The Hongkong and Shanghai Banking Corporation Limited (‘HSBC’) collects, uses and shares information about you so that it can provide you with a bank account and related services. This App Privacy Notice explains how HSBC collects, uses and shares your information when you use this app, including information about the device that the app is installed on e.g. your mobile phone or tablet. You can find more details of our privacy and security policy on our website: https://www.hsbc.com.hk/misc/privacy-security/ that includes our Data Privacy Notice: https://www.hsbc.com.hk/misc/data-privacy-notice/.
This app is provided by (i) HSBC Global Services (UK) Limited for iOS version for and on behalf of HSBC; and (ii) by HSBC for Android version, and all products and services accessed via this app are provided by HSBC.
You can contact our Data Protection Officer (DPO) and exercise your rights by writing to HSBC, PO Box 72677, Kowloon Central Post Office, Hong Kong, or email dfv.enquiry@hsbc.com.hk, and marking your letter/email for the attention of the Data Protection Officer.
We're responsible for keeping your data safe in compliance with Hong Kong law. We try to protect your personal data against unauthorised or accidental access or processing by using a range of measures, which may include encryption and other forms of security.
We may store your data locally or overseas, including in the cloud. Since we provide products or services through resources and servers across the world, to the extent permitted by regulatory rules and applicable laws, your personal data may be transferred to an overseas jurisdiction, or be accessed from these jurisdictions. We apply our global data standards and policies wherever your data is stored. If we transfer your personal data overseas, in accordance with applicable data protection legislation, your personal data will be protected by a strict code of secrecy and security which, HSBC, other members or the HSBC Group, their staff and third parties are subject to. We’ll take all practicable steps to ensure that your information will not be kept longer than necessary and in line with our data retention policy. We may need to keep your information where we need the information to comply with regulatory or legal requirements, help detect or prevent fraud and financial crime, answer requests from regulators etc. If we no longer need to keep your information, we will destroy or delete it.
Collection of personal information and/or information from your device
| Information accessed | What it is used for |
| Your phone book | This allows our app to access your contacts so that you can transfer money to people in your address book using their phone number or email. |
| Your device’s camera and photo library | This allows you to take a photo or video and immediately share it with us (or access the content from the photo library) in order to allow us to provide you with a bank account or related services. Non-exhaustive examples of when we may ask you to do this include to confirm your identity, to scan a QR code to make a payment or to pay with a cheque by taking a photo of it. |
| Your biometric information | You can use biometrics authentication (like fingerprints or facial recognition) for account authentication. If you do so, we rely on your device’s technology to authenticate you and we do not access your underlying biometric data. |
| Your location | Your location will be used when you try to locate your closest branch or when we check your location upon opening an account. |
| Your mobile data/ Wi-Fi | This allows us to use your internet connection to access our digital banking systems. |
| Your health data | This allows you to participate in our Well + programme. You can find full information in the applicable privacy notice here: https://www.hsbc.com.hk/content/dam/hsbc/hk/vam/pdf/well_plus_data_privacy_notice_en.pdf. |
| Push notification | This allows you to receive instant notifications from our app about activity on your account. |
| Application information | This allows us to know more about the applications installed on your device to check whether you might have malicious applications on it. This helps us protect you and us from financial crime. |
| Information accessed | Your phone book |
|---|---|
| What it is used for | This allows our app to access your contacts so that you can transfer money to people in your address book using their phone number or email. |
| Information accessed | Your device’s camera and photo library |
| What it is used for | This allows you to take a photo or video and immediately share it with us (or access the content from the photo library) in order to allow us to provide you with a bank account or related services. Non-exhaustive examples of when we may ask you to do this include to confirm your identity, to scan a QR code to make a payment or to pay with a cheque by taking a photo of it. |
| Information accessed | Your biometric information |
| What it is used for | You can use biometrics authentication (like fingerprints or facial recognition) for account authentication. If you do so, we rely on your device’s technology to authenticate you and we do not access your underlying biometric data. |
| Information accessed | Your location |
| What it is used for | Your location will be used when you try to locate your closest branch or when we check your location upon opening an account. |
| Information accessed | Your mobile data/ Wi-Fi |
| What it is used for | This allows us to use your internet connection to access our digital banking systems. |
| Information accessed | Your health data |
| What it is used for | This allows you to participate in our Well + programme. You can find full information in the applicable privacy notice here: https://www.hsbc.com.hk/content/dam/hsbc/hk/vam/pdf/well_plus_data_privacy_notice_en.pdf. |
| Information accessed | Push notification |
| What it is used for | This allows you to receive instant notifications from our app about activity on your account. |
| Information accessed | Application information |
| What it is used for | This allows us to know more about the applications installed on your device to check whether you might have malicious applications on it. This helps us protect you and us from financial crime. |
| Purposes or functions | Information we are collecting |
| Maintaining proper and stable core mobile banking services on our app |
- Information about the device you’re using - Your location - Contact information - App usage information |
| Detecting fraud or crime or to keep our app secure | - Information about the device you’re using - Your location - Information about your accounts with us - Information about your transactions - App usage information |
| Opening an account, registering and logging onto our app |
- Identity document information - Biometric information - Information about the device you’re using |
| Providing you with personalised experiences in our app | - Information about the device you’re using - Your location - App usage information |
| Purposes or functions |
Maintaining proper and stable core mobile banking services on our app |
|---|---|
| Information we are collecting |
- Information about the device you’re using - Your location - Contact information - App usage information |
| Purposes or functions | Detecting fraud or crime or to keep our app secure |
| Information we are collecting |
- Information about the device you’re using - Your location - Information about your accounts with us - Information about your transactions - App usage information |
| Purposes or functions |
Opening an account, registering and logging onto our app |
| Information we are collecting |
- Identity document information - Biometric information - Information about the device you’re using |
| Purposes or functions | Providing you with personalised experiences in our app |
| Information we are collecting |
- Information about the device you’re using - Your location - App usage information |
Where specific data is required for specific processing activities, we will inform you of the same accordingly as required by applicable laws and regulations.