Privacy Policy

Effective Date: 17 May 2026

1. Introduction and Company Information

This Privacy Policy explains how Harbour Fold Studio collects, uses, discloses, stores, and protects personal data in connection with its origami-related business activities, including workshops, custom paper art services, online enquiries, event bookings, newsletters, customer support, and website use.

Harbour Fold Studio is the data user and controller responsible for your personal data under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”).

Company Name: Harbour Fold Studio
Address: Harbour Fold Studio, 12/F, 88 Queen's Road Central, Central, Hong Kong 999077
Email: [email protected]
Phone: +852 2867 4931

By using our services, contacting us, booking a workshop, purchasing products, or interacting with our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Collection and Processing

Harbour Fold Studio may collect and process the following categories of personal data, depending on your interaction with us:

• Identification and contact data: name, email address, phone number, postal address, billing address, and delivery address.
• Booking and transaction data: workshop registrations, event attendance details, order history, payment status, invoices, and receipts.
• Communication data: messages, enquiries, feedback, survey responses, and correspondence with our team.
• Preference data: preferred workshop dates, product interests, language preferences, and marketing preferences.
• Technical and usage data: IP address, browser type, device information, pages visited, time spent on pages, and cookies or similar technologies used on our website.
• Special instructions or service notes: information you provide regarding accessibility needs, event requirements, or custom origami commissions.

We generally collect personal data directly from you. In some cases, we may also receive data from third parties such as payment processors, delivery providers, event platforms, or business partners acting on your behalf.

You are responsible for ensuring that any personal data you provide to us is accurate and up to date.

3. Purpose of Data Processing

Harbour Fold Studio processes personal data for the following purposes:

• to provide and manage origami workshops, classes, events, and related services;
• to process bookings, payments, refunds, cancellations, and customer support requests;
• to deliver products, custom paper art, and other requested services;
• to communicate with you about enquiries, confirmations, updates, and service notices;
• to send newsletters, promotional materials, and marketing communications where permitted by law and, where required, with your consent;
• to improve our website, services, customer experience, and business operations;
• to maintain records, perform accounting, and comply with legal, tax, and regulatory obligations;
• to detect, investigate, and prevent fraud, misuse, or security incidents;
• to manage our contractual relationships with customers, suppliers, and partners;
• to enforce our terms, protect our rights, and resolve disputes.

4. Legal Basis for Processing

Under the PDPO, personal data must be collected and used for a lawful purpose and in a fair manner. Harbour Fold Studio processes personal data on the following bases, as applicable:

• Consent: where you have given clear consent, for example for certain marketing communications or optional cookies.
• Performance of a contract: where processing is necessary to provide our services, manage bookings, or fulfil orders.
• Legal obligation: where processing is necessary to comply with applicable laws, regulations, tax requirements, or lawful requests from authorities.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and interests, including service improvement, fraud prevention, and internal administration.

Where we rely on consent, you may withdraw it at any time, subject to legal or contractual restrictions.

5. Data Sharing and Third Parties

Harbour Fold Studio may share personal data with third parties only where necessary and appropriate for the purposes described in this Privacy Policy. These third parties may include:

• Payment service providers for processing card or online payments;
• Delivery and logistics providers for shipping products or materials;
• Website hosting, IT, and cloud service providers supporting our systems and communications;
• Email marketing and customer relationship tools used to manage communications and subscriptions;
• Event and booking platforms used to manage registrations and attendance;
• Professional advisers such as accountants, auditors, lawyers, and insurers;
• Government, regulatory, or law enforcement authorities where disclosure is required or permitted by law;
• Business partners or contractors assisting with workshop delivery, venue operations, or custom project fulfilment.

We require third parties handling personal data on our behalf to protect it appropriately and to use it only for authorised purposes. Where a third party acts as an independent data user, its own privacy policy may also apply.

6. Data Transfer to Third Countries

Some of our service providers or partners may be located outside Hong Kong. As a result, your personal data may be transferred to, stored in, or accessed from jurisdictions outside Hong Kong, including countries that may have different data protection standards.

Where such transfers occur, Harbour Fold Studio will take reasonable steps to ensure that your personal data is protected by appropriate safeguards, which may include contractual protections, access controls, and security measures consistent with the PDPO and applicable guidance.

By providing your personal data to us, you acknowledge that such cross-border transfers may occur where necessary for the operation of our business and services.

7. Storage Duration

Harbour Fold Studio retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, accounting standards, dispute resolution needs, or legitimate business purposes.

In general, retention periods may include:

• Customer and booking records: retained for the duration of the service relationship and for a reasonable period thereafter;
• Financial and tax records: retained for the period required by applicable law and accounting practices;
• Marketing data: retained until you unsubscribe, withdraw consent, or request deletion where applicable;
• Support correspondence: retained for as long as needed to resolve enquiries and maintain service records;
• Technical logs and security records: retained for a limited period necessary for security, troubleshooting, and operational purposes.

When personal data is no longer required, we will take reasonable steps to delete, anonymise, or securely destroy it.

8. User Rights

Subject to the PDPO and any applicable exceptions, you may have the following rights in relation to your personal data held by Harbour Fold Studio:

• Access: to request access to the personal data we hold about you;
• Rectification: to request correction of inaccurate, incomplete, or outdated personal data;
• Erasure: to request deletion of personal data in appropriate circumstances, subject to legal and operational requirements;
• Restriction: to request that we limit the processing of your personal data in certain situations;
• Data portability: to request a copy of certain personal data in a structured, commonly used format where applicable and technically feasible;
• Objection: to object to processing based on legitimate interests or to certain direct marketing activities.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable law.

9. Withdrawal of Consent

Where we process your personal data based on consent, you may withdraw that consent at any time by contacting Harbour Fold Studio or using any unsubscribe mechanism provided in our communications.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may still process your personal data where another lawful basis applies or where we are required to retain it by law.

10. Right to Complain

If you have concerns about how Harbour Fold Studio handles your personal data, please contact us first so that we can try to resolve the issue promptly.

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD) if you believe your personal data has been handled in a manner that breaches the PDPO.

We encourage you to contact us before escalating a complaint, as many issues can be resolved quickly and informally.

11. Data Security

Harbour Fold Studio takes reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include:

• access controls and role-based permissions;
• password protection and authentication measures;
• secure storage and encryption where appropriate;
• staff confidentiality obligations and privacy awareness;
• regular review of systems and security practices;
• vendor due diligence and contractual safeguards for service providers.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or our handling of personal data, please contact:

Harbour Fold Studio
12/F, 88 Queen's Road Central, Central, Hong Kong 999077
Email: [email protected]
Phone: +852 2867 4931

13. Changes to Privacy Policy

Harbour Fold Studio may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date.

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes become effective constitutes your acknowledgment of the updated Privacy Policy, to the extent permitted by law.