OASA Privacy, GDPR & Non-Disclosure Policy
Protecting privacy, confidentiality, and trust
This policy explains how OASA collects, uses, stores, and protects personal data and confidential information across our website, programmes, events, and communications.
1. Who We Are
Orion Astropreneur Space Academy (“OASA”, “we”, “our”) is an education and innovation organisation operating in Hong Kong SAR with activities across Asia and internationally.
We are committed to protecting the privacy of our students, partners, website visitors, and community members.
2. What This Policy Covers
This policy explains:
- What personal data we collect
- How we use personal data
- When we share data
- How we protect confidentiality
- Your rights under GDPR, PIPL, PPDL, and other laws
- How to contact us
This policy applies to our website, online programmes, events, and general communications.
3. What Personal Data We Collect
We collect only the information needed to operate our programmes and services:
- Contact information — name, email, phone (if provided)
- Application or registration details — programme selections, background information
- Technical data — browser type, device, IP address, cookies
- Communications — messages you send to us
- Optional submissions — portfolios, CVs, project files
We do not intentionally collect sensitive personal data unless required for programme safety or compliance, and only with consent.
4. How We Use Personal Data
We use your information only for legitimate and proportionate purposes:
- To deliver programmes and services
- To communicate with you
- To improve our website and offerings
- To meet legal or regulatory requirements
We do not sell personal data.
We do not use personal data for automated decision-making that produces legal or significant effects.
5. When We Share Data
We share data only when necessary:
- Service providers — hosting, email, analytics
- Education or programme partners — only when required for programme delivery
- Legal authorities — only when required by law
All partners must follow confidentiality and data-protection requirements.
We do not share data for advertising or commercial resale.
6. International Data Transfers
Because OASA operates across Hong Kong, Mainland China, Singapore, and international partners, your data may be processed in multiple jurisdictions.
We apply reasonable safeguards consistent with:
- GDPR (EU)
- PIPL (China)
- PPDL (Hong Kong)
- PDPA (Singapore)
- Other applicable laws
We use contractual and technical protections where required.
We do not guarantee full equivalence with every jurisdiction’s requirements, but we commit to reasonable, good-faith compliance.
7. Data Retention
We keep personal data only as long as necessary for:
- programme delivery
- legal or regulatory obligations
- resolving disputes
- maintaining legitimate business records
When data is no longer needed, we delete or anonymise it.
8. Your Rights
Depending on your location, you may have rights to:
- Access your data
- Correct inaccurate data
- Request deletion
- Withdraw consent
- Request a copy of your data
We will respond to all reasonable requests within applicable legal timeframes.
9. Cookies and Analytics
We use basic analytics tools to understand website usage.
On our landing page, we ask for consent before enabling optional cookies or similar browser storage features.
You may disable cookies in your browser if you prefer.
We do not use invasive tracking technologies or behavioural advertising.
10. Confidentiality & Non-Disclosure
OASA treats all non-public information shared with us as confidential.
We commit to:
- Protecting confidential submissions
- Restricting access to authorised personnel
- Using information only for agreed purposes
We cannot guarantee absolute security, but we apply reasonable administrative, technical, and physical safeguards.
If you share proprietary or sensitive information with us, we recommend using a formal NDA for additional protection.
11. Children’s Privacy
Our programmes for minors require parental or guardian consent.
We do not knowingly collect data from children without appropriate authorisation.
12. Updates to This Policy
We may update this policy from time to time to reflect legal or operational changes.
The “Last Updated” date will always be shown at the top.
13. Contact Us
For privacy questions or requests:
Orion Astropreneur Space Academy (OASA)
Email: privacy@oasahk.org