CUHK MBA AI Club logoCUHK AI CLUB

Privacy Policy

Effective: 30 August 2026 · CUHK MBA AI Club (a not-for-profit student club)
GDPR Hong Kong PDPO (Cap. 486) Mainland China PIPL Data Security & Cybersecurity Laws

1. Who we are

CUHK MBA AI Club is a student-led, not-for-profit club at The Chinese University of Hong Kong. For this policy, we act as the data controller of your personal data. Contact: 1155265387@link.cuhk.edu.hk (cc the Treasurer / Legal Advisor supervisory mailbox). The club operates under CUHK student society regulations and University oversight.

2. What data we collect

  • Survey form: school, identity, career direction, AI proficiency, AI use cases and challenges, expected activities, time commitment, joining motivation, payment willingness, suggestions, and email.
  • Membership registration: name, email, school, identity, major, intake year, WeChat / WhatsApp ID, AI interests, joining reason, and source channel.
  • Website local storage: language preference (EN / ZH-Hans / ZH-Hant) and your AI Level Check self-rating — stored only in your own device's browser, never uploaded to our servers.
  • What we do NOT do: no advertising or tracking cookies, no third-party analytics trackers, and we never sell any personal data.

3. Purposes & legal bases

We process your data only to: ① administer membership (verification, roster, communications); ② organise events (sign-ups, venues, notices); ③ deliver content services (e.g. daily AI business insights and weekly frontier-knowledge digests, sent only via channels you opted into); ④ club governance and compliance reporting to the University. Legal bases: membership administration relies on performance of the membership relationship; everything else relies on your consent — which you may withdraw at any time.

4. Storage & security

  • Form data is collected via the Jinshuju platform and stored on its cloud servers in mainland China; the website itself is statically hosted on Vercel and stores no user personal data.
  • Access is restricted to authorised Executive Committee members (President; Treasurer, who also serves as Legal Advisor); accounts are protected with mandatory two-factor authentication (2FA), with periodic audit of export logs.
  • Retention: membership duration plus 2 years; survey data is kept for 24 months, then anonymised or deleted. Earlier deletion requests always take precedence.

5. Cross-border data transfer

Your form data is transferred to mainland China (Jinshuju servers). Accordingly: mainland users are protected by PIPL, the Data Security Law and the Cybersecurity Law; Hong Kong users by PDPO (Cap. 486); EU/EEA visitors by GDPR. By submitting a form you acknowledge and consent to this cross-border transfer arrangement.

6. Data sharing

We never sell or rent your personal data. Sharing happens only: ① in aggregate reports required by CUHK student-society authorities (e.g. membership counts); ② internally with authorised club officers. Corporate partners never receive individual-level data.

7. Your rights

Wherever you are, you may: access the data we hold about you, request correction or deletion, obtain a copy of your data (portability), or withdraw consent / opt out of communications. To exercise your rights under GDPR / PDPO / PIPL, email 1155265387@link.cuhk.edu.hk — we respond within 30 days. You may also complain to the Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD) or your local supervisory authority.

8. Payment data (membership fees)

For fee-paying categories (e.g. affiliate members, corporate partners), fees are collected through a licensed payment gateway and settle directly into the club's dedicated corporate bank account, supervised by the Treasurer (who also serves as Legal Advisor). We do not collect or store card or payment credentials; only transaction records (amount, date, category) are kept for financial audit and University reporting.

9. Minors

The club serves university students and adults. We do not knowingly collect data from anyone under 18; if found, it is deleted immediately.

10. Changes to this policy

If we make material changes, we will announce them on the website and community groups and update the date above. Continued use of the website constitutes acceptance of the updated policy.

← Back to Homepage