Legal, Privacy and Advertising Notice
法律、私隱及廣告通知
English
1. Definitions and Interpretation
1.1 In this Notice, unless the context otherwise requires:
- “Applicable Data Protection Law” means the Personal Data (Privacy) Ordinance (Chapter 486) (“PDPO”) and, where applicable, the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR and the UK Data Protection Act 2018.
- “Cap. 621” means the Residential Properties (First-hand Sales) Ordinance (Chapter 621).
- “Controller”, “Data Subject”, “Personal Data”, “Processing” and “Processor” bear the meanings given in the Applicable Data Protection Law.
- “Estimated Material Date” and “Saleable Area” bear the meanings given in Cap. 621 and the relevant Sales Brochure.
- “Independent Advisor” means a third-party estate agent, salesperson or contact on the Operator’s roster who is not an employee, agent, partner, franchisee or representative of the Operator.
- “Notice” means this Legal, Privacy and Advertising Notice, as amended from time to time.
- “Operator”, “we”, “us” and “our” mean Prephrok Network Ltd, incorporated in the Republic of the Marshall Islands.
- “Sales Brochure” means the sales brochure for a development published by or on behalf of the vendor under Cap. 621.
- “Services” means the information, matching, contact, mapping, download and related functions of the Website.
- “Website” means KOKO Hills and all its pages, subdomains and content.
1.2 In this Notice: (a) headings are for convenience only; (b) “including” means “including without limitation”; (c) the singular includes the plural and vice versa; (d) a reference to a statute includes amendments, re-enactments, replacements and subsidiary legislation; (e) a reference to a person includes a body corporate, unincorporated body and partnership; and (f) “writing” includes email.
1.3 This Notice is drafted in English and translated into Traditional Chinese and Simplified Chinese. In the event of inconsistency or ambiguity, the English version prevails, save where mandatory law requires otherwise.
2. Operator, Legal Status and Contact
2.1 The Website is owned and operated by Prephrok Network Ltd, incorporated in the Republic of the Marshall Islands. The Operator is not incorporated in Hong Kong, is not licensed as an estate agent under the Estate Agents Ordinance (Chapter 511), and does not carry on estate agency work in Hong Kong.
2.2 The Operator is not the vendor, developer, authorized person, building contractor or selling agent of any development referred to on the Website. Nothing in this Notice creates, or is intended to create, an agency, fiduciary, partnership, joint venture, employment or franchise relationship between the Operator and any user, vendor, developer, estate agent or Independent Advisor.
2.3 The Operator has no establishment in the European Union or the United Kingdom and has not appointed a Data Protection Officer, no statutory obligation having arisen. All requests and complaints concerning this Notice or Personal Data shall be addressed to contact@koko-hills.pre.hk. The Operator’s registration number and registered office are available on request. Correspondence is normally acknowledged within five (5) business days, without prejudice to any period prescribed by law.
2.4 The Operator is incorporated in the Republic of the Marshall Islands. Its registered office and the address of its registered agent are available on request, as is its company registration number. The Operator’s corporate status, capacity and internal affairs are governed by the laws of the Republic of the Marshall Islands.
2.5 The Republic of the Marshall Islands has not enacted data protection legislation equivalent to the PDPO or the GDPR. The Operator nevertheless applies this Notice contractually and, where applicable, the PDPO and the GDPR. The absence of equivalent legislation in the Republic of the Marshall Islands does not diminish the protections described in this Notice or any right available under mandatory law.
2.6 The Operator does not maintain a branch or registered office in Hong Kong and is not a licensed estate agent. Legal process may be served on the Operator at its registered office or registered agent in the Republic of the Marshall Islands (address available on request) or by email to contact@koko-hills.pre.hk. Disputes arising under this Notice are governed by section 28.
3. Scope, Acceptance and Order of Precedence
3.1 This Notice applies to the Website and the Services, including the collection of Personal Data through the contact form, matching function, map function, downloads and correspondence. It does not apply to any third-party website or service, including any website or channel of an Independent Advisor.
3.2 By accessing the Website or submitting a form, you acknowledge that you have read and understood this Notice and agree to be bound by it. If you do not agree, you must refrain from using the contact functions. Acceptance does not constitute acceptance of any offer and creates no contract for the sale, purchase, lease or financing of property.
3.3 This Notice is read together with: (a) the notice displayed at the point of collection, including the Personal Information Collection Statement attached to the contact form; (b) the accessibility statement at accessibility.html; and (c) any statement required by Cap. 621 and displayed on a project page.
3.4 In the event of conflict: (a) mandatory law prevails; (b) then this Notice in English; (c) then the Chinese translations; (d) then any other page or statement. A point-of-collection notice prevails only in respect of the collection to which it relates.
4. Personal Data Collected
4.1 The Operator may collect the following categories of Personal Data:
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name or form of address; telephone number; language; preferred contact method | Provided by you |
| Enquiry | Requirements, budget, property plan, district or project, free-text message | Provided by you |
| Technical | IP address, browser and device type, operating system, screen size, time zone | Collected automatically |
| Usage | Page and referring URL, landing page, UTM parameters, click identifiers, session identifier, page views, language | Collected automatically |
| Location | Latitude, longitude, accuracy, where you expressly opt in | Provided with consent |
| Verification | Result of the human-verification challenge and request metadata | Generated by the provider |
| Consent records | Notice version, time and date, language, marketing and transfer preferences | Generated on submission |
| Advisor roster | Name, telephone or messaging number, agency, public licence number, source URL, collection and verification dates | Public sources |
4.2 The Operator does not request identity card numbers, bank or payment card details, full residential addresses, medical records, biometric data or other Personal Data unnecessary for the purposes in section 7. You must not enter such information in free-text fields. If you volunteer special category data within Article 9 GDPR, you do so at your own risk; the Operator processes it only as necessary to respond to your enquiry and on the basis of your explicit consent given by voluntary submission.
4.3 The Operator does not knowingly collect Personal Data of persons under eighteen (18). Section 22 applies.
5. Sources of Personal Data
5.1 The Operator obtains Personal Data: (a) directly from you; (b) automatically from your browser or device; (c) from its hosting, content-delivery, verification, notification and analytics providers; (d) from records of your interactions with an Independent Advisor, where shared for follow-up; and (e) from publicly accessible sources, including agency websites, directories, public registers and social-media pages, for the advisor roster.
5.2 Project information is compiled from developer websites, the Sales of First-hand Residential Properties Electronic Platform, government announcements, Sales Brochures, price lists and media reports. It does not identify any user and is not used for that purpose.
5.3 The Operator does not use covert collection methods, does not access private messages or address books, and does not knowingly acquire Personal Data from unlawful sources.
6. Legal Bases and Conditions for Processing
6.1 Under the PDPO, the Operator collects Personal Data for purposes that are lawful and directly related to its functions, and collects data that is necessary, adequate and not excessive. It takes all practicable steps to ensure collection is lawful and fair.
6.2 The Operator relies on the following bases: (a) consent — for disclosure to one Independent Advisor, location, direct marketing and any non-essential cookies; (b) pre-contractual and contractual steps — to respond to enquiries and arrange introductions; (c) legitimate interests — security, fraud and abuse prevention, service improvement, roster verification and legal claims; and (d) legal obligation — compliance with law, court orders and lawful authority requests.
6.3 For the avoidance of doubt, the PDPO does not prescribe a closed list of legal bases. References to legitimate interests describe the Operator’s assessment of its lawful purposes and do not displace the requirements of the PDPO, including DPP1.
6.4 Consent must be voluntary, specific, informed and unambiguous. It may be withdrawn at any time by written notice to contact@koko-hills.pre.hk, without affecting processing before withdrawal. The Operator will not make the Services conditional on consent to processing that is not necessary for them.
6.5 The Operator does not carry out automated decision-making producing legal effects or similarly significant effects within Article 22 GDPR. Section 9 describes rule-based matching.
7. Purposes of Processing
7.1 The Operator processes Personal Data for the following purposes:
| Purpose | Data | Basis |
|---|---|---|
| Receiving, assessing and responding to enquiries | Identity, enquiry, technical, consent records | Pre-contractual steps; consent where required |
| Selecting and introducing one Independent Advisor | Identity, enquiry, location (optional), consent records | Consent |
| Arranging viewings and coordinating follow-up | Identity, enquiry, location (optional) | Pre-contractual steps; consent |
| Operating, securing and improving the Website | Technical, usage, verification | Legitimate interests |
| Measuring enquiry and advertising performance | Usage, technical | Legitimate interests; consent for non-essential technologies |
| Preventing and investigating fraud, abuse and incidents | Technical, usage, verification, consent records | Legitimate interests; legal obligation |
| Compiling, verifying, correcting and removing roster entries | Advisor roster | Legitimate interests; legal obligation |
| Complying with legal and regulatory requirements; legal claims | Any category as necessary | Legal obligation; legitimate interests |
| Sending project information and promotions (where elected) | Identity, consent records | Consent |
7.2 The Operator will not process Personal Data for a new and unrelated purpose without prescribed consent or lawful authority. Where a new purpose arises, it will notify you and obtain fresh consent before processing begins.
8. Mandatory and Voluntary Provision
8.1 The following are mandatory for submission of the contact form: (a) name or form of address; (b) telephone number; and (c) affirmative consent to disclosure to one Independent Advisor. Without them, the Operator cannot process the enquiry, arrange an introduction or arrange a viewing.
8.2 Requirements, budget, property plan, district or project preference, preferred contact method and location are voluntary. Failure to provide them does not prevent submission but may reduce the accuracy of the introduction. Location permission may be refused or revoked at browser or device level at any time.
8.3 Consent to direct marketing is voluntary, separately requested and not a condition of submission. Refusal or withdrawal does not affect the enquiry.
9. Rule-Based Matching and Human Review
9.1 The Operator may apply deterministic rules to the project, district, language, stated requirements and advisor availability to identify an appropriate recipient for an enquiry. The rules are reviewed periodically for relevance and fairness. The Operator does not use the output to make decisions producing legal or similarly significant effects.
9.2 You may request human review of, or object to, a matching outcome by writing to contact@koko-hills.pre.hk. A member of staff will review the matter within a reasonable period and communicate the outcome in writing.
9.3 If machine learning, profiling or generative artificial intelligence is introduced, the Operator will, before deployment: (a) update this Notice and the point-of-collection notice; (b) conduct and document a data protection impact assessment; (c) implement risk-appropriate human oversight; (d) explain the logic in a concise, transparent and intelligible form; and (e) provide a mechanism to object to decisions based solely on automated processing.
10. Independent Advisors; No Agency or Partnership
10.1 Independent Advisors are third parties and are not employees, agents, partners, joint venturers, franchisees or representatives of the Operator. The Operator has no authority to act for or bind them, and they have no authority to act for or bind the Operator, to make representations on its behalf or to receive money for it.
10.2 Advisor particulars are compiled from publicly accessible sources, including agency websites, directories, public registers and social-media pages. The Operator takes reasonable steps to verify them at collection and periodically thereafter but does not warrant their accuracy, completeness, currency or that any licence remains in force. You should independently verify identity, licence and disciplinary record with the Estate Agents Authority before transacting or paying money.
10.3 Where you have affirmatively consented, the Operator discloses your name, telephone number, requirements, language and optional location to one Independent Advisor so that the advisor may contact you. The advisor then acts as an independent controller. The Operator does not control and is not responsible for the advisor’s subsequent processing, retention, security or disclosure practices, which are governed by the advisor’s own privacy policy and Applicable Data Protection Law.
10.4 The Operator receives no monetary or other benefit in exchange for disclosing Personal Data to an Independent Advisor, does not sell Personal Data, and receives no consideration for the transfer of Personal Data as such.
10.5 An Independent Advisor may request access to, correction of, or removal from the roster by writing to contact@koko-hills.pre.hk. The Operator will verify the request, respond within thirty (30) days and update or delete the record within a reasonable period. A minimal record of the request may be retained for evidentiary purposes.
10.6 Complaints about an advisor’s professional conduct should be directed to the Estate Agents Authority. The Operator will cooperate with regulatory enquiries as required by law.
11. Disclosure, Recipients and Service Providers
11.1 The Operator may disclose Personal Data, to the extent necessary for the purposes in section 7, to: (a) one Independent Advisor, only with your affirmative consent; (b) Cloudflare, Inc., for hosting, content delivery, Turnstile verification and cookieless analytics; (c) an instant-messaging notification service used to transmit form notifications; (d) Google Fonts (fonts.googleapis.com) and jsDelivr (cdn.jsdelivr.net), to which your browser makes direct requests transmitting your IP address and the referring URL, but not your name, telephone number or enquiry content; (e) professional advisers under confidentiality duties; (f) courts, regulators and law-enforcement authorities where required by law or necessary for legal claims or safety; and (g) a prospective or actual successor to the Operator’s business, subject to equivalent obligations.
11.2 The Operator requires Processors to act only on documented instructions, implement appropriate security, assist with data subject requests, delete or return data at the end of the engagement, and permit audit to the extent required by law. A current list of Processors is available from contact@koko-hills.pre.hk.
11.3 The Operator does not sell Personal Data. Save for the introduction in section 10, it does not disclose Personal Data for a third party’s direct marketing without prescribed consent and prior notice of the classes of recipients and marketing subjects.
12. International and Cross-Border Transfers
12.1 Personal Data may be transferred to, stored in or accessed from jurisdictions outside Hong Kong, including the United States, the EEA, the United Kingdom and other jurisdictions where service providers maintain infrastructure. The purposes are those in section 7.
12.2 Section 33 of the PDPO has not been brought into operation; Hong Kong law therefore imposes no general prohibition on cross-border transfers. The Operator nonetheless: (a) selects providers offering appropriate security; (b) imposes written confidentiality, security, purpose-limitation, retention and deletion obligations; and (c) where the GDPR or UK GDPR applies, puts in place the Standard Contractual Clauses and, where applicable, the UK Addendum or another lawful mechanism.
12.3 You acknowledge that cross-border processing may expose Personal Data to the laws, lawful access requests and surveillance regimes of the receiving jurisdiction, whose protections may differ from those in Hong Kong. A summary of the safeguards for a particular transfer is available from contact@koko-hills.pre.hk.
13. Retention and Erasure
13.1 The Operator retains Personal Data only for as long as necessary for the purposes of collection or as required or permitted by law:
| Category | Retention | On expiry |
|---|---|---|
| Enquiry records | 24 months from last follow-up | Secure deletion or anonymisation |
| Consent and version records | Enquiry period + 12 months | Secure deletion |
| Location data | 90 days from submission | Secure deletion |
| Advisor roster entries | 12 months from last verification | Re-verification or deletion |
| Server and security logs | 30 days | Automatic rotation |
| Analytics events (cookieless) | 14 months | Aggregation and deletion |
| Notification messages | 7 days | Deletion or disabling of history |
| Complaints and legal records | 7 years | Archival |
13.2 On expiry, the Operator erases or anonymises the data. Where backup or technical constraints prevent immediate erasure, it restricts access and completes erasure within ninety (90) days. Data required for legal proceedings or claims may be retained until conclusion.
13.3 Section 26 of the PDPO requires all practicable steps to erase data no longer required, unless erasure is prohibited by law or not in the public interest. The Operator will comply and will consider erasure requests made to the Operator.
14. Cookies, Session Storage and Similar Technologies
14.1 The Website uses the following first-party technologies:
| Name | Type | Purpose | Duration |
|---|---|---|---|
cw_agent_* | First-party cookie | Remembers the matched advisor to avoid repeated matching | 48 hours |
cw_lead_* | First-party cookie | Prevents duplicate form submission | 48 hours |
sessionStorage | First-party session storage | Records referrer, UTM parameters, session identifier, page views and device information | Until tab closes |
14.2 Your browser also makes direct requests to third-party resources: Google Fonts (fonts.googleapis.com), jsDelivr (cdn.jsdelivr.net) and Cloudflare. Those requests transmit your IP address and the referring URL but not your name, telephone number or enquiry content.
14.3 The Operator does not use advertising, profiling or cross-site tracking cookies. As only strictly necessary technologies are used, no consent banner is displayed. If non-essential technologies are introduced, the Operator will obtain prior consent, offer equally prominent “reject all” and “accept all” options, refrain from setting them before consent and update this section.
14.4 You may clear, block or restrict cookies and third-party requests in your browser. This will not prevent access to public content but may impair matching and contact functions. The Operator does not respond to “Do Not Track” signals because it does not conduct cross-site tracking.
15. Location Data
15.1 Location data is collected only where you expressly opt in and grant permission at browser or device level. It is used solely to assist in arranging a viewing route, to respond to enquiries in your area and, with your consent, to transmit the location to the Independent Advisor with your enquiry.
15.2 The Operator does not use location data for continuous tracking, does not build a movement profile and does not infer your home or workplace address. Location data is retained for ninety (90) days and then deleted.
15.3 Accuracy depends on your device, network and environment; the Operator does not warrant the coordinates or accuracy radius. You may provide a district only or decline to provide location without affecting form submission or other functions.
16. Security and Access Control
16.1 The Operator implements reasonable technical and organisational measures to protect Personal Data against unauthorised or accidental access, processing, erasure, loss, use, alteration or disclosure, having regard to the nature of the data, the harm that may result and the state of technological development. Measures include HTTPS/TLS encryption, access controls and least privilege, logging and monitoring, human verification and rate limiting, secure hosting configuration and contractual obligations on Processors.
16.2 No internet transmission or electronic storage is completely secure. The Operator cannot guarantee absolute security. You are responsible for the security of your device, browser and credentials and for ensuring that submitted information is accurate and does not contain third-party confidential information.
16.3 Access is restricted to personnel and Processors who require it for the purposes in section 7 and who are subject to confidentiality obligations. Access rights are reviewed periodically and revoked when the relevant role ends.
17. Personal Data Breach Handling and Notification
17.1 The Operator maintains a breach response procedure. On becoming aware of a suspected or actual breach, it will, without undue delay: (a) contain the breach and preserve evidence; (b) assess its nature, scope, categories and volume of data and the likelihood and severity of harm; (c) determine whether notification to the Privacy Commissioner for Personal Data, affected individuals or other regulators is required or appropriate; and (d) document the incident, decisions, notifications and remediation.
17.2 Where a breach is likely to result in a real risk of harm, the Operator will notify the Privacy Commissioner for Personal Data and affected individuals as soon as practicable. It has adopted an internal target of seventy-two (72) hours for significant incidents. That target is a service commitment, not a statutory deadline under the PDPO.
17.3 Notifications will describe, so far as known, the nature of the breach, the data affected, likely consequences, measures taken and the contact point, without disclosing information that would prejudice a criminal investigation or compromise security.
17.4 Suspected vulnerabilities may be reported to contact@koko-hills.pre.hk. The Operator welcomes good-faith research, will acknowledge receipt within a reasonable period and will not pursue action against researchers who act in good faith, avoid privacy violations, do not degrade the Services and allow reasonable remediation time.
18. Accuracy, Verification and User Responsibilities
18.1 The Operator takes reasonable steps to ensure that Personal Data it holds and uses is accurate, complete and up to date, having regard to the purpose of holding it. You are responsible for ensuring that the particulars you provide are accurate, current and complete and for notifying changes.
18.2 Project information is compiled from public sources and may change without notice. The Operator does not warrant its accuracy, completeness, currency or reliability, including any statement as to price, Saleable Area, Estimated Material Date, unit count, view, school net, decoration, facilities, completion or sales arrangement. The latest information published by the vendor, developer, relevant authority and the Sales Brochure prevails.
18.3 You acknowledge that you have not relied on any statement on the Website as a representation of fact and that you will independently verify all material information and obtain professional advice before making any property, financial, legal or tax decision.
19. Data Subject Rights under the PDPO
19.1 Under the PDPO, you have the right: (a) to be informed whether the Operator holds Personal Data of which you are the data subject; (b) to be supplied with a copy; and (c) to require correction of inaccurate data. Requests should be addressed in writing to contact@koko-hills.pre.hk.
19.2 The Operator will comply with a data access request within forty (40) days of receipt or, if unable to do so, will inform you in writing within that period of the reasons and comply to the extent possible. A fee may be charged but must not be excessive and is limited to the direct and necessary cost of compliance.
19.3 The Operator may refuse a request where the PDPO permits, including where identity cannot be verified, where compliance would disclose another individual’s Personal Data without consent, or where an exemption applies. Refusals will be given in writing with reasons within the prescribed period and recorded.
19.4 In addition: (a) you may withdraw consent at any time by written notice, without affecting prior lawful processing; (b) you may request erasure of data no longer required, and the Operator will comply where required by section 26 of the PDPO or where no other retention basis applies; and (c) you may request human review of a matching outcome under section 9.2.
19.5 Complaints may be made to the Office of the Privacy Commissioner for Personal Data (www.pcpd.org.hk).
20. Additional Provisions for the EEA and the United Kingdom
20.1 This section applies where you are in the EEA or the UK and the GDPR or UK GDPR applies. The Operator is the controller and may be contacted at contact@koko-hills.pre.hk.
| Processing | Legal basis |
|---|---|
| Responding to enquiries and pre-contractual steps | Article 6(1)(b) |
| Disclosure to one Independent Advisor; location; marketing; non-essential cookies | Article 6(1)(a) — consent |
| Security, abuse prevention, service improvement, roster verification, legal claims | Article 6(1)(f) — legitimate interests |
| Legal obligations and lawful authority requests | Article 6(1)(c) |
20.2 Recipients are described in section 11; transfers in section 12; retention in section 13.
20.3 Subject to the GDPR or UK GDPR, you have the rights of access, rectification, erasure, restriction, objection (including profiling), portability, withdrawal of consent and complaint to a supervisory authority. The Operator will respond within one month, extendable by two further months for complex or numerous requests, with notice.
20.4 The Operator does not make decisions based solely on automated processing, including profiling, producing legal or similarly significant effects. Section 9 describes rule-based matching and human review.
20.5 Provision of name, telephone number and consent to disclosure is necessary to arrange an introduction; other information is voluntary.
20.6 Where roster data is obtained from public sources, the Operator relies on legitimate interests in identifying and verifying Independent Advisors, balanced against the rights of the individuals concerned.
20.7 No EU or UK representative has been appointed. If the Operator becomes subject to Article 27 of the GDPR or the corresponding provision of the UK GDPR, it will appoint a representative and update this Notice. No Data Protection Officer has been appointed, no statutory obligation having arisen.
21. Direct Marketing and Opt-Out
21.1 The Operator will not use Personal Data for direct marketing without consent. Where you elect to receive project information and promotions, it may use your name and telephone number to send information about first-hand residential properties, launches, viewing invitations and promotions.
21.2 Before obtaining consent, the Operator will inform you: (a) of its intention to use Personal Data for direct marketing; (b) that it cannot do so without consent; (c) of the kinds of data to be used; (d) of the classes of marketing subjects; and (e) of your right to opt out at any time free of charge.
21.3 You may withdraw consent by replying “STOP”, writing to contact@koko-hills.pre.hk or asking any Independent Advisor to stop. Withdrawal does not affect prior lawful marketing or service messages necessary to handle the enquiry.
21.4 The Operator receives no monetary or other benefit for disclosing Personal Data to an Independent Advisor and does not sell Personal Data. Any disclosure for a third party’s direct marketing will be preceded by prescribed consent and notice of the classes of recipients and marketing subjects.
22. Children and Minors
22.1 The Website is not directed at persons under eighteen (18). The Operator does not knowingly collect or process children’s Personal Data.
22.2 If the Operator becomes aware that it has collected such data without parental or guardian consent, it will take reasonable steps to delete it promptly. Reports may be made to contact@koko-hills.pre.hk with sufficient information to identify and remove the data.
23. Third-Party Websites and Content
23.1 The Website may link to or embed content from third-party websites and services, including developer websites, the Sales of First-hand Residential Properties Electronic Platform, media, map providers and Independent Advisors. Such links are for convenience only and do not constitute endorsement, approval or warranty.
23.2 The Operator does not control and is not responsible for the content, accuracy, availability, security or privacy practices of third-party websites or services. Use of them is at your own risk and subject to their terms and privacy policies. The Operator is not liable for loss arising from such use.
24. Acceptable Use and Prohibited Conduct
24.1 You must use the Website only for lawful purposes and in accordance with this Notice. You must not: (a) breach any applicable law or order; (b) scrape, crawl, harvest or collect content, contact details or Personal Data by automated means without prior written consent; (c) bypass or interfere with verification, rate limits, access controls or security measures; (d) introduce viruses, malware or other harmful material; (e) gain or attempt to gain unauthorised access to the Website, its server or any connected system; (f) send unsolicited advertising or spam; (g) impersonate any person or submit false information; (h) infringe any intellectual-property, privacy or confidentiality right; or (i) damage, disable, overburden or impair the Website or interfere with other users.
24.2 The Operator may, without notice and without liability, restrict, suspend or terminate access, refuse enquiries, remove content and report suspected unlawful conduct where it reasonably believes that this section has been breached.
24.3 You agree to indemnify the Operator against loss, liability, cost and expense (including reasonable legal fees) arising from your breach of this section or infringement of third-party rights.
25. Intellectual Property, Imagery and Takedown
25.1 The design, layout, text, source code, databases and original visual assets of the Website are owned by the Operator or the relevant rights holders and are protected by copyright, trade mark, database and other laws. Subject to compliance with this Notice, the Operator grants a limited, revocable, non-exclusive, non-transferable licence to access and view the Website for personal, non-commercial use.
25.2 Project names, development names, trade marks, logos and project images belong to their respective owners and are used for identification and information only. No licence is granted in respect of third-party intellectual property. Content may not be copied, reproduced, adapted, distributed, published, sold, licensed or commercially exploited without prior written consent.
25.3 Computer-generated images, artists’ impressions, illustrations and photographs may be edited, retouched or produced using imaging technology. They are illustrative only and do not represent actual appearance, dimensions, view, finishes, surroundings or facilities. The statement required by Cap. 621 is displayed on the relevant project page.
25.4 If you believe content infringes your rights, write to contact@koko-hills.pre.hk with: (a) your identity and contact details; (b) identification and proof of the right relied on; (c) the URL and description of the content; (d) a good-faith statement that the use is unauthorised; and (e) your signature or that of an authorised representative. The Operator will review the notice and may remove or restrict access pending resolution.
26. First-Hand and Second-Hand Property Disclosures
26.1 Only pages for uncompleted first-hand residential developments are intended to comply with Cap. 621. Each such page displays, to the extent applicable: (a) the Estimated Material Date; (b) “Please refer to the sales brochure for details.”; (c) where the page contains photographs, images, drawings or sketches showing an artist’s impression, the statement prescribed by Cap. 621; (d) where the page is published by the vendor or with the vendor’s consent, a statement of that fact; and (e) where the page is an independent compilation, a statement to that effect.
26.2 The prescribed artist’s impression statement is:
The photographs, images, drawings or sketches shown in this advertisement/promotional material represent an artist’s impression of the development concerned only. They are not drawn to scale and/or may have been edited and processed with computerized imaging techniques. Prospective purchasers should make reference to the sales brochure for details of the development. The vendor also advises prospective purchasers to conduct an on-site visit for a better understanding of the development site, its surrounding environment and the public facilities nearby.
26.3 Area is expressed in Saleable Area only. No construction floor area, gross floor area or other measurement is used to describe size or price per square foot or square metre.
26.4 The Operator is not the vendor or developer. Project information is compiled from public sources and is subject to the latest announcements of the vendor, developer, relevant authorities and the Sales Brochure. The Operator does not warrant that any project page has been authorised by the vendor as an advertisement; where a page is not so authorised, it is described as an independent compilation and is not represented as published by or on behalf of the vendor.
26.5 Nothing in this section limits obligations under Cap. 621, the Trade Descriptions Ordinance (Chapter 362) or any other law, or the rights of the Sales of First-hand Residential Properties Authority or any regulator.
26.6 Completed developments, second-hand residential estates and commercial properties are presented as independent property information, not as first-hand sales advertisements. Such pages may state prices, transactions, rents, yields and comparisons compiled from the Land Registry, the Rating and Valuation Department, developers, letting particulars and public market sources. Figures are indicative, may not reflect the latest transaction, and are subject to the official records and the relevant lease or sale documents.
26.7 The Operator does not provide valuation, investment, legal or tax advice. Any yield, return or price comparison is an arithmetic illustration based on the stated assumptions and is not a forecast or guarantee.
27. Disclaimer, No Offer and Limitation of Liability
27.1 The Website is an independent information platform. It does not constitute and shall not be construed as an offer, invitation, solicitation, recommendation, warranty or representation to buy, sell, lease, finance or invest in property, or as legal, tax, financial, investment or professional advice.
27.2 All project information is provided “as is” and “as available”. To the maximum extent permitted by law, the Operator disclaims all warranties, conditions and representations, express or implied, including accuracy, completeness, fitness for purpose, title and non-infringement.
27.3 To the maximum extent permitted by law, the Operator is not liable for: (a) indirect, incidental, special, consequential or punitive loss; (b) loss of profit, revenue, business, opportunity, goodwill, data or anticipated savings; or (c) loss arising from reliance on project information, from any transaction with an Independent Advisor, vendor, developer or third party, or from interruption, error, omission or unavailability of the Website.
27.4 To the maximum extent permitted by law, the Operator’s aggregate liability arising out of or in connection with the Website or this Notice, whether in contract, tort (including negligence), statute or otherwise, shall not exceed the greater of (a) HK$10,000 and (b) the amount (if any) paid by you to the Operator in connection with the relevant enquiry.
27.5 Nothing excludes or limits: (a) liability for death or personal injury caused by negligence; (b) liability for fraud or fraudulent misrepresentation; (c) liability under the Control of Exemption Clauses Ordinance (Chapter 71); or (d) any liability that cannot lawfully be excluded. If a limitation is held unenforceable, the remaining provisions continue.
27.6 You agree to indemnify the Operator against loss, liability, cost and expense arising from your breach of this Notice, infringement of third-party rights, or inaccurate or unlawful content you submit.
28. Governing Law, Jurisdiction and Language
28.1 This Notice and any dispute or claim arising out of or in connection with it or the Website, including non-contractual disputes, are governed by the laws of the Hong Kong Special Administrative Region.
28.2 The parties submit to the exclusive jurisdiction of the Hong Kong courts, save that: (a) the Operator may bring proceedings in any jurisdiction where you reside or hold assets to protect its rights; and (b) nothing deprives a consumer of the protection of mandatory provisions of the law of their habitual residence or of the right to bring proceedings before a court with jurisdiction under applicable law.
28.3 This Notice is drafted in English. The Chinese versions are translations for convenience. In the event of inconsistency or ambiguity, the English version prevails, save where mandatory law requires otherwise. A copy of the English version is available on request.
29. Amendments, Severability, Entire Agreement and Notices
29.1 This Notice is version 3.2, last updated on 2026-10-25 and effective from 2026-01-01. The Operator may amend, supplement or replace it from time to time. The current version, effective date and a summary of material changes will be published on this page.
29.2 Where an amendment materially affects the purposes of processing, the categories of recipients, transfers outside Hong Kong or your rights, the Operator will give at least thirty (30) days’ prior notice by a prominent website notice or by email or messaging service to the contact details last provided, and will obtain fresh consent where required. No amendment retrospectively authorises a use that was not permitted at the time of collection.
29.3 If any provision is held invalid, illegal or unenforceable, it shall be severed and the remaining provisions shall continue in full force. If a provision could be made valid by limitation, it shall be construed with the minimum limitation necessary.
29.4 This Notice, together with the point-of-collection notices and the accessibility statement, constitutes the entire agreement in respect of the Website and supersedes prior statements. Failure or delay in exercising a right is not a waiver. You may not assign your rights or obligations without prior written consent. The Operator may assign to a successor in title.
29.5 Notices to the Operator must be in writing to contact@koko-hills.pre.hk. Notices to you may be given by email, SMS or messaging service to the details last provided, or by a prominent website notice, and are deemed received on the next business day after transmission absent a delivery failure notification.
29.6 A person who is not a party has no right under the Contracts (Rights of Third Parties) Ordinance (Chapter 623) to enforce any provision.
30. Complaints, Accessibility and Contact
30.1 Questions, concerns or complaints about this Notice, the processing of Personal Data or the Website should be addressed to contact@koko-hills.pre.hk. The Operator will acknowledge receipt within five (5) business days and endeavour to resolve the matter within a reasonable period having regard to its complexity.
30.2 Complaints about an Independent Advisor’s professional conduct may be made to the Estate Agents Authority; complaints about first-hand residential property advertising to the Sales of First-hand Residential Properties Authority; and complaints about Personal Data to the Office of the Privacy Commissioner for Personal Data (www.pcpd.org.hk).
30.3 The Operator is committed to accessibility. The accessibility statement at accessibility.html describes the applicable standard, the measures implemented, known limitations and the feedback mechanism. Requests for alternative formats, and reports of accessibility barriers, should be sent to contact@koko-hills.pre.hk; the Operator will respond within ten (10) business days and remedy the issue within a reasonable period.
30.4 This Notice is available in English, Traditional Chinese and Simplified Chinese. The English version prevails in accordance with section 28.3.
繁體中文
1. 定義與解釋
1.1 於本通知中，除文義另有所指外：
- 「適用資料保障法」指《個人資料（私隱）條例》（第 486 章）（「私隱條例」），並在適用範圍內指《一般資料保護規例》（歐盟）2016/679（「GDPR」）、英國 GDPR 及英國《2018 年資料保護法》。
- 「第 621 章」指《一手住宅物業銷售條例》（第 621 章）。
- 「控制者」、「資料當事人」、「個人資料」、「處理」及「處理者」具有適用資料保障法所賦予的涵義。
- 「預計關鍵日期」及「實用面積」具有第 621 章及有關售樓說明書所賦予的涵義。
- 「獨立專員」指本公司名冊上的第三方地產代理、營業員或聯絡人，並非本公司的僱員、代理人、合夥人、特許經營者或代表。
- 「本通知」指本法律、私隱及廣告通知，並不時修訂。
- 「本公司」及「我們」指 Prephrok Network Ltd，於馬紹爾群島共和國註冊成立。
- 「售樓說明書」指賣方根據第 621 章就發展項目發布或代其發布的售樓說明書。
- 「服務」指本網站的資訊、配對、聯絡、地圖、下載及相關功能。
- 「本網站」指 KOKO Hills 及其所有頁面、子網域及內容。
1.2 於本通知中：(a) 標題僅為方便閱讀；(b)「包括」指「包括但不限於」；(c) 單數包括複數，反之亦然；(d) 對法例的提述包括修訂、重新制定、取代及附屬法例；(e) 對人士的提述包括法團、非法團團體及合夥；及 (f)「書面」包括電郵。
1.3 本通知以英文草擬，並翻譯為中文（繁體）及中文（簡體）。如有不一致或歧義，以英文版本為準，惟強制性法律另有規定者除外。
2. 營運者、法律地位與聯絡
2.1 本網站由 Prephrok Network Ltd（「本公司」）擁有及營運。本公司於馬紹爾群島共和國註冊成立，並非在香港註冊成立，亦未根據《地產代理條例》（第 511 章）獲發地產代理牌照，並不在香港進行地產代理工作。
2.2 本公司並非本網站所提述任何發展項目的賣方、發展商、認可人士、承建商或銷售代理。本通知不構成亦無意構成本公司與任何使用者、賣方、發展商、地產代理或獨立專員之間的代理、受信、合夥、合資、僱傭或特許經營關係。
2.3 本公司並未在歐盟或英國設立機構，亦未指定資料保護主任，因並無產生相關法定義務。所有與本通知或個人資料有關的請求及投訴，應發送至 contact@koko-hills.pre.hk。本公司的註冊編號及註冊辦事處可應要求提供。本公司通常於五（5）個工作日內確認收到通訊，但不影響法律訂明的期間。
2.4 本公司於馬紹爾群島共和國註冊成立。其註冊辦事處及註冊代理人地址可應要求提供，公司註冊編號亦可應要求提供。本公司的法人地位、能力及內部事務受馬紹爾群島共和國法律管轄。
2.5 馬紹爾群島共和國並未制定與私隱條例或 GDPR 同等水平的資料保障法例。本公司仍以合約方式適用本通知，並在適用範圍內適用私隱條例及 GDPR。該地缺乏同等法例，並不削減本通知所述的保障或任何強制性法律下的權利。
2.6 本公司並無在香港設立分行或註冊辦事處，亦非持牌地產代理。法律程序文件可送達本公司於馬紹爾群島共和國的註冊辦事處或註冊代理人（地址可應要求提供），或發送至 contact@koko-hills.pre.hk。本通知下的爭議受第 28 節規管。
3. 適用範圍、接受與優先次序
3.1 本通知適用於本網站及服務，包括透過聯絡表單、配對功能、地圖功能、下載及通訊而收集個人資料。本通知不適用於任何第三方網站或服務，包括任何獨立專員的網站或渠道。
3.2 閣下瀏覽本網站或提交表單，即確認已閱讀並理解本通知，並同意受其約束。如不同意，必須停止使用聯絡功能。接受本通知不構成接受任何要約，亦不構成任何物業買賣、租賃或融資合約。
3.3 本通知應與下列文件一併閱讀：(a) 收集資料時展示的通知，包括隨聯絡表單附上的收集個人資料聲明；(b) 於 accessibility.html 刊載的無障礙聲明；及 (c) 第 621 章所規定並於項目頁展示的任何聲明。
3.4 如有衝突：(a) 以強制性法律為準；(b) 其次為本通知英文版本；(c) 其次為中文譯本；(d) 其次為任何其他頁面或聲明。收集點通知僅就其相關的收集事項優先。
4. 所收集的個人資料
4.1 本公司可能收集下列類別的個人資料：
| 類別 | 例子 | 來源 |
|---|---|---|
| 身分及聯絡 | 姓名或稱謂；電話號碼；語言；偏好聯絡方式 | 由閣下提供 |
| 查詢 | 需求、預算、置業計劃、地區或項目、自由文字訊息 | 由閣下提供 |
| 技術 | IP 位址、瀏覽器及裝置類型、操作系統、螢幕尺寸、時區 | 自動收集 |
| 使用 | 頁面及來源網址、登陸頁、UTM 參數、點擊識別碼、工作階段識別碼、頁面瀏覽次數、語言 | 自動收集 |
| 位置 | 經度、緯度、準確度（經閣下明確選擇加入） | 經同意提供 |
| 驗證 | 人機驗證結果及請求元資料 | 由服務商產生 |
| 同意紀錄 | 通知版本、時間及日期、語言、推廣及轉介偏好 | 提交時產生 |
| 專員名冊 | 姓名、電話或通訊號碼、所屬代理公司、公開牌照號碼、來源網址、收集及核實日期 | 公開來源 |
4.2 本公司不要求身份證號碼、銀行或支付卡資料、完整住宅地址、病歷、生物識別資料，或第 7 節目的並非必要的其他個人資料。閣下不得於自由文字欄位輸入該等資料。如閣下自願提供 GDPR 第 9 條所指的特別類別資料，須自行承擔風險；本公司僅在回應查詢所需範圍內，並以自願提交所構成的明確同意為基礎處理。
4.3 本公司不會在知情情況下收集十八（18）歲以下人士的個人資料。第 22 節適用。
5. 個人資料來源
5.1 本公司從下列來源取得個人資料：(a) 閣下直接提供；(b) 瀏覽器或裝置自動提供；(c) 託管、內容傳送、驗證、通知及分析服務商；(d) 為跟進查詢而共享的獨立專員互動紀錄；及 (e) 公開來源，包括代理公司網站、名錄、公開登記冊及社交媒體專頁，用於專員名冊。
5.2 項目資料整理自發展商網站、一手住宅物業銷售資訊網、政府公布、售樓說明書、價單及媒體報導。該等資料並不識別任何使用者，亦不會用於該目的。
5.3 本公司不採用隱蔽收集方法，不查閱私人訊息或通訊錄，亦不會在知情情況下從非法來源取得個人資料。
6. 處理的法律基礎與條件
6.1 根據私隱條例，本公司為合法並與其職能直接相關的目的收集個人資料，所收集的資料屬必要、足夠而不超乎適度。本公司採取所有切實可行步驟，確保收集合法及公平。
6.2 本公司依賴下列基礎：(a) 同意 — 向一位獨立專員披露、位置、直接促銷及任何非必要性 cookie；(b) 合約前及合約步驟 — 回應查詢及安排介紹；(c) 合法權益 — 保安、防止欺詐及濫用、改善服務、核實名冊及法律申索；及 (d) 法律義務 — 遵守法律、法院命令及主管機關的合法要求。
6.3 為免疑問，私隱條例並無訂明封閉式的法律基礎清單。文中對合法權益的提述，描述本公司對其合法目的的評估，並不取代私隱條例（包括保障資料第 1 原則）的規定。
6.4 同意必須自願、具體、知情及明確。閣下可隨時以書面通知 contact@koko-hills.pre.hk 撤回，而不影響撤回前的處理。本公司不會以同意非必要的處理作為提供服務的條件。
6.5 本公司不會進行 GDPR 第 22 條所指、產生法律效果或類似重大影響的自動化決策。第 9 節說明規則式配對。
7. 處理目的
7.1 本公司為下列目的處理個人資料：
| 目的 | 資料 | 基礎 |
|---|---|---|
| 接收、評估及回應查詢 | 身分、查詢、技術、同意紀錄 | 合約前步驟；如需同意則以同意為基礎 |
| 選擇及介紹一位獨立專員 | 身分、查詢、位置（可選）、同意紀錄 | 同意 |
| 安排參觀及協調跟進 | 身分、查詢、位置（可選） | 合約前步驟；同意 |
| 營運、保障及改善本網站 | 技術、使用、驗證 | 合法權益 |
| 衡量查詢及廣告成效 | 使用、技術 | 合法權益；非必要性技術須經同意 |
| 防止及調查欺詐、濫用及事故 | 技術、使用、驗證、同意紀錄 | 合法權益；法律義務 |
| 編製、核實、更正及移除名冊紀錄 | 專員名冊 | 合法權益；法律義務 |
| 遵守法律及監管要求；法律申索 | 所需的任何類別 | 法律義務；合法權益 |
| 發送項目資訊及推廣（如選擇接收） | 身分、同意紀錄 | 同意 |
7.2 本公司不會在未經訂明同意或合法授權的情況下，將個人資料用於新的無關目的。如有新目的，本公司會在處理開始前通知閣下並取得新的同意。
8. 必須與自願提供的資料
8.1 就提交聯絡表單而言，下列屬必須：(a) 姓名或稱謂；(b) 電話號碼；及 (c) 明確同意向一位獨立專員披露。如欠缺任何一項，本公司無法處理查詢、安排介紹或安排參觀。
8.2 需求、預算、置業計劃、地區或項目偏好、偏好聯絡方式及位置屬自願。未能提供不會妨礙提交，但可能降低介紹的準確性。閣下可隨時在瀏覽器或裝置層面拒絕或撤回位置權限。
8.3 同意直接促銷屬自願、分開徵求，並非提交的條件。拒絕或撤回不影響查詢。
9. 規則式配對與人手覆核
9.1 本公司可能對項目、地區、語言、所述需求及專員可聯絡情況應用確定性規則，以識別適合接收查詢的人士。該等規則會定期就相關性及公平性檢視。本公司不會使用結果作出產生法律或類似重大影響的決定。
9.2 閣下可書面致 contact@koko-hills.pre.hk，要求對配對結果進行人手覆核或提出反對。職員會在合理期間內覆核，並以書面通知結果。
9.3 如引入機器學習、剖析或生成式人工智能，本公司將在部署前：(a) 更新本通知及收集點通知；(b) 進行並記錄資料保障影響評估；(c) 實施與風險相稱的人手監督；(d) 以簡潔、透明及易明方式解釋邏輯；及 (e) 提供反對僅基於自動化處理的決定的機制。
10. 獨立專員；並無代理或合夥
10.1 獨立專員屬第三方，並非本公司的僱員、代理人、合夥人、合資方、特許經營者或代表。本公司無權代表彼等行事或約束彼等；彼等亦無權代表本公司行事或約束本公司、代本公司作出陳述或代收款項。
10.2 專員資料整理自公開來源，包括代理公司網站、名錄、公開登記冊及社交媒體專頁。本公司於收集時及之後定期採取合理步驟核實，但不保證其準確、完整、最新或牌照仍然有效。閣下在交易或付款前，應自行向地產代理監管局核實身分、牌照及紀律紀錄。
10.3 在閣下明確同意後，本公司向一位獨立專員披露姓名、電話號碼、需求、語言及（如提供）位置，以便該專員聯絡閣下。該專員其後成為獨立控制者。本公司不控制亦不負責該專員其後的處理、保留、保安或披露實務；該等實務受其私隱政策及適用資料保障法規管。
10.4 本公司不會為向獨立專員披露個人資料而收取任何金錢或其他利益，不出售個人資料，亦不會就個人資料的轉移本身收取對價。
10.5 獨立專員可致函 contact@koko-hills.pre.hk，要求查閱、更正或從名冊移除。本公司將核實請求，於三十（30）日內回覆，並在合理期間內更新或刪除紀錄。本公司可能保留最低限度的請求紀錄以備舉證。
10.6 有關專員專業操守的投訴，應向地產代理監管局提出。本公司會在法律要求範圍內配合監管查詢。
11. 披露、接收者及服務供應商
11.1 本公司可在第 7 節目的所需範圍內，向下列人士披露個人資料：(a) 一位獨立專員，僅在閣下明確同意後；(b) Cloudflare, Inc.，用於託管、內容傳送、Turnstile 驗證及無 cookie 分析；(c) 用於傳送表單通知的即時通訊通知服務；(d) Google Fonts（fonts.googleapis.com）及 jsDelivr（cdn.jsdelivr.net），閣下的瀏覽器直接向其請求，傳送 IP 位址及來源網址，但不包括姓名、電話或查詢內容；(e) 負保密義務的專業顧問；(f) 法律要求或為法律申索或安全所需的法院、監管機構及執法機關；及 (g) 本公司業務的潛在或實際承繼人，惟須受同等義務約束。
11.2 本公司要求處理者僅按書面指示行事、實施適當保安、協助資料當事人請求、於合作結束時刪除或交還資料，並在法律要求範圍內允許審計。最新處理者名單可向 contact@koko-hills.pre.hk 索取。
11.3 本公司不出售個人資料。除第 10 節的介紹外，本公司不會在未取得訂明同意及未事先通知接收者類別及促銷標的類別的情況下，為第三方的直接促銷披露個人資料。
12. 國際及跨境轉移
12.1 個人資料可能被轉移至香港以外、在該等地區儲存或從該等地區查閱，包括美國、歐洲經濟區、英國及服務供應商設有基礎設施的其他司法管轄區。目的為第 7 節所列者。
12.2 私隱條例第 33 條並未生效，香港法律因此並無一般性跨境轉移禁令。儘管如此，本公司：(a) 選擇提供適當保安的供應商；(b) 施加書面保密、保安、目的限制、保留及刪除義務；及 (c) 如適用 GDPR 或英國 GDPR，訂立標準合約條款及（如適用）英國增補條款或其他合法機制。
12.3 閣下明白跨境處理可能使個人資料受接收司法管轄區的法律、合法查閱要求及監察制度約束，其保障可能與香港不同。有關特定轉移保障的摘要，可向 contact@koko-hills.pre.hk 索取。
13. 保留與刪除
13.1 本公司僅在收集目的所需或法律要求或允許的期間內保留個人資料：
| 類別 | 保留期 | 期滿處理 |
|---|---|---|
| 查詢紀錄 | 最後跟進日起 24 個月 | 安全刪除或匿名化 |
| 同意及版本紀錄 | 查詢期 + 12 個月 | 安全刪除 |
| 位置資料 | 提交日起 90 日 | 安全刪除 |
| 專員名冊 | 最後核實日起 12 個月 | 重新核實或刪除 |
| 伺服器及安全日誌 | 30 日 | 自動輪替 |
| 分析事件（無 cookie） | 14 個月 | 聚合後刪除 |
| 通知訊息 | 7 日 | 刪除或關閉歷史 |
| 投訴及法律紀錄 | 7 年 | 封存 |
13.2 期滿後，本公司刪除或匿名化資料。如因備份或技術限制未能即時刪除，將限制查閱並於九十（90）日內完成刪除。法律程序或申索所需的資料可保留至結束。
13.3 私隱條例第 26 條要求採取所有切實可行步驟刪除不再需要的資料，除非法律禁止或不符合公眾利益。本公司將遵守，並會考慮向本公司提出的刪除請求。
14. Cookie、工作階段儲存及同類技術
14.1 本網站使用下列第一方技術：
| 名稱 | 類型 | 目的 | 有效期 |
|---|---|---|---|
cw_agent_* | 第一方 cookie | 記住已配對專員，避免重複配對 | 48 小時 |
cw_lead_* | 第一方 cookie | 防止重複提交表單 | 48 小時 |
sessionStorage | 第一方工作階段儲存 | 記錄來源、UTM 參數、工作階段識別碼、頁面瀏覽及裝置資料 | 直至關閉分頁 |
14.2 閣下的瀏覽器亦會直接向第三方資源請求：Google Fonts（fonts.googleapis.com）、jsDelivr（cdn.jsdelivr.net）及 Cloudflare。該等請求傳送 IP 位址及來源網址，但不包括姓名、電話或查詢內容。
14.3 本公司不使用廣告、剖析或跨網站追蹤 cookie。由於僅使用嚴格必要技術，本網站不顯示同意橫幅。如引入非必要性技術，本公司將事先取得同意、以同等顯眼程度提供「拒絕全部」及「接受全部」、在同意前不設置，並更新本節。
14.4 閣下可在瀏覽器清除、封鎖或限制 cookie 及第三方請求。此舉不會妨礙查閱公開內容，但可能影響配對及聯絡功能。本公司不回應「Do Not Track」訊號，因其不進行跨網站追蹤。
15. 位置資料
15.1 僅在閣下明確選擇加入並於瀏覽器或裝置層面授予權限後，方會收集位置資料。該資料僅用於協助安排參觀路線、回應閣下所在地區的查詢，並在同意下隨查詢傳送予獨立專員。
15.2 本公司不會使用位置資料進行持續追蹤、建立移動軌跡或推斷住所或工作地址。位置資料保留九十（90）日後刪除。
15.3 準確度取決於裝置、網絡及環境；本公司不保證座標或準確度半徑。閣下可僅提供地區或拒絕提供位置，而不影響提交或其他功能。
16. 保安與存取控制
16.1 本公司考慮資料性質、可能損害及科技發展水平，實施合理技術及組織措施，保護個人資料免受未經授權或意外的查閱、處理、刪除、遺失、使用、更改或披露。措施包括 HTTPS/TLS 加密、存取控制及最低權限、日誌及監察、人機驗證及速率限制、安全託管配置，以及對處理者的合約義務。
16.2 互聯網傳輸及電子儲存並非絕對安全。本公司無法保證絕對安全。閣下有責任維護裝置、瀏覽器及憑證安全，並確保提交資料準確且不含第三方機密資料。
16.3 查閱僅限於為第 7 節目的而需要，並受保密義務約束的人員及處理者。存取權限定期檢視，並在職務終止時撤銷。
17. 個人資料外洩的處理與通報
17.1 本公司設有外洩應變程序。知悉懷疑或實際外洩後，將在沒有不當延誤下：(a) 控制外洩並保存證據；(b) 評估性質、範圍、資料類別及數量，以及傷害的可能性及嚴重程度；(c) 決定是否須或適合向個人資料私隱專員公署、受影響人士或其他監管機構通報；及 (d) 記錄事件、決定、通報及補救。
17.2 如外洩可能造成真實傷害風險，本公司將在切實可行範圍內盡快通知個人資料私隱專員公署及受影響人士。本公司就重大事件採取七十二（72）小時內部目標。該目標屬服務承諾，並非私隱條例下的法定限期。
17.3 通報將在已知範圍內說明外洩性質、受影響資料、可能後果、已採取措施及聯絡點，但不披露可能妨礙刑事調查或危害安全的資料。
17.4 懷疑漏洞可報告至 contact@koko-hills.pre.hk。本公司歡迎善意研究，會在合理期間內確認收到，並不會對善意行事、避免侵犯私隱、不削弱服務及給予合理補救時間的研究人員採取行動。
18. 準確性、核實及使用者責任
18.1 本公司考慮持有目的，採取合理步驟確保所持有及使用的個人資料準確、完整及最新。閣下有責任確保所提供資料準確、最新及完整，並在變更時通知本公司。
18.2 項目資料整理自公開來源，可隨時更改而不作通知。本公司不保證其準確性、完整性、時效性或可靠性，包括價格、實用面積、預計關鍵日期、單位數目、景觀、校網、裝修、設施、落成或銷售安排的陳述。賣方、發展商、相關主管機關公布的最新資料及售樓說明書為準。
18.3 閣下確認並無依賴本網站任何陳述作為事實陳述，並會在作出任何物業、財務、法律或稅務決定前，自行核實所有重要資料並取得專業意見。
19. 私隱條例下的資料當事人權利
19.1 根據私隱條例，閣下有權：(a) 獲告知本公司是否持有閣下作為資料當事人的個人資料；(b) 獲提供副本；及 (c) 要求更正不準確資料。請求應以書面發送至 contact@koko-hills.pre.hk。
19.2 本公司將於收到查閱請求後四十（40）日內遵從，或如未能遵從，會在該期間內書面通知原因並在可行範圍內遵從。本公司可收取費用，但不得過高，並限於遵從的直接及必要成本。
19.3 本公司可在私隱條例允許下拒絕請求，包括無法核實身分、遵從會未經同意披露另一名個人的個人資料，或適用豁免。拒絕將在訂明期間內書面說明理由並記錄。
19.4 此外：(a) 閣下可隨時書面撤回同意，而不影響先前的合法處理；(b) 閣下可要求刪除不再需要的資料，本公司將在私隱條例第 26 條要求或並無其他保留基礎時遵從；及 (c) 閣下可根據第 9.2 節要求人手覆核配對結果。
19.5 投訴可向個人資料私隱專員公署提出（www.pcpd.org.hk）。
20. 歐洲經濟區及英國的附加條文
20.1 本節適用於閣下位於歐洲經濟區或英國，且 GDPR 或英國 GDPR 適用的情況。本公司為控制者，聯絡方式為 contact@koko-hills.pre.hk。
| 處理 | 法律基礎 |
|---|---|
| 回應查詢及合約前步驟 | 第 6(1)(b) 條 |
| 向一位獨立專員披露；位置；推廣；非必要性 cookie | 第 6(1)(a) 條 — 同意 |
| 保安、防止濫用、改善服務、核實名冊、法律申索 | 第 6(1)(f) 條 — 合法權益 |
| 法律義務及主管機關合法要求 | 第 6(1)(c) 條 |
20.2 接收者見第 11 節；轉移見第 12 節；保留見第 13 節。
20.3 在 GDPR 或英國 GDPR 規限下，閣下有查閱、更正、刪除、限制、反對（包括剖析）、可攜性、撤回同意及向監管機構投訴的權利。本公司將於一個月內回覆；如請求複雜或眾多，可再延長兩個月並通知閣下。
20.4 本公司不會僅基於自動化處理（包括剖析）作出產生法律或類似重大影響的決定。第 9 節說明規則式配對及人手覆核。
20.5 提供姓名、電話號碼及同意披露，屬安排介紹所需；其他資料屬自願。
20.6 如名冊資料來自公開來源，本公司依賴識別及核實獨立專員的合法權益，並已平衡有關人士的權利。
20.7 本公司未指定歐盟或英國代表。如本公司日後受 GDPR 第 27 條或英國 GDPR 相應條文約束，將指定代表並更新本通知。本公司未指定資料保護主任，因並無產生相關法定義務。
21. 直接促銷與退出
21.1 本公司不會在未經同意的情況下使用個人資料作直接促銷。如閣下選擇接收項目資訊及推廣，本公司可能使用姓名及電話號碼，發送一手住宅物業、新盤、參觀邀請及推廣資訊。
21.2 取得同意前，本公司會告知：(a) 擬使用個人資料作直接促銷；(b) 未經同意不得如此使用；(c) 將會使用的資料種類；(d) 促銷標的類別；及 (e) 可隨時免費退出的權利。
21.3 閣下可回覆「STOP」、致函 contact@koko-hills.pre.hk 或要求任何獨立專員停止，以撤回同意。撤回不影響先前的合法促銷或處理查詢所需的服務訊息。
21.4 本公司不會為向獨立專員披露個人資料而收取金錢或其他利益，亦不出售個人資料。任何為第三方直接促銷的披露，均會先取得訂明同意並通知接收者及促銷標的類別。
22. 兒童及未成年人
22.1 本網站並非以十八（18）歲以下人士為對象。本公司不會在知情情況下收集或處理兒童的個人資料。
22.2 如本公司知悉在未經父母或監護人同意下收集該等資料，將採取合理步驟盡快刪除。可致函 contact@koko-hills.pre.hk 報告，並提供足夠資料以識別及移除。
23. 第三方網站及內容
23.1 本網站可能連結或嵌入第三方網站及服務的內容，包括發展商網站、一手住宅物業銷售資訊網、媒體、地圖供應商及獨立專員。該等連結僅為方便而設，並不構成認可、批准或保證。
23.2 本公司不控制亦不負責第三方網站或服務的內容、準確性、可用性、安全性或私隱實務。使用該等網站或服務須自行承擔風險，並受其條款及私隱政策約束。本公司不會對因該等使用而產生的損失負責。
24. 可接受使用及禁止行為
24.1 閣下只可為合法目的並按照本通知使用本網站。閣下不得：(a) 違反任何適用法律或命令；(b) 未經事先書面同意，以自動化方式爬取、抓取、收集內容、聯絡資料或個人資料；(c) 繞過或干擾驗證、速率限制、存取控制或保安措施；(d) 引入病毒、惡意軟件或其他有害材料；(e) 取得或試圖取得本網站、伺服器或相連系統的未經授權存取；(f) 發送未經邀請的廣告或垃圾訊息；(g) 冒充任何人或提交虛假資料；(h) 侵犯任何知識產權、私隱或保密權利；或 (i) 損害、禁用、過度負荷或削弱本網站，或干擾其他使用者。
24.2 如本公司合理相信本節被違反，可在不作通知及不承擔責任下限制、暫停或終止查閱、拒絕查詢、移除內容及向主管機關報告懷疑違法行為。
24.3 閣下同意就因違反本節或侵犯第三方權利而產生的損失、責任、成本及開支（包括合理法律費用），向本公司作出彌償。
25. 知識產權、圖像及下架
25.1 本網站的設計、版面、文字、原始碼、資料庫及原創視覺資產，由本公司或相關權利人擁有，受版權、商標、資料庫及其他法律保護。在遵守本通知的前提下，本公司授予有限、可撤回、非專屬、不可轉讓的許可，供閣下為個人非商業用途查閱及瀏覽。
25.2 項目名稱、發展項目名稱、商標、標誌及項目圖片屬各自權利人所有，僅作識別及資訊用途。本公司不就第三方知識產權授予任何許可。未經事先書面同意，不得複製、重製、改編、分發、發布、出售、特許或商業利用。
25.3 電腦合成圖像、畫家想像、插圖及照片可能經編輯、修飾或使用影像技術製作，僅供說明，不代表實際外觀、尺寸、景觀、裝修、周邊環境或設施。第 621 章規定的聲明刊載於相關項目頁。
25.4 如閣下認為內容侵犯權利，請致函 contact@koko-hills.pre.hk，提供：(a) 身分及聯絡資料；(b) 權利的識別及證明；(c) 內容網址及描述；(d) 善意相信使用未經授權的陳述；及 (e) 閣下或授權代表簽署。本公司將審視通知，並可能在爭議解決前移除或限制查閱。
26. 一手及二手物業資料披露
26.1 僅未落成的一手住宅項目頁面按第 621 章處理。每一該等頁面在適用範圍內展示：(a) 預計關鍵日期；(b)「詳情請參閱售樓說明書。」；(c) 如載有顯示畫家想像的相片、圖像、繪圖或素描，第 621 章規定的聲明；(d) 如由賣方或獲賣方同意發布，述明該事實；及 (e) 如屬獨立資料整理，述明該事實。
26.2 法定畫家想像聲明如下：
本廣告╱宣傳資料內載列的相片、圖像、繪圖或素描顯示純屬畫家對有關發展項目之想像。有關相片、圖像、繪圖或素描並非按照比例繪畫及╱或可能經過電腦修飾處理。準買家如欲了解發展項目的詳情，請參閱售樓說明書。賣方亦建議準買家到有關發展地盤作實地考察，以對該發展地盤、其周邊地區環境及附近的公共設施有較佳了解。
26.3 面積僅以實用面積表達。本公司不以建築面積、總樓面面積或任何其他量度描述面積或每平方呎／每平方米價格。
26.4 本公司並非賣方或發展商。項目資料整理自公開來源，受賣方、發展商、相關主管機關最新公布及售樓說明書所限。本公司不保證任何項目頁已獲賣方授權作為廣告；如未獲授權，該頁描述為獨立資料整理，並不表示由賣方或代賣方發布。
26.5 本節不限制本公司根據第 621 章、《商品說明條例》（第 362 章）或其他法律承擔的義務，亦不限制一手住宅物業銷售監管局或任何監管機構的權利。
26.6 已落成項目、二手住宅屋苑及商業物業以獨立物業資料形式展示，並非一手銷售廣告。該等頁面可載列價格、成交、租金、回報及比較，資料整理自土地註冊處、差餉物業估價署、發展商、租約資料及公開市場來源。數字僅供參考，未必反映最新成交，並以官方紀錄及相關租約或買賣文件為準。
26.7 本公司不提供估價、投資、法律或稅務建議。任何回報、收益率或價格比較均為基於所述假設的算術示例，並非預測或保證。
27. 免責聲明、非要約及責任限制
27.1 本網站為獨立資訊平台。本網站不構成亦不得解釋為任何物業買賣、租賃、融資或投資的要約、邀請、招攬、建議、保證或陳述，亦不構成法律、稅務、財務、投資或專業意見。
27.2 所有項目資料按「現狀」及「現有」基礎提供。在法律允許的最大範圍內，本公司不作任何明示或默示保證、條件或陳述，包括準確性、完整性、特定用途適用性、所有權及不侵權。
27.3 在法律允許的最大範圍內，本公司不對下列負責：(a) 間接、附帶、特殊、後果性或懲罰性損失；(b) 利潤、收入、業務、機會、商譽、資料或預期節省的損失；或 (c) 因依賴項目資料、與獨立專員、賣方、發展商或第三方的交易，或本網站中斷、錯誤、遺漏或不可用而產生的損失。
27.4 在法律允許的最大範圍內，本公司因本網站或本通知產生或相關的責任總額（不論合約、侵權（包括疏忽）、法規或其他），不得超過下列較高者：(a) 港幣一萬元（HK$10,000）；及 (b) 閣下就相關查詢支付的金額（如有）。
27.5 本通知不排除或限制：(a) 因疏忽導致死亡或人身傷害的責任；(b) 欺詐或欺詐性失實陳述的責任；(c) 《管制免責條款條例》（第 71 章）下的責任；或 (d) 任何法律上不能排除的責任。如限制被裁定不可執行，其餘條文繼續適用。
27.6 閣下同意就因違反本通知、侵犯第三方權利，或提交不準確或違法內容而產生的損失、責任、成本及開支，向本公司作出彌償。
28. 管轄法律、司法管轄權及語言
28.1 本通知及因本通知或本網站產生或相關的任何爭議或申索（包括非合約爭議），受香港特別行政區法律管轄並據此解釋。
28.2 雙方接受香港法院的專屬管轄，惟：(a) 本公司可在閣下居住或持有資產的任何司法管轄區提起程序以保障權利；及 (b) 本節不剝奪消費者在其慣常居住地法律強制性條文下的保障，或向具有管轄權的法院提起程序的權利。
28.3 本通知以英文草擬。中文版本為方便而設的譯本。如有不一致或歧義，以英文版本為準，惟強制性法律另有規定者除外。本公司可應要求提供英文版本副本。
29. 修訂、可分性、完整協議及通知
29.1 本通知為版本 3.2，最後更新於 2026-10-25，自 2026-01-01 起生效。本公司可不時修訂、補充或取代。最新版本、生效日期及主要變更摘要將於本頁刊載。
29.2 如修訂對處理目的、接收者類別、香港以外的轉移或閣下權利造成重大影響，本公司將於生效前至少三十（30）日，透過本網站顯眼通知或發送至最近提供的聯絡資料作出通知，並在法律要求時取得新的同意。任何修訂均不追溯授權收集時未獲准許的使用。
29.3 如任何條文被裁定無效、違法或不可執行，該條文將被分割，其餘條文繼續完全有效。如條文可透過限制而有效，則以所需的最低限制解釋。
29.4 本通知連同收集點通知及無障礙聲明，構成有關本網站的完整協議，並取代先前的陳述。未行使或延遲行使權利不構成放棄。未經事先書面同意，閣下不得轉讓權利或義務。本公司可轉讓予承繼人。
29.5 向本公司發出的通知必須以書面發送至 contact@koko-hills.pre.hk。向閣下發出的通知，可透過電郵、短訊或多媒體訊息發送至最近提供的資料，或透過本網站顯眼通知作出，並於傳送後下一個工作日視為收到（除非收到傳送失敗通知）。
29.6 非本通知一方的人士，無權根據《合約（第三者權利）條例》（第 623 章）強制執行任何條文。
30. 投訴、無障礙及聯絡
30.1 有關本通知、個人資料處理或本網站的問題、關注或投訴，應發送至 contact@koko-hills.pre.hk。本公司將於五（5）個工作日內確認收到，並在考慮複雜性後於合理期間內盡力解決。
30.2 有關獨立專員專業操守的投訴，可向地產代理監管局提出；有關一手住宅物業廣告的投訴，可向一手住宅物業銷售監管局提出；有關個人資料的投訴，可向個人資料私隱專員公署提出（www.pcpd.org.hk）。
30.3 本公司致力提供無障礙服務。於 accessibility.html 刊載的無障礙聲明，說明適用標準、已實施措施、已知限制及回饋機制。其他格式的請求及無障礙障礙的報告，應發送至 contact@koko-hills.pre.hk；本公司將於十（10）個工作日內回覆，並在合理期間內補救。
30.4 本通知提供英文、中文（繁體）及中文（簡體）版本。根據第 28.3 節，以英文版本為準。
If you do not agree with this Notice, please stop using the contact functions on the Website. 如你不同意本通知，請停止使用本網站的聯絡功能。
This Notice is governed by the English version. 本通知以英文版本為準。
Operator: Prephrok Network Ltd · Contact: contact@koko-hills.pre.hk · Accessibility Statement