Privacy Policy
PAOSOKO Limited (“PAOSOKO”, “we”, “us” or “our”) respects your privacy. This policy explains how we collect and handle personal data when you use our website, make an inquiry or receive education, admissions, training or consulting services. For the purposes of Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486), PAOSOKO is the data user responsible for that personal data.
1. Scope
This policy applies to visitors, prospective and current learners, parents or guardians, trainers, corporate contacts and other people who interact with PAOSOKO. A separate service agreement or collection notice may give additional information for a particular program. If it does, that specific notice should be read together with this policy.
2. Personal data we collect
Depending on your relationship with us, we may collect:
- identity and contact details, including your name, email address, organization and role;
- inquiry details, goals, preferred program, availability and communications with us;
- learning information, such as level assessments, attendance, submitted work, trainer notes, feedback and progress;
- admissions information, which may include education history, application documents, interests, results, deadlines and institution choices;
- corporate program information, including participant details, team requirements and authorized progress reporting;
- portal identity and access information, including your email address, display name, assigned role, access scope and account status; passwords are stored as salted cryptographic hashes rather than readable text;
- controlled AI-operations records, such as administrator instructions, agent status, permissions, approval decisions, notifications and an audit trail of agent activity;
- administrative and transaction records necessary to manage an agreed service; and
- basic technical information supplied by your browser or hosting systems, such as IP address, device type and security logs.
Please do not send sensitive documents through the general inquiry form. If they are needed, we will explain an appropriate submission method.
3. How we collect personal data
We collect data directly from you when you submit a form, communicate with us, attend a consultation, enrol or participate in a program. We may also receive data from a parent or guardian, an employer or another person authorized to act for you, and from education institutions or service providers where you have authorized the exchange.
4. Why we use personal data
We use personal data to respond to inquiries; assess needs; recommend, arrange and deliver services; authenticate and authorize portal access; manage schedules and learning records; support applications; communicate feedback and progress to authorized recipients; maintain service and transaction records; operate controlled business-assistance tools; protect our website and users; improve our services; meet legal and regulatory obligations; and establish or defend legal rights.
Where required, we will obtain consent before using personal data for a new purpose. We will not use inquiry details for direct marketing unless you have indicated that you agree, and you may withdraw any marketing consent at any time.
5. AI-assisted operations and human approval
PAOSOKO may use controlled AI agents to assist authorized personnel with tasks such as organizing inquiries, preparing draft communications, recording finance confirmation, preparing onboarding information and producing operational alerts. These agents operate under role-based permissions and activity logging. Sensitive actions—including creating a student portal account—require an authorized administrator’s approval. PAOSOKO does not rely on the portal’s AI agents to make solely automated decisions that produce legal or similarly significant effects for learners, clients or staff.
6. Is providing the data voluntary?
Providing personal data through our inquiry forms is voluntary. Fields marked as required are needed so that we can identify your request and respond. If you do not provide them, we may be unable to answer the inquiry or offer the requested service. Information required after enrollment will depend on the program and will be explained when the service is arranged.
7. Who may receive personal data
We may disclose relevant data, on a need-to-know basis, to authorized PAOSOKO personnel and trainers; secure hosting, database, communications, AI-technology and other service providers working under appropriate confidentiality and security obligations; education institutions or admissions partners where you have asked us to assist; your employer, parent or guardian where reporting has been authorized; professional advisers; and public authorities where disclosure is required or permitted by law. We do not sell personal data.
8. International transfers
PAOSOKO serves learners and organizations internationally, and some trainers, education institutions or technology providers may be outside Hong Kong. Where personal data is transferred outside Hong Kong, we take reasonable and practicable steps to protect it through appropriate access controls, contractual arrangements and limited disclosure.
9. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide the service, maintain appropriate business and education records, resolve disputes and comply with legal obligations. Deactivating or archiving a portal user stops account access but may retain relevant learning, finance and audit records. Permanently removing a login account removes its credentials while historical service records may be retained where reasonably necessary. When information is no longer required, we take reasonable steps to delete it or anonymize it.
10. Security
We use reasonable and practicable organizational and technical safeguards designed to protect personal data against unauthorized or accidental access, processing, erasure, loss or use. These include access restrictions, secure hosting and limiting information to people who need it. No internet transmission or storage system can be guaranteed to be completely secure, so please use care when deciding what to send online.
11. Children and young people
Some of our education and admissions services support people under 18. We expect a parent or guardian to provide or authorize personal data where appropriate. We aim to collect only information reasonably necessary for the service and communicate in a way suitable for the learner’s age and circumstances.
12. Cookies and website data
Our website uses a strictly necessary, secure session cookie to keep signed-in portal users authenticated. The cookie-preference banner stores your choice in your browser’s local storage. We do not currently use advertising cookies. Optional analytics or similar storage will not be enabled unless the applicable choice and this policy cover that use.
13. Access and correction
Subject to the Personal Data (Privacy) Ordinance, you may ask whether PAOSOKO holds personal data about you and request access to or correction of that data. We may need to verify your identity and may charge a reasonable fee where the law permits. Send a clear description of your request to hello@paosoko.com.
14. Changes to this policy
We may update this policy as our services, technology or legal obligations change. The effective date above shows when it was last revised. Material changes will be presented on this page.
15. Contact
For privacy questions, requests or complaints, contact PAOSOKO Limited at hello@paosoko.com, or write to 9057, 9/F, Block A, Long Life Industrial Building, 15 Ko Fai Road, Yau Tong, Kowloon, Hong Kong.