Privacy Policy

Section 1

Introduction

Statutus ("we", "us", "our") operates the website at statutus.sbs and runs legal knowledge bootcamp programmes from its offices at 13/F, 150 Des Voeux Road Central, Sheung Wan, Hong Kong. This Privacy Policy explains how we collect, use, store, and protect personal data provided to us through our website and programme enquiry forms.

We handle personal data with care. We do not sell personal information to third parties, and we collect only what is necessary to respond to enquiries and administer programme enrolments.

Questions regarding this policy may be directed to [email protected].

Section 2

Data We Collect

We may collect the following categories of personal data:

Legal basis for processing: We process your data on the basis of your consent (enquiry form submission, cookie acceptance), on the basis of a contractual relationship (when you enrol in a programme), and on the basis of our legitimate interest in operating and improving a professional education programme.

Retention: Enquiry data is retained for up to 24 months. Enrolment records are retained for up to 5 years for administrative and billing purposes. Analytics data is retained according to the policy of the relevant analytics service. You may request deletion at any time — see Section 6.

Section 3

How We Use Your Data

Personal data we collect is used for the following purposes:

• Responding to enquiries submitted through our contact form or by email
• Processing enrolment in bootcamp terms, workshops, or reader subscriptions
• Sending programme-related communications — reading materials, schedules, invoices, and updates about the term you are enrolled in
• Sending the quarterly editorial bulletin to Reader Subscribers who have opted in
• Improving our website and programme offering using anonymised usage data
• Complying with applicable legal obligations under Hong Kong law

We do not sell, rent, or trade your personal data to third parties. We do not use your personal data for automated decision-making or profiling. Marketing communications beyond programme-specific updates will only be sent if you have explicitly opted in.

Section 4

Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These include:

• Transmission of data over encrypted HTTPS connections
• Access to personal data limited to staff who require it for their role
• Use of reputable third-party service providers with their own security practices for email and data storage
• Notification to affected individuals in the event of a data breach, where required by applicable law

No method of electronic transmission or storage is entirely without risk. We cannot provide an absolute assurance of security, but we apply reasonable care in handling the personal data entrusted to us.

Section 5

Cookies

Our website uses cookies — small files placed on your device — to support site functionality and, where you consent, to collect anonymous usage data. We use the following categories:

• Essential cookies — required for the website to function correctly. These cannot be disabled.
• Analytics cookies — used to understand how visitors use the site. Only placed with your consent.
• Preference cookies — used to remember your consent choice. Only placed when you interact with the cookie notice.

For full details on cookies, how to manage them, and browser-specific instructions, see our Cookie Policy.

Section 6

Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, and to the extent we handle data of individuals in other jurisdictions, you have the following rights in relation to your personal data:

• Access — you may request a copy of personal data we hold about you.
• Correction — you may request correction of inaccurate or incomplete data.
• Erasure — you may request deletion of your personal data where there is no overriding legitimate reason for us to retain it.
• Withdrawal of consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Complaint — you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required under the Ordinance.

Section 7

Third-Party Links

Our website may contain links to external websites or resources — for example, reading materials, faculty profiles, or reference documents. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal information.

Section 8

Children

Our programme is intended for professionals and adults aged 18 or over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will delete it promptly.

Section 9

Policy Updates

We may update this Privacy Policy from time to time. When material changes are made, we will update the "Last Updated" date at the top of this page. Continued use of our website after a change has been posted constitutes acceptance of the revised policy.

We recommend reviewing this page periodically. Archived versions are available on request.

Section 10

Contact

For privacy-related enquiries, data access or correction requests, or questions about this policy: