Controller/Site owner: TBC Improv Hong Kong
Registered address: Sai Kung, Hong Kong
Contact for privacy matters: HK@tbcimprov.com
2. What this policy Covers
- What personal data we collect on this website and why.
- When we rely on consent and how you can withdraw it.
- Cookies, local storage and similar technologies we use.
- How we share data, how long we keep it, and how we keep it secure.
- Your rights and how to exercise them.
This policy applies to this website and related pages we link here. If you register or purchase tickets with a third party (e.g., Eventbrite, Tally, or payment providers), their privacy notices also apply.
3. What we collect
We collect the minimum data necessary to operate a festival site. Depending on what you do on the site, we may process:
- Contact and enquiry data — name, email, phone, message content.
- Registration data (if enabled) — attendee details, company, role, dietary/accessibility preferences.
- Support communications — messages you send us and our replies.
- Technical data — IP address, device/browser info, pages viewed, date/time, referral URL. (We currently do not run analytics or ads; see Section 6 on cookies.)
Sources: directly from you (forms), and automatically via your browser and our hosting platform. If we later add third‑party tools (e.g., analytics, video embeds), we will update this policy and request consent where required.
4. Why we use your data
Purpose
Examples
Legal Basis (EEA/UK)
Operate the site & respond to enquiries
Provide pages, answer messages
Legitimate interests (running our site and responding to you) or Contract (if you asked us to take steps for a booking)
Festival registration & administration
Process sign‑ups, manage attendee lists, send updates
Contract
Safety & fraud prevention
Detect/mitigate abuse, security incidents
Legitimate interests
Compliance
Keep records required by law
Legal obligation
Optional analytics/marketing (if added later)
Measure usage; email updates with consent
Consent (withdraw anytime)
If you are outside the EEA/UK, we apply similar principles even if local law uses different terms.
5. Sharing your data
We share personal data only with:
- Service providers (e.g., web hosting, email, form processor, CDN) under contracts that protect your data.
- Event platforms (if used) that you choose to interact with (e.g., ticketing/registration providers).
- Authorities where required by law.
- Your rights and how to exercise them.
We do not sell or share personal information for cross‑context behavioral advertising. If this ever changes, we will provide a “Do Not Sell or Share My Personal Information” option and update this policy.
6. Cookies & similar technologies
At the time of publication, we do not set non‑essential cookies and we do not run analytics or ads on this site. The site may store strictly necessary items (e.g., security, load‑balancing, or your cookie‑consent state) that do not require consent.
If we later add tools that place non‑essential cookies (e.g., analytics, embedded videos, maps, reCAPTCHA), we will:
- request your consent where required before they run;
- Event platforms (if used) that you chhonour your choices via our on‑site Cookie settings control;
- describe each cookie in the Cookie Table below.
Reopen preferences: Click Cookie settings (in the footer or cookie icon) to review or change your choices at any time.
7. International transfers
If we transfer personal data outside your country/region, we will do so using lawful safeguards (e.g., the EU Standard Contractual Clauses) and with appropriate security measures.
8. Retention
We keep personal data only as long as necessary for the purposes above, then delete or anonymise it. Typically:
- Enquiry emails: 24 months
- Registration data: 36 months after event
9. Your RIghts
Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, and portability (EEA/UK). You may also withdraw consent at any time where we rely on consent.
- EEA/UK: Contact us using the details above. You can also contact your local supervisory authority.
- California: You may have rights to know, delete, correct, and to opt out of sale/share and certain profiling. If applicable, we will honour opt‑out preference signals (e.g., Global Privacy Control). Use our contact details or links provided on relevant pages.
- Singapore/Hong Kong: You may request access and correction of personal data we hold about you. Contact us using the details above.
10. Security
We use reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, and secure deletion practices.
11. Children
This site is not intended for children under 12. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will take appropriate steps.
12. Changes to this policy
We may update this policy from time to time. The Last updated date shows when changes took effect. Significant changes will be highlighted on this page and, where appropriate, notified to you.
13. Contact
For any questions or to exercise your rights: yesandfest@tbcimprov.com
