Table of contents
HSBC's privacy principles
The Hongkong and Shanghai Banking Corporation Limited and members of the HSBC Group (together "we", "us", "our") builds its business on trust between our customers and ourselves. To preserve the confidentiality of all personal data you provide to us, we maintain the following privacy principles:
- We only collect personal data that we believe to be relevant and required to understand your financial needs and to conduct our business
- We use your personal data to provide you with better customer services and products
- We may pass your personal data to other members of the HSBC Group or our respective agents, as permitted by law
- We will not disclose your personal data to any external organisation unless we a) have your consent or b) are required to by law or c) have previously informed you
- We may be required from time to time to disclose your personal data to governmental or judicial bodies or agencies or our regulators, but we will only do so under proper authority
- We aim to keep your personal data on our records accurate and up-to-date
- We maintain strict security systems designed to prevent unauthorised access to your personal data by anyone, including our staff
- All members of the HSBC Group, all our staff and all third parties with permitted access to your personal data are specifically required to observe our confidentiality obligations
By maintaining our commitment to these principles, we at HSBC will ensure that we respect the inherent trust that you place in us.
Your privacy matters to us
This section provides specific details of how we treat any information you might wish to provide us when you visit this website. Your use of this website indicates your acceptance of these terms and the terms set out in the website Term of Use and Hyperlink Policy.
We maintain strict security standards and procedures to prevent unauthorised access to information about you. HSBC will not contact you by e-mail or otherwise ask you to validate personal information such as your user ID or password. If you receive such a request, please call our 24-hour Customer Service Hotline on 1800-HSBC NOW (4722 669).
We also remind our customers to connect only to www.hsbc.com.sg when accessing Internet Banking. Never follow a link within an e-mail to start an Internet Banking session. Instead, key in directly to the browser address bar our URL (www.hsbc.com.sg) to access our secured Internet Banking site.
- Security is our top priority. We will strive at all times to ensure that your personal data will be protected against unauthorised or accidental access, processing or erasure. We maintain this commitment to data security by implementing appropriate physical, electronic and managerial measures to safeguard and secure your personal data.
- The secure area of this Site /App supports the use of Secure SocketLayer(SSL)protocol and 128-encryption technology - an industry standard for encryption over the Internet to protect data. When you provide sensitive information such as credit card details, it will be automatically converted into codes before being securely dispatched over the Internet.
- Our web servers are protected behind "firewalls" and our systems are monitored to prevent any unauthorised access. We will not send personal information to you by ordinary email. As the security of ordinary email cannot be guaranteed, you should only send email to us using the secure email facility on this Site/App for general enquiry.
- All practical steps will be taken to ensure that personal data will not be kept longer than necessary and that the Bank will comply with all statutory and regulatory requirements in Singapore concerning the retention of personally identifiable information.
- Both you and HSBC play an important role in protecting against online fraud. You should be careful that your bank account details including your User ID and/or Password are not compromised by ensuring that you do not knowingly or accidentally share, provide or facilitate unauthorised use of it. Do not share your User ID and/or password or allow access or use of it by others. We endeavor to put in place high standards of security to protect your interests. If, in the unlikely event, unauthorised transactions have been conducted through your account through no fraud, fault or negligence on your part, we will see that you are covered for your direct loss up to the full amount of the unauthorised transaction.
- You should safeguard your unique User ID and Password by keeping it secret and confidential. Never write them down or share these details with anyone. HSBC will never ask you for your Internet Banking Password, in order to ensure that you are the only person who knows this information. When choosing your unique User ID and Password for the first time, do not create it using easily identifiable information such as your birthday, telephone number or a recognisable part of your name. If you think your User ID and/or password has been disclosed to a third party, is lost or stolen and unauthorised transactions may have been conducted, you are responsible to inform us immediately.
- In respect of any use by you of this App, you should make sure you keep your mobile telephone or tablet and the security details you use to log onto this App safe and secure. You must let us know as soon as possible if these are lost or stolen. If you choose to activate the feature that allows you to use your biometric credentials to log onto this app (for supported devices only), you should ensure that only your biometric credentials are registered on the device. You may be responsible for unauthorized payments made from your accounts if you have not kept your mobile telephone or tablet and your security details safe, and have not followed the security precautions that we advise you to undertake from time to time, or if the biometric credentials registered on the device are not your own and you have activated such authentication method on the device.
- You must not use this App on any device or operating system that has been modified outside the mobile device or operating system vendor supported or warranted configurations. This includes devices that have been "jail-broken" or "rooted". A jail broken or rooted device means one that has been freed from the limitations imposed on it by your mobile service provider and the phone manufacturer without their approval. The use of this App on a jail broken or rooted device may compromise security and lead to fraudulent transactions. Download and use of this App in a jail broken or rooted device is entirely at your own risk and the Bank will not be liable for any losses or any other consequences suffered or incurred by you as a result.
- You should only download this App and its updates from official supplying app store and not from any unofficial sources.
- Your visit to this Site/App may be recorded for analysis on the number of visitors to the Site/App and general usage patterns. Some of this information will be gathered through the use of "cookies". Cookies are small bits of information that are automatically stored on your web browser in your computer, mobile phone or other device for accessing the Internet (“device”) that can be retrieved by this Site/App. Cookies are useful because they allow us to recognise your device and they store information about your use of this Site/App, thereby enabling us to provide more useful features to you, to tailor the content of our websites and mobile applications to suit your interests and, where permitted by your marketing preferences, provide you with promotional material or direct marketing based on your usage patterns. Should you wish to disable these cookies you may do so by changing the setting on your browser. However, you will be unable to enter certain part(s) of this Site/App, including HSBC Personal Internet Banking.
- If you accept cookies during your use of this Site or continue to use this App, you will be acknowledging that your information is being collected, stored, accessed and used as outlined above.
- Occasionally we may collect personal information from you when you visit this Site/App or when you participate in a contest or promotion (online or over the telephone,or at one of our branches). We only collect personal data from you if you voluntarily provide it to us. We may use your personal data to inform you of products, services and other marketing materials, which we think, may be of interest to you. We or our authorised external research agencies may also invite you to participate in market research and surveys and other similar activities.
- You can choose to receive marketing and other promotional materials by email. If you do receive email or promotional direct mailings, you will always have an opportunity to opt-out.
- If at any time you would like us to cease sending you direct mailings, please contact our Customer Service Hotline at 1800-786 6666 (local) or 6786 6666 (overseas). We will then, at no cost to you, act on your request within 30 days and ensure that you are not included in future direct marketing promotions.
Data protection policy - Singapore
Your privacy is important to us. This Data Protection Policy outlines how your Personal Data will be managed in accordance with the Personal Data Protection Act ("PDPA") which strives to protect personal data of individuals. Please take a moment to read this Data Protection Policy so that you know and understand the purposes for which we may collect, use and/or disclose your Personal Data.
You agree and consent to The Hongkong and Shanghai Banking Corporation Limited, Singapore Branch and our group companies (collectively referred to herein as "HSBC" , "us", "we" or "our") as well as our respective agents, authorised service providers and relevant third parties collecting, using, disclosing and/or sharing your Personal Data in the manner set forth in this Data Protection Policy. In this Data Protection Policy, "group companies" refers to HSBC Holdings plc and/or any of its affiliates, subsidiaries, associated entities and any of their branches and offices, such as HSBC Bank (Singapore) Limited, HSBC Insurance (Singapore) Pte Limited, HSBC Global Asset Management (Singapore) Limited, HSBC Trustee (Singapore) Limited, HSBC Institutional Trust Services (Singapore) Limited, HSBC International Trustee Limited, Singapore Branch and Hang Seng Bank Limited, Singapore Branch.
This Data Protection Policy supplements but does not supersede nor replace any other consents which you may have previously provided to us nor does it affect any rights that we may have at law in connection with the collection, use and/or disclosure of your Personal Data. We may from time to time update this Data Protection Policy to ensure that this Data Protection Policy is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. If any material revision is made to this Data Protection Policy, updates will be published at https://www.hsbc.com.sg/privacy-statement. Subject to your rights at law, the prevailing terms of the Data Protection Policy shall apply.
For the avoidance of doubt, this Data Protection Policy forms a part of the terms and conditions governing your relationship with us and should be read in conjunction with such terms and conditions ("Terms and Conditions"). In the event of any conflict or inconsistency between the provisions of this Data Protection Policy and the Terms and Conditions, the provisions of the Terms and Conditions shall prevail.
Your personal data
In this Data Protection Policy, "Personal Data" refers to any data or information about you from which you can be identified either from that data or from that data and other information to which we have or are likely to have access. Examples of such Personal Data include:
- your name, NRIC, passport or other identification number, telephone number(s), mailing address, email address and any other information relating to you which you have provided us in any forms you may have submitted to us, or in other forms of interaction with you
- information about your use of HSBC's website and services, including cookies, IP address, policy and claims history information
- your employment history, education background, and income levels
- your transaction related information, such as your bank account or credit card information, and your credit history
- information about your usage of and interaction with our website and/or services including computer and connection information, device capability, bandwidth, statistics on page views, and traffic to and from our website
Collection of personal data
Generally, HSBC may collect your Personal Data in the following ways:
- When you register with us for an account
- When you access our website or perform an online transaction
- When you interact with any of our employees (including customer service officers)
- When you submit an application to us to purchase our products or use our services
- When you respond to our request for additional Personal Data
- When you ask to be included in an email or other mailing list
- When you request that we contact you
- When you respond to our initiatives or promotions
- When you submit your Personal Data to us for any other reason
When you browse our website, you generally do so anonymously, but please see section 6 below on cookies.
Purposes for the collection, use and disclosure of your personal data
Generally, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Evaluating and providing advice and/or recommendations to you regarding the type of products and services suited to your needs
- Assessing and processing any applications or requests made by you for products and services offered by HSBC
- Communicating with you to inform you of changes and updates to our policies, terms and conditions and other administrative information, including without limitation for the purposes of servicing you in relation to products and services offered to you
- Administering, maintaining, managing and operating the products and services offered to you, including government-driven schemes
- Processing and administering benefits or entitlements in connection with our services which you have applied for, including the administration of loyalty and rewards programmes
- Verification of your identity for the purpose of providing you with our services
- Responding to your queries and requests and handling complaints
- Providing you with personalised service, including at our customer service touchpoints
- Conducting market research for statistical profiling and other purposes to understand and determine customer preferences and demographics in order for us to review, develop and improve the products and services which we are providing to you (including without limitation to ensure that the products and services offered are relevant to you)
- Conducting financial reporting and analysis related to our business operations
- Managing our infrastructure and business operations and complying with internal policies and procedures
- Archival of documents and records in both electronic and physical form for record keeping purposes
- Maintaining records of customer instructions, whether through phone recordings, hard copy documents, soft copy documents or instructions given via electronic or other means
- Conducting credit checks and ensuring your ongoing creditworthiness, and the collection of amounts outstanding from you and any person providing security or guarantees for your obligations
- Determining the amount of indebtedness owed to or by you
- Facilitating business asset transactions (which may extend to any merger, acquisition or asset sale) involving any HSBC group company
- Facilitating the verification and checks of your Personal Data in order to provide you with our products and services which you have requested
- Preventing, detecting and investigating crime, including fraud and any form of financial crime, and analysing and managing other commercial risks
- Compliance with any applicable local or foreign statute, rule, law, regulation, judgment, decree, directive, code of practice, guideline, administrative requirement, sanctions regime, court order, agreement between any HSBC group company and an Authority (as defined in section 5.1(k) of this Data Protection Policy), agreement or treaty between Authorities, international guidance and internal policies or procedures, which may apply to any HSBC group company or which any such company is subject to, or to assist in or with law enforcement and investigations by any Authority or to comply with any request from an Authority
- Subject to applicable law, any other purpose set out in the Terms and Conditions
You should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with products and services you have requested.
Where personal data is submitted by you on behalf of another individual or concerns another individual other than yourself (or, in the case of situations where you, as a representative of your company or organisation, are submitting the personal data of individuals as part of the disclosures by the company or organisation to us), you represent and warrant to us that all the necessary consents (procured in accordance with all applicable data protection legislation, including without limitation the PDPA, for such purposes stated in the relevant sections of this Data Protection Policy) have been obtained from the relevant individuals and that you have retained proof of these consents, such proof to be provided to us upon our request.
In addition, HSBC may collect, use and/or disclose your Personal Data for the following purposes, depending on the nature of our relationship with you as well as the type of account you hold with us.
If you are a retail banking account holder, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Processing and sending / receiving documents in respect of applications for products and services (including without limitation applications for Personal Instalment Loan, Personal Line of Credit, cards and bundled services, whether online or otherwise)
- Creation and maintenance of your account (including without limitation data entry)
- The executing and processing of your instructions to us including without limitation for withdrawals, deposits, settlements, reconciliation of accounts, processing instructions in respect of account tools and services including without limitation cheques, online services and debit and credit cards
- The issuing / printing of account statements
- Any other purpose directly relating to any of the above
If you are an insurance policy holder, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Processing and sending /receiving documents in respect of your insurance application
- Administering, maintaining, managing and operating the products and services offered to you, including reinsured products by other companies and government-driven schemes
- Sending updates and administrative notices to you in relation to the products and services used by you, including notification of maturity of payments and maturity of policies
- Underwriting of policy risks
- Assessing and processing of any claims arising under your policy
- Collecting premiums and debt collection
- Any other purpose directly relating to any of the above
If you are an investment account holder, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Creation and maintenance of your investment account
- Processing of applications for investment products, investment product instructions (including without limitation redemption and switching) and settlement of trades
- Any other purpose directly relating to any of the above
If you are a Private Bank customer, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Creation and maintenance of your account
- Preparation of the relevant documentation for the products and services used by you, including the preparation of facility letters and security documents, insurance policies and mortgages, or communications in connection therewith
- The executing and processing of your instructions to us including without limitation for withdrawals, deposits, settlements, reconciliation of accounts, processing instructions in respect of account tools and services, including without limitation cheques, online services and debit and credit cards
- The issuing / printing of account statements
- Processing (including verification of orders and instructions, securing regulatory and internal approvals) and settlement of transactions including those in connection with investment products and discretionary programs, portfolio review, administration and trade planning, trusts administration services
- Any other purpose directly relating to any of the above
If you are a beneficial owner or stakeholder (including any settlor, grantor, donor, contributor, founder, sponsor, issuer or beneficiary) in respect of any trust, estate or legal person administered by a HSBC trustee company (such as HSBC Trustee (Singapore) Limited or HSBC International Trustee Limited, Singapore Branch), HSBC may collect, use and/or disclose your Personal Data (and the Personal Data of beneficiaries and any other parties required to administer the trust) for the following purposes:
- Preparation of the relevant documentation for the services used by you, and communications in connection therewith
- Processing (including verification of orders and instructions, securing regulatory and internal approvals) and conducting of trusts administration services
- Any other purpose directly relating to any of the above
If you are a corporate customer (in the case of Sole Proprietorship or Partnership) or a representative of a corporate customer or corporate account holder, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Administering, maintaining, managing and operating the products and services offered to you (in the case of Sole Proprietorship or Partnership) or the corporation or company of which you are a representative
- Processing and executing the instructions issued by you (in the case of Sole Proprietorship or Partnership) or the corporation or company of which you are a representative (including without limitation verification of orders and instructions, securing regulatory and internal approvals)
- Preparation of the relevant documentation for the products and services used by you (in the case of Sole Proprietorship or Partnership) or the corporation or company of which you are a representative, and communications in connection therewith
- Any other purpose directly relating to any of the above
If you are a guarantor or a third party security provider of a customer of HSBC, HSBC may collect, use and/or disclose your Personal Data for the following purposes:
- Facilitating the daily operation of the products, services and credit facilities to be provided to the customer in respect of which/whom you are a guarantor and/or third party security provider
- Processing loan applications submitted by the customer in respect of which/whom you are a guarantor and/or third party security provider
- Providing loans and overdraft facilities (including without limitation the evaluation of credit risks and enforcement of repayment obligations) to the customer in respect of which/whom you are a guarantor and/or third party security provider
- Any other purpose directly relating to any of the above or in connection with the guarantee and/or third party security provided by you
If you do not interact with us in the manners specified above, we may collect, use and/or disclose your Personal Data for the following purposes, in accordance with the PDPA:
- The purposes for which we have specifically obtained your consent
- The purposes for which you have provided your Personal Data to us
Marketing / optional purposes
Where you have specifically provided us with additional consents, HSBC may also collect, use and/or disclose your Personal Data for the following purposes:
- Providing benefits to you, including without limitation promotions, loyalty and reward programmes and sending you details of products, services, special offers and rewards, either to our customers generally, or which may be of interest to you
- Matching your Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision or offering of products and services, whether by any HSBC group company, or other third parties
- Fulfilling your referral requests
- Administering contests and competitions
- Participation in HSBC's marketing initiatives
- Participation in HSBC's branding activities (including without limitation written or video/audio recordings of your quotes and testimony for media pitching, press releases and HSBC's internal publications and broadcasts)
- Invitations to participate in HSBC's corporate sustainability activities, and the video/audio recording of your feedback and testimony in relation thereto
- Developing special offers and marketing programmes
If you have provided your Singapore telephone number(s) and have indicated that you consent to receiving marketing or promotional information via your Singapore telephone number(s), then from time to time, we may contact you using such Singapore telephone number(s) (including via voice calls, SMS, fax or other means) with information about our products and services (including discounts and special offers).
Disclosure of personal data
Personal Data will be protected and kept confidential but, subject to the provisions of any applicable law, may be disclosed for the purposes listed above (where applicable) to the following parties:
- HSBC group companies
- Companies providing services relating to insurance and/or reinsurance to HSBC
- Private investigators, hospitals or clinics in connection with claims or underwriting assessment
- Associations of insurance companies, including the Life Insurance Association Singapore
- Agents, contractors or third party service providers who provide services, such as telecommunications, call centre, mailing, information technology, payment, payroll, data processing, training, market research, storage and archival, to HSBC
- The Credit Bureau, or in the event of default or disputes, any debt collection agencies or dispute resolution centres (whether in Singapore or otherwise) such as the Financial Industry Disputes Resolution Centre Ltd
- Any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale) involving HSBC
- Any liquidator, receiver, official assignee / trustee, judicial manager or any other person appointed under or pursuant to any applicable law or court order in connection with the bankruptcy, liquidation, winding up, judicial management or any other analogous process in respect of any individual, company or business
- Banks, financial institutions, credit card companies and their respective service providers
- Our professional advisers such as our auditors and lawyers
- Any judicial, administrative or regulatory body, any government or public or government agency, instrumentality or authority, any domestic or foreign tax, revenue, fiscal or monetary authority or agency, securities or futures exchange, self-regulatory organization, trade repositories, central counterparties, court, central bank or law enforcement body or any agents thereof, having jurisdiction over any HSBC group company (collectively referred to as "Authorities" and each an "Authority")
- Operators of payment systems, such as the Singapore Clearing House Association, Network for Electronic Transfers (Singapore) Pte Ltd., their member banks and third party financial institutions as well as credit card companies such as Visa Inc, Mastercard Inc, American Express Inc, and securities and investment services providers in connection with any payments, charges or other related instructions you may issue, as well as recipients of these payments and charges
- Any trade or merchant, or any other party accepting use of the ATM card and their agents or contractors in respect of transactions using the ATMs of banks or financial or non-financial institutions
- Any business alliance partner, insurance broker and direct or indirect provider of credit protection as may be necessary for the carrying out of the purposes set forth above
- Third party reward, loyalty, privileges and co-branding programme providers
- Co-branding partners of HSBC (the names of such co-branding partners will be provided during the application of the relevant services and products, as the case may be)
- Any other person in connection with the purposes set forth above
We may collect or analyse anonymised information from which individuals cannot be identified ("Aggregate Information"), such as number of users and their frequency of use, the number of page views (or page impressions) that occur on our websites and common entry and exit points into our websites.
We use "cookies", where a small data file is sent to your browser to store and track Aggregate Information about you when you enter our websites. The cookie is used to track information such as the number of users and their frequency of use, profiles of users and their preferred sites.
The Aggregate Information collected is used to assist us in analysing the usage of our websites and improving our websites.
Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our websites.
Our website may contain links to other websites operated by third parties. Your use and access of such links is governed by the Hyperlink Policy and we are not responsible for the privacy practices of websites operated by third parties that are linked to our website. We encourage you to learn about the privacy policies of such third party websites. Some of these third party websites may be co-branded with our logo or trademark, even though they are not operated or maintained by us. Once you have left our website, you should check the applicable data protection policy of the third party to determine how they will handle any information they collect from you.
Withdrawal of consent
If you wish to withdraw your consent to any use or disclosure of your Personal Data as set out in this Data Protection Policy, you may contact us via our customer service hotlines.
Please note that if you withdraw your consent to any or all use or disclosure of your Personal Data, depending on the nature of your request, we may not be in a position to continue to provide our products or services to you or administer any contractual relationship in place. Such withdrawal may also result in the termination of any agreement you may have with us. HSBC’s legal rights and remedies are expressly reserved in such event.
Access and correction of your personal data
You may request access to or make corrections to your Personal Data records, but HSBC has the right to charge a reasonable fee for processing your request. Please submit your request to the respective Data Protection Officer via the contact details indicated below for us to proceed.
If you have any questions or complaints relating to the use or disclosure of your Personal Data, or if you wish to know more about our data protection policies and practices, please contact the respective Data Protection Officer via the contact details indicated below.
Notice to customers relating to the DNC Provisions under Part IX of the PDPA
This Statement is made by The Hongkong and Shanghai Banking Corporation Limited, Singapore Branch and HBSP Bank (Singapore) Limited (in each case, 'the Bank') in accordance with the Do Not Call Provisions under Part IX of the Personal Data Protection Act (PDPA) ("DNC Provisions"). The Statement is intended to notify you why personal data is collected and how it may be used to send you marketing and/or promotional messages. The DNC Provisions, which have become effective since 2 January 2014, introduce certain changes to the way in which we may send you promotional and/or marketing messages and call you via your Singapore telephone number(s).
Marketing messages are messages sent to individuals with the intention of advertising; promoting or offering to provide goods or services; interests in land; business or investment opportunities or advertising; or promoting the supplier or provider of the aforesaid. These changes will however generally not affect our sending of other types of messages via your Singapore telephone number(s), such as informational and service related messages, messages that are for business to business marketing, market survey/research or which promote charitable or religious causes, and personal messages sent by individuals.
Use of data in direct marketing
The Bank aims to comply with the requirements of the DNC Provisions and respects your choices.
- If you have registered your telephone number with the DNC Registry, we will not send you promotional and/or marketing messages.
- Notwithstanding the above, if you have previously consented to our sending you such messages via your telephone number, we will continue to do so until you withdraw your consent.
Examples of the personal data which the Bank may collect, use and/or disclose in order to send you marketing and/or promotional messages about our products and services which may be of interest and relevance to you include (non-exhaustive list): your name, contact details, transaction patterns and behaviour, and demographic data.
Depending on the product or service concerned, your personal data may be disclosed to:
- the Bank's group companies
- third party financial institutions, insurers, credit card companies, telemarketing companies, securities and investment services providers
- service providers who have been contracted by the Bank to provide the Bank with administrative, financial, research, professional or other services
- the Bank's business partners, including reward, loyalty, privileges programme providers
- anyone authorised by an individual, as specified by that individual or in the contract
If you no longer wish to receive marketing and/or promotional messages from the Bank and had previously provided the Bank with your consent to do so, you can withdraw your consent here.