Privacy Policy

We collect only the personal data necessary to deliver our services. This includes: your name and email address when you register an account or subscribe to the IRB Monthly; your phone number and assessment answers when you book a Know Each Other session or apply for Study Aid; your payment details when you purchase a bundle, module, or wellness product (processed by Stripe and Teachable — we do not store your full card number); and your shipping address when you order a physical wellness product.

We also collect limited technical data automatically: your IP address, browser type, and pages visited. This is used for site security and to improve the service.

We use your personal data to: deliver the coaching, modules, and products you have purchased; send you the IRB Monthly newsletter and operational email (receipts, booking confirmations, policy notices); process payments and issue refunds; award and track Companions Rewards Club points; respond to your enquiries; and comply with our legal obligations under Hong Kong law.

We do not use your personal data to train artificial intelligence models. We do not profile you for third-party advertising.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is shared only with the following service providers, each under their own data protection terms:

• ·Stripe — payment processing (card details are handled by Stripe; we never see or store your full card number).
• ·Teachable — course hosting and module enrolment.
• ·SYT Wellness (上醫堂) — wellness product fulfilment (name, phone, and shipping address only).
• ·Our email provider — delivery of the IRB Monthly and operational email.
• ·Hong Kong regulatory or law enforcement authorities — only where required by law.

We hold your personal data for as long as your account is active, plus the period required by Hong Kong law for financial and tax records. Newsletter subscriptions are held until you unsubscribe. Rewards Club points data is held for the duration of your membership, plus twenty-four months of inactivity before archiving.

If you request account closure, we delete or anonymise your personal data within thirty days, except where retention is required by law.

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

• ·Request access to the personal data we hold about you.
• ·Request correction of inaccurate or incomplete personal data.
• ·Request that we cease using your personal data for direct marketing.
• ·Request deletion of your personal data, subject to our legal retention obligations.

To exercise any of the rights above, write to general.irb@protonmail.com with your account email and the nature of your request. We acknowledge within two working days and respond in full within thirty days.

There is no charge for making a data access or correction request. We may ask for identity verification to protect your data from unauthorised access.

We use essential cookies and browser local storage to keep you signed in, remember your language and theme preferences, and maintain your shopping session. We do not use third-party advertising or tracking cookies.

You can clear cookies and local storage at any time through your browser settings. Doing so will sign you out and reset your preferences.

We take reasonable technical and organisational measures to protect your personal data, including encrypted transmission (HTTPS), access controls limited to authorised staff, and regular review of our data handling practices.

No system is perfectly secure. If we become aware of a data breach affecting your personal data, we notify you and the Privacy Commissioner for Personal Data, Hong Kong, as required by the PDPO.

Our services are intended for individuals aged eighteen and above. If you are under eighteen, you may use the site only with written consent from a parent or guardian. We do not knowingly collect personal data from minors without such consent.

We may update this Privacy Policy from time to time. Material changes are announced on the site and, where appropriate, by email. The last-updated date at the top of this page reflects the most recent revision. Continued use after a change takes effect is acceptance of the updated policy.