家庭資料私隱政策
Pivotal Paediatric Development
Last updated: 2026-05-27
This website and its associated forms are owned and operated by Pivotal Paediatric Development ("we", "us"). We act as the data controller of any personal data you submit through this site, in accordance with the Hong Kong Personal Data (Privacy) Ordinance, Cap. 486 (the "PDPO").
When you complete a Parent Observation Guide form, we collect the following categories of data: (1) parent's name; (2) child's name (optional); (3) child's age in months; (4) contact details (WhatsApp number or email address, at least one); (5) preferred contact channel; (6) responses to observation questions (Likert ratings and open-text descriptions); (7) main concern (optional); (8) timestamp of privacy policy consent. We do not collect any data beyond the scope listed above.
The information you provide will only be used for the following purposes: (a) following up on occupational therapy consultation requests; (b) arranging the free 20-minute WhatsApp consultation; (c) where you proceed to assessment or therapy, forming the initial information for your clinical file. We will not use your data for marketing, will not resell it, and will not share it with third parties (except where required by law).
We operate an "event-driven hybrid retention" policy: (a) for families who have completed a consultation, personally identifying fields are anonymised within 90 days after the consultation; (b) for submissions where no consultation took place, anonymisation occurs within 24 months of submission. Anonymised records may be retained for aggregate statistical purposes (observation answers + submission date + form version) but can no longer identify any individual.
We will never sell, rent, exchange, or otherwise commercially transfer your personal data to any third party. We will not use your data for unrelated marketing or advertising.
You may withdraw consent to data processing at any time. After withdrawal, we will delete your personal data within a reasonable period (unless retention is required by law). To withdraw, email [email protected] or contact us via WhatsApp.
Your data is stored on the Sanity cloud content platform (provided by Sanity.io, SOC 2 Type II compliant). All data in transit is encrypted via HTTPS; data at rest uses industry-standard encryption. The token authorising database writes is used only on the server and is never exposed to the browser.
Under PDPO sections 18 and 22, you have the right to access the personal data we hold about you and to request correction of any inaccuracies. To exercise these rights, email [email protected] and we will reply within 40 days.
This site uses Google Analytics 4 to collect anonymous browsing statistics to help us improve the website experience. GA4 may set cookies in your browser. You can disable cookies via your browser settings. We do not link GA4 statistics to the personal data you provide through form submissions.
We may update this privacy policy from time to time. Any material updates will be reflected in the "Last updated" date on this page. We recommend reviewing it periodically. If you have any questions about this policy, please email [email protected] or contact us via WhatsApp.
