top of page

Privacy Policy

A legal disclaimer

Little Lamb Studio Limited ("Little Lamb", "we", "our", "us") is committed to protecting the privacy of our students and their families. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data in accordance with the Personal Data (Privacy) Ordinance, Cap. 486 ("PDPO") of Hong Kong and applicable international standards.

Privacy Policy

1. Types of Personal Data Collected

We collect the following categories of personal data:

  1. Identification Data – Student and parent/guardian names, HKID or passport numbers (for identity verification where required).

  2. Contact Data – Residential address, email address, telephone numbers, WhatsApp numbers.

  3. Educational Data – School level, learning preferences, assessment results, class attendance and progress notes.

  4. Financial Data – Payment card details, bank transfer records, FPS references.

  5. Usage Data – Website analytics, parent portal log-in information, WhatsApp message metadata.

  6. Media Data – Photographs, audio or video recordings taken during classes (with explicit consent).

 

2. Purpose of Collection

Personal data is collected for the following purposes:

  • Provision, scheduling and administration of our Classes

  • Processing enrolments and payments

  • Communicating with parents and students via email and WhatsApp (see §7)

  • Monitoring student progress and tailoring instructional materials

  • Marketing and promotion (with separate consent)

  • Compliance with legal or regulatory requirements

 

3. Legal Basis & Consent

Under the PDPO we rely on the following grounds:

  1. Contractual necessity – to deliver the Services requested.

  2. Legal obligation – to comply with applicable law.

  3. Legitimate interests – running and improving our business, except where overridden by your data-protection rights.

  4. Explicit consent – for WhatsApp communications (§7) and any direct marketing (§9).

 

4. Data Collection Notice

At or before the time of data collection we provide a Data Collection Statement specifying (a) the purposes, (b) whether supply of data is voluntary or obligatory, (c) classes of transferees, and (d) your rights to access and correct data.

 

5. Data Retention

Personal data is retained no longer than necessary to fulfil the purposes for which it was collected, ordinarily seven (7) years after a Student ceases classes unless a longer retention period is required by law.

 

6. Data Security

We employ administrative, technical and physical safeguards including – encrypted storage, role-based access, secure transmission (TLS) and periodic security audits. Staff receive regular PDPO compliance training.

 

7. WhatsApp Communications

  1. Scope – WhatsApp is used for operational messages such as timetable confirmations, homework reminders, sending invoices, receiving payment proof, severe weather alerts (§6 of Terms) and urgent notices.

  2. Explicit Consent – We will only send WhatsApp messages after you have (a) ticked the WhatsApp consent box on the enrolment form or (b) otherwise provided unequivocal consent.

  3. International Transfer – WhatsApp LLC (Meta Platforms) may process data on servers located outside Hong Kong. By consenting, you acknowledge and agree to such cross-border transfers.

  4. Opt-Out – You may withdraw consent at any time by replying "STOP" in WhatsApp, emailing privacy@littlelambstudio.com or updating preferences in our portal. We will record and honour all opt-out requests within ten (10) working days.

  5. Record-Keeping – We maintain auditable logs of consent obtained, messages sent and opt-out requests in compliance with PDPO DPP1 and DPP2.

  6. Third-Party Privacy – Messaging content is end-to-end encrypted by WhatsApp; however, metadata (timestamps, phone numbers) may be accessible to WhatsApp LLC and subject to its Privacy Policy.

 

8. Disclosure of Personal Data

We do not sell or rent personal data. Data may be disclosed to:

  • Tutors and administrative staff on a need-to-know basis

  • Payment processors and banks for fee collection

  • IT and cloud-hosting vendors under contractual confidentiality obligations

  • Regulators, law-enforcement agencies or insurers where required by law or for the establishment of legal claims

 

9. Direct Marketing

We will only use contact data for marketing our new courses, workshops or events with your written consent. You may opt-out at any time.

 

10. Data Subject Rights

You have the right to:

  • Access and obtain a copy of your personal data

  • Correct any inaccuracies

  • Withdraw consent for specific processing

  • Request deletion (where permissible by law)
    Requests must be made in writing to our Data Protection Officer. We may charge a reasonable administrative fee for data access requests as allowed by the PDPO.

 

11. Use of Cookies

Our website uses cookies to enhance functionality and analyse traffic. You may disable cookies in your browser settings, although certain features may become unavailable.

 

12. Children’s Privacy

For Students under 18, we obtain verifiable parental consent for data collection and WhatsApp communications. Parents may exercise all rights on behalf of their children.

 

13. Updates to This Policy

We may update this Policy periodically. The latest version will be posted on our website with an effective date. Material changes will be announced via email.

 

14. Contact

Email: privacy@littlelambstudio.com
Address: Shop 5&6 , L3, Commercial Block, Villa Esplanada, Tsing Yi, Hong Kong
Tel: +852 2149 0067

bottom of page