Privacy Policy — ALiu Education Consulting (HK) Limited

This Privacy Policy explains how ALiu Education Consulting (HK) Limited ("we", "us", "our") collects, uses, discloses and protects personal data when you visit ghcz666.com, contact us, or purchase our courses.

We are the controller of the personal data described here and handle it in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO"). By using this website or our services you acknowledge the practices described below.

In short: we collect only what is needed to deliver the courses and take payment. We do not sell personal data. Payments are handled by a licensed provider — we never see or store your full card number.

1. What we collect

Identity & contact data	Name, email address, telephone number, country or region, preferred language.
Student information you provide	Age group or school year, current school, learning situation, assessment results, interests and education goals — only what you choose to submit so that we can advise you.
Order & payment data	Course purchased, amount, currency, order reference and payment status. Card and wallet details are entered directly with the payment provider; we receive only the last four digits of a card and the outcome of the payment.
Communication data	Emails, chat messages, telephone diagnosis notes, course assignments and written materials exchanged with your planner or support team.
Technical data	IP address, browser and device type, pages visited and referring link, collected through server logs and cookies.
Delivery data	Recipient name, telephone number and postal address — collected only if you purchase a program that includes printed materials, and used only to ship them.

2. How we use it

to activate courses, place students in the right age-based content and ship printed materials;
to confirm orders, take payment and issue receipts;
to answer enquiries and provide after-sales support by email, telephone or messaging;
to keep records of the engagement and improve our courses and assessment tools;
to detect and prevent fraud, chargebacks and misuse of the website;
to comply with applicable legal, tax and accounting obligations.

3. Legal basis

We process personal data because it is necessary to perform the contract you enter into with us when you buy a course; because we have a legitimate interest in operating and protecting our business; because you have consented (for example when you subscribe to course updates); and because we are required to do so by law.

4. Cookies and analytics

We use strictly necessary cookies to keep the website working, and limited analytics cookies to understand aggregate traffic. You can block or delete cookies in your browser settings; the site will still work, although some features may be less convenient. We do not use cookies to build advertising profiles of you.

5. Who we share data with

Payment provider — a licensed third-party processor handles the card and wallet transaction;
Service providers — email, SMS, live-streaming, cloud storage and courier vendors, acting under confidentiality obligations;
Professional advisers — accountants or lawyers where necessary;
Authorities — where disclosure is required by law, court order or a lawful request from a regulator.

We do not sell, rent or trade personal data to any third party for marketing purposes.

6. International transfers

Our service providers may store data on servers located outside Hong Kong. Where that happens we take reasonable steps to ensure the data receives a comparable standard of protection, through contractual clauses and vendor due diligence.

7. How long we keep it

Order and payment records: 7 years, for accounting and tax purposes;
Course and planning records: 3 years after the engagement ends, so we can answer follow-up questions;
Enquiries that do not lead to an order: 12 months;
Server logs: 90 days;
Delivery data: 6 months after the shipment is completed.

After these periods the data is deleted or irreversibly anonymised.

8. Security

The website is served over HTTPS. Client records are accessible only to the planner responsible for that family and to staff who need them for administration. We use access controls, encryption in transit and periodic account reviews. No method of transmission or storage is completely secure, but we take reasonable and practicable steps to protect the data we hold.

9. Your rights

Under the PDPO you have the right to:

ask whether we hold personal data about you and request a copy of it;
request correction of data that is inaccurate or out of date;
withdraw consent to marketing communication at any time;
ask us to delete data we no longer need for the purposes described above, subject to our legal retention obligations.

Requests should be sent to director@aliu-edu.com. We will respond within 40 days. A reasonable fee may be charged to cover the cost of copying data, as permitted by the PDPO.

10. Children's data

Our courses are purchased by parents or guardians. Information about a student under 18 is provided by the parent or guardian, who confirms that they are entitled to share it. We do not knowingly collect data directly from children or use it for marketing.

11. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The version published on this page, with the "Last updated" date above, is the version in force. Material changes will be announced on this page.

12. Contact us

For any question about this policy or the personal data we hold, contact director@aliu-edu.com or call +852 5420 1742. Full company details are on the Contact Us page.