個人資料收集聲明 (PICS) 資料使用者為Foolstop Education Company。 1. 收集資料之範圍 本公司僅收集家長（或監護人）之以下資料： - 家長中英文全名； - 聯絡電話； - 電郵地址；及 - 後備聯絡方式作備用 2. 收集目的 僅用於本課程之行政與教學交付。資料將僅用於辦理報名、發放教材鏈接、及有關課程之行政通告。 3. 數據主權與學員保護 本公司明確不會收集任何學生的個人資料。我們尊重未成年人的隱私，所有教學溝通均直接對接家長。 4. 資料保密 收集之資料絕對保密，不會作其他用途，亦不會披露予任何第三方，但不包含付款平台（Stripe）之必要交易資料處理。Stripe 僅處理付款必要資料，符合 PCI DSS 標準。 本公司將採取合理技術與組織措施（如加密傳輸、存取權限管控）保障資料安全，防止未經授權之存取、遺失或濫用。家長有權要求查閱或更正其個人資料。 家長亦有權要求刪除或撤回同意其個人資料之使用。 如發生個人資料外洩，公司將於合理時間內（不超過 72 小時）通知受影響人士及香港個人資料私隱專員公署，並提供相應的補救措施。 5. 資料保留期限 課程結束後保留 12 個月，惟法律要求或爭議處理所需除外。 內部候補名單記錄將保留十二（12）個月，然後予以安全銷毀。 根據退款機制創建的內部優先位置記錄將被視為個人資料，並保留相同的 12 個月期限。 如家長在課程結束 12 個月後仍有未完成的退款或爭議，我們將於相關事務處理完畢後 30 天內刪除其個人資料。 若儲存於香港以外，我們已確保該服務提供者具備相當於《個人資料(私隱)條例》之保障。 6. 市場推廣 本公司承諾不會未經家長明確同意（Opt-in）發送任何市場推廣或第三方合作資料。 投訴及服務 如對本公司之個人資料處理或其他服務有任何不滿，除可向本公司客戶服務admin@foolstopeducation.com提出外，也可向香港個人資料私隱專員公署（網址：https://www.pcpd.org.hk）查詢。 資料私隱聯絡電郵：admin@foolstopeducation.com

Personal Data Collection Statement (PICS) Data User: Foolstop Education Company 1. Scope of data collected The Company collects only the following information from parents/guardians: - Full name (Chinese and English) - Telephone number - E‑mail address - Backup contact details (for emergency use) 2. Purpose of collection Collected data are used solely for administrative and teaching delivery purposes, i.e., to process enrolment, send material links, and issue any course‑related notices. 3. Data‑sovereignty & student protection The Company does not collect any personal data about the students themselves. All instructional communication is conducted directly with the parent/guardian. 4. Confidentiality & security The information is kept strictly confidential and will not be used for any other purpose nor disclosed to third parties, except as necessary to process payments through Stripe (which only handles the minimal transaction data required and complies with PCI‑DSS standards). Reasonable technical and organisational measures are employed (e.g., encrypted transmission, role‑based access controls) to protect against unauthorised access, loss or misuse. Parents have the right to access and correct their personal data at any time. They may also request deletion of their data or withdraw consent for its use. In the event of a personal‑data breach, the Company will notify the affected individuals within 72 hours and will also inform the Hong Kong Privacy Commissioner for Personal Data (PCPD), providing appropriate remedial measures. 5. Retention period Personal data will be retained for twelve (12) months after the Course ends, unless longer retention is required by law or needed to resolve a dispute. Internal waiting‑list records are retained for twelve (12) months and then securely destroyed. The internal priority‑position record created under the refund mechanism is treated as personal data and retained for the same 12‑month period. If a dispute persists beyond that period, the data will be deleted within thirty (30) days after the matter is settled. Where data are stored outside Hong Kong, the Company ensures that the overseas service provider offers protections equivalent to those required under the PDPO. 6. Marketing communications The Company will never send marketing or third‑party promotional material without the parent’s explicit opt‑in consent. Complaints & contact If a parent has any concerns about the Company’s handling of personal data, they may contact the Company directly at admin@foolstopeducation.com or lodge a complaint with the Hong Kong Privacy Commissioner for Personal Data (website: https://www.pcpd.org.hk). Privacy‑related enquiries: admin@foolstopeducation.com