Policies
政策與條款

M+ Museum (“M+”)’s Publication/Merchandise (collectively, “product” or “merchandise”)

Order

M+ reserves the right to refuse registration of an order from a potential customer, or to terminate the registration of any customer’s order, at any time for any reason whatsoever.

Any order you make for M+’s product is an offer by you to purchase such product (subject to these Terms and Conditions) shown in M+ or the West Kowloon Cultural District Authority’s website (“website”), and acceptance of any order is at M+’s sole discretion. An order is deemed to have been accepted by M+ only when you receive our email confirmation to this effect.

Whilst M+ will use its best effort to ensure that an accepted order is correctly and satisfactorily fulfilled, M+ reserves the right to decline to fulfil an accepted order in whole or in part if M+ is unable to supply some or all items of an order because of unavailability or any unforeseen change of the product, or for any uncontrollable conditions. In such cases, M+ will contact you and ask you to amend your order. Should you have any difficulty in placing your order on-line, please email inquiry to order_shop@mplus.org.hk.

Merchandise listed on this website are available while stock lasts.

M+ reserves the right to decline to accept any order M+ may consider unreliable based on the user’s history.

Delivery

Product will be delivered to the address indicated by you at the time of making the order. Delivery will only be made to the address indicated by you and M+ will not be responsible for delivery to an incorrect or outdated address.

All delivery shall be subject to the terms and conditions of the courier and M+ will have no liability arising from any loss or damages of such delivery.

If any part of an order is found to be missing or incorrect, please email M+ immediately at order_shop@mplus.org.hk.

Liability

The liability of M+ in contract, tort (including, without limitation, negligence) or otherwise in respect of any product/merchandise delivered or otherwise in connection with an order or for any loss, injury or damage attributable directly or indirectly thereto will at the sole option of M+, be limited to: (a) delivering replacement product (at M+’s expense); or (b) refunding any sums paid to M+ for the product.

M+ shall not be liable (whether or not caused by M+’s negligence) for any direct, indirect, incidental, or consequential damages for loss of revenue, profit, goodwill, or opportunity suffered or incurred by you in respect of any product delivered or otherwise in connection with an order.

M+ shall not be liable for any loss, injury or damage (including any damages arising in contract, tort (including negligence) or otherwise) attributable directly or indirectly to any use of or inability to use the M+ Order website by any users including (but not limited to) (i) any inaccessibility or malfunctioning of the website; (ii) any errors, mistakes, or inaccuracies of contents of the website;(iii) any personal injury or property damage (including damage to computer or mobile device) of any nature whatsoever resulting from your access to and use of the website; (iv) any unauthorised access to or use of the website and/or any and all personal information stored therein; or (v) any bugs, viruses or the like which may be passed to your computer from the website.

In no event shall M+ be held liable for any delay or failure in its performance of the order/delivery requested in this website resulting directly or indirectly from acts of nature or causes beyond its reasonable control including, without limitation, internet failures, computer equipment failures, telecommunication equipment failures, electrical power failures, strikes, labour disputes, fires, war, riot, civil commotion, floods, storms, explosions, acts of God or delays or non-performance by third parties.

Title & Risk

M+ shall retain full title and ownership of the product until complete payment of the price and incidental costs and charges are made by you and M+ has received them. Legal ownership of the product will immediately revert to M+ if M+ refund any such payment to you or if the product is exceptionally at M+’s sole discretion accepted by M+ for exchange or return. All risk of and relating to the product shall pass to you upon delivery of the purchased product or, at the time the product is delivered (or delivery is attempted) in accordance with your instructions.

No Warranty

M+ makes no representations or warranties of any kind whatsoever, express or implied, in connection with these Terms and Conditions, the website, the product and/or any services, including warranties of quality, fitness for a particular purpose. M+ does not warrant or guarantee the correctness, reliability, completeness or timeliness of any material or product sold at this website and, without limitation, M+ does not represent or warrant that product description, colours or other contents are complete, correct or error-free.

Intellectual Property

You acknowledge and agree that all intellectual property and other proprietary rights including copyright and trademark and all technical, business and similar information (including logos, text, documents, data compilations, graphics, designs, icons, images, photographs, audio clips, sounds, music, and software, and any combination thereof and other materials relating to the product) available on this website created by M+ and/or (as applicable) our licensors shall be and shall remain M+’s property (or the property of M+’s licensors, as applicable). All such rights are reserved.

Jurisdiction

These Terms and Conditions shall be governed by and construed in accordance with the laws of Hong Kong. The courts of Hong Kong shall have exclusive jurisdiction to settle any dispute which may arise out of, under, or in connection with these Terms and Conditions.

If for any reason a court finds any provision of these Terms and Conditions to be invalid, illegal or unenforceable, the remainder of these Terms and Conditions will continue and have full force and effect.

Complaints

M+ will try to resolve any disputes when they first arise. In the unlikely event that you have any complaints about any product purchased by you from the website, you can contact M+ at order_shop@mplus.org.hk.

If for any reason a court finds any provision of these Terms and Conditions to be invalid, illegal or unenforceable, the remainder of these Terms and Conditions will continue and have full force and effect.

Data Policy

The West Kowloon Cultural District Authority and its subsidiaries including M + respect personal data privacy.

Please refer to our Privacy Policy (which forms part of these Terms and Conditions) to see how we collect, use or disclose personal information that we may collect from you.

M+ Museum (“M+”)’s Publication/Merchandise (collectively, “product” or “merchandise”)

Order

M+ reserves the right to refuse registration of an order from a potential customer, or to terminate the registration of any customer’s order, at any time for any reason whatsoever.

Any order you make for M+’s product is an offer by you to purchase such product (subject to these Terms and Conditions) shown in M+ or the West Kowloon Cultural District Authority’s website (“website”), and acceptance of any order is at M+’s sole discretion. An order is deemed to have been accepted by M+ only when you receive our email confirmation to this effect.

Whilst M+ will use its best effort to ensure that an accepted order is correctly and satisfactorily fulfilled, M+ reserves the right to decline to fulfil an accepted order in whole or in part if M+ is unable to supply some or all items of an order because of unavailability or any unforeseen change of the product, or for any uncontrollable conditions. In such cases, M+ will contact you and ask you to amend your order. Should you have any difficulty in placing your order on-line, please email inquiry to order_shop@mplus.org.hk.

Merchandise listed on this website are available while stock lasts.

M+ reserves the right to decline to accept any order M+ may consider unreliable based on the user’s history.

Delivery

Product will be delivered to the address indicated by you at the time of making the order. Delivery will only be made to the address indicated by you and M+ will not be responsible for delivery to an incorrect or outdated address.

All delivery shall be subject to the terms and conditions of the courier and M+ will have no liability arising from any loss or damages of such delivery.

If any part of an order is found to be missing or incorrect, please email M+ immediately at order_shop@mplus.org.hk.

Liability

The liability of M+ in contract, tort (including, without limitation, negligence) or otherwise in respect of any product/merchandise delivered or otherwise in connection with an order or for any loss, injury or damage attributable directly or indirectly thereto will at the sole option of M+, be limited to: (a) delivering replacement product (at M+’s expense); or (b) refunding any sums paid to M+ for the product.

M+ shall not be liable (whether or not caused by M+’s negligence) for any direct, indirect, incidental, or consequential damages for loss of revenue, profit, goodwill, or opportunity suffered or incurred by you in respect of any product delivered or otherwise in connection with an order.

M+ shall not be liable for any loss, injury or damage (including any damages arising in contract, tort (including negligence) or otherwise) attributable directly or indirectly to any use of or inability to use the M+ Order website by any users including (but not limited to) (i) any inaccessibility or malfunctioning of the website; (ii) any errors, mistakes, or inaccuracies of contents of the website;(iii) any personal injury or property damage (including damage to computer or mobile device) of any nature whatsoever resulting from your access to and use of the website; (iv) any unauthorised access to or use of the website and/or any and all personal information stored therein; or (v) any bugs, viruses or the like which may be passed to your computer from the website.

In no event shall M+ be held liable for any delay or failure in its performance of the order/delivery requested in this website resulting directly or indirectly from acts of nature or causes beyond its reasonable control including, without limitation, internet failures, computer equipment failures, telecommunication equipment failures, electrical power failures, strikes, labour disputes, fires, war, riot, civil commotion, floods, storms, explosions, acts of God or delays or non-performance by third parties.

Title & Risk

M+ shall retain full title and ownership of the product until complete payment of the price and incidental costs and charges are made by you and M+ has received them. Legal ownership of the product will immediately revert to M+ if M+ refund any such payment to you or if the product is exceptionally at M+’s sole discretion accepted by M+ for exchange or return. All risk of and relating to the product shall pass to you upon delivery of the purchased product or, at the time the product is delivered (or delivery is attempted) in accordance with your instructions.

No Warranty

M+ makes no representations or warranties of any kind whatsoever, express or implied, in connection with these Terms and Conditions, the website, the product and/or any services, including warranties of quality, fitness for a particular purpose. M+ does not warrant or guarantee the correctness, reliability, completeness or timeliness of any material or product sold at this website and, without limitation, M+ does not represent or warrant that product description, colours or other contents are complete, correct or error-free.

Intellectual Property

You acknowledge and agree that all intellectual property and other proprietary rights including copyright and trademark and all technical, business and similar information (including logos, text, documents, data compilations, graphics, designs, icons, images, photographs, audio clips, sounds, music, and software, and any combination thereof and other materials relating to the product) available on this website created by M+ and/or (as applicable) our licensors shall be and shall remain M+’s property (or the property of M+’s licensors, as applicable). All such rights are reserved.

Jurisdiction

These Terms and Conditions shall be governed by and construed in accordance with the laws of Hong Kong. The courts of Hong Kong shall have exclusive jurisdiction to settle any dispute which may arise out of, under, or in connection with these Terms and Conditions.

If for any reason a court finds any provision of these Terms and Conditions to be invalid, illegal or unenforceable, the remainder of these Terms and Conditions will continue and have full force and effect.

Complaints

M+ will try to resolve any disputes when they first arise. In the unlikely event that you have any complaints about any product purchased by you from the website, you can contact M+ at order_shop@mplus.org.hk.

If for any reason a court finds any provision of these Terms and Conditions to be invalid, illegal or unenforceable, the remainder of these Terms and Conditions will continue and have full force and effect.

Data Policy

The West Kowloon Cultural District Authority and its subsidiaries including M + respect personal data privacy.

Please refer to our Privacy Policy (which forms part of these Terms and Conditions) to see how we collect, use or disclose personal information that we may collect from you.

Collection of your personal data

M Plus Museum Limited (“M+“ or “we“), a subsidiary of the West Kowloon Cultural District Authority (“WKCDA“), collects your personal data to provide our services to you and to improve customer experience. Please note that it is mandatory for you to provide personal data marked with asterisks. In the event that you do not provide such personal data, we may not be able to provide you with certain information, materials and/or your requested services.

Purposes of personal data collection and usage

We will use your personal data for one or more of the following purposes: -

  • for processing your service requests (i.e. event registration, ticket purchase, e-newsletter subscription, product purchase, WiFi usage, account registration, member registration, venue booking, donation, etc.) with us and provide you with the services;
  • for facilitating communications between you and M+ staff in respect of your service requests;
  • for enhancing your experience of M+ with programmes and offerings that are of interest;
  • for notifying you of changes to our services that may affect you;
  • for responding to and following up on your enquiries;

for conducting statistical analysis, research, surveys, quality assurance and review; and if you give your consent for direct marketing: -

  • for communicating with you on events, services, promotions, and special offers of M+;
  • for communicating with you for potential support to M+; and
  • for other purposes directly relating to any of the above.

We will collect and combine information you provide to us through various channels, such as online channels like websites / mobile applications, offline channels like physical application forms, or publicly available information about you. We use this information to help improve your experience and communicate with you about events and offerings that may be of interest.

Use of personal data

The personal data collected will be used only for purposes as stated above. We will never sell or rent your information with any other organisation outside M+. We will ask for your consent to share personal information with third parties (except for those already listed out in this Statement). We may transfer your personal information to WKCDA for data storage and maintenance purpose and to our service providers such as IT contractors, cloud service providers, and confidential documents disposal service agents, etc. in order for them to perform services on our behalf. We require all service providers to respect the security of your personal data and comply with the Personal Data (Privacy) Ordinance (Cap. 486 of the laws of Hong Kong SAR) (‘the Ordinance’). We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We may transfer your personal data outside of Hong Kong for necessary handling, processing or storage.

Data access and correction request

You have the right to request access to and correction of your personal data held by M+. Such request should be made in writing to the Data Protection Officer at privacy@wkcda.hk or by post to the address: 9/F, WKCDA Tower, West Kowloon Cultural District, No. 8 Austin Road West, Kowloon, Hong Kong. For details of our privacy policy, you may refer to the Privacy Policy.

Use of data in direct marketing

We intend to use your personal data in direct marketing, and we may not so use your personal data unless we have received your consent (which includes an indication of no objection to the intended use).

We may use your name, contact details (such as email address), preferences and interests and transaction data for providing you with information that is of interest on events, services, promotions, and special offers of M+ and ways to support M+. Please indicate your consent or no objection for such use in the relevant online or offline forms at the time of collection of your information.

If you do not wish to receive information from M+ for the aforementioned direct marketing purposes, you may choose to opt-out from direct marketing at any time, free of charge, by: -

  • clicking the ‘Unsubscribe’ link at the bottom of our emails;
  • emailing us at unsubscribe@wkcda.hk; or contacting our Data Protection Officer by post to ‘9/F, WKCDA Tower, West Kowloon Cultural District, No. 8 Austin Road West, Kowloon, Hong Kong’.

If you do not wish to receive information relevant to fundraising activities in particular (including promotion of donations or contributions for charitable or non-profit making events of M+), you may choose to opt-out from fundraising activities at any time, free of charge, by emailing us at supportmplus@mplus.org.hk.

Language versions

In case of discrepancies between the English and Chinese versions of this Statement, the English version shall apply and prevail.

Collection of your personal data

M Plus Museum Limited (“M+“ or “we“), a subsidiary of the West Kowloon Cultural District Authority (“WKCDA“), collects your personal data to provide our services to you and to improve customer experience. Please note that it is mandatory for you to provide personal data marked with asterisks. In the event that you do not provide such personal data, we may not be able to provide you with certain information, materials and/or your requested services.

Purposes of personal data collection and usage

We will use your personal data for one or more of the following purposes: -

  • for processing your service requests (i.e. event registration, ticket purchase, e-newsletter subscription, product purchase, WiFi usage, account registration, member registration, venue booking, donation, etc.) with us and provide you with the services;
  • for facilitating communications between you and M+ staff in respect of your service requests;
  • for enhancing your experience of M+ with programmes and offerings that are of interest;
  • for notifying you of changes to our services that may affect you;
  • for responding to and following up on your enquiries;

for conducting statistical analysis, research, surveys, quality assurance and review; and if you give your consent for direct marketing: -

  • for communicating with you on events, services, promotions, and special offers of M+;
  • for communicating with you for potential support to M+; and
  • for other purposes directly relating to any of the above.

We will collect and combine information you provide to us through various channels, such as online channels like websites / mobile applications, offline channels like physical application forms, or publicly available information about you. We use this information to help improve your experience and communicate with you about events and offerings that may be of interest.

Use of personal data

The personal data collected will be used only for purposes as stated above. We will never sell or rent your information with any other organisation outside M+. We will ask for your consent to share personal information with third parties (except for those already listed out in this Statement). We may transfer your personal information to WKCDA for data storage and maintenance purpose and to our service providers such as IT contractors, cloud service providers, and confidential documents disposal service agents, etc. in order for them to perform services on our behalf. We require all service providers to respect the security of your personal data and comply with the Personal Data (Privacy) Ordinance (Cap. 486 of the laws of Hong Kong SAR) (‘the Ordinance’). We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We may transfer your personal data outside of Hong Kong for necessary handling, processing or storage.

Data access and correction request

You have the right to request access to and correction of your personal data held by M+. Such request should be made in writing to the Data Protection Officer at privacy@wkcda.hk or by post to the address: 9/F, WKCDA Tower, West Kowloon Cultural District, No. 8 Austin Road West, Kowloon, Hong Kong. For details of our privacy policy, you may refer to the Privacy Policy.

Use of data in direct marketing

We intend to use your personal data in direct marketing, and we may not so use your personal data unless we have received your consent (which includes an indication of no objection to the intended use).

We may use your name, contact details (such as email address), preferences and interests and transaction data for providing you with information that is of interest on events, services, promotions, and special offers of M+ and ways to support M+. Please indicate your consent or no objection for such use in the relevant online or offline forms at the time of collection of your information.

If you do not wish to receive information from M+ for the aforementioned direct marketing purposes, you may choose to opt-out from direct marketing at any time, free of charge, by: -

  • clicking the ‘Unsubscribe’ link at the bottom of our emails;
  • emailing us at unsubscribe@wkcda.hk; or contacting our Data Protection Officer by post to ‘9/F, WKCDA Tower, West Kowloon Cultural District, No. 8 Austin Road West, Kowloon, Hong Kong’.

If you do not wish to receive information relevant to fundraising activities in particular (including promotion of donations or contributions for charitable or non-profit making events of M+), you may choose to opt-out from fundraising activities at any time, free of charge, by emailing us at supportmplus@mplus.org.hk.

Language versions

In case of discrepancies between the English and Chinese versions of this Statement, the English version shall apply and prevail.

Statement of Policy

M Plus Museum Limited (“M+“ or “we“), a subsidiary of the West Kowloon Cultural District Authority (“WKCDA“), respects personal data privacy. We will comply with the Personal Data (Privacy) Ordinance (Cap. 486 of the laws of Hong Kong SAR) (“the Ordinance“) and are committed to fully implementing the data protection principles promulgated under the Ordinance.


Statement of Practices

Information We Collect

From time to time, we may collect various types of personal information ('personal information' or 'personal data') (such as email address, name and contact number) from you in connection with our provision of services, activities and facilities, including but not limited to account registration, ticketing transaction, e-newsletter subscription, event registration, membership, Wi-Fi usage, payment, following up on enquiries, conducting customer surveys, venue booking, fundraising campaigns, job application and/or employment-related issues, and contractor management, etc.


Main Purpose of Collecting Personal Data

The main purposes of collecting the personal data are as follows:

  • 1) for processing your service requests (i.e. event registration, ticket purchase, e-newsletter subscription, product purchase, WiFi usage, account registration, member registration, venue booking and donation, etc.) with us and providing you with the services;
  • 2) for facilitating communications between you and us;
  • 3) for notifying you of changes to our services that may affect you;
  • 4) for responding to and following up on your enquiries;
  • 5) for enhancing your experience of M+ with programmes and offerings that are of interest;
  • 6) for direct marketing upon obtaining explicit consent from you;
  • 7) for managing customer relationships within M+ and WKCDA;
  • 8) for communicating with you for potential support to M+ that is relevant to your interests and appropriate;
  • 9) for conducting statistical analysis, research, surveys, quality assurance and review;
  • 10) for processing your job application and/or employment-related issues;
  • 11) for executing the service contract between you and us; and
  • 12) for other purposes directly relating to any of the above.

We may collect and combine information from you (except for (10) and (11)) through various channels, such as online channels like websites / mobile applications, offline channels like physical application forms, or publicly available information about you. We use this information to help improve your experience and communicate with you about events or offerings that may be of interest.


Implementation of Practices

M+ will implement the practices at (a) to (f) below in accordance with the data protection principles in the Ordinance.

(a) Collection of personal data<

When collecting personal data, M+ will satisfy itself that: -

  • 1) the purposes for which the data is collected are lawful and directly related to a function or activity of M+;
  • 2) the manner of collection is lawful and fair in the circumstances; and
  • 3) the personal data collected is necessary but not excessive for the purpose(s) for which it is collected.

When M+ collects personal data from you, you will be provided with a Personal Information Collection Statement (‘PICS’) on or before the collection in an appropriate format and manner. Practicable steps will be taken to ensure that: -

  • 1) you are informed of whether it is obligatory or voluntary to supply the data and, if obligatory, the consequences in failing to do so; and
  • 2) you are explicitly informed of the purpose(s) for which the personal data is to be used, the classes of persons to whom the data may be transferred or disclosed, your right to request access to and correction of the data, and the contact details of the officer to whom any such request may be made.

If M+ intends to use the personal data collected for a new purpose, other than the purpose of first collection as stated in the PICS, M+ will obtain a prior consent from the data subject before the usage.

(b) Accuracy and retention of personal data

Personal data collected and maintained by M+ will be as accurate, complete, and up-to-date as is necessary for the purpose(s) for which it is to be used.

M+ maintains a personal data inventory, which contains the kinds of personal data that M+ holds, the purposes for which the personal data is collected, used and disclosed, and how the personal data is stored. The personal data inventory will be reviewed periodically to ensure that it is accurate and up-to-date.

M+ will only retain your personal data for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we will consider the amount, nature, and sensitivity of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Should there be a need to retain personal data for statistical purposes, such personal data will be anonymised so that the individuals concerned can no longer be identified.

(c) Use of personal data

All personal data collected will be used only for purposes which are directly related to the discharge of M+’s activities or functions. We will never sell or rent your information with any other organisation outside M+. We will ask for your consent to share personal information with third parties (except for those already listed out in this Statement) unless otherwise required or permitted by law. We may transfer your personal information to WKCDA for data storage and maintenance purpose and to our service providers such as IT contractors, cloud service providers and confidential documents disposal service agents, etc. in order for them to perform services on our behalf. We require all service providers to respect the security of your personal data and comply with the Ordinance. We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. Personal data may also be disclosed to other entities which are authorised to receive such information for law enforcement, prosecution or review of decisions purposes. You will be informed of the transferees of personal data when your personal data is collected. For personal data that is stored in cloud servers of cloud service providers for M+, personal data may be transferred out of Hong Kong where the cloud servers are located.

If personal data is to be used for a purpose other than the purposes for which the data is collected, prior consent will be sought from you. In seeking the consent, all practicable steps will be taken to ensure that: -

  • 1) information provided to you is clearly understandable and readable; and
  • 2) you are informed that you are entitled to withhold your consent or withdraw your consent subsequently by giving notice in writing.

M+ will not use personal data or provide personal data for use in direct marketing without your explicit consent. If M+ intends to use your personal data for direct marketing, M+ will obtain explicit consent from you before using your personal data, and will notify you when using personal data in direct marketing for the first time, and will cease to use the data in direct marketing if you so require. If M+ intends to provide personal data to another person for use by that other person in direct marketing, M+ will inform you in writing in advance that M+ intends to provide the personal data and will not provide the personal data unless it has received your explicit consent. You may, at any time, require M+ to cease using your personal data in direct marketing by informing M+ through the channels as stated in practice (f) below.

(d) Security of personal data

M+ observes strictly the relevant security standards and regulations. Security arrangements will be reviewed regularly to ensure that personal data is protected against loss and unauthorised or accidental access, use, disclosure, modification and erasure. The security arrangements include, without limitation, the following: -

  • 1) restriction of access to personal data on a ‘need-to-know’ basis;
  • 2) regular review and enhancement of security measures for protection of personal data in the servers, user computers, or transmission of electronic messages;
  • 3) regular change of passwords for IT facilities, or accounting and personnel systems;
  • 4) encryption of all backup tapes that are to be transported to offsite storage;
  • 5) limited staff access rights to office areas storing confidential information; and
  • 6) provision of clear guidelines to staff as to the types of data that may or may not be disclosed to an enquirer and implementation of appropriate identity verification procedures to confirm the enquirer’s identity.

(e) Transparency of the personal data policy and practices

M+’s privacy policy and practices can be found on M+’s website: http://www.mplus.org.hk/

(f) Access to and correction of personal data

M+ recognises your rights of access to and correction of your own personal data in accordance with the Ordinance. To make a data access request, you should complete the form specified by the Office of the Privacy Commissioner for Personal Data, which is available at https://www.pcpd.org.hk/english/publications/files/Dforme.pdf, and submit the completed form to M+ in any one of the following ways —

By email / post / in person:
Attn. Data Protection Office
by email at privacy@wkcda.hk;
or
by post or in person to:
West Kowloon Cultural District Authority, 9/F., WKCDA Tower, West Kowloon Cultural District, No. 8 Austin Road West, Kowloon, Hong Kong.

When handling a data access or correction request, M+ will check the identity of the requester to ensure that the requester is the person legally entitled to make the data access or correction request.

M+ may impose a fee for the necessary cost of complying with a data access request. M+ will clearly inform the requester the amount to be charged.

M+ may refuse a data access request in the circumstances specified in Section 20 of the Ordinance.

M+ maintains a logbook recording the data access or correction requests received as required under Section 27 of the Ordinance.


Use of Cookies

When you browse our websites / mobile application, cookies will be stored in your computer's browser. The purposes of using cookies are to remember the browsing preferences (e.g. language, font size) you have chosen in our websites / mobile application to customise your experience. You have a choice not to accept the cookies. If you do not accept the cookies, our websites / mobile application will not be able to remember your browsing preferences and we may not be able to deliver the full features of our websites / mobile application to you. We also use third party cookies such as Google Analytics to analyse anonymised data to help us understand how our audiences interact with our websites / mobile application so that we can improve the overall experience. The cookie itself does not collect any Personally Identifiable Information.

Website Statistics

When you visit our websites / mobile application, we will record your visit only as a 'hit'. The webserver makes a record of your visit that includes your IP addresses (and domain names), the types and configurations of browsers, language settings, operating systems, previous sites visited, and time/duration and the pages visited (collectively, 'webserver access log').

M+ uses the webserver access log for the purpose of maintaining and improving our websites / mobile application such as to determine the optimal screen resolution, or which pages have been most frequently visited. M+ uses such data only for website / mobile application enhancement and optimisation. User data is all anonymous.

Linking with Third Parties

Please be aware that our websites / mobile application may contain links to other sites hosted by third parties. Different rules may apply to their collection, use, or disclosure of your personal information. We encourage you to review other websites’ policies before revealing any personally identifiable or sensitive information. We do not control, and are thus not responsible for, the content or privacy practices and policies of such other sites and under no circumstances shall we have any liability whatsoever for the activities conducted by or at any website accessed from or through M+'s websites.

Incident Reporting and Breach Handling

A mechanism is set up for incident reporting and breach handling in case there is a loss or leakage of personal data, or there is a reason to believe that the personal data held by M+ or WKCDA has been compromised.

Ongoing

Monitoring and Review

M+ will keep this Privacy Policy Statement and relevant policies under regular review. Officers responsible for handling personal data will attend relevant training courses to keep themselves updated of the latest personal data policies.

Enquiries

Any enquiries regarding personal data privacy policy and practice may be addressed to the Data Protection Office at the above correspondence address or via email at privacy@wkcda.hk.

Interpretation

Words used herein which import the singular only also include the plural and vice versa where the context so admits.
Words used herein which import one gender (whether masculine, feminine or neuter) shall be taken to include any other gender where the context so admits.
Chinese version of this Statement is for reference only. In the event of any discrepancies or inconsistency between the English and Chinese versions of this Statement, the English version shall apply and prevail.

Statement of Policy

M Plus Museum Limited (“M+“ or “we“), a subsidiary of the West Kowloon Cultural District Authority (“WKCDA“), respects personal data privacy. We will comply with the Personal Data (Privacy) Ordinance (Cap. 486 of the laws of Hong Kong SAR) (“the Ordinance“) and are committed to fully implementing the data protection principles promulgated under the Ordinance.


Statement of Practices

Information We Collect

From time to time, we may collect various types of personal information ('personal information' or 'personal data') (such as email address, name and contact number) from you in connection with our provision of services, activities and facilities, including but not limited to account registration, ticketing transaction, e-newsletter subscription, event registration, membership, Wi-Fi usage, payment, following up on enquiries, conducting customer surveys, venue booking, fundraising campaigns, job application and/or employment-related issues, and contractor management, etc.


Main Purpose of Collecting Personal Data

The main purposes of collecting the personal data are as follows:

  • 1) for processing your service requests (i.e. event registration, ticket purchase, e-newsletter subscription, product purchase, WiFi usage, account registration, member registration, venue booking and donation, etc.) with us and providing you with the services;
  • 2) for facilitating communications between you and us;
  • 3) for notifying you of changes to our services that may affect you;
  • 4) for responding to and following up on your enquiries;
  • 5) for enhancing your experience of M+ with programmes and offerings that are of interest;
  • 6) for direct marketing upon obtaining explicit consent from you;
  • 7) for managing customer relationships within M+ and WKCDA;
  • 8) for communicating with you for potential support to M+ that is relevant to your interests and appropriate;
  • 9) for conducting statistical analysis, research, surveys, quality assurance and review;
  • 10) for processing your job application and/or employment-related issues;
  • 11) for executing the service contract between you and us; and
  • 12) for other purposes directly relating to any of the above.

We may collect and combine information from you (except for (10) and (11)) through various channels, such as online channels like websites / mobile applications, offline channels like physical application forms, or publicly available information about you. We use this information to help improve your experience and communicate with you about events or offerings that may be of interest.


Implementation of Practices

M+ will implement the practices at (a) to (f) below in accordance with the data protection principles in the Ordinance.

(a) Collection of personal data<

When collecting personal data, M+ will satisfy itself that: -

  • 1) the purposes for which the data is collected are lawful and directly related to a function or activity of M+;
  • 2) the manner of collection is lawful and fair in the circumstances; and
  • 3) the personal data collected is necessary but not excessive for the purpose(s) for which it is collected.

When M+ collects personal data from you, you will be provided with a Personal Information Collection Statement (‘PICS’) on or before the collection in an appropriate format and manner. Practicable steps will be taken to ensure that: -

  • 1) you are informed of whether it is obligatory or voluntary to supply the data and, if obligatory, the consequences in failing to do so; and
  • 2) you are explicitly informed of the purpose(s) for which the personal data is to be used, the classes of persons to whom the data may be transferred or disclosed, your right to request access to and correction of the data, and the contact details of the officer to whom any such request may be made.

If M+ intends to use the personal data collected for a new purpose, other than the purpose of first collection as stated in the PICS, M+ will obtain a prior consent from the data subject before the usage.

(b) Accuracy and retention of personal data

Personal data collected and maintained by M+ will be as accurate, complete, and up-to-date as is necessary for the purpose(s) for which it is to be used.

M+ maintains a personal data inventory, which contains the kinds of personal data that M+ holds, the purposes for which the personal data is collected, used and disclosed, and how the personal data is stored. The personal data inventory will be reviewed periodically to ensure that it is accurate and up-to-date.

M+ will only retain your personal data for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we will consider the amount, nature, and sensitivity of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Should there be a need to retain personal data for statistical purposes, such personal data will be anonymised so that the individuals concerned can no longer be identified.

(c) Use of personal data

All personal data collected will be used only for purposes which are directly related to the discharge of M+’s activities or functions. We will never sell or rent your information with any other organisation outside M+. We will ask for your consent to share personal information with third parties (except for those already listed out in this Statement) unless otherwise required or permitted by law. We may transfer your personal information to WKCDA for data storage and maintenance purpose and to our service providers such as IT contractors, cloud service providers and confidential documents disposal service agents, etc. in order for them to perform services on our behalf. We require all service providers to respect the security of your personal data and comply with the Ordinance. We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. Personal data may also be disclosed to other entities which are authorised to receive such information for law enforcement, prosecution or review of decisions purposes. You will be informed of the transferees of personal data when your personal data is collected. For personal data that is stored in cloud servers of cloud service providers for M+, personal data may be transferred out of Hong Kong where the cloud servers are located.

If personal data is to be used for a purpose other than the purposes for which the data is collected, prior consent will be sought from you. In seeking the consent, all practicable steps will be taken to ensure that: -

  • 1) information provided to you is clearly understandable and readable; and
  • 2) you are informed that you are entitled to withhold your consent or withdraw your consent subsequently by giving notice in writing.

M+ will not use personal data or provide personal data for use in direct marketing without your explicit consent. If M+ intends to use your personal data for direct marketing, M+ will obtain explicit consent from you before using your personal data, and will notify you when using personal data in direct marketing for the first time, and will cease to use the data in direct marketing if you so require. If M+ intends to provide personal data to another person for use by that other person in direct marketing, M+ will inform you in writing in advance that M+ intends to provide the personal data and will not provide the personal data unless it has received your explicit consent. You may, at any time, require M+ to cease using your personal data in direct marketing by informing M+ through the channels as stated in practice (f) below.

(d) Security of personal data

M+ observes strictly the relevant security standards and regulations. Security arrangements will be reviewed regularly to ensure that personal data is protected against loss and unauthorised or accidental access, use, disclosure, modification and erasure. The security arrangements include, without limitation, the following: -

  • 1) restriction of access to personal data on a ‘need-to-know’ basis;
  • 2) regular review and enhancement of security measures for protection of personal data in the servers, user computers, or transmission of electronic messages;
  • 3) regular change of passwords for IT facilities, or accounting and personnel systems;
  • 4) encryption of all backup tapes that are to be transported to offsite storage;
  • 5) limited staff access rights to office areas storing confidential information; and
  • 6) provision of clear guidelines to staff as to the types of data that may or may not be disclosed to an enquirer and implementation of appropriate identity verification procedures to confirm the enquirer’s identity.

(e) Transparency of the personal data policy and practices

M+’s privacy policy and practices can be found on M+’s website: http://www.mplus.org.hk/

(f) Access to and correction of personal data

M+ recognises your rights of access to and correction of your own personal data in accordance with the Ordinance. To make a data access request, you should complete the form specified by the Office of the Privacy Commissioner for Personal Data, which is available at https://www.pcpd.org.hk/english/publications/files/Dforme.pdf, and submit the completed form to M+ in any one of the following ways —

By email / post / in person:
Attn. Data Protection Office
by email at privacy@wkcda.hk;
or
by post or in person to:
West Kowloon Cultural District Authority, 9/F., WKCDA Tower, West Kowloon Cultural District, No. 8 Austin Road West, Kowloon, Hong Kong.

When handling a data access or correction request, M+ will check the identity of the requester to ensure that the requester is the person legally entitled to make the data access or correction request.

M+ may impose a fee for the necessary cost of complying with a data access request. M+ will clearly inform the requester the amount to be charged.

M+ may refuse a data access request in the circumstances specified in Section 20 of the Ordinance.

M+ maintains a logbook recording the data access or correction requests received as required under Section 27 of the Ordinance.


Use of Cookies

When you browse our websites / mobile application, cookies will be stored in your computer's browser. The purposes of using cookies are to remember the browsing preferences (e.g. language, font size) you have chosen in our websites / mobile application to customise your experience. You have a choice not to accept the cookies. If you do not accept the cookies, our websites / mobile application will not be able to remember your browsing preferences and we may not be able to deliver the full features of our websites / mobile application to you. We also use third party cookies such as Google Analytics to analyse anonymised data to help us understand how our audiences interact with our websites / mobile application so that we can improve the overall experience. The cookie itself does not collect any Personally Identifiable Information.

Website Statistics

When you visit our websites / mobile application, we will record your visit only as a 'hit'. The webserver makes a record of your visit that includes your IP addresses (and domain names), the types and configurations of browsers, language settings, operating systems, previous sites visited, and time/duration and the pages visited (collectively, 'webserver access log').

M+ uses the webserver access log for the purpose of maintaining and improving our websites / mobile application such as to determine the optimal screen resolution, or which pages have been most frequently visited. M+ uses such data only for website / mobile application enhancement and optimisation. User data is all anonymous.

Linking with Third Parties

Please be aware that our websites / mobile application may contain links to other sites hosted by third parties. Different rules may apply to their collection, use, or disclosure of your personal information. We encourage you to review other websites’ policies before revealing any personally identifiable or sensitive information. We do not control, and are thus not responsible for, the content or privacy practices and policies of such other sites and under no circumstances shall we have any liability whatsoever for the activities conducted by or at any website accessed from or through M+'s websites.

Incident Reporting and Breach Handling

A mechanism is set up for incident reporting and breach handling in case there is a loss or leakage of personal data, or there is a reason to believe that the personal data held by M+ or WKCDA has been compromised.

Ongoing

Monitoring and Review

M+ will keep this Privacy Policy Statement and relevant policies under regular review. Officers responsible for handling personal data will attend relevant training courses to keep themselves updated of the latest personal data policies.

Enquiries

Any enquiries regarding personal data privacy policy and practice may be addressed to the Data Protection Office at the above correspondence address or via email at privacy@wkcda.hk.

Interpretation

Words used herein which import the singular only also include the plural and vice versa where the context so admits.
Words used herein which import one gender (whether masculine, feminine or neuter) shall be taken to include any other gender where the context so admits.
Chinese version of this Statement is for reference only. In the event of any discrepancies or inconsistency between the English and Chinese versions of this Statement, the English version shall apply and prevail.

When ordering from this website (M+ Shop), you are responsible for assuring the product(s) can be lawfully imported to the destination. Please note that the destination country may charge import duties, taxes and fees that you may have to pay ahead of delivery and M+ will not be responsible for these charges. The destination country may also ban the import of the product(s). M+ will not handle any refund/return of products on this ground. Customs policies vary widely; you should contact the destination customs office for more information. When customs clearance procedures are required, it may cause delay(s) beyond our original delivery estimate(s).

When ordering from this website (M+ Shop), you are responsible for assuring the product(s) can be lawfully imported to the destination. Please note that the destination country may charge import duties, taxes and fees that you may have to pay ahead of delivery and M+ will not be responsible for these charges. The destination country may also ban the import of the product(s). M+ will not handle any refund/return of products on this ground. Customs policies vary widely; you should contact the destination customs office for more information. When customs clearance procedures are required, it may cause delay(s) beyond our original delivery estimate(s).