Last Updated: 1 April 2026
1. Introduction
HKCTA Tennis Club (“we”, “us” or “our”) is committed to protecting the personal data of our members, participants, website visitors and enquirers. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) of Hong Kong.
Our registered address is 1201, Block 76, Bamboo Grove, 74-86 Kennedy Road, Wan Chai, Hong Kong.
By using our website at hkctatennisclub.com or engaging with our services, you acknowledge that you have read and understood this Privacy Policy.
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identity data: Full name, date of birth, gender, nationality
- Contact data: Email address, telephone number, residential address
- Children’s data: Name, date of birth, age, school name, skill level and any other details necessary for registering a child into a junior programme
- Health and medical data: Relevant medical conditions, injuries, allergies or physical limitations disclosed for the purpose of safe participation in tennis programmes
- Payment data: Billing address, payment card details and transaction records (processed by our third-party payment providers — we do not store full payment card numbers)
- Communications data: Records of correspondence with us via email, contact forms, WhatsApp or social media
- Technical data: IP address, browser type, device information, pages visited, cookies and similar tracking technologies
- Marketing data: Preferences for receiving communications from us and interaction with our advertisements
3. How We Collect Your Data
We collect personal data through the following means:
- Contact forms and enquiry forms on our website
- Programme registration and booking forms (including through our booking platform, inTennis)
- Newsletter sign-up forms
- WhatsApp and social media communications
- Telephone and email correspondence
- Paid advertising platforms (such as Meta and Google) where you interact with our advertisements
- Cookies and similar technologies on our website
4. Purpose of Data Collection
In accordance with Data Protection Principle 1 of the PDPO, we collect and use your personal data for the following purposes:
- Service delivery: Processing registrations, managing bookings, administering tennis programmes and memberships
- Communication: Responding to enquiries, sending programme updates, scheduling notifications and service-related messages
- Health and safety: Ensuring the safety of participants by recording relevant medical information provided to us
- Payment processing: Processing payments for programmes, memberships and services
- Marketing: Sending promotional communications about our programmes and events (with your consent, as required under the PDPO)
- Website operation: Maintaining, improving and analysing the performance of our website
- Advertising: Measuring the effectiveness of our advertising campaigns through Meta Pixel, Google Ads conversion tracking and Google Analytics
- Legal compliance: Fulfilling our obligations under applicable laws and regulations
5. Children’s Data
We collect personal data relating to children for the sole purpose of registering them into our junior tennis programmes and ensuring their safe participation. This data is collected from a parent or guardian and is used only for the purposes stated at the time of collection.
We do not knowingly collect personal data directly from children through our website. If you believe a child has provided us with personal data without appropriate parental involvement, please contact us so that we can take steps to delete it.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies for the following purposes:
- Functional cookies: To enable core website functionality and remember your preferences
- Analytics cookies: To understand how visitors use our website, using tools such as Google Analytics
- Marketing cookies: To deliver relevant advertisements and measure campaign performance, using tools such as Meta Pixel (Facebook) and Google Ads
You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.
7. Third-Party Service Providers
We engage the following categories of third-party service providers who may process your personal data on our behalf:
- Customer relationship management: HelloZen (powered by GoHighLevel), which primarily utilises Amazon Web Services (AWS) for its cloud-based infrastructure with geographically dispersed data storage
- Payment processing: Stripe
- Booking and scheduling: inTennis
- Analytics: Google Analytics
- Advertising: Meta (Facebook/Instagram) via Facebook Pixel and Conversions API; Google Ads
- Messaging: WhatsApp Business
Each third-party provider processes data in accordance with their own privacy policies and terms of service. We take reasonable steps to ensure that our service providers implement appropriate data security measures.
8. Cross-Border Data Transfers
Some of our third-party service providers operate outside of Hong Kong. In particular:
- Our website hosting infrastructure is based in Singapore
- HelloZen (GoHighLevel) utilises AWS with geographically dispersed data centres; specific data localisation may not be guaranteed
- inTennis utilises geographically dispersed data centres; specific data localisation may not be guaranteed
- Other service providers including Stripe, Meta and Google may process data in jurisdictions outside Hong Kong
While Section 33 of the PDPO (which regulates cross-border data transfers) is not currently in force, we take reasonable steps to ensure that any personal data transferred outside Hong Kong is handled with appropriate safeguards and in accordance with the data protection principles of the PDPO.
9. Data Retention
In accordance with Data Protection Principle 2 of the PDPO, we retain personal data only for as long as is necessary to fulfil the purposes for which it was collected. When personal data is no longer required, we will take reasonable steps to erase or anonymise it.
Retention periods may vary depending on the nature of the data and the purpose of collection, our legal and regulatory obligations and whether there is an ongoing relationship with you (for example, an active programme registration or membership).
10. Data Security
In accordance with Data Protection Principle 4 of the PDPO, we implement appropriate technical and organisational measures to protect personal data against unauthorised or accidental access, processing, erasure, loss or use. These measures include secure hosting, encrypted data transmission (SSL/TLS), access controls and regular review of our security practices.
11. Direct Marketing
In accordance with the PDPO’s direct marketing provisions, we will obtain your consent before using your personal data for direct marketing purposes. You may opt out of receiving marketing communications at any time by using the unsubscribe mechanism provided in our communications, contacting us at the details provided below or notifying us in writing.
We will cease using your personal data for direct marketing without charge upon receipt of your request.
12. Your Rights Under the PDPO
Under the PDPO, you have the following rights:
- Right of access: You may request access to the personal data we hold about you (Data Protection Principle 6)
- Right of correction: You may request that we correct any personal data that is inaccurate (Data Protection Principle 6)
To exercise these rights, please submit a written request to us using the contact details below. We may charge a reasonable fee for processing a data access request. We will respond to your request within 40 days of receiving it, as required by the PDPO.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, services or legal requirements. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
HKCTA Tennis Club 1201, Block 76, Bamboo Grove 74-86 Kennedy Road Wan Chai, Hong Kong
Email: info@hkctatennisclub.com
If you are not satisfied with our response to your enquiry or complaint, you may contact the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.