Aurora

Privacy Policy

Last updated: July 2026

This is a translation of the Traditional Chinese version, provided for convenience. If the two versions differ, the Traditional Chinese version prevails.

This policy explains how Aurora handles your personal data. It follows the principles of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).

1. What we collect

• Account details: your name or display name, email address or phone number, and your password, encrypted. If you sign in with a third-party account such as Google, we receive only the email and name that service gives us.
• Enquiries: the name, contact details and message you put in an enquiry form.
• Enrolment and payment records: the courses and classes you enrol in, your orders and payment status. Card numbers are handled directly by our payment provider, Stripe, and never pass through or sit on our servers.
• Learning records: how far through each lesson you are, and which materials you can open, so that rewatch and progress work.
• Technical data: the session cookie sign-in needs, and basic server logs (IP address, browser type) used for security and to prevent abuse.

2. How we use it

We do not sell your personal data.

• To open and run your account, and to give you the courses you have enrolled in.
• To process enrolments, payments, refunds and delivery (posting notes, for example).
• To answer your enquiries, and to contact you about class arrangements, changes of date and make-up lessons.
• For security, to prevent abuse, and to meet legal requirements.

3. When we share it

Only as far as providing the service requires, and only with the provider performing that service: payment processing (Stripe), live classes (Zoom), posting physical materials (logistics partners), sending email, and the site's live-chat and WhatsApp tools. We may also disclose data to law enforcement where the law requires it.

4. Cookies

We use the cookies that are necessary to keep you signed in (your session after login). You can block cookies in your browser settings, but sign-in will not work.

5. How long we keep it

Account and enrolment records are kept while your account is active; order and payment records are kept as accounting and tax rules require. After you ask us to delete your account, we delete or anonymise the personal data we no longer need.

6. Security

Data travels over an encrypted connection (HTTPS), passwords are stored as one-way hashes, and back-office access is limited by role and recorded in an audit log.

7. Your rights

You have the right to ask for access to, and correction of, the personal data we hold about you, and to ask us to delete your account. Email us at the address below and we will reply within a reasonable time.

8. Changes to this policy

If this policy is updated, the change is published on this page and the "last updated" date above is changed.

9. Contact us

For privacy enquiries, email admin@auroraonlinehk.com .