Business Ethics and Integrity

profile-leadin-banner

The Group upholds the highest integrity and ethical standards across every aspect of its business activities, fostering compliant operations to maintain an honest, reliable, and fair reputation that drives long-term value creation. Our comprehensive policies govern important areas, including labour practices, conflicts of interest, bribery, competition and antitrust, privacy compliance, and equal opportunity. To ensure adherence, all colleagues are apprised of the operating principles and policies, with a formal written acknowledgement of these expectations upon joining the Group.

We maintain a zero-tolerance stance toward unethical behaviour across our business operations and value chain.

Key policies

  • Bribery and Illicit Advantage
  • Conflict-of-Interest
  • Advantage and Entertainment Policy
  • Anti-Money Laundering and Counter Terrorism Financing
  • Whistle-Blowing
  • Confidentiality
  • Equal Opportunities
  • Competition

Policies are strictly enforced and incorporated into our Code of Conduct and Staff Handbook.

The Group is committed to maintaining the highest standards of openness, integrity and accountability. Colleagues are encouraged to report suspected misconduct or malpractice within the Group, including violations of the Code of Conduct, unethical behaviour, criminal activity, and other similar issues. Whistle-blowing channels are available, and all information reported through the channels is kept confidential. Employees who engage in retaliation are subject to disciplinary action. The Audit and Risk Committee is responsible for conducting a preliminary review of reports to determine the appropriate investigation or actions to be taken. Cases may be investigated internally or by external parties to ensure the most effective resolution.

During the Reporting Period, we delivered 9,000 hours of compliance and anti-bribery training to our colleagues as part of our ongoing commitment to ethical awareness. All new employees are required to complete cybersecurity awareness training, while employees participate in annual training to stay updated on best practices. We have not faced significant fines or non-monetary sanctions for non-compliance with environmental and social-related laws and regulations. Additionally, there have been no concluded legal cases regarding corrupt practices brought against the Group or its employees during the Reporting Period.

Case Study

Anti-fraud Training

The Group partnered with the Hong Kong Police Force (“HKPF”) to deliver an anti-fraud awareness talk attended by over 200 employees. The session provided valuable insights into emerging fraud trends and practical prevention strategies. HKPF highlighted the effectiveness of its official anti-fraud mobile application in detecting and preventing potential scams.

Data Privacy & Cybersecurity

KPI for FY2024/25

100%

Employees trained on Privacy, Data Rights and Cybersecurity

Performance

100%

Employees trained on Privacy, Data Rights and Cybersecurity

In response to growing concerns about data privacy and cybersecurity, we ensure full compliance with the Personal Data (Privacy) Ordinance in Hong Kong and all relevant data privacy regulations. Throughout the Reporting Period, we recorded no material cybersecurity incidents, breaches of customer privacy, or losses of customer data.

Our business operations are governed by the Information Security Policy and the Group’s Personal Data Privacy Policy, and we take the following measures to safeguard sensitive information:

Restrict access and enhance the confidentiality of sensitive information
Data security icon-borderbox-1
Conduct ongoing awareness campaigns, such as phishing simulations and newsletters, to maintain cybersecurity vigilance among employees
Campaign icon-borderbox-1
Require all employees and third-party partners to protect our information and assets
Protection icon-borderbox-1
Require comprehensive security assessments for all newly developed customer-facing applications before deployment in production environments
Assessment icon-borderbox-1
Appoint a designated Personal Data Officer to review and guide data privacy and cybersecurity strategy
Officer icon-borderbox-1
Perform periodic internal and external audits of the company’s systems, policies and practices, as well as penetration testing of computer systems, to identify vulnerabilities and ensure compliance with security standards
Audit icon-borderbox-1
Issue a Personal Information Collection Statement to give customers transparency on how their information is being collected and used, to obtain their informed consent
Statement icon-borderbox-1
Conduct annual user access rights reviews for critical systems to ensure privileges align with job responsibilities
Access rights icon-borderbox-1
Implement proactive and reactive measures, including emergency plans, business continuity plans, audits, access controls, and minimised data collection and retention
Measures icon-borderbox-1
Establish security baselines for cloud environments to ensure compliance with industry security standards and best practices
Cloud security icon-borderbox-1
Mandate cybersecurity awareness training for all new employees during onboarding and annual refresher training for employees to stay updated on emerging threats and best practices
Training icon-borderbox-1
Achieve ISO 27001 certification for Information Security Management Systems through an independent audit, verifying that our Information Security Controls meet international standards
ISO certification icon-borderbox-1

These measures are part of our broader commitment to maintaining robust data protection, business continuity, and incident response capabilities, ensuring the data security and privacy of all stakeholders.

Intellectual Property Rights

We are committed to protecting our intellectual property. The Group ensures the secure use and protection of its intellectual property. Specifically, Nina Hospitality details the appropriate usage, processing, and management of licensed software. All colleagues are required to promptly report any instances of non-compliance or intellectual property infringement to the relevant departments.

KPI for FY2024/25

≥15

Innovative solutions adopted or tested via proof-of-concept initiatives aimed at improving operational efficiency

Performance

17

Innovative solutions were adopted or tested for operational efficiency

  • Adopted three solutions at Proptech and four solutions at Cyber Security
  • Launched 10 proofs of concept

Case Study

CCG Partners with Research Institution to Advance Green Construction with Peelable Nano Protective Coating

CCG is dedicated to driving green and technological advancement in the real estate industry. In partnership with the NAMI, a leading scientific research institution, we co-developed the patented Peelable Nano Protective Coating for construction projects. This innovative nano-coating enhances the protection of both interior and exterior windows during building construction, aligns with green building principles, and improves construction quality. This solvent-free, reusable nano-coating reduces construction waste by eliminating foam board wrapping and prevents volatile organic compound (“VOC”) emissions. The nano-coating can be applied to various building materials, including metal surfaces and treated wooden furniture.

We aim to further expand this sustainable construction technology to our development projects whenever feasible.

leaf

You May Also Like

Global ESG Ratings

GRESB-2024
GRESB-sector-leader-2024
CDP

Membership and Partnerships

usgbc member
GRESB-member
HKGBC-platinum patron
Business Environment Council - member
HKGFA