Privacy Policy & Security

Last updated: 15 July 2026

1. Data Collection

Easy Solution HK Limited collects the following personal data when you register for an account on enroll.easysolutionhk.com:

We do NOT collect biometric data (fingerprints, facial recognition). Payment card data is handled by Stripe (PCI-DSS compliant) — we do not store card numbers.

2. Data Storage & Security

Database: Cloudflare D1 (SQLite, encrypted at rest)

Encryption in Transit: HTTPS / TLS 1.3 via Cloudflare SSL

Authentication: JWT token-based session management

Access Control: Students access only their own records. Admin access requires 2FA.

Firewall: Cloudflare WAF with DDoS protection

Compliance: Cloudflare SOC 2 Type II, ISO 27001 certified

3. Data Usage

Your personal data is used solely for:

4. Data Retention

Enrollment and attendance records are retained for a minimum of 5 years in compliance with CEF requirements. After this period, records may be securely deleted upon request.

5. Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

To exercise these rights, contact management@easysolutionhk.com or WhatsApp +852 4423 7445.

6. Data Breach Response

In the event of a data breach:

  1. Affected systems isolated immediately via Cloudflare access controls
  2. Affected students notified within 72 hours via email and WhatsApp
  3. Authorities (LWB/OCEF) notified within 7 days
  4. Forensic analysis conducted via Cloudflare security logs
  5. Corrective measures implemented and documented

7. Consent

By registering for an account on enroll.easysolutionhk.com, you consent to the collection, storage, and use of your personal data as described in this Privacy Policy.