Privacy Policy


1. Respecting and protecting our customers’ privacy and personal data is important to the Airport Authority (“AA”“we” or “us”). This Privacy Policy will help you understand how we collect, use and safeguard your personal data in our interactions with you. 


2. Throughout this Privacy Policy, the term "personal data" means any data relating directly or indirectly to you, from which it is practicable for your identity to be directly or indirectly ascertained, and in a form in which access to or processing of the data is practicable. 


3. When you register for a HKairport Rewards account (“Account”) and/or use any services offered on the HKairport Rewards or other HKIA online platforms (including the HKairport Shop, the Hong Kong International Airport Food Ordering System, and such other customer-facing online platforms of the Hong Kong International Airport) and/or use any services in connection with the HKairport Rewards or other HKIA online platform (collectively, the “Services”), we will collect, use and handle your personal data in accordance with this Privacy Policy. 


4. We regularly review and update this Privacy Policy, and the most up-to-date version of this Privacy Policy will be shown on our HKairport Rewards and HKairport Shop website, and My HKG mobile app. By continuing to use the Services, you are deemed to have agreed with the then prevailing terms of this Privacy Policy.


5. This Privacy Policy only applies to the Services, but not to any other services provided by the AA nor to any third parties (including any websites maintained by our business partners). Please check and read the third parties’ privacy policies before submitting any of your personal data to such third parties (whether via our website(s) or not). 


6. You understand that it is voluntary for you to provide your personal data as described hereinbelow. However, if you do not provide the personal data as required, you may not be able to register for the Account and/or use the Services. 


Collection of your Personal Data

(A) Registration of the Account


7. When you register an Account, we will collect your following personal data:

(a) Title (compulsory)

(b) First name (compulsory)

(c) Last name (compulsory)

(d) Mobile phone number (compulsory)

(e) Email address (compulsory if the Account is registered at HKairport Shop)

(f) Month and year of birth (optional)

(g) Country or region (optional)

(h) Company name (for airport staff only – optional)

(i) Expiry date of your Airport Restricted Area Permit (“ARA Permit”) or Crew Member Certificate (“CMC”) (for airport staff only – optional)

(j) ARA Permit or CMC number (for airport staff only – optional)


The personal data that is strictly necessary for us to deliver the Services will be marked with an asterisk (*). If you do not provide such personal data, you will not be able to register for an Account or enjoy the Services we provide to our Members.


(B) e-Coupon Redemption


8. If you wish to obtain e-Coupons at our coupon redemption counters, we will collect your following additional personal data:

(a) Your name as stated on your Hong Kong identity card or your travel document

(b) Your nationality as stated on your Hong Kong identity card or your travel document

(c) The first 4 digits of your Hong Kong identity card or your travel document number

(d) Boarding pass (for travellers only)

(e) Company name (for airport staff only)

(f) Expiry date of your ARA Permit or CMC (for airport staff only)

(g) Sales receipts

(h) Credit card sales slip/ mobile payment record of the relevant transaction

(i) Credit card(s) used in the relevant transaction


(C)  Car Park Booking


9. If you wish to book a parking space at any of our car parks, we will collect your following additional personal data:

(a) Credit card number (first 6 digits) or Octopus card number (last 4 digits)

(b) Car license plate details

(c) Flight information (date of departure and flight number)


(D) HKairport Shop


10. If you wish to make purchase at HKairport Shop and receive any order-related notifications, we will collect your Email address if the same has not been provided during the registration of the Account.


(E) Food Ordering System


11. If you wish to place an order on Food Ordering System, we will collect your title and name, your mobile phone number and email address (if the same have not been provided during the registration of the Account) for receiving any notifications relating to the Services, including order confirmation as digital receipt.


(F) Point Redemption


12. If you wish to obtain points, we will collect your following additional personal data:

(a) Sales receipts containing, among others, the merchant name, purchase date, sales item and sales amount

(b) Credit card sales slip/ mobile payment record of the relevant transaction


(G) Live Chat


13. When you use the “Live Chat” service on any of our online platform, we will collect your personal data as necessary in order for us to handle your particular requests and/or enquiries.


(H) Third Parties’ Personal Data


14. You may from time to time provide us with various third parties’ personal data. You agree that you have secured the relevant third party’s consent to provide us with their personal data (to be collected, used and stored in accordance with this Privacy Policy) prior to such provision by you.


(I) Use of Websites, Apps or Online Platforms


15. When you use any of our website(s), app(s) or our other online platform(s), we will collect your personal data as follows: 


(a) We automatically collect data relating to your online session, to gather statistical information on our server’s usage and to help us better meet your demands and expectations. This may include but is not limited to your mobile device information, including information on (i) the type of device, (ii) type and version of your browser, (iii) type and version of your operating system, (iv) your IP address, and (v) domain name. 


(b) We use a unique identifier to track your use of our website(s) or app(s) across multiple devices so that your sessions are reported on our system as a single user rather than as multiple users.


(c) We use analytics tools to measure how you interact with content on our website(s) and the app(s). If you log in to our website(s) or app(s) via your social media accounts, we will collect information you have consented to give us via the relevant social media site and link your interaction with us to such information. Where you have consented to direct marketing, we may also engage social media sites to show you advertisements that are customised based on your interaction with us.


(d) We may collect your physical location data through your Wi-Fi enabled mobile device. We use these data to determine customer population and to help us study your activity patterns and preferences in order to improve our service. We may use your location data to provide you with personalised location-based services and content. Where you have consented to receive direct marketing, we may provide you with targeted advertisements, content, features, deals and offers.


(e) If you are browsing our website(s) (whether as a guest or as a Member), it (they) may place a cookie on your computer that identifies your computer to us and allows us to personalise your preferences. 


Cookies are small information files stored on your hard drive and are automatically accepted by most browsers. It does not allow us to access the rest of your computer or your personal data. Please change your browser’s settings if you do not wish to accept cookies. Please note that you may not be able to use all features and services offered on our website(s) or app(s) if your browser does not accept cookies.


(J) Personal Data collected by third parties


16. We may feature embedded links, “share” buttons or widgets on our websites or app(s) which enable you to connect to third party sites, including social media sites. These third party sites may set cookies which can identify you as an individual when you are logged in to their services. We do not control these cookies or how these sites collect and handle your personal data.


17. If the Services you use require payment of money, you will be redirected to a secure third-party website belonging to our payment gateway service provider to complete payment of any purchase. Payment-related personal data (including but not limited to the cardholder’s full name, card number prefix, cardholder’s billing address, card verification value (CVV) and card expiry date) will be collected by the payment gateway service provider for processing your order’s payment as well as other incidental purposes. We will not be able to provide the Services to you if you do not provide the data.


18. You should read the respective third-party sites’ privacy policies before submitting any data to these sites.


(K) Other Personal Data


19. You may from time to time provide us with other personal data when you place an order for Services via the Account, use our Services as a guest, provide feedback to us (such as via a survey) or participate in our promotion and events.


Use of Your Personal Data

20. We, and our contractors who are involved in the provision of Services, will use the personal data you provide to us for the following purposes (and any purposes directly related to these purposes) (collectively, the “Purposes”):


(a) To provide Services to you (including assessing any application for, administration and improvement of such services) as well as to administer and manage such other associated privileges such as participating in our special promotion campaigns;


(b) (For e-Coupon redemption): To verify your eligibility to redeem e-Coupons in accordance with the rules of our Cash Coupon Programmes;


(c) To analyse trends, usage, foot traffic, activity patterns, preferences, demographics and traveller behaviour with us (whether on an individualised or aggregated basis) or for the purpose of carrying surveys;


(d) To contact you for and/or carry out direct marketing activities in connection with the shopping, dining, entertainment and service promotions at HKIA, including without limitation providing you with targeted and/or location-based advertisements, content, features, deals and offers; and


(e) For continuous improvement of passenger experiences at HKIA.


21. In order for us to carry out any direct marketing activities (including those as described under paragraph 20), we will seek your consent (as necessary) or otherwise allow you to opt-out at the time when we collect your relevant personal data. You will be able to opt-out or unsubscribe from time to time from receiving further direct marketing communications from us on HKairport Rewards, My HKG mobile app and HKairport Shop or by contacting us (see “Our Contact Details” section below).


Security and Protection of Your Personal Data

22. We protect the personal data that you provide to us by reasonable physical, electronic and managerial measures. Please understand that despite our efforts, no data security measures can guarantee 100% security at all times. 


23. All personal data will be encrypted until the data is deleted in accordance with paragraph 24.


Retention of Personal Data

24. We will only retain any personal data which we can use to directly identify you for as long as it is necessary to fulfil the Purposes, and we will delete the same thereafter. In the event that you choose to delete your Account with us, we will delete such personal data as soon as reasonably practicable after we receive such notification from you.


25. We will only retain your other data in an anonymised format for statistics and research purposes to assist in the continuous improvement of HKIA as well as passenger experience at HKIA.  We may share statistical reports with aggregated non-personal data to third parties.


26. Notwithstanding the aforesaid, if any personal data (including the aforesaid personal data which can be used to directly identify you) is required as specified under the applicable laws or in connection with any legal proceedings, the same will be retained for a longer period but we will take all practicable steps to ensure that such data will not be kept longer than is necessary for the fulfilment of such purposes.


Disclosure of Your Personal Data

27. Your personal data will be kept confidential and will not be disclosed to any third party except for such disclosure as allowed under the Personal Data (Privacy) Ordinance (“PDPO”) or to such third party (who may be located and thus may use your personal data outside your country of residence) as provided below:


(a) Any person or company (including third party agent or sub-contractor) who is acting for, on behalf of or jointly with us, or any of our service providers; in all such cases, disclosure may take place to fulfil any of the Purposes, provided that such third parties to whom your personal data is communicated are subject to confidentiality and privacy obligations that are materially equivalent to those set out in this Privacy Policy;


(b) Any financial institutions, charge or credit card issuing companies, credit information or reference bureaus, or collection agencies where necessary to establish and support the payment of any products and Services being requested by you; and


(c) Any other third party where such disclosure is mandated by statutory or contractual obligations or as required by law or court of law, or where such disclosure is necessary to protect our interests (as permitted by law).


Your Right of Access and Correction of Personal Data

28. You have the right to access, verify or update any of your personal data that we hold. You can do so by logging in to your Account. Alternatively, you may request access from the AA and also request the AA to correct the personal data that you have accessed if such data is inaccurate. An access request form can be downloaded from the website of the Office of the Privacy Commissioner for Personal Data, Hong Kong. We will handle your request as soon as possible.  Please note that under PDPO, the AA has the right to charge a reasonable fee for complying with a data access request. Data access and correction requests can be addressed to our General Personal Data Officer (see “Our Contact Details” section below).



29. We do not use our website(s) or app(s) to knowingly solicit any personal data or other information from any persons under the age of 18. If you are under 18, by providing us with your personal data, you agree that you have informed your parents and guardians about the Privacy Policy prior to such provision, and they have approved of such provision by you based on the terms of the Privacy Policy. 


Our Contact Details

30. If you wish to contact us regarding this Privacy Policy (including in relation to any of your rights under this Privacy Policy or any other questions you may have), please contact our General Personal Data Officer via: 


General Personal Data Officer 

Airport Authority Hong Kong 

HKIA Tower 

1 Sky Plaza Road 

Hong Kong International Airport 

Lantau Island 

Hong Kong 


31. Where these terms and conditions are available in other languages, the English version shall be the governing version and shall prevail whenever there is a discrepancy amongst versions.


(Version Date : 12 Jan 2021)

© Airport Authority Hong Kong. All rights reserved.