OUR COMMITMENT TO YOUR PRIVACY
Alpha Travel (HK) Limited, trading as MIG ALPHA, is committed to protecting and respecting your privacy. This Privacy Policy sets out how we collect, use, store, share, and protect personal data obtained through your use of our website, services, and communications.
This Policy is issued in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region and the requirements of the Travel Industry Authority (TIA). By using our services, you acknowledge that you have read and understood this Policy.
1. WHO WE ARE
The data controller responsible for your personal data is Alpha Travel (HK) Limited, trading as MIG ALPHA.
Registered Name: Alpha Travel (HK) Limited
Trading Name: MIG ALPHA
Travel Agent Licence No.: 353360, issued by the Travel Industry Authority (TIA), Hong Kong
Registered Office: Unit 9, G/F, Keybond Commercial Building, 38 Ferry Street, Yau Ma Tei, Kowloon, Hong Kong
Email: info@migalpha.com
Phone / WhatsApp: +852 5801 1852
Website: www.migalpha.com
2. PERSONAL DATA WE COLLECT
We collect the following categories of personal data depending on the nature of your interaction with MIG ALPHA:
Identity Data - Full name, date of birth, nationality, passport number, passport copy. Collected at tour booking and visa application.
Contact Data - Email address, phone number, WhatsApp number, postal address. Collected at enquiry, booking, and membership registration.
Travel Data - Travel dates, destination, dietary, medical, or mobility requirements, accommodation preferences. Collected at tour booking and itinerary planning.
Financial Data - Payment method, bank transfer records, FPS and PayMe transaction references. Collected at payment processing.
Membership Data - Membership tier, MIG ALPHA Miles balance (earned and purchased tracked separately), booking history, redemption records, lock-in election status, masterclass attendance. Collected at loyalty program registration and usage.
Communication Data - WhatsApp messages, emails, enquiry form submissions, AI chat transcripts. Collected through customer service interactions.
Technical Data - IP address, browser type, pages visited, device type, session data. Collected through website usage via cookies and analytics.
Marketing Data - Newsletter subscription status, communication preferences. Collected at newsletter sign-up and marketing opt-in.
Special Category Data
We may process special category data, such as dietary requirements reflecting religious or health needs, or medical information relevant to fitness to travel, only where you have provided explicit consent and only where strictly necessary to deliver the service requested.
3. HOW WE USE YOUR PERSONAL DATA
We use your personal data for the following purposes:
To process and fulfil bookings, including tour reservations, visa applications, flight ticketing, hotel and ground arrangements.
To process payments and issue receipts, invoices, and refunds where applicable.
To administer your MIG ALPHA Loyalty membership account, including tracking Miles, processing tier upgrades, applying discounts, and recording lock-in elections.
To submit visa applications on your behalf to foreign consulates, embassies, and immigration authorities.
To communicate with you regarding your bookings, itinerary updates, travel advisories, and service changes.
To send marketing communications, with your prior consent, including newsletters, promotions, flash sales, and loyalty program updates.
To improve our website and services through usage analytics and customer preference research.
To comply with legal and regulatory obligations, including record-keeping under the Travel Agents Ordinance and TIA requirements.
To protect against fraud, misuse of our services, or abuse of the membership or payment systems.
4. LEGAL BASIS FOR PROCESSING
We process your personal data on the following legal grounds:
Contract Performance: Processing necessary to fulfil a booking, membership agreement, or service contract you have entered into with us.
Legal Obligation: Processing required to comply with Hong Kong law, including licensing, TIA compliance, record-keeping, and anti-money laundering obligations.
Legitimate Interests: Fraud prevention, website analytics, and customer service improvement, where our interests are not overridden by your rights.
Consent: Marketing communications and newsletter subscriptions. Consent may be withdrawn at any time without affecting prior lawful processing.
5. DATA SHARING AND DISCLOSURE
5.1 Third-Party Service Providers
We share your personal data with third parties only where necessary to fulfil our services. These include:
Airlines and transport operators, for flight and ground transport bookings.
Hotels and accommodation providers, for reservation of rooms as part of tour packages.
Cruise line operators, for cruise package components where applicable.
Foreign consulates and immigration authorities, for visa applications submitted on your behalf.
Destination ground handlers and local tour operators, who deliver elements of our tour packages in-country.
Payment processors, for secure handling of financial transactions.
IT and website service providers, including our website development partner Kritrim Baudhikata and cloud infrastructure providers.
5.2 Community and Consular Coordination
As part of our community engagement mission, MIG ALPHA may coordinate with the Consulate General of Nepal in Hong Kong, NRNA HK, FINYE HK, and affiliated community organisations for event and cultural activities. Any data shared in this context is limited to what is strictly necessary and is handled with your awareness or explicit consent where required.
5.3 Legal Disclosure
We may disclose your personal data to law enforcement authorities, regulatory bodies, courts, or the Travel Industry Authority (TIA) where required by law, valid legal order, or for the investigation of a complaint.
5.4 No Sale of Personal Data
MIG ALPHA does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.
6. COOKIES AND WEBSITE TRACKING
Our website at www.migalpha.com uses cookies and similar tracking technologies to enhance your experience and collect analytics data.
Essential cookies: Required for website functionality, session state, search filters, and navigation. Cannot be disabled.
Analytics cookies: Understanding page visits, traffic flows, and popular content. Aggregated and anonymised where possible. Optional.
Preference cookies: Remembering language or display settings across visits. Optional.
Marketing and retargeting cookies: Targeted advertisements or promotional content where you have given consent. Consent required.
You may manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our website. A full cookie notice is displayed on your first visit to our website.
7. AI TRAVEL ASSISTANT AND CHAT DATA
Our website features an AI-powered Travel Assistant. When you interact with this tool, the content of your queries may be processed by our AI infrastructure provider. We do not use AI chat transcripts to build personal profiles, and we do not share them with third parties for advertising purposes.
Chat data may be retained for a limited period for quality assurance and service improvement. Interactions with our human team via WhatsApp or other messaging platforms are retained as part of your customer service record in accordance with our retention schedule in Section 8.
8. DATA RETENTION
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our legal and regulatory obligations.
Booking and transaction records: Retained for a minimum of 7 years from service completion, in accordance with Hong Kong commercial law.
Visa application records: Retained for 3 years from application date, or longer if required by the relevant authority.
Membership records: Retained for the duration of active membership plus 3 years post-termination or expiry.
Marketing opt-in records: Retained until unsubscribe or consent withdrawal, plus a reasonable period to evidence consent.
Website analytics data: Aggregated data retained indefinitely. Individually identifiable data anonymised within 26 months.
AI chat and WhatsApp records: Retained for 12 months for quality assurance, then deleted or anonymised.
9. YOUR RIGHTS
Under the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region, you have the following rights in relation to your personal data:
Right of Access (Data Access Request): Request a copy of the personal data we hold about you. We will respond within 40 days and may charge a reasonable fee in accordance with the Ordinance.
Right to Correction (Data Correction Request): Request that inaccurate, incomplete, or outdated personal data be corrected or supplemented.
Right to Erasure: Request deletion of your data where we no longer have a legitimate basis to retain it.
Right to Object: Object to processing based on our legitimate interests, including direct marketing. Objection to direct marketing must be honoured immediately.
Right to Withdraw Consent: Withdraw consent for marketing or other consent-based processing at any time without affecting prior lawful processing.
Right to Complain: Lodge a complaint with the Privacy Commissioner for Personal Data (PCPD) of Hong Kong at www.pcpd.org.hk.
To exercise any of these rights, please submit a written request to info@migalpha.com. We will acknowledge all valid requests within 10 business days and respond in full within 40 days.
10. DATA SECURITY
MIG ALPHA implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
Encrypted storage of sensitive data including passport copies and payment references.
Role-based access controls limiting data access to authorised MIG ALPHA staff only.
HTTPS encryption across our website to protect data in transit.
Regular review of data handling practices and assessment of third-party supplier data security standards.
Physical security controls at our registered office for hard-copy documents.
Despite these safeguards, no method of electronic transmission or storage is entirely secure. If you believe your personal data may have been compromised, please contact us immediately at info@migalpha.com.
11. INTERNATIONAL DATA TRANSFERS
As a travel agency operating across 24 international markets, MIG ALPHA necessarily transfers certain personal data to third parties located outside Hong Kong, including airlines, hotels, foreign consulates, cruise operators, and destination ground handlers.
Such transfers are made only where necessary to fulfil your booking or visa application. We take reasonable steps to ensure that overseas recipients maintain appropriate data protection standards. By booking a service with MIG ALPHA, you acknowledge and consent to your data being transferred to the relevant destination country as part of service fulfilment.
12. CHILDREN'S PRIVACY
Our services are not directed at children under the age of 18. Where a child is included as a traveller in a booking, all personal data relating to that child must be provided by a parent or legal guardian who holds authority to consent on the child's behalf. MIG ALPHA does not knowingly collect personal data directly from individuals under 18.
If we become aware that personal data of a child under 18 has been collected without appropriate parental or guardian consent, we will take prompt steps to delete such data from our records.
13. MARKETING COMMUNICATIONS AND NEWSLETTER
With your prior consent, MIG ALPHA may send marketing emails, WhatsApp messages, or newsletters containing tour promotions, flash sales, destination guides, community event updates, and loyalty program information.
You may opt out of marketing communications at any time by:
Clicking the unsubscribe link in any marketing email.
Replying STOP to any marketing WhatsApp message.
Contacting us directly at info@migalpha.com with a written request to unsubscribe.
Opting out of marketing communications will not affect transactional messages related to confirmed bookings, membership accounts, visa applications, or other service communications.
14. CHANGES TO THIS PRIVACY POLICY
MIG ALPHA may update this Privacy Policy from time to time to reflect changes in our services, business practices, or applicable legal requirements. When material changes are made, we will notify active members and newsletter subscribers by email and update the effective date at the top of this document.
Continued use of our services following notification of changes constitutes your acceptance of the revised Privacy Policy.
15. CONTACT US AND REGULATORY ESCALATION
For any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Privacy Officer:
Data Privacy Officer: MIG ALPHA - Alpha Travel (HK) Limited
Address: Unit 9, G/F, Keybond Commercial Building, 38 Ferry Street, Yau Ma Tei, Kowloon, Hong Kong
Email: info@migalpha.com
Phone / WhatsApp: +852 5801 1852
If you are not satisfied with our response, or if you believe your privacy rights have been infringed, you have the right to lodge a complaint with:
PCPD: Office of the Privacy Commissioner for Personal Data, 12/F, Sunlight Tower, 248 Queen's Road East, Wan Chai, Hong Kong | Tel: +852 2827 2827 | www.pcpd.org.hk
TIA: Travel Industry Authority of Hong Kong | www.tia.org.hk | Hotline: +852 2807 1199
Last updated: 14 June 2026 | Review Date: June 2027
Authorised by: Inder Purja Pun, CEO, MIG ALPHA / Alpha Travel (HK) Limited
© 2026 MIG ALPHA / Alpha Travel (HK) Ltd. All rights reserved. Licence No. 353360