Privacy Policy Statement / Personal Data Collection Statement

Effective Date: 1 January 2020

---

1. Introduction

Signin Dalang! ("Signin Dalang", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, retain and protect your personal data when you access or use our website and services ("Services").

We are committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) ("PDPO") and other applicable data protection laws.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

---

2. Scope of this Privacy Policy

This Privacy Policy applies to all users who access or use this website and whose personal data is collected by Signin Dalang through this website or our Services.

---

3. Personal Data We Collect

We collect only the personal data necessary to provide our Services.

The personal data we may collect includes:

• Full name
• Email address
• Telephone number

The above information is required for account registration and use of our Services. Failure to provide the required information may prevent us from providing certain Services.

We do not intentionally collect any additional personal data unless you voluntarily provide it to us or where required by law.

---

4. How We Use Your Personal Data

We may use your personal data for one or more of the following purposes:

• creating and managing your account;
• verifying your identity;
• providing our Services;
• processing purchases or service requests;
• communicating with you regarding your account or our Services;
• responding to your enquiries and customer support requests;
• processing requests to access, correct or delete your personal data;
• conducting internal administration, auditing and business management;
• performing statistical analysis using anonymous or aggregated information to improve our Services and product quality;
• complying with legal or regulatory obligations; and
• any other purpose directly related to the above.

---

5. Direct Marketing

From time to time, we may send you information about our products, services, promotions or special offers.

We will only use your personal data for direct marketing where permitted under applicable law and, where required, with your consent.

You may opt out of receiving marketing communications at any time by contacting us or following the unsubscribe instructions contained in our communications.

---

6. Disclosure of Personal Data

We respect your privacy.

Except as described in this Privacy Policy or where required by law, we will not sell, rent or disclose your personal data to any third party without your consent.

We may disclose your personal data where:

• disclosure is required by law;
• disclosure is required by a court, law enforcement agency or government authority;
• disclosure is necessary to protect our legal rights or property; or
• you have expressly authorized us to do so.

---

7. International Data Transfers

Your personal data may be processed, stored or backed up on servers located outside Hong Kong.

The laws governing personal data protection in those jurisdictions may differ from those in Hong Kong.

Where personal data is transferred outside Hong Kong, we will take reasonable steps to ensure that your personal data continues to receive an appropriate level of protection consistent with applicable legal requirements.

---

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or for such longer period as may be required by law.

When your personal data is no longer required, we will securely delete, anonymize or destroy it in accordance with our internal retention procedures.

---

9. Information Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, loss or destruction.

Our security measures include, where appropriate:

• password protection and authentication controls;
• password complexity and reset requirements;
• encrypted data transmission using SSL/TLS technologies;
• restricted access to personal data by authorized personnel only;
• employee confidentiality obligations and privacy training;
• system monitoring and security reviews; and
• regular review and improvement of our security measures.

Although we take reasonable steps to safeguard your personal data, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.

---

10. Cookies

Our website may use cookies and similar technologies to improve website functionality and enhance your browsing experience.

Cookies are small text files stored on your device that enable the website to recognize your browser and remember your preferences.

Cookies generally collect anonymous information, such as browser preferences and website settings. They do not normally contain information that directly identifies you.

You may disable cookies through your browser settings. However, doing so may affect the availability or functionality of certain features of this website.

---

11. Your Rights

Subject to applicable law, you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data where permitted by law;
• withdraw your consent where processing is based on consent; and
• opt out of receiving direct marketing communications.

To exercise any of these rights, please contact us using the contact details below.

---

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements or business operations.

Any revised version will be published on this website together with its effective date.

Your continued use of our Services after the revised Privacy Policy becomes effective constitutes your acceptance of the updated Privacy Policy.

---

13. Contact Us

If you have any questions, comments or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

Email: cs@oscrapa.com

We will normally respond within fourteen (14) business days after receiving your request and completing identity verification where necessary.

---

14. Language

This Privacy Policy is available in both English and Chinese.

If there is any inconsistency or discrepancy between the English version and the Chinese version, the English version shall prevail.