Data Privacy Policy
Table of contents
SECTION 1: HSBC Data Privacy Principles
- Transparency: We will be clear and transparent as to how we collect and use data, including providing data subjects with a statement of how we may use their data where required.
- Fair and lawful usage: We will only collect, process and store data lawfully and where we have a legitimate reason to do so.
- Limited purposes: We will collect and process data for specified and lawful purposes, and will not use it for further, incompatible purposes without first taking all steps necessary under applicable data privacy laws and regulations.
- Data minimisation and adequacy: We will ensure our collection, retention and processing of data is proportionate. We will strike an appropriate balance to ensure that we process sufficient data to carry on our business and achieve any specified lawful purpose, while making sure that we do not collect, retain or process excessive amounts of data.
- Data quality and accuracy: We will maintain appropriate standards of data quality and integrity, and we will implement policies in respect of data accuracy, including taking steps to avoid becoming out of date where appropriate.
- Data security and retention: We will retain data securely, implement appropriate data retention policies, and we will dispose of data securely once it is no longer required. We will ensure that appropriate processes are put in place so only HSBC colleagues with a business requirement to access such data are authorised and able to do so.
- Training and awareness: We will ensure that HSBC colleagues with access to data are trained appropriately on their obligations regarding those data.
- Data subject rights: We will ensure that data subjects' rights are observed in accordance with applicable data privacy laws and regulations, including any timeline establish thereby.
- Third parties: Where we appoint a vendor or agent, we will require them to apply standards equivalent to the HSBC Data Privacy Principles. We will only disclose data to governmental or judicial bodies or law enforcement or agencies or our regulators where this is allowed by applicable data privacy laws and regulations, or otherwise required by applicable laws and regulations.
- Data transfers: Where we voluntarily transfer data to another HSBC entity, third party or to another jurisdiction, we will ensure that the data transfer is lawful and that the recipient is required to apply the same, or equivalent, standards as the HSBC Data Privacy Principles.
SECTION 2: Data Privacy Notice
Your data (including personal data) is important to us. Read this notice to find out how we collect, store, use and share your data.
1
HOW WE COLLECT AND STORE YOUR DATA
We collect your data
- when you interact with us
- when you visit our websites or use our products, services and mobile apps
- from other people and companies
- from other HSBC group companies
We store your data in physical or electronic form on our systems, our service providers' systems (including third party cloud providers) locally or overseas.
We comply with the laws of Singapore.
2
WHAT WE USE YOUR DATA FOR
We use your data
- to provide products and services to you
- to market products or services to you if you've
given us your consent to do so - to comply with laws, regulations and requirements, including our internal policies
- to help us to prevent financial crimes
- to improve our products, services and marketing
- for the other purposes set out in sub-section A
3
WHO WE SHARE YOUR DATA WITH
We may share your data
- with other companies and third parties who help us to provide services to you or who act for us
- with other HSBC group companies
- with third parties who you consent to us sharing your data with
- with local or overseas law enforcement agencies, industry bodies, regulators or authorities
- with the other third parties set out in sub-section C
We may share your data locally or overseas.
You can access your data or withdraw your consent
You can request access to the data we store about you. We may charge a fee for this.
You can also ask us to correct or update your data.
You can also withdraw your consent to any use of your data by contacting us.
More details
You can set your marketing preferences
You can contact us at any time if you don't want us to send direct marketing to you via certain channels, such as email, telephone calls, mobile messaging or post.
You can contact us
HSBC Bank (Singapore) Limited sghdpo@hsbc.com.sg
A
Data use
Your data may be used to
- assess you for products and services and enable us to provide and operate them
- conduct credit checks and reviews on you and obtain or provide credit references
- manage our business, including our credit and other risk management functions and to comply with our internal policies
- design and improve our products, services and marketing
- as described in sub-section D, provide you with marketing information
- exercise our rights under contracts with you, including collecting any amounts due from you
- comply with compulsory or voluntary requirements that we or the HSBC group has such as legal, tax, regulatory, sanctions or market requirements in Singapore and overseas
- comply with requests made by different bodies or authorities such as legal, regulatory, law enforcement, government and tax authorities in Singapore and overseas. Sometimes we may have to comply with such requests and other times we may choose to voluntarily comply
- comply with our or any HSBC group company's policies, procedures and other commitments in the detection, investigation and prevention of financial and other crimes. This may involve sharing your data in Singapore and overseas. This is important in our wider fight against these crimes
- allow any company that we transfer our business or assets to, to evaluate our business and use your data after any transfer
- any other uses for which you have given consent
- any purpose relating to any of the purposes above
Your rights
You can request access to your data, correct data that we hold about you, withdraw consent to use of your data and give feedback. We may be unable to provide you with access to some data — if so, we'll explain why not unless it's not lawful to tell you. If you withdraw consent, we may be unable to continue providing products or services to you. This may result in the end of some or all of our contractual relationships with you. You can also ask us to explain our data policies and practices.
B
Data collection and storage
We may collect
- data that you give to us such as your contact and identification details
- biometric data such as your voice ID and facial recognition data
- your geographic data and location data based on your mobile or other electronic device
If you don't give us data or if you withdraw your consent to any use of your data then we may be unable to provide products or services. We may also collect data about you from third parties such as
- people who act for you or who you give consent to transfer data to us
- publicly available sources and agencies that collect data which they summarise and use to create statistics
- credit reference, debt collection and fraud prevention agencies
- people who you deal with through our services
We may also generate information about you
- by combining information that we and other HSBC group companies have collected about you
- based on the analysis of your interactions with us
- through the use of cookies and similar technology when you access our website or apps. See our cookies policy below
Storing your data overseas
We may transfer and store your data overseas, including places that don't have the same level of protection for personal data.
Protecting your stored data
While we store it, your data is protected by physical, electronic and procedural safeguards and governed by the laws of Singapore (including the Personal Data Protection Act).
Our third party service providers that receive your data are required to comply with strict measures to protect your data.
If you provide data about others
If you provide data to us about another person (such as a joint account holder, trustee, beneficiary or guarantor) you must make sure that you have obtained written consent from such person and that you have retained proof of these consents. You must provide us with such proof if we request for it.
C
Data sharing
We share your data with
- HSBC group companies or business divisions
- third parties who provide services to us and other third parties we work with
- credit reference, debt collection and fraud prevention agencies
- any bodies or partnerships between law enforcement and the financial sector or authorities, such as legal, regulatory, law enforcement, government and tax authorities in Singapore or overseas or anyone acting for them
- any person who you hold a joint account with, people who can give instructions for you and anyone who is giving (or may give) security for your loans
- any third party who we may transfer our business or assets to
- partners and providers of reward, co-branding or loyalty programs, charities or non-profit organisations
- social media advertising partners (who can check if you hold an account with them for marketing purposes and the partner may then use your data to send our adverts to you and advertise to people who have a similar profile to you)
- any other third parties who you have consented to us sharing your data with
We may share your anonymised data with other parties not listed above. If we do this you won't be identifiable from this data.
D
Direct Marketing
This is when we use your personal data to send you details about products, services and offers such as financial, insurance or related products and services provided by us or our co-branding partners, rewards, loyalty privileges or charities. This includes providing you with personalized marketing (including by aggregating your data with data of others or through social media advertising partners). We'll only do this where you've consented (including by you giving us an indication of no objection where this is permitted by law).
We may use your contact details and data such as your demographic information, the products and services that you're interested in, transaction behaviour, portfolio information, location data, social media data, analytics and information from third parties when we market to you.
You can tell us any time if don't want to receive marketing from us by updating your marketing preferences on our web-site, clicking our "unsubscribe" links in our emails or by contacting us (it may take a short time to update our records to reflect any change).
We'll need to get your separate consent to share your data with other HSBC companies and business divisions, or third parties for them to market their products and services to you.
SECTION 2A: Reliance on Legitimate Interest
We may rely on legitimate interests to use and share your hashed data with third parties to evaluate the efficacy of our campaign approaches.
SECTION 3: Website Policy
- COOKIES NOTICE: This Cookies notice provides you with information about the cookies we use on this website and the purposes for which we use them. You may manage your cookie preferences at any time via your browser settings.
What are cookies?
Cookies are small pieces of data that websites store on your browser when you visit them. Cookies are useful because they allow a website to recognise your visit and collect information about how you use that website.
The cookies we use
We use cookies on this website as strictly necessary to operate our website, protect you and us, and provide you with the services you ask for. We also use optional cookies to improve our website and support advertising and social media.
Strictly necessary cookies are deployed automatically on our website. We’ve listed the categories of these strictly necessary cookies below.
Cookies that help you log on
We use these cookies to remember who you are when you log on to secure areas of our website. You won‘t be able to log on without them.
Cookies that help provide core services and features
We use these cookies to provide core services and features on our website. These services and features won’t work without them.
Cookies that help keep our website secure
We use these cookies to protect the security of our website, for example, to make sure the website is only accessed by genuine users. This helps us to keep you safe.
Cookies that help us detect fraud or crime
We use these cookies to help us identify suspicious behaviour on our website so we can protect both you and us from fraud.
Optional Cookies
We also use cookies to provide optional features to support marketing, personalisation and analytics. We understand that not everyone likes data to be collected about them when it’s not strictly necessary, and so we’ll ask you to set your preferences on your browser settings when you first visit our website. You can also change your preferences on your browser settings at any time.
Cookies that support marketing
We and our partners use these cookies to understand what you're interested in on our website and on social media. These cookies may also identify which other websites may have directed you to our website. This is so we or our partners can personalise our marketing to you, including online advertising. We may also send direct marketing to you through telephone calls, mobile messaging, post or email, social media and other digital channels where you’ve consented.
Cookies that we use to make your visit more personal
We use these cookies to ensure our optional features and services work. Our website will still work without them.
This category may also include:
1. cookies that allow us to customise what you see on our website and where, based on what we know about you
2. cookies that help prevent fraud on other websites or services that you haven't asked to use when you're on our website
3. cookies that help keep secure other websites or services that you haven't asked to use when you're on our website
Cookies that help us improve our website
We use these cookies to help us understand how people use our website. We can then use this data to improve how our website works. For instance, we may use analytics providers to identify and count visits to our website and to see which pages people go to and what they do there.
Cookies duration and your browser settings
The length of time for which cookies are stored on your browser varies depending on the cookie. Some cookies only last for your online session, whereas others will stay on your browser for a reasonable time afterwards. Unless we’ve given a specific time in the list of cookies above, the cookies set via our website will usually last up to 24 months from your most recent visit to our site.
Some of our partners also use the same cookies to collect information about the use of their own or other websites. In these cases the cookie can remain on your device, usually for up to 24 months from your last visit to the site that accessed that cookie.
You can use your browser settings to delete cookies that have already been set at any time. You can also use your browser settings to manage cookies, for example, to switch off a cookie altogether. If you do this, it could mean that we can't use strictly necessary cookies properly and so parts of our website may not work correctly. For more information about how to use your browser settings to clear your browser data or to manage cookies, check your browser 'Help' function.
Cookies and your privacy
The information cookies collect, and how we use that information, may count as personal data. We may also be able to identify you by name, IP address or session ID. You have rights regarding how we collect, store and use your personal data.
You can learn more about how we use your personal data in Section 2: Data Privacy Notice.
- THIRD PARTY SITES: Our website may contain links to other websites operated by third parties. Your use and access of such links is governed by the Hyperlink Policy and we are not responsible for the privacy practices of such websites.
SECTION 4: Mobile App Privacy Notice
You can view our Mobile App Privacy Notice here.
This Policy will apply for as long as we store your data. We'll review this Policy from time to time and may make changes. We'll notify you if any changes are made.