Hong Kong Express Airways Limited (âHK Expressâ or âweâ) is committed to protecting childrenâs personal information and privacy. This Children Privacy Notice (this âNoticeâ) sets out what childrenâs personal information we collect and how we use it, the rights of children and their parents/guardians (âGuardiansâ) as well as instructions for their Guardians. Unless otherwise indicated, for the purposes of this Notice, a âChildâ means a minor who is under the age of 14.
This Notice applies to all products and/or services that we provide to our customers located in Mainland China and process childrenâs personal information. We may revise and update this Notice from time to time in accordance with updates to laws and regulations, as well as requirements for maintaining orderly transactions, protecting consumer rights and interests, and business operations. We will disclose changes to you in an appropriate manner.
This Notice specifies the rules for processing childrenâs personal information based on the HK Express Customer Privacy Policy - Mainland China. To the extent that this Notice is different from the HK Express Customer Privacy Policy - Mainland China, this Notice applies; to the extent that this Notice does not specify, the HK Express Customer Privacy Policy - Mainland China applies.
This Notice does not apply to any website not owned or managed by HK Express or any other third-party website that children may visit through third party links and/or activities. With respect to such websites, please see those respective sites for the privacy policies that may apply.
We hereby remind you that:
If you are a Child, you are required to read this Notice carefully with your Guardian and obtain your Guardianâs consent to use our products and/or services or to provide us your personal information.
If you are the Guardian of a Child, please read and fully understand the terms of this Notice, especially those in bold, before your Child access or use the products and/or services we offer or providing your Childâs personal information to us.
If you are a Guardian of a Child, please read and choose carefully before agreeing to this Notice, especially the words in bold. Only use or give permission for your Child to use the service or product after confirming that you have fully understood and agreed to all of the Notice. If you do not agree with the contents of this Notice, you and the Child should immediately cease accessing/using the products and/or services offered byHK Express.
If you are not the Childâs Guardian, please ensure that you are authorised by the Childâs Guardian to provide the Childâs personal information and purchase tickets for the Child.
If you have become aware of a breach of your account and password used to buy tickets for the Child, or any other incident that may result in the disclosure or misuse of the Childâs personal information, please contact us through our contact details located in Section 7 of this Notice.
Personal information refers to all kinds of information recorded electronically or otherwise, that can by itself, or in combination with other information, including but not limited to a natural personâs name, date of birth, ID card number, personal biometric information, address, telephone number, etc., be used to identify a natural person.
Personal information of children under the age of 14 is sensitive personal information. We collect and process childrenâs personal information with strict protection measures when there is a specific purpose and sufficient necessity for doing so.
We may collect personal information of children from various sources. We may collect personal information of children that you provide when you use our digital channels (âDigital Channelsâ) (including our official HK Express website (hkexpress.com), mobile application, WeChat mini programme, WeChat official account, etc.), receive offline services, or participate in other activities hosted by HK Express. We may also use cookies and other technologies to automatically collect device information or usage information from children when you visit our Digital Channels. We collect and use childrenâs personal information only for the purposes described in this Notice; if you refuse to provide this information (especially childrenâs travel documents, payment and contact information), you may not be able to use some of the services we provide.
2.1 Booking and purchasing tickets for your child
If you are the Guardian of a Child, when you purchase a ticket for your Child through the Digital Channels, we will collect your Childâs name, departure location, travel document details including passport number, passport expiry date, country that issued your passport and your country of residence (this information is also known as Advanced Passenger Information (API)), travel destination, travel category (round trip/one way), flight number, flight time, fare type, and seat number (if applicable).
2.2 Collection of childrenâs personal information from third parties
We may collect personal information about children from third parties, including but not limited to travel agents, other airlines and providers of other travel-related services. Please refer to the âHow we collect Personal Informationâ section of the HK Express Customer Privacy Policy - Mainland China for the scope of the collection.
2.3 Other scenarios
We may also collect and use other personal information about children during your Childâs use of our products and services in order to provide you or your Child with our products and services (e.g., to provide personalised displays or recommendations). Please refer to the âThe Personal Information We Collectâ, âHow we collect Personal Informationâ and âWhy we collect and use your Personal Informationâ sections of the HK Express Customer Privacy Policy - Mainland China for specific purposes of use, the scope of personal information collected and the consequences of refusing to provide the information.
In addition, we may also automatically collect your Childâs personal information through cookies, SDKs and other similar technologies. Please refer to the âUse of Cookies and Software Development Kits on Cathay Pacific Group Sitesâ sections of the HK Express Customer Privacy Policy - Mainland China for details.
Please note that in some cases we are unable to identify whether the specific person using our product or service is a Child or not. In cases where the user does not voluntarily provide personal information, such as page views, we are unable to determine whether personal information that is not clearly age-identifiable is childrenâs personal information, and we will process such personal information in accordance with the provisions of the HK Express Customer Privacy Policy - Mainland China. If you find that the personal information we are processing is personal information of a Child, please contact us promptly.
2.4 Legal basis for processing childrenâs personal information
Please understand that, in accordance with national laws and regulations, we may process childrenâs personal information only under any of the following circumstances:
If we use childrenâs personal information for purposes other than those set forth in this Notice, or use information collected for specific purposes for other purposes, we will seek the consent of the Guardian as required by applicable law.
3.1 Sharing
For the personal information you provide, we will keep it confidential and protect it in accordance with the relevant laws and regulations of the Peopleâs Republic of China, and will not provide or display such information to any third party in any way, except for the following cases:
Only after you have provided authorisation and standalone consent, and on the basis of lawfulness, legitimacy, necessity and specific and explicit purposes will we provide childrenâs personal information to the extent necessary for providing products and/or services to children. We will also assess the legality, legitimacy, necessity, and impact on the rights of children of providing personal information of children to such third parties.
3.2 Entrusted processing to third parties
We may entrust third party service providers (including agents, contractors, suppliers and other companies in the Cathay Pacific group which HK Express belongs to) to process childrenâs personal information. If we do so, we will evaluate the entrusted party capabilities and the entrusting process and require the processing to not exceed the scope of our authorisation by singing an agreement. Please refer to the âWho we share your Personal Information withâ section of the HK Express Customer Privacy Policy - Mainland China for details.
3.3 Transfers
In the event of a merger, acquisition or liquidation of the Cathay Pacific group, or other situation involving a merger, acquisition or liquidation that involves the transfer of personal information, we will require the new company, organisation or individual in possession of the Childâs personal information to continue to be bound by this Notice and the HK Express Customer Privacy Policy - Mainland China, or we will require the company, organisation or individual to seek authorization from the Childâs Guardian again.
3.4 Disclosure
We will only publicly disclose a Childâs personal information under the following circumstances.
We will retain childrenâs personal information for the minimum period necessary for achieving the specific purposes, except where otherwise required by law or regulation or where we have other legal bases. After the above storage period, we will delete or anonymise your childrenâs personal information.
We have put in place commercially reasonable physical, electronic, and procedural safeguards to protect childrenâs personal information from unauthorised access, public disclosure, use, modification, damage, or loss in order to meet the requirements of applicable laws and regulations.
All personal information that we collect about children is stored on our secure servers or those of our subcontractors. When accessing or using this information, we adhere to our security policies and standards and strictly control access to childrenâs personal information. You are responsible for maintaining the confidentiality of any personal information we send to you about children and for complying with any other security procedures we instruct you to follow. if we provide you with (or you have chosen) a password that allows you to access parts of our website or mobile application, please do not share your password with anyone.
If you are aware that your Childâs personal information has been compromised, please contact us via the contact information in Chapter 7 of this Notice so that we can take appropriate action.
5.1 Your and your Childâs rights to personal information
In accordance with the relevant laws, regulations and standards of China, we ensure that you and your children can exercise the following rights with respect to childrenâs personal information. Please refer to the âYour rights and contacting usâ section of the HK Express Customer Privacy Policy - Mainland China for details.
5.2 How we respond to relevant requests
You may exercise your Childâs personal information rights at any time through our Digital Channels, or through the contact information disclosed in Chapter 7 of this Notice. We will respond to relevant requests in accordance with applicable laws and regulations, provided that you give necessary information to verify the identity of the Child and the identity of the Childâs Guardian. In general, we do not charge fees for reasonable requests, but we may charge fees for repeated requests or requests that exceed reasonable limits, depending on the circumstances.
If you would like to exercise your Child rights or require additional information or clarification on the use of specific personal information, please contact us using the details in Chapter 7 of this Notice.
Please note that, in accordance with relevant national standards, we will not be able to respond to requests from children under the following circumstances:
We may be required to export your personal information to jurisdictions located outside of Mainland China. Where we transfer your personal information abroad, we ensure that appropriate safeguards are in place and that the transfer is conducted in compliance with applicable laws and regulations.
As an entity headquartered in Hong Kong, we are an overseas recipient which receives and processes childrenâs personal information. We process childrenâs personal information within the purposes and methods provided in this Notice and the categories of processed personal information have also been disclosed in this Notice.
Childrenâs personal information may also be provided to the following overseas entities or organisations: List of Third Parties outside Mainland China.
If you or your Child wish to exercise the rights as an individual under this Notice, or if you have any questions about how we process personal information about children, please contact us by email at dpo@hkexpress.com or write to us at the below mailing addresses. We will respond to you as soon as practicable and in compliance with applicable laws and regulations.
The Data Protection Officer
Hong Kong Express Airways Limited
1st Floor, 11 Tung Fai Road,
Hong Kong International Airport, Lantau, Hong Kong