IMPORTANT: By accessing this website/mobile application and any of its pages, you agree to be bound by the terms and conditions set out below which may be subject to change from time to time. You are deemed to have accepted any change of the terms & conditions if you continue to use this website/mobile application with the changes posted therein.
Your Privacy is our priority. We respect the privacy of our customers' personal information. We will, at all times, comply with the Personal Data (Privacy) Ordinance. Our commitment is premised on the following principles:
This Notice is provided to notify customers and other individuals of the data policy of the Company, the Bank and the Bank's subsidiaries.
Two broad categories of personal data are held by us. They comprise personal data as set out below:
Customers or Prospective Customers' Personal Data
It includes the data or information which is necessary for us in connection with the opening or continuation of accounts, the establishment or continuation of banking / credit facilities or the provision of banking and/or any other financial services.
Our Employees' Personal Data or the Data Collected from our Job Applicants
It includes but not limited to the name, information or identification documents, contact information, educational background and curriculum vitae of employees.
1. In relation to Customers or Prospective Customers, the data is used for:
processing of applications for banking and/or any other financial services and facilities;
the daily operation of the services and banking/credit facilities provided to data subjects;
conducting credit or other status checks at the time of application for credit and at the time of regular or special reviews which normally will take place one or more times each year and carrying out matching procedures (as defined in the Ordinance) by the Company or any Group Company;
creating and maintaining the credit scoring models of the Company or any Group Company;
assisting other financial institutions to conduct credit checks and collect debts;
ensuring ongoing credit worthiness of data subjects;
designing banking and/or financial services or related products for data subjects' use;
determining amounts owed to or by data subjects;
collection of amounts outstanding from data subjects and those providing security for data subjects' obligations;
conducting insurance claims or analysis;
for operational purposes, credit assessment or statistical analysis (including behaviour analysis) of the Company or the Group;
maintaining a credit history of data subjects (whether or not there exists any relationship between data subjects and the Company) for present and future reference of the Company or the Group;
complying with the obligations, requirements or arrangements for disclosing and using data that apply to the Company or the Group or that it is expected to comply according to:
any law binding or applying to it within or outside the Hong Kong Special Administrative Region existing currently and in the future(e.g. the Inland Revenue Ordinance and its provisions including those concerning automatic exchange of financial account information);
any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside the Hong Kong Special Administrative Region existing currently and in the future(e.g. guidelines or guidance given or issued by the Inland Revenue Department including those concerning automatic exchange of financial account information);
any present or future contractual or other commitment with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers that is assumed by or imposed on the Company or the Group by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authority, or self-regulatory or industry bodies or associations;
complying with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within the Group and/or any other use of data and information in accordance with any group-wide programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
enabling an actual or proposed assignee of the Company or the Group or a participant, a sub-participant or a transferee of the rights of the Company or the Group in respect of the data subjects, to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation;
subject to customers or prospective customers' consent, marketing services, products and other subjects; and
purposes relating thereto.
2. Our job applicants' data is used for:
Recruitment;
Other employment-related purposes, including but not limited to selection, qualification assessment, employer reference, remuneration determination and other employment opportunities.
To comply with the requirements of the Ordinance, on or before we collecting personal data, we will notify our customers / prospective customers / job applicants of our purpose of collection of data, classes of persons to whom the data may be transferred, their rights to access and correct their data and other relevant information by providing a personal information collection statement or by other means which is deemed appropriate by the Bank.
For details about our handling on customers' personal data, please read our Notice to Customers and Other Individuals relating to the Personal Data (Privacy) Ordinance .
We take all reasonably practicable means to protect the data, such as, by restricting the data access by authorized personnel only and incorporating security measures into equipment in which data is held. Encryption is employed for sensitive data transmission. If we engage data processors to handle or process personal data on our behalf (whether within or outside Hong Kong), we would adopt contractual or other means to prevent any unauthorized or accidental access, processing, erasure, loss or use of the transferred data by the data processors.
The collected personal data will not be kept longer than necessary for the fulfillment of the purposes for which the personal data are or are to be used at the time of collection and for compliance with the legal, regulatory and accounting requirements from time to time. In related to customers' data, we shall continue to hold data relating to the customer(s) after the closure of account / termination of service or such other period as prescribed by applicable laws and regulations.
Unless we have obtained your consent, or are required to do so by law, otherwise, we will not disclose, share, sell or divulge your data to other external parties. For details about the possible classes of transferees for our customers' data, please refer to our Notice to Customers and Other Individuals relating to the Personal Data (Privacy) Ordinance .
This Privacy Policy Statement is subject to review and change from time to time. Please approach our branches or visit the Bank's website/mobile application for the latest Statement regularly.
The person to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of data held are to be addressed is as follows:
The Data Protection Officer, OCBC Bank (Hong Kong) Limited, 161 Queen's Road Central, Hong Kong
Email: enquiry_hk@ocbc.com
Subject to your consent, the Group may use or provide your personal data to other persons (whether or not such persons are members of the Group) for the purpose of direct marketing. If you do not wish us to do so, please contact the Data Protection Officer in writing at 161 Queen's Road Central, Hong Kong with your name and account number stated. No fee will be charged. For any enquiries, please email to enquiry_hk@ocbc.com
All information provided at your discretion will be deemed and remain the property of the Group. Such information will be passed to any company within the Group and related business partners who have undertaken to keep the information confidential.