• relating directly or indirectly to a living individual;
• from which it is practicable for the identity of the individual to be directly or indirectly ascertained; and
• in a form in which access to or Processing of the Data is practicable.

• Personal Data must be collected for a lawful purpose directly related to a function or activity of the Data User;
• Personal Data must be collected by means which are lawful and fair in the circumstances;
• Personal Data must be adequate and not excessive for the purpose for which it was collected;
• Personal Data must be accurate;
• Personal Data must not be kept longer than necessary for the purpose for which it was collected;
• Personal Data must be used only for the purpose for which it was collected;
• Personal Data must be secure from any unauthorised or accidental access, Processing, erasure, loss or use;
• Personal Data must not be transferred to Data Processors without contractual or other safeguards for the security of, and proper retention practices in relation to, the transferred Personal Data;
• Personal Data must be accessible by the Data Subject to whom it relates; and
• Data Users must maintain transparency in their practices for handling Personal Data.

• any Data Processor Processing Personal Data on our behalf are contractually responsible for following good Data protection practice;
• any Data Processor Processing Personal Data on our behalf is appropriately trained to do so;
• any Data Processor Processing Personal Data on our behalf is appropriately supervised;
• any enquiries relating to the Processing of Personal Data are promptly dealt with;
• appropriate methods of Processing Personal Data are clearly communicated to any Data Processor who is Processing Personal Data on our behalf;
• any Data Processor maintains retention practices which ensure that Personal Data is not retained for longer than is necessary;
• any Data Processor maintains adequate security measures to prevent unauthorised or accidental access, Processing, erasure, loss or use of Personal Data; and
• regular reviews and audits are made of the way Personal Data is collected, stored and processed by us or on our behalf.

• from your completion of donation forms;
• from your completion of our donor surveys;
• during our street fundraising activities;
• during our fundraising telemarketing calls;
• when you make a donation;
• when you apply for all positions in the MSF office or MSF mission;
• when you enrol to our fundraising events;
• when you email us your comments, feedback, opinion or suggestions;
• when you register to participate in a discussion on our bulletin boards, forums or social media on our website; and/or
• in the course of your establishing or maintaining a donor/supporter relationship with us.
• when you subscribe MSF newsletter
• when you register an account for set-up of a fundraising web page for MSF
• when you update your information by post, fax, email, phone or through our website.

• Your name;
• You mailing address;
• Your email address;
• Your phone number;
• Your fax number,
• Your gender
• Your title
• Your date of birth;
• Your Hong Kong ID card number;
• Your payment card information (when you make a donation)
• Your bank account information (when you make a donation).
• The name of your organization

• direct dialogue or street fundraising where the agent, contractor or third party service provider may invite people on the street to sign up to MSF as donors;
• telemarketing where the agent, contractor or third party service provider may take donation orders over the phone;
• direct marketing by post or email where the agent, contractor or third party service provider may send direct marketing materials to individuals.

In addition, we obtain Personal Data from third party marketing companies who provide databases to us for direct marketing purposes. The information provided by such third party marketing companies has been obtained lawfully, and the relevant individuals have consented to their information being provided and used by other organisations such as MSF. Please see below for more details on our direct marketing practices.

• to conduct fundraising activities;
• to process any donations made by you;
• to conduct donor surveys;
• to conduct market research and for direct marketing purposes, described in more detail under the "Direct Marketing" section below;
• to issue receipts for your donation;
• to foster communications between you and MSF;
• for any purposes in connection with any claims made by or against or otherwise involving you in respect of any fundraising activities organised or held by us including, without limitation, to make, defend, analyse, investigate, process, assess, determine or respond to such claims;
• to exercise any rights we may have in connection with our fundraising activities from time to time;
• to comply, where reasonably necessary, with any court orders, law, rules, regulations, codes of practice, guidelines or requests binding on us, including without limitation to make disclosures of your Personal Data to regulators, governmental bodies, tax authorities or industry recognized bodies, all of which may be within or outside the HKSAR; and/or
• for any purposes relating to the above or any other purposes in accordance with this Policy and other policies in relation to our fundraising activities as set out in any notices or other terms and conditions made available by us to you from time to time.

• contractors and third party service providers engaged in marketing, advertising or campaigning, to help us to conduct campaign analyses, prepare donation coupons, appeal letters and donor surveys;
• any agent, contractor or third party service provider who provides administrative, telecommunications, printing, information technology, payment processing, data processing or storage services to us;
• any of our auditors, legal and/or other professional advisors;
• any person to whom we are under an obligation to make disclosure under the requirements of any law, rules, regulations, codes of practice, guidelines or voluntary arrangements binding on us including applicable regulators, governmental bodies, or industry recognised bodies (all of which may be within or outside the HKSAR) and where otherwise required by law; and/or
• subject to your consent, any agent, contractor or third party service provider who provides marketing services to us in connection with the development and promotion of our fundraising activities.

You should be aware that when you participate in any discussion on any bulletin boards or forums or use any social media plugins on our website, your written comments are entirely public. If you do disclose Personal Information on these bulletin boards, forums or social media plugins, that information can be collected and used by others and may result in unsolicited messages from third parties. Also, by participating in these forums, you should remember that you are legally liable for the material you post, including libel and copyright infringement. 

• track the number, and type of visits to the websites and their pages, and compile anonymous, aggregated statistics on the number of users and their usage patterns, in order for us to evaluate and enhance the performance of our websites, and
• personalize the content of our websites and facilitate user movement within the websites (including without limitation by storing your preferences for screen layouts and language, and remembering passwords during a session and the country you may have elected as your country of residence).