Privacy Policy

International WingTsun Association (“IWTA”, “we”, “us”, “our”) Last updated: 2026-08-01

This Privacy Policy explains how the IWTA, a Hong Kong-registered organisation collects, uses, discloses, and protects personal data when you visit our website www.leungting.com, enrole in classes, or purchase products from our online shop.

This Policy is issued in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”). It also constitutes our Personal Information Collection Statement (“PICS”).

1. What Personal Data We Collect in relation to your online shopping order

Identity & contact data: name, email address, phone number, mailing/shipping address.
Order data: items purchased, order value, order history, delivery instructions.
Payment data: we do not collect or store your full card number, CVV, or e-wallet credentials. Payments are processed by our payment service provider, Airwallex, which collects this data directly and provides us only with a transaction confirmation, the last 4 digits of your card (if applicable), and payment status.
Class/membership data (if applicable): name, contact details, and (for minors) parent/guardian contact details and emergency contact information.
Technical data: IP address, browser type, device type, and website usage data (if analytics/cookies are used - see Section 6).
Correspondence: any information you provide when contacting us (e.g. customer service emails).

2. How We Use Your Data

We use personal data to:

Process and fulfil orders (books, clothing, and other merchandise), including calculating shipping costs and arranging delivery.
Communicate with you about orders, class schedules, and association updates.
Verify payment and prevent fraud.
Respond to enquiries and complaints.
Improve our website and services.
Comply with legal and accounting obligations (e.g. Hong Kong tax record-keeping).

We do not use personal data for purposes unrelated to the above without your consent.

3. Disclosure of Personal Data

We disclose personal data only to:

Airwallex (payment processing) - governed by Airwallex’s own privacy policy.
Shipping/courier providers (e.g. the courier selected via our shipping-cost calculation service) - to the extent necessary to deliver your order.
Google (Google Analytics for website usage data, and Gmail/Google Workspace for handling customer correspondence) - see Section 6 for details on Google Analytics.
Professional advisers (e.g. auditors) where necessary.
Government or law enforcement authorities, where required by law.

We do not sell personal data to third parties.

4. Cross-Border Data Transfer

Airwallex and certain shipping providers may process or store data outside Hong Kong. By using our payment and shipping services, you acknowledge that your data may be transferred internationally. We take reasonable steps to ensure recipients provide a comparable standard of protection.

5. Data Retention

We retain personal data only as long as necessary for the purposes above, or as required by Hong Kong law (e.g. financial records typically kept 7 years). Data no longer needed is securely deleted or anonymised.

6. Cookies and Analytics

We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to monitor and analyze the traffic on our website.

Legal Basis for Processing (For EEA/UK Users) - If you are located within the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and processing your data via Google Analytics is your explicit consent (Art. 6(1)(a) GDPR), which you grant or deny via our cookie consent banner. You have the right to withdraw your consent at any time.
Data Collected - Google Analytics uses cookies to collect standard internet log information and visitor behavior. This data includes your device type, browser details, operating system, and interaction data (such as pages visited and time spent). Google Analytics 4 is configured not to store your full IP address, in line with Google’s current data collection settings for GA4 properties.
International Data Transfers - The information generated by the cookies is typically transmitted to and stored by Google on servers located in the United States. To ensure an adequate level of data protection for transfers outside the EEA, we rely on the EU-U.S. Data Privacy Framework (DPF), under which Google LLC is certified, or standard contractual clauses approved by the European Commission.
Purpose of Processing and Data Retention - We use this information solely to evaluate website usage, compile statistical reports, and improve our website performance. We retain this user-level and event-level data for a period of 2 months before it is automatically deleted.
Your Rights and Opt-Out Options - You have the right to access, rectify, or erase your data, as well as the right to object to processing. You can manage your preferences through the following methods:
- Cookie Preference Center: You can withdraw your consent at any time by updating your preferences in our website’s cookie consent banner.
- Browser Add-On: You can completely block Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.
- Google’s Privacy Terms: For more details on how Google handles your data, please review Google’s Privacy & Terms.

7. Data Security

We use reasonable technical and organisational measures (e.g. HTTPS encryption, restricted access) to protect personal data. However, no method of transmission or storage is 100% secure.

8. Your Rights

Under the PDPO, you have the right to:

Request access to personal data we hold about you.
Request correction of inaccurate personal data.
Withdraw consent to marketing communications at any time.
Require IWTA to cease using your personal data for direct marketing purposes, free of charge, under section 35J of the PDPO. Once you make this request, we will stop using your data for direct marketing.

Requests can be made in writing to: iwtahk@gmail.com

9. Children’s Data

We offer children’s and mixed-age classes. Where a student is under 18, a parent or legal guardian must complete registration, provide consent, and supply emergency contact details on the child’s behalf. We collect only the minimum data necessary (name, age, guardian contact, emergency contact, and any relevant medical/health information disclosed for safety purposes) and this data is used solely for class administration and safety, not for marketing.

10. International Visitors

We sell and ship to customers in Hong Kong, Mainland China, the European Union, the United States, and other countries. Because we knowingly serve customers in these regions, the following additional terms apply:

European Union / UK (GDPR): If you are located in the EU/UK, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to object to processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your order data is performance of a contract; for marketing communications, it is your consent.

Mainland China (PIPL): If you are located in Mainland China, the Personal Information Protection Law (“PIPL”) applies in addition to the PDPO. This means: we will only collect the minimum data needed to fulfil your order, we will obtain separate consent before transferring your data outside Mainland China (which occurs when your order and payment data is sent to us in Hong Kong and to Airwallex), and you have the right to withdraw consent and request deletion of your data.

United States: Depending on the state (e.g. California’s CCPA/CPRA), you may have the right to know what personal data is collected, request deletion, and opt out of the “sale” or “sharing” of personal data. We do not sell personal data to third parties for their own marketing purposes.

11. Changes to This Policy

We may update this Policy from time to time. Changes will be posted on this page with a revised “Last updated” date.

12. Contact Us

For privacy questions or data requests, contact: Angela Ngai / Office Manager iwtahk@gmail.com Office: Leung’s Publications, Flat C, 4/F, Chak Fung House, 440-442 Nathan Rd, Yau Ma Tei, Kowloon, Hong Kong SAR, China Gym: International WingTsun Association, 1/F Rear, Tang’s Mansion, 438 Nathan Road, Yau Ma Tei, Kowloon, Hong Kong SAR, China