SFi Privacy Policy

Last updated June 2026

Introduction

Sustainable Finance Initiative Limited ("SFi", "we", "our" or "us") is committed to protecting your personal data in accordance with our obligations under the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong) (the "Ordinance").

By accessing our websites or using our services, you agree to be bound by this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy explains SFi's data protection practices, including when and why we collect, use, disclose, and how we protect Personal Data collected from you and other third parties as you interact with SFi, our employees or agents, or visit www.sustainablefinance.hk www.sfiimpactsummit.com or any other websites operated by SFi in relation to Impact Services (“Websites”).

Types of Personal Data we collect

The Ordinance defines “Personal Data” to be any data relating directly or indirectly to a living individual, from which it is practicable for the identity of the individual to be directly or indirectly ascertained; and in a form in which access to or processing of the data is practicable.

The Personal Data SFi collects may include but is not limited to:

personal information: name, address, landline telephone and mobile number, email address, location;
business information: company name, countries your company operates in, job title, work email address;
professional interests: background and field of interest in impact investing;
visual and audio records: photographs, videos, and audio recordings of you at Events; and
any other Personal Data provided to us when you make an inquiry, request information, correspond with us or lodge a complaint.

For avoidance of doubt, SFi does not hold any payment information belonging to you. When you register for or purchase tickets through third-party ticketing platforms, such as Glueup, SFi may receive information you provide during such transactions. SFi does not collect or record your credit card or payment transaction details, which are held by third-party payment processors. Please review the privacy policies of such third-party platforms.

How we collect your Personal Data

SFi may collect your Personal Data when you:

visit SFi’s Websites;
apply to join SFi's community or membership;
register for or purchase tickets for events;
attend events where SFi or its authorised representatives photograph, film or audio record attendees;
request information about, or are contacted by SFi in relation to SFi's activities, events, exhibitions, products, services and courses (“Impact Services”);
contact SFi with questions, comments or enquiries about Impact Services;
provide consent and sign up to receive e-bulletins or newsletters by email;
submit a job application to SFi.

Purposes for collecting your Personal Data

Generally speaking, SFi collects and uses your Personal Data so that we can provide you with our services, interact with you in relation to our services and events, and otherwise administer and manage our business.

SFi may use your Personal Data for the purposes set out below:

open, maintain and manage your membership subscription and provide membership services;
manage and operate Impact Services;
process your orders and purchases for Impact Services and deliver relevant tickets, including handling refunds, transfers or cancellations;
supply you with orders, consulting or impact investment services, products and other matters which you request;
audit or verify your enrollment, registration and attendance of Impact Services;
record your interest in Impact Services and membership subscription;
communicate with you by email, phone or other means regarding your registration, purchases, enquiries, feedback, comments, or changes to services;
connect you with other impact investors to explore business collaboration opportunities;
with your consent, send you newsletters, information and updates about products and services that may be of interest to you, including promotions and Impact Services;
with your consent, allow business partners or event sponsors to send you promotional information or updates on their impact investing products or services;
internally assess SFi's performance and improve Impact Services;
maintain your Personal Data in SFi's internal database and conduct aggregated statistical analysis on an anonymised basis;
process job applications sent to SFi;
make disclosures when legally required by applicable laws, regulations, court or tribunal orders, or as requested by any government, regulatory or law enforcement agency;
establish, exercise or defend SFi's legal rights, claims and defences and seek legal advice;
prevent or detect crime, or prevent, preclude or remedy unlawful or seriously improper conduct; or
for any other related or incidental purposes relating to the above.
We may also collect your personal information from someone other than you, for example from third parties who make bookings or enquiries on your behalf.

SFi and its authorised representatives may photograph, film, or otherwise record our events and attendees for promotional, educational, and archival purposes. We will only do this to the extent that is reasonably necessary for our functions and activities. If a photo or video captures sensitive information about you, we will ask for your consent before capturing them.

We may also use or disclose your personal information for other purposes related to the original purposes set out above. SFi will hold Personal Data for as long as is necessary for the fulfillment of the purpose (including any directly related purpose) for which the data is to be used.

You are under no obligation to provide your personal information to us. However, certain Personal Data may be necessary for SFi's provision of services. If you fail to supply such data as requested, SFi may not be able to provide services or information to you or may be limited in how we can interact with you.

Disclosure of Personal Data

SFi may, for one or more purposes specified in Clause Purposes for Collecting your Personal Data, disclose your Personal Data to the following classes of persons, whether within or outside Hong Kong:

contractors, sub-contractors or third-party service providers who provide administrative, event management and ticketing, marketing, human resources, audit, data storage or processing, photography, technical support or other services to support SFi's business and provision of Impact Services;
related corporate bodies;
other attendees and corporate sponsors of Impact Services, and business partners or event sponsors in the industry of or with an interest in impact investing in accordance with this clause;
government, court, tribunal or law enforcement authorities;
any person under a duty of confidentiality to SFi (including but not limited to legal, accounting or tax advisors);
any actual or proposed acquirer or assignee of all or any part of SFi's business or assets.

SFi will not sell or rent your Personal Data to third parties for any purpose.

All ticket holders and event attendees will automatically be included in published event attendee lists. Your profile (name, company and title) will be visible to other event attendees and event sponsors, in accordance with SFi's Event Ticketing Terms and Conditions. If you wish your profile to be excluded from event attendee lists, you must notify SFi at events@sustainablefinance.hk at least three (3) days in advance of the relevant event.

SFi may provide corporate sponsors of events with access to event attendee lists only where you have provided express consent, or if the information is anonymised or aggregated in a way that it does not identify individuals.

Transfer of Personal Data outside of Hong Kong

For purposes of providing services, SFi may share your Personal Data with third-party service providers such as marketing automation and data storage service providers which may store your data on overseas servers located outside Hong Kong, including in Singapore and other jurisdictions. SFi takes reasonable steps to ensure that any such transfer is made in compliance with the Ordinance.

Direct marketing

Only with your express consent, SFi will use and disclose your contact information (including your name and email address) for marketing purposes, or transfer the data to a third party service provider (such as GlueUp) to send marketing communications to members on SFi’s behalf.

We use a number of direct marketing strategies and channels including by, directly or via a third party, sending you newsletters, information and updates about our products, services and events that may be of interest to you.

If you do not wish to receive such communications, you may opt-out at any time without charge by following the opt-out instructions in our emails or by contacting us using the details in the contact us clause of this Privacy Policy.

SFi may also provide your contact information to third parties (including business partners or event sponsors) for them to send you promotional information or updates on their impact investing products or services. SFi will only do this if we have obtained your express consent. Your interactions with third parties are governed by their respective privacy policies, and SFi recommends that you review those policies to familiarise yourself with their data protection practices.

Data security

SFi is committed to taking all practicable steps to ensure the Personal Data it holds is treated securely, and protected against unauthorised or accidental access, processing, erasure, loss or use.

You are responsible for the security of your own usernames and passwords. You must keep your usernames or passwords confidential and must not disclose or share these with any third parties.

SFi implements reasonable technical and organisational measures to protect your Personal Data. However, no data transmission or storage system can be guaranteed to be completely secure. If SFi becomes aware of a security breach affecting your Personal Data, SFi will take

appropriate steps in accordance with its legal obligations.

Your Rights in relation to your Personal Data

Under the Ordinance, you have the legal right to:

request access to your Personal Data held by SFi;
request correction of any Personal Data that is inaccurate; and
request that SFi stops using your Personal Data for direct marketing purposes.

You may submit any such requests via the contact details set out in the contact us clause.

We will action your request once we have verified your identity. Please allow up to forty (40) days for processing of a request. For the provision

of access, we may charge a reasonable fee, which reflects and will not exceed the cost to us for providing you with access. If we refuse your request, we will provide you with a written explanation for the refusal.

Where a correction to your Personal Data has been made, you may request that SFi take reasonable steps to notify any third parties to whom your information was disclosed in the past 12 months of the correction. All reasonable steps to comply with a request will be made, unless we consider the request inappropriate to make (e.g. the request requires us to make an inaccurate change) or there is a need to keep information for legal, auditing or internal risk management reasons. In that case, we will provide you with a written explanation for the refusal.

To the extent that the GDPR applies to the collection of your personal information, you have (in some circumstances) the right to request:

the deletion of your personal information. SFi will endeavour to process the removal request within one calendar month from the date of receipt of the written request. We may refuse your request if Personal Data remains relevant to a service SFi is providing, or if SFi may be legally or commercially required to hold your Personal Data;
that further processing of your personal information is restricted in certain circumstances or to object to its processing; and
have your personal information transferred to you or a third party in a portable format.

If we refuse any of these requests, we will provide you with written reasons for the refusal and details of complaint mechanisms.

Cookies and website analytics

Our Websites may use “cookies”. A cookie is a small file of letters and numbers stored on your device when you visit a website. These cookies recognise when your device has visited our website before, so we can distinguish you from other users of our Websites. This improves your browsing experience and helps us optimise our Websites.

If you do not wish to use the cookies, you can adjust your browser settings to prevent cookies from being automatically stored on your device. However, if you remove or block cookies on your computer, please be aware that your browsing experience and our Websites’ functionality may be affected. Our Websites may also use analytics platforms, tools and first-party tracking, to help us better understand visitor traffic so we can improve our services. Although this data is mostly anonymous and will not identify an individual, there may be circumstances in which we are able to identify you from this data.

Social networking services

We use social networking services such as LinkedIn, YouTube, and Instagram to communicate with the public about our services. When you communicate with us using these social networking services, we may collect your Personal Data, but we only use it to help us to communicate with you and action your requests.

The social networking service will also handle your Personal Data for its own purposes. These services have their own privacy policies – you can access the privacy policies for these companies on their websites.

Third-Party Websites

Our Websites may contain hyperlinks to external websites operated or administered by third parties. If you access a third-party website through our Website, your Personal Data may be collected by that third party website.

SFi has no control over, in no way endorses, and is not responsible for external third-party websites and their privacy policies and data protection practices.

Once you are transferred and redirected from SFi's Websites to an external site, you interact with those external websites at your own risk.

This Privacy Policy applies only to SFi's Websites, not external third-party websites that SFi links to, which will have their own privacy policies. SFi recommends that you review the privacy policy of third-party websites and ensure that you familiarise yourself with their privacy practices.

Updates to this Privacy Policy

SFi may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our Websites.

Contact us

If you have any questions regarding this Privacy Policy, wish to exercise your rights, or have a complaint about how we handle your Personal Data, please contact us at:

Email: info@sustainablefinance.hk

Address: SFi, 21/F Greatmany Centre, 109-115 Queen's Road East, Wanchai, Hong Kong

Any questions regarding SFi's specific data protection practices for events should be sent to events@sustainablefinance.hk.