Privacy, GDPR & Non-Disclosure Policy

OASA Privacy, GDPR & Non-Disclosure Policy

Protecting privacy, confidentiality, and trust

This policy explains how OASA collects, uses, stores, and protects personal data and confidential information across our website, programmes, events, and communications.

Last updated: June 1, 2026 Applies to website, programmes, events, and communications

1. Who We Are

Orion Astropreneur Space Academy (“OASA”, “we”, “our”) is an education and innovation organisation operating in Hong Kong SAR with activities across Asia and internationally.

We are committed to protecting the privacy of our students, partners, website visitors, and community members.

2. What This Policy Covers

This policy explains:

  • What personal data we collect
  • How we use personal data
  • When we share data
  • How we protect confidentiality
  • Your rights under GDPR, PIPL, PPDL, and other laws
  • How to contact us

This policy applies to our website, online programmes, events, and general communications.

3. What Personal Data We Collect

We collect only the information needed to operate our programmes and services:

  • Contact information — name, email, phone (if provided)
  • Application or registration details — programme selections, background information
  • Technical data — browser type, device, IP address, cookies
  • Communications — messages you send to us
  • Optional submissions — portfolios, CVs, project files

We do not intentionally collect sensitive personal data unless required for programme safety or compliance, and only with consent.

4. How We Use Personal Data

We use your information only for legitimate and proportionate purposes:

  • To deliver programmes and services
  • To communicate with you
  • To improve our website and offerings
  • To meet legal or regulatory requirements

We do not sell personal data.

We do not use personal data for automated decision-making that produces legal or significant effects.

5. When We Share Data

We share data only when necessary:

  • Service providers — hosting, email, analytics
  • Education or programme partners — only when required for programme delivery
  • Legal authorities — only when required by law

All partners must follow confidentiality and data-protection requirements.

We do not share data for advertising or commercial resale.

6. International Data Transfers

Because OASA operates across Hong Kong, Mainland China, Singapore, and international partners, your data may be processed in multiple jurisdictions.

We apply reasonable safeguards consistent with:

  • GDPR (EU)
  • PIPL (China)
  • PPDL (Hong Kong)
  • PDPA (Singapore)
  • Other applicable laws

We use contractual and technical protections where required.

We do not guarantee full equivalence with every jurisdiction’s requirements, but we commit to reasonable, good-faith compliance.

7. Data Retention

We keep personal data only as long as necessary for:

  • programme delivery
  • legal or regulatory obligations
  • resolving disputes
  • maintaining legitimate business records

When data is no longer needed, we delete or anonymise it.

8. Your Rights

Depending on your location, you may have rights to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Withdraw consent
  • Request a copy of your data

We will respond to all reasonable requests within applicable legal timeframes.

9. Cookies and Analytics

We use basic analytics tools to understand website usage.

On our landing page, we ask for consent before enabling optional cookies or similar browser storage features.

You may disable cookies in your browser if you prefer.

We do not use invasive tracking technologies or behavioural advertising.

10. Confidentiality & Non-Disclosure

OASA treats all non-public information shared with us as confidential.

We commit to:

  • Protecting confidential submissions
  • Restricting access to authorised personnel
  • Using information only for agreed purposes

We cannot guarantee absolute security, but we apply reasonable administrative, technical, and physical safeguards.

If you share proprietary or sensitive information with us, we recommend using a formal NDA for additional protection.

11. Children’s Privacy

Our programmes for minors require parental or guardian consent.

We do not knowingly collect data from children without appropriate authorisation.

12. Updates to This Policy

We may update this policy from time to time to reflect legal or operational changes.

The “Last Updated” date will always be shown at the top.

13. Contact Us

For privacy questions or requests:

Orion Astropreneur Space Academy (OASA)

Email: privacy@oasahk.org