟行使权利不构成放弃。未经事先书面同意，阁下不得转让权利或义务。本公司可转让予承继人。
29.5 向本公司发出的通知必须以书面发送至 [email protected]。向阁下发出的通知，可透过电邮、短讯或多媒体讯息发送至最近提供的资料，或透过本网站显眼通知作出，并于传送后下一个工作日视为收到（除非收到传送失败通知）。
29.6 非本通知一方的人士，无权根据《合约（第三者权利）条例》（第 623 章）强制执行任何条文。
30. 投诉、无障碍及联络
30.1 有关本通知、个人资料处理或本网站的问题、关注或投诉，应发送至 [email protected]。本公司将于五（5）个工作日内确认收到，并在考虑复杂性后于合理期间内尽力解决。
30.2 有关独立专员专业操守的投诉，可向地产代理监管局提出；有关一手住宅物业广告的投诉，可向一手住宅物业销售监管局提出；有关个人资料的投诉，可向个人资料隐私专员公署提出（www.pcpd.org.hk）。
30.3 本公司致力提供无障碍服务。于 accessibility.html 刊载的无障碍声明，说明适用标准、已实施措施、已知限制及回馈机制。其他格式的请求及无障碍障碍的报告，应发送至 [email protected]；本公司将于十（10）个工作日内回复，并在合理期间内补救。
30.4 本通知提供英文、中文（繁体）及中文（简体）版本。根据第 28.3 节，以英文版本为准。
If you do not agree with this Notice, please stop using the contact functions on the Website. 如你不同意本通知，请停止使用本网站的联络功能。
This Notice is governed by the English version. 本通知以英文版本為準。
Operator: Prephrok Network Ltd · Contact: [email protected] · Accessibility Statement