Open Source Academic Press Limited ("OSA"), acting as a data user, formulates and implements this Privacy Policy in accordance with the Personal Data (Privacy) Ordinance (Cap.486) of the Hong Kong Special Administrative Region ("PDPO") and other applicable laws and regulations. This Policy applies to OSA’s collection, use, storage, disclosure, and other processing of personal data in connection with users’ registration, login, ordering, payment, and use of OSA’s academic services and technical support.
OSA collects personal data in a lawful and fair manner and only to the extent reasonably necessary for the performance of its services and purposes directly related thereto. The categories of personal data collected include, without limitation:
(a) account and contact data, such as email address and username;
(b) service and transaction data, such as order information, service selections, payment status, and service delivery records; and
(c) technical and system log data, such as IP address, access time, basic device or browser information, and operation logs (including records of agreement acceptance and page access).
Certain personal data is required for the provision of OSA’s core services. Failure to provide such data may prevent registration or use of relevant services.
OSA collects and uses personal data solely for the following purposes or purposes directly related thereto:
(a) providing, maintaining, and improving OSA’s academic services and technical support;
(b) performing service delivery obligations under applicable service agreements;
(c) fee settlement, financial management, and tax compliance;
(d) system security maintenance, risk control, and technical auditing; and
(e) handling user inquiries, complaints, or disputes.
OSA expressly undertakes not to use personal data for advertising, profiling, or any commercial purposes unrelated to its academic services.
OSA does not sell, rent, or otherwise improperly disclose personal data to unrelated third parties. Personal data may be disclosed only in the following circumstances:
(a) where necessary to perform services, to required payment processors or technical service providers, limited to the minimum necessary scope;
(b) where required by applicable laws, courts, or regulatory authorities; or
(c) where necessary to protect OSA’s lawful rights or respond to emergency security incidents.
OSA shall take reasonable measures to ensure that such third parties process personal data solely for agreed purposes and provide a level of protection not lower than that set out in this Policy.
Due to technical or service requirements, personal data may be processed on servers or system environments located outside the Hong Kong Special Administrative Region in a lawful and compliant manner. Within the scope permitted by applicable laws, OSA shall ensure, through contractual arrangements or other reasonable measures, that any recipient provides a level of protection for personal data that is not lower than the standard set out in this Privacy Policy, and shall process such data solely for purposes necessary for the performance of the services.
OSA retains personal data only for such period as is reasonably necessary to fulfill the purposes for which the data was collected and to comply with applicable legal and regulatory requirements. Upon expiration of the retention period, personal data will be deleted or rendered non-identifiable in accordance with the law. OSA has implemented reasonable technical and organizational measures to prevent unauthorized access, disclosure, alteration, loss, or other improper processing of personal data.
In accordance with the PDPO, users, as data subjects, have the following rights:
(a) to ascertain whether OSA holds their personal data;
(b) to request access to and correction of inaccurate or incomplete personal data; and
(c) where permitted by law, to request deletion of personal data or closure of their account. OSA shall handle such requests within a reasonable time as prescribed by law and may require identity verification or charge reasonable administrative fees.
OSA’s services are primarily intended for users with full legal capacity. OSA does not knowingly collect personal data from minors. If personal data of minors is identified as having been improperly collected, OSA shall delete such data in accordance with applicable laws.
OSA may update this Privacy Policy due to changes in laws, regulations, or business needs. Material changes will be notified to users through platform announcements or other reasonable means. This Privacy Policy shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region and regulated by the Personal Data (Privacy) Ordinance.