Privacy & Data Retention Notice

This notice explains how Great Eagle ("we") collects, uses, stores and protects your personal data when you take the Cybersecurity Awareness Quiz. We handle your data in line with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong.

What we collect

• Your email address
• Your preferred language
• Your quiz results — score, pass/fail, per-question answers, attempt number and time taken
• Your consent record — the version of this notice you agreed to and the time you agreed
• The date and time of each submission

Why we collect it

To record and track completion of mandatory cybersecurity-awareness training, confirm that staff meet the required pass standard, and manage retakes. We do not use your data for marketing, and we do not sell or share it with third parties for their own purposes.

Legal basis

We rely on your consent, which you give by ticking the consent box before starting the quiz. Providing your details is voluntary, but without them we cannot record your training result.

Who can access it

Only authorised Great Eagle administrators can view submissions, through password-protected accounts. The quiz is hosted on Cloudflare's infrastructure; data is transmitted over encrypted (HTTPS) connections and administrator passwords are stored only as salted hashes.

How long we keep it

We keep quiz submissions for 12 months from the date of submission. As part of our periodic data-retention review, we delete records that are more than 12 months old. We may keep anonymous, aggregated statistics (for example overall pass rates) that cannot identify you.

Your rights

Under the PDPO you may request access to, or correction of, your personal data, and you may withdraw your consent. To do so, or for any privacy question, contact the IT Service Desk.

Contact

IT Service Desk — Email: [email protected] · Hotline: 2827 3668

← Back to the quiz