Privacy and Security

PRIVACY AND SECURITY POLICY

Our business has been built on trust between our customers and ourselves. To preserve the confidentiality of all information you provide to us, we maintain the following privacy principles:

  • We only collect personal information that we believe to be relevant and required to understand your financial needs and to conduct our business.
  • We may use, transfer and disclose personal information in connection with purposes set out in the Notice Relating to the Personal Data (Privacy) Ordinance (the “Notice”) below (the “Purposes”).
  • We may pass personal information to other HSBC Group companies or agents or other recipients set out in the Notice, as necessary and appropriate for the Purposes.
  • We will not disclose personal information to anyone unless we have your consent or are required by law or public duty or have previously informed you or have legitimate business purposes that require disclosure.
  • We may be required from time to time to disclose personal information to Governmental or judicial bodies or agencies or our regulators, but we will only do so under proper authority.
  • We aim to keep personal information on our records accurate and up-to-date.
  • We maintain strict security systems designed to prevent unauthorised access to personal information by anyone, including our staff.
  • All HSBC Group companies, all our staff and all third parties with permitted access to personal information are specifically required to observe our confidentiality obligations.

By maintaining our commitment to these principles, we at HSBC will ensure that we respect the inherent trust that you place in us.

Your Privacy Matters to Us

This section provides specific details of how we treat any personal information you might wish to provide us when you visit this site.

Data Security

  • Security is our top priority. The Hongkong and Shanghai Banking Corporation Limited ('the Bank') will strive at all times to ensure that your personal data will be protected against unauthorised or accidental access, processing or erasure. We maintain this commitment to data security by implementing appropriate physical, electronic and managerial measures to safeguard and secure your personal data.
  • The secure area of our website supports the use of 128-bit Secure Socket Layer (SSL) encryption technology - an industry standard for encryption over the Internet to protect data. When you provide sensitive information such as credit card details, it will be automatically converted into codes before being securely dispatched over the Internet.
  • Our web servers are protected behind "firewalls" and our systems are monitored to prevent any unauthorised access. We will not send personal information to you by ordinary email. As the security of ordinary email cannot be guaranteed, you should only send email to us using the secure email facility on our website.

All practical steps will be taken to ensure that personal data will not be kept longer than necessary and that the Bank will comply with all statutory and regulatory requirements in the Hong Kong Special Administrative Region concerning the retention of personally identifiable information.

Security Assurance

  • Both you and HSBC play an important role in protecting against online fraud. You should be careful that your bank account details including your User ID and/or Password are not compromised by ensuring that you do not knowingly or accidentally share, provide or facilitate unauthorised use of it. Do not share your User ID and/or password or allow access or use of it by others. We endeavor to put in place high standards of security to protect your interests. If, in the unlikely event, unauthorised transactions have been conducted through your account through no fraud, fault or negligence on your part, we will see that you are covered for your direct loss up to the full amount of the unauthorised transaction.
  • You should safeguard your unique User ID and Password by keeping it secret and confidential. Never write them down or share these details with anyone. HSBC will never ask you for your Internet Banking Password, in order to ensure that you are the only person who knows this information. When choosing your unique User ID and Password for the first time, do not create it using easily identifiable information such as your birthday, telephone number or a recognisable part of your name. If you think your User ID and/or password has been disclosed to a third party, is lost or stolen and unauthorised transactions may have been conducted, you are responsible to inform us immediately.

Collection of Personal Information

  • Use of Cookies, Spotlight Tags and Web Beacons etc
    Your visit to this site may be recorded for analysis of the number of visitors to the site, general usage patterns, your personal usage patterns and ways to improve your experience. Some of this information will be gathered through the use of "cookies".

    Cookies are small bits of information that are automatically stored on your web browser in your computer that can be retrieved by this site. We will be able to access the information stored inside the cookies and record how you use this site.

    Cookies allow us to recognise your device, and they store information about your use of this site/app. This information enables us to provide more features that you may find useful, to tailor the content of our website and mobile applications to suit your interests and, if your marketing preference settings allow, to provide you with promotional materials or direct marketing based on your usage patterns. Most browsers are initially set to accept cookies. If you would prefer, you can set your browser to disable cookies or inform you when they are set. However, by disabling them, you may not be able to take full advantage of our website, including HSBC Internet Banking.

    If you accept cookies during your use of this site or you continue to use this app, you will be acknowledging that your information is being collected, stored, accessed and used as outlined above.

    HSBC may also work with third parties including data management agencies and ad networks (such as Tealium, Adobe, Doubleclick, Facebook, Nielsen//NetRatings, WebTrends, The Trade Desk, Google, Yahoo!, Eloqua, Dun & Bradstreet, Optimizely, Heap, LinkedIn, LivePerson and Quantcast) to research certain usage and activities on parts of our web site on our behalf. Tealium, Adobe, Doubleclick, Facebook, Nielsen//NetRatings, WebTrends, The Trade Desk, Google, Yahoo!, Eloqua, Dun & Bradstreet, Optimizely, Heap, LinkedIn, LivePerson and Quantcast use technologies such as spotlight monitoring, web beacons and cookies to collect information for this research. The information collected through technologies such as cookies, spotlight tags and web beacons etc are used to find out more about our users, including user demographics and behaviour and usage patterns, for more accurate reporting and to improve the effectiveness of our marketing. Information recorded through the use of these devices are aggregated and then shared with us. As part of the information that we share with them, we may share your advertising identifier and "installation event" (which means the data in relation to when you first install or use this site). No personally identifiable information about you is collected or shared with HSBC by Tealium, Adobe, Doubleclick, Facebook, Nielsen//NetRatings, WebTrends, The Trade Desk, Google, Yahoo!, Eloqua, Dun & Bradstreet, Optimizely, Heap, LinkedIn, LivePerson and Quantcast with HSBC as a result of this research. Should you wish to disable the cookies associated with these technologies such as spotlight tags and/or web beacons etc, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our website, including HSBC Internet Banking.

    To find out more about the use of cookies and the information-gathering practices and opt-out procedures of Tealium, Adobe, Doubleclick, Facebook, Nielsen//NetRatings, WebTrends, The Trade Desk, Google, Yahoo!, Eloqua, Dun & Bradstreet, Optimizely, Heap, LinkedIn, LivePerson and Quantcast, please visit:
  • Marketing Promotions

Occasionally we may collect personal information from visitors to this site and those individuals that participate in a contest or promotion (online or over the telephone,or at one of our branches). Such information is only collected from individuals who voluntarily provide us with their personal information. We may use this information to advise them of products, services and other marketing materials, which we think, may be of interest to them. We may also invite visitors to this site to participate in market research and surveys and other similar activities.

You can choose to receive marketing and other promotional materials by email. If you do receive email or promotional direct mailings, you will always have an opportunity to opt-out.

If at any time you would like us to cease sending you direct mailings, please contact our Customer Service Hotline on (852) 2748 8288. We will then, at no cost to you, act on your request within 30 days and ensure that you are not included in future direct marketing promotions.

If at any time you would like to cease being targeted by our social media advertising partners, please fill in the online form. We will then, at no cost to you, act on your request within 30 days and ensure your email address and/or mobile phone number are not included in future Facebook advertising via custom audience.

If we do ask you to provide personal information, we will always specify the purpose for which such personal information is collected and ensure that it is only used for the purpose specified at the time of collection.

Notice relating to the Personal Data (Privacy) Ordinance (the “Ordinance”)

* You may be subject to an earlier version of this Notice if you have not consented to subsequent changes to the earlier notice.

Personal Information Collection Statement for HSBC Mandatory Provident Fund

For more information, please click here (PDF, 20KB).