When the customers made online registration for membership of a travel agency, in addition to their name, Hong Kong ID full number and contact information, the customers were required to provide information on occupation, education level, marital status, personal and family monthly income and number of family members (the "Data"). otherwise, the registration process could not ne completed. According the Personal Information Collection Statement from the company's website, the purpose of collecting the Data was not sated.

Can you recommend the legality of the travel agency on the collection and the use he Data under the Personal Data (Privacy) Ordinance in Hong Kong?