Privacy Statement


Introduction

  1. This Privacy Policy Statement ("PPS") sets out the obligation and policies of TOPPAN Nexus Limited or any relevant entity within TOPPAN Nexus Group (herein referred to as "TOPPAN Nexus”/”the Company"/"we"/"us"/"our") under Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the “Ordinance”). The terms “you,” “your” and “yours” when used in this Privacy Policy Statement means any individual including, current and future customers, employees, non-employee labor, vendors and information seekers who provide the Personal Data to the Company.
Principle

  1. The Company shall fully comply with the obligations and requirements of the Ordinance. The Company's management, officers, employees and representatives shall, at all times, respect the confidentiality of and endeavour to keep safe all personal data collected, held, processed or used for, or on behalf of, the Company. The Company is committed to business principles and ISO/IEC 27701:2019 Privacy Information Management System that governs the management of Personal Data. In particular, we commit that:
    • We process Personal Data in accordance with the Ordinance and with transparency and fairness manner;

    • We only process Personal Data for the purposes described at the time of collection stipulated in the personal information collection statement and by the Ordinance. We take reasonable steps to ensure that Personal Data is accurate, updated and complete and we only process Personal Data that is relevant and limited to what is minimum necessary for the purposes;

    • We protect Personal Data against unauthorized use or disclosure by applying internationally recognized information security practices in our processing activities;

    • We maintain appropriate policies and procedures across the Company to promote good practices and awareness among our staff regarding privacy management;

    • We only share Personal Data with third parties and processors (often referred to as service providers or contractors) with whom we have a business relationship or manage or support certain aspects of our business operations on our behalf. Appropriate requirements and awareness are circulated to all parties, including suppliers, who are obligated by contract, to ensure they follow the privacy practice during the data processing;

    • We are committed to improving our practices and resolving any concerns regarding Personal Data.
Collection of Personal Data

  1. To provide the business service and improve your customer experience, we may collect your Personal Data including (but not limited to) the followings.  Personal Data is collected from you directly or from other sources such as third parties in circumstances where we have your consent, or where we are legally required to do so.

Technical Data: IP address, browser type, device information

Usage Data: Cookies, website analytics, interaction logs

Personal Identifiers: Name, title, data of birth, gender, contact details (email, phone, address)

Other Data: Photographs, videos, information submitted via forms or registration

Employment, Vendor and Customer Data: Work history, job title, business contact information, contractual details, and other information necessary for business operations and relationship management.

Use and Processing of Personal Data

  1. We will use the Personal Data set out above for one or more of the following purposes
    1. Business service processing and operation;

    2. Fulfilment of your service request or event organized by our partners or us;

    3. Provisioning of customer services and/or business communication;

    4. Promotion, marketing and research;

    5. Compliance and fulfilment of legal obligations we adhere with or comply with any requests stipulated by governmental or regulatory authorities;

    6. Any other purpose which you may from time to time agree to.
  1. We do not sell or trade your Personal Data to any third party
Cookies and Website Specific Practices

  1. Our website uses cookies to enhance your experience and analyze usage.  Cookies help us understand how and when you use the site.  You may disable cookies via your browser settings, but this may limit certain functionalities.

Our site may include plugins from third-party platforms (e.g. social media).  These may collect identifiable data and set cookies.  Usage of these plugins is subject to the privacy policies of the respective platforms.

Transfer of Personal Data

  1. Your Personal Data will be kept confidential but, subject to the provisions of any applicable law, and only in connection with the purposes as set out above, may be transferred both within Hong Kong and outside Hong Kong. In this regard, you consent to the transfer of your Personal Data to:

    1. Appropriate persons in one or more companies in the Group, locally and overseas;

    2. Any agent, contractor or third party who provides administrative, telecommunication, computer or other services to any company within the Group, in Hong Kong or overseas, who has a duty of confidentiality to us, such as external auditors, hotline administrators, legal advisors and any consultant/agents appointed by the Company;

    3. Any government departments or relevant governmental or regulatory authorities in Hong Kong or overseas, if mandated by law or if necessary for the protection of our legitimate interests (and in this regard, you consent to the transfer of your Personal Data outside of Hong Kong if necessary);

    4. For any other purpose which you may from time to time agree to.
Retention of Personal Data

  1. We will keep your Personal Data for no longer than is necessary for the purposes for which we collect and process it. We will determine appropriate retention periods for your personal data by considering the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we collect and process your Personal Data, and whether we can achieve those purposes through other means. We are also required to retain certain data by law or to comply with our regulatory obligations. We will securely delete or destroy your Personal Data upon the expiry of the retention period.
Security of Personal Data

  1. We will take every sensible precaution to protect the information we collect from you including physical, technical and organizational procedures to safeguard and secure the information from loss, misuse, unauthorized access, or disclosure. Access to this information is protected both online and offline.
Access and Correction of Personal Data

  1. You have a right to request access to your Personal Data held by us, to obtain a copy of the data, and to correct any of your Personal Data that is inaccurate.
  1. The Company's obligation to provide access to Personal Data shall be subject to the right of refusal and exemptions set out in the Personal Data (Privacy) Ordinance.
  1. A reasonable fee may be charged to offset our administrative and actual costs in complying with your data access requests.
Update of this Privacy Policy Statement

  1. We may update this Privacy Policy Statement from time to time to reflect changes in our practices, legal requirements, or other operational needs.  The updated Statement will be published on our website and will be effective immediately upon posting.
  1. We encourage you to check this page regularly, and anytime you submit personal information via our website, to stay informed about how we protect your personal data.
Enquiries

  1. If you have any enquiries or complaints regarding the use of your Personal Data, or if you wish to request access to or correction of your Personal Data, please contact us in writing at:

Data Protection Officer

dpo@toppannexus.com

8/F, Gloucester Tower, The Landmark, 15 Queen’s Road Central, Central, Hong Kong