更新關於個人資料(私隱)條例及《個人信貸資料實務守則》致客戶及其他個別人士的通知(「個人資料收集聲明」)

由2022年11月28日起,本公司的個人資料收集聲明將作出更新。個人資料聲明更新版解釋我們如何收集、使用、處理及分享你的個人資料,以作為我們向你提供的服務之一部分。我們須按照《個人資料(私隱)條例》(「條例」)處理和使用你的個人資料。

個人資料聲明更新版主要包含關於香港一項重要發展的變更:

多家個人信貸資料服務機構營運模式

多家個人信貸資料服務機構(「MCRA」)營運模式是由香港銀行公會、香港有限制牌照銀行及接受存款公司公會及香港持牌放債人公會制訂的一項重要新措施。

當你提出按揭、貸款或其他信貸產品或服務的申請時,相關貸款人將向個人信貸資料服務機構(「信貸資料服務機構」)索取關於你的信貸報告。信貸資料服務機構收集關於你現時及過往從各家向你提供貸款的債權人借貸的資料,然後將該等資料提供予潛在新貸款人,助其評估你的信貸能力。香港現時只有一家信貸資料服務機構。MCRA營運模式將讓貸款人得以透過多於一家信貸資料服務機構分享及使用個人信貸資料。

根據MCRA營運模式的規定,獲選信貸資料服務機構不得在未經客戶同意的情況下將信貸資料轉移至香港境外。

MCRA營運模式將於2022年年底推行。

個人資料聲明更新版所作重要變更的總結

以下為個人資料聲明更新版所作重要變更的概要,其中包括在MCRA營運模式下對客戶信貸資料進行收集披露的變更:

  1. 第(c)段 向信貸資料服務機構收集個人資料
    個人資料聲明更新版第(c)段涉及我們從信貸資料服務機構(作為其個人信貸報告服務一部分)接收個人資料的事宜。
  2. 第(e)(iv)段 向平台營運商披露資料
    我們於第(e)(iv)段清晰說明作為MCRA營運模式的一部分,你的個人信貸資料可能會被轉移至構成MCRA一部分的中央平台之營運商。
  3. 第(f)段、第(h)至(j)段、第(l)及(m)段 信貸資料服務機構的複數表述(第(f)段、第(h)至(j)段及第(l) 僅適用於個人資料聲明更新版的英文版本)
    個人資料聲明更新版第(f)段、第(h)至(j)段、第(l)及(m)段以複數形式表述信貸資料服務機構一詞,以表示你的個人信貸資料將在MCRA營運模式下被轉移至多家(而非僅一家)信貸資料服務機構。

以下隨附本公司個人資料收集聲明的更新版本(「個人資料聲明更新版」)。若有任何問題,敬請聯絡我們。

安信信貸有限公司 (「安信」) 關於個人資料(私隱)條例(「條例」)及《個人信貸資料實務守則》致客戶及其他個別人士的通知

  1. 資料當事人或須不時就下列事宜向安信提供有關資料:
      1. 開立或運作戶口
      2. 建立或維持信貸融通;及/或
      3. 建立或運作或提供由安信或透過安信供應的產品或服務(包括信貸、信用卡、理財及/或保險以及與該等產品及服務相關的產品及服務);
        (統稱信貸融通、產品及服務),及/或
    1. 安信接受的物資及服務。
  2. 若未能向安信提供該等資料,可能會導致安信無法建立、維持或向資料當事人提供信貸融通、理財產品及服務
  3. 資料當事人於安信日常業務過程中與或透過安信進行交易時,安信亦會收集資料當事人的資料,例如當資料當事人簽發支票或存款或透過信用卡進行交易時。安信亦會從獲核准加入多家個人信貸資料服務機構模式的信貸資料服務機構(以下簡稱「信貸資料服務機構」)接收個人資料。
  4. 資料當事人的資料可能用於以下任何一項或多項用途:
    1. 處理資料當事人建立信貸融通、產品及服務的申請(包括評估資料當事人申請的成功機會及/或合適性);
    2. 運作、維持及向資料當事人提供信貸融通、產品及服務
    3. 資料當事人進行信貸調查(無論是就信貸融通、產品及服務申請,抑或是每年的定期或特別檢討期間(通常一次或多於一次));
    4. 建立及維持安信的信貸評分模式;
    5. 協助其他在香港獲核准加入多家個人信貸資料服務機構模式的金融機構進行信貸調查及追討債務;
    6. 保存資料當事人的信貸紀錄,以供目前及今後參考;
    7. 確保資料當事人維持可靠信用;
    8. 設計資料當事人使用的信貸、信用卡、理財、保險服務或有關產品;
    9. 推廣服務、產品及其他促銷標的(更多詳情請參閱(g)段);
    10. 確定欠付資料當事人或其所欠的負債款額;
    11. 執行資料當事人所負義務,包括但不限於向資料當事人及就其義務提供扺押的人士追收欠款;
    12. 履行或遵守適用於安信的任何資料披露及使用義務、規定或安排,或根據以下內容應當遵守的義務、規定或安排:
      1. 不論於香港特別行政區境內或境外及不論目前或將來存在的對其具法律約束力或適用的任何法律或規例;
      2. 不論於香港特別行政區境內或境外及不論目前或將來存在的任何法律、監管、政府、稅務、執法或其他機關,或金融服務供應商的自律監管或行業組織或協會作出或發出的任何指引或指導;
      3. 安信因其位於或跟相關本地或外地的法律、監管、政府、稅務、執法或其他機關,或自律監管或行業組織或協會的司法管轄區有關的理財、商業、業務或其他利益或活動,而向該等本地或外地的法律、監管、政府、稅務、執法或其他機關,或金融服務供應商的自律監管或行業組織或協會承擔或被彼等施加的任何目前或將來的合約或其他承諾;
    13. 履行或遵守在安信為符合制裁或預防或偵測清洗黑錢、恐怖分子融資活動或其他非法活動的任何方案就於安信內共用資料及資訊及/或資料及資訊的任何其他使用而指定的任何義務、要求、政策、程序、措施或安排;
    14. 供安信全部或任何部份業務及/或資產的實際或潛在承讓人,或安信對資料當事人的權利的參與人或附屬參與人衡量有關轉讓、參與或附屬參與所涉交易;及/或
    15. 與上述用途有關的任何其他用途。
  5. 安信會對其持有的資料當事人資料予以保密,但可就(d)段列出的用途把該等資料提供、移轉或披露給(香港特別行政區境內或境外的)下述任何一方或多方:
    1. 信貸融通、產品及服務的建立、運作、維持或提供而向安信提供行政、電訊、電腦、支付或其他服務的任何代理人、承辦商或第三方服務供應商;
    2. 對安信有保密責任的任何其他人士;
    3. 向出票人提供已付款支票副本(其中可能載有收款人的資料)的付款銀行;
    4. 信貸資料服務機構(包括信貸資料服務機構所使用的任何中央資料庫之經營者)及(如有違約事件)收數公司或律師行;
    5. 根據對安信有約束力或適用於安信之任何法例或規例的規定,或根據並為施行由規管安信之任何法律、監管、政府、稅務、執法或其他機關,或金融服務供應商的自律監管或行業組織或協會作出或發出的並期望安信遵守的任何指引或指導,或根據安信向本地或外地的法律、監管、政府、稅務、執法或其他機關,或金融服務供應商的自律監管或行業組織或協會的任何合約或其他承諾(以上不論於香港特別行政區境內或境外及不論目前或將來存在的),而有義務或以其他方式被要求向其披露該等資料的任何人士;
    6. 資料當事人已有或擬有業務往來的任何金融機構及商業收購公司;
    7. 安信全部或任何部份業務及/或資產的任何實際或潛在承讓人,或安信對資料當事人的權利的參與人、附屬參與人或受讓人;
    8. 提供或擬定提供擔保或第三方抵押,從而擔保或抵押資料當事人之義務的任何方;及/或
    9. (1) 第三方金融機構、保險公司、信用卡公司及有關服務供應商;
      (2) 第三方獎賞、獎勵、合作品牌及優惠計劃供應商;
      (3) 安信之合作品牌夥伴(該等合作品牌夥伴名稱會於有關服務及產品的申請表格上列明,視乎情況而定);
      (4) 慈善或非牟利機構;及
      (5) 就以上(d)(ix)段列明的用途而被安信任用之外部服務供應商(包括但不限於寄件中心、電訊公司、電話促銷及直銷代理人、電話中心、資料處理公司及資訊科技公司)。

    該等資料可能被轉移至香港特別行政區境外。

  6. (i) 就資料當事人(以任何身份) 於2011年4月1日當日或以後申請的按揭有關的資料,安信可能會把下列與資料當事人有關的資料(包括不時更新任何下列資料的資料)以安信及/或代理人的名義提供予信貸資料服務機構:
    1. 全名;
    2. 就每宗按揭的身份(即作爲借款人、按揭人或擔保人,及以資料當事人本人單名或與其他人士聯名方式);
    3. 香港身份證號碼或旅遊證件號碼;
    4. 出生日期;
    5. 通訊地址;
    6. 就每宗按揭的按揭戶口號碼;
    7. 就每宗按揭的信貸融通種類;
    8. 就每宗按揭的按揭戶口狀况(如有效、已結束、已撇帳(因破産令導致除外)、因破産令導致已撇帳);及
    9. 就每宗按揭的按揭戶口結束日期(如適用)。

    (ii) 信貸資料服務機構將使用上述由安信提供的資料統計資料當事人(分別以借款人、按揭人或擔保人身份,及以資料當事人本人單名或與其他人士聯名方式)不時於香港信貸提供者間持有的按揭宗數,並存於信貸資料服務機構的個人信貸資料庫內供信貸提供者共用(須受根據條例核准及發出的《個人信貸資料實務守則》的規定所限)。
    (iii) 安信可於以下期間不時查閱信貸資料服務機構持有的按揭宗數

    1. 考慮資料當事人(以任何身份)提交的按揭貸款申請;
    2. 檢討出現拖欠還款超過60日的欠賬的任何已向資料當事人(以任何身份)提供或擬提供的信貸融通(包括按揭貸款),以便安信就該信貸融通制訂任何債務重組、重新安排或其他還款條件修訂;
    3. 當安信與資料當事人資料當事人就信貸融通拖欠還款而已制訂任何債務重組、重新安排或其他還款條件修訂時,檢討任何已向資料當事人(以任何身份)提供或擬提供的信貸融通(包括按揭貸款),以便推行上述債務重組安排;及/或
    4. 檢討任何已向資料當事人(以任何身份)提供或擬提供的信貸融通(包括按揭貸款),以便制訂由資料當事人提出的任何債務重組、重新安排或其他還款條件修訂。

    (iv) 安信可於以下期間(於2013年3月31日之後)不時查閱信貸資料服務機構持有的按揭宗數

    1. 檢討及續批向資料當事人(以任何身份)提供或擬提供的按揭貸款;及/或
    2. 考慮資料當事人(除了按揭人,以任何身份)提出的信貸融通(不包括按揭貸款)申請,及/或檢討或續批已向資料當事人(除了按揭人,以任何身份)提供或擬提供的任何融通(不包括按揭貸款),前提是在上述任一情形下,該等信貸融通的額度不少於由一個個人資料私隱專員不時指定或決定的水平或機制釐定的水平。
  7. 在直接促銷中使用資料
    安信擬把資料當事人資料用於直接促銷,而安信為該用途須獲得資料當事人同意(包括表示不反對)。就此,請注意:

    1. 安信可能把安信不時持有的資料當事人姓名、詳細聯絡方式、產品及服務組合資料、交易模式及行為、財務背景及人口統計數據用於直接促銷;
    2. 可用作促銷下列類別的服務、產品及促銷標的:
      1. 信貸、理財、保險、信用卡及相關服務及產品;
      2. 獎賞、獎勵或優惠計劃及相關服務及產品;
      3. 安信品牌合作夥伴提供之服務及產品(該等品牌合作夥伴名稱會於有關服務及產品的申請表格上列明,視乎情況而定);及
      4. 為慈善及/或非牟利用途的捐款及捐贈;
    3. 上述服務、產品及促銷標的可能由安信及/或下列各方提供或(就其他推廣活動、捐款及/或捐贈而言)徵求:
      1. 第三方金融機構、承保人、信用卡公司;
      2. 第三方獎賞、客戶或會員、合作品牌或優惠計劃供應商;
      3. 安信之品牌合作夥伴(該等品牌合作夥伴名稱會於有關服務及產品的申請表格上列明,視乎情況而定);及
      4. 慈善或非牟利機構;
    4. 除由安信促銷上述服務、產品及促銷標的以外,安信亦擬將以上(g)(i)段所述的資料提供予以上(g)(iii)段所述的全部或任何人士,以供該等人士在促銷該等服務、產品及促銷標的中使用,而安信為此用途須獲得資料當事人書面同意(包括表示不反對);
    5. 安信可能因如以上(g)(iv)段所述將資料提供予其他人士而獲得金錢或其他財產的回報。如安信會因提供資料予其他人士而獲得任何金錢或其他財產的回報,安信會於以上(g)(iv)段所述徵求資料當事人同意或不反對時如是通知資料當事人

    資料當事人不希望安信如上述使用其資料或將其資料提供予其他人士作直接促銷用途,資料當事人可通知安信行使其選擇權拒絶促銷。

  8. 根據條例的條款及據條例核准和發出的《個人信貸資料實務守則》,任何資料當事人有權:
    1. 查問安信有否持有其資料及/或能夠查閱該等資料;
    2. 要求安信改正任何有關其不準確的資料;
    3. 查明安信對於資料的政策及程序並獲悉安信所持及/或他/她能夠查閱之個人資料的種類;
    4. 要求獲告知哪些資料會被例行披露予信貸資料服務機構或收數公司,並獲提供進一步資料,藉以向有關信貸資料服務機構或收數公司提出查閱和改正資料的要求;及
    5. 對於安信向信貸資料服務機構提供的任何戶口資料(為免產生疑問,包括任何戶口還款資料),於悉數清償欠款而終止戶口時,指示安信向信貸資料服務機構要求從資料庫刪除有關戶口資料,惟是項指示須於終止戶口後五年內提出,而該戶口在緊接終止之前五年內,並無拖欠還款超過60天的紀錄。 戶口還款資料包括上次到期的還款額、上次報告期間所作還款額(即緊接安信上次向信貸資料服務機構提供戶口資料前不超過31天的期間)、剩餘可用信貸額或未償還數額及欠款資料(即過期欠款額及逾期還款日數、清還過期欠款的日期和悉數清還拖欠超過60天的欠款的日期(如有))。
  9. 如出現關於戶口的拖欠還款情況,除非拖欠金額在自出現拖欠之日起計60天屆滿前被悉數清還或撇賬(因破產令悉數清還或撇賬者除外),否則信貸資料服務機構可保留該戶口還款資料(定義見上文第(h)(v)段),直至自欠款悉數清還之日起計滿五年為止。
  10. 資料當事人因被頒布破產令而導致其戶口中的任何金額被撇賬,則不論其戶口還款資料(定義見上文第(h)(v)段)是否顯示有拖欠還款超過60天的紀錄,信貸資料服務機構均可保留該戶口還款資料,直至自欠款悉數清還之日起計滿五年為止,或自資料當事人提出證據通知信貸資料服務機構其已獲解除破產令之日計滿五年為止(以較早者為準)。
  11. 根據條例的條款,安信有權就處理任何查閱資料的要求收取合理費用。
  12. 在不限制前述條文的一般性的原則下,安信可為檢討下列任何事宜的目的,而不時查閱信貸資料服務機構所持的資料當事人個人及戶口資料或紀錄,而該等事宜涉及向資料當事人提供或該資料當事人擔保其義務之第三方的現有信貸融通:
    1. 增加信用額;
    2. 縮減信貸(包括取消信貸或減低信用額);及
    3. 資料當事人或該第三方展開或實行債務安排計劃。
  13. 安信或向一間或多間信貸資料服務機構查閱有關客戶的信貸報告用以考慮資料當事人之任何信貸申請。若資料當事人有意索取有關信貸報告,安信將會告知相關信貸資料服務機構的聯絡詳情。
  14. 安信或前文(e)條所指從安信取得有關資料的任何人士可在或可向其認為合適的國家處理、保存及轉移或披露資料當事人的資料。有關資料亦可根據該國當地的慣例和法例、規則和規例(包括任何政府措施和指令)而處理、保存、轉移或披露
  15. 任何關於查閱或改正安信所持資料、索取安信資料政策及常規的資料或所持有的資料種類的要求,應向下列人士提出:
    1. 安信信貸有限公司
    2. 香港灣仔郵政信箱23207號
    3. 資料保障主任
    4. 電話:2163 0201
    5. 傳真:2134 3377
  16. 本通知不會限制資料當事人在個人資料(私隱)條例下所享有的權利。

在本通知中,除非與上下文不符或另有其他規定,否則斜體字須具有如下含義:

戶口,指就安信可能不時提供予資料當事人的各項信貸融通、服務或產品,而不時開立及/或維持的戶口。

資料當事人包括信貸融通、產品及服務的申請人、客戶、客戶配偶、抵押提供者、審查人、企業職員及經理、供應商、代理人、承辦商、服務供應商及其他合約對手以及與或透過安信進行交易的任何第三方。

披露,就個人資料而言,包括披露由該等資料推斷出的資訊。

以任何身份,指不論以借款人、按揭人或擔保人身份,以及不論以資料當事人本人單名或與其他人士聯名之方式。

按揭宗數,指資料當事人(以任何身份)不時於香港信貸提供者間持有的按揭貸款宗數。

若英文版本與中文版本之間有任何不一致之處,概以英文版本為準。

2022年11月

Amendments to Notice to Customers and other individuals relating to the Personal Data (Privacy) Ordinance (the “Ordinance”) and the Code of Practice on Consumer Credit Data (“Notice”)

With effective from 28 November 2022, the Notice of the Company will be updated. The updated Notice explains how we collect, use, process and share your personal data as part of our services to you. We are required to handle and use your personal data in accordance with the Personal Data (Privacy) Ordinance (the “PDPO”).

The updated Notice includes changes that relate to an important development in Hong Kong:

Multiple Credit Reference Agencies Model

The Multiple Credit Reference Agencies (“MCRA”) model is an important new initiative developed by the Hong Kong Association of Banks, the DTC Association and the Hong Kong S.A.R. Licensed Money Lenders Association.

When you apply for a mortgage, loan or other credit product or service, the lender will seek a credit reference report about you from a consumer credit reference agency (“CRA”). CRAs collect information about your past and present borrowing from various creditors who have made loans to you, and then provide this information to potential new lenders to help them assess your creditworthiness. At present, there is only one CRA in Hong Kong. The MCRA model enables lenders to share and use consumer credit data through more than one CRA.

Selected CRAs will not be allowed to transfer credit data outside Hong Kong without customer’s consent under the requirements of the MCRA model.

The MCRA model will be launched by the end of 2022.

Summary of Major Changes in the Updated Notice

We have set out an overview of key changes in the updated Notice below, which includes changes concerning the collection and disclosure of consumer credit data under the MCRA model:

  1. Paragraph (c) – Collection of Personal Data from CRAs
    Paragraph (c) of the updated Notice refers to our receipt of personal data from CRAs as part of their consumer credit reporting services.
  2. Paragraph (e)(iv) – Disclosure of Data to Platform Operator
    We have made it clear in paragraph (e)(iv) that as part of the MCRA model, your consumer credit data may be transferred to the operator of the centralized platform forming part of MCRA.
  3. Paragraphs (f), (h) to (j), (l) and (m) – references to CRAs in plural (Paragraphs (f), (h) to (j) and (l) are only applicable to the English version of the updated Notice)
    Paragraphs (f), (h) to (j), (l) and (m) of the updated Notice refer to CRAs in plural, reflecting that transfers of your consumer credit data will be made to multiple CRAs under the MCRA model instead of just to one CRA.

We enclose herewith an updated version of the Notice.  Please review these changes carefully and feel free to contact us if you have any questions.

PrimeCredit Limited (“PCL”) Notice to Customers and other individuals relating to the Personal Data (Privacy) Ordinance (the “Ordinance”) and the Code of Practice on Consumer Credit Data

  1. From time to time, it is necessary for data subjects to supply PCL with data in connection with the following matters such as:
      1. the opening or operation of accounts;
      2. the establishment or maintenance of facilities; and/or
      3. the establishment or operation or provision of products or services offered by or through PCL (which include credit facilities, credit cards, financial and/or insurance as well as products and services relating to these);
        (collectively, Facilities, Products and Services), and/or
    1. the receipt of supplies and services to PCL.
  2. Failure to supply such data may result in PCL being unable to establish, maintain or provide Facilities, Products and Services to data subjects.
  3. It is also the case that data are collected by PCL from data subjects transacting with or through PCL in the ordinary course of PCL’s business, for example, when data subjects write cheques or deposit money or effect transactions through credit cards. PCL will also collect data relating to data subjects from the credit reference agencies approved for participation in the Multiple Credit Reference Agencies Model (hereinafter referred to as “credit reference agencies”).
  4. Data relating to a data subject may be used for any one or more of the following purposes:
    1. processing applications from the data subject (including assessing the merits and/or suitability of the data subject’s application(s)) for the establishment of Facilities, Products and Services;
    2. operating, maintaining and providing Facilities, Products and Services to the data subject;
    3. conducting credit checks on the data subject (whether in respect of an application for Facilities, Products and Services or during regular or special review which normally will take place once or more each year);
    4. creating and maintaining PCL’s credit scoring models;
    5. assisting other financial institutions in Hong Kong approved for participation in the Multiple Credit Reference Agencies Model to conduct credit checks and collect debts;
    6. maintaining credit history of the data subject for present and future reference;
    7. ensuring ongoing credit worthiness of the data subject;
    8. designing credit facilities, credit cards, financial and insurance services or related products for the data subject’s use;
    9. marketing services, products and other subjects (please see further details in paragraph (g) below);
    10. determining the amounts of indebtedness owed to or by data subjects;
    11. enforcement of data subject’s obligations, including without limitation the collection of amounts outstanding from data subject and those providing security for data subjects‘ obligations;
    12. meeting or complying with any obligations, requirements or arrangements for disclosing and using data that apply to PCL or that it is expected to comply according to:
      1. any law or regulation binding on or applying to it within or outside the Hong Kong Special Administrative Region existing currently and in the future;
      2. any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside the Hong Kong Special Administrative Region existing currently and in the future;
      3. any present or future contractual or other commitment with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers that is assumed by or imposed on PCL by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authority, or self-regulatory or industry bodies or associations;
    13. meeting or complying with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within PCL and/or any other use of data and information in accordance with any programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
    14. enabling an actual or potential assignee of PCL, or participant or sub-participant of PCL’s rights in respect of the data subject, to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation; and/or
    15. any other purposes relating to the purposes listed above.
  5. Data held by PCL relating to a data subject will be kept confidential but PCL may provide, transfer or disclose such data or information to any one or more of the following parties (whether within or outside the Hong Kong Special Administrative Region) for the purposes set out in paragraph (d) above:
    1. any agent, contractor or third party service provider who provides administrative, telecommunications, computer, payment or other services to PCL in connection with the establishment, operation, maintance or provision of Facilities, Products and Services;
    2. any other person under a duty of confidentiality to PCL;
    3. the drawee bank providing a copy of a paid cheque (which may contain information about the payee) to the drawer;
    4. credit reference agencies (including the operator of any centralized database used by the credit reference agencies), and, in the event of default, to debt collection agencies or solicitor firms;
    5. any person or entity to whom PCL is under an obligation or otherwise required to make disclosure under the requirements of any law or regulation binding on or applying to PCL, or any disclosure under and for the purposes of any guidelines, guidance, directives, rules, codes, circulars or other similar documents given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers with which PCL is expected to comply, or any disclosure pursuant to any contractual or other commitment of PCL with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers, all of which may be within or outside the Hong Kong Special Administrative Region and may be existing currently and in the future;
    6. any financial institution and merchant acquiring company with which a data subject has or proposes to have dealings;
    7. any actual or proposed assignee of PCL or participant or sub-participant or transferee of PCL’s rights in respect of the data subject;
    8. any party giving or proposing to give a guarantee or third party security to guarantee or secure the data subject’s obligations; and/or
    9. (1) third party financial institutions, insurers, credit card companies and related services providers;
      (2) third party reward, loyalty, co-branding and privileges programme providers;
      (3) co-branding partners of PCL (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be);
      (4) charitable or non-profit making organisations; and
      (5) external service providers (including but not limited to mailing houses, telecommunication companies, telemarketing and direct sales agents, call centres, data processing companies and information technology companies) that PCL engages for the purposes set out in paragraph (d)(ix) above.

    Such information may be transferred to a place outside the Hong Kong Special Administrative Region.

  6. (i) With respect to data in connection with mortgages applied by a data subject (in any capacity) on or after 1 April 2011, the following data relating to the data subject (including any updated data of any of the following data from time to time) may be provided by PCL, on its own behalf and/or as agent, to the credit reference agencies:
    1. full name;
    2. capacity in respect of each mortgage (as borrower, mortgagor or guarantor, and whether in the data subject’s sole name or in joint names with others);
    3. Hong Kong Identity Card Number or travel document number;
    4. date of birth;
    5. correspondence address;
    6. mortgage account number in respect of each mortgage;
    7. type of the facility in respect of each mortgage;
    8. mortgage account status in respect of each mortgage (e.g., active, closed, write-off (other than due to a bankruptcy order), write-off due to a bankruptcy order); and
    9. if any, mortgage account closed date in respect of each mortgage.

    (ii) The credit reference agencies will use the above data supplied by PCL for the purposes of compiling a count of the number of mortgages from time to time held by the data subject with credit providers in the Hong Kong Special Administrative Region, as borrower, mortgagor or guarantor respectively and whether in the data subject’s sole name or in joint names with others, for sharing in the consumer credit databases of the credit reference agencies by credit providers (subject to the requirements of the Code of Practice on Consumer Credit Data approved and issued under the Ordinance).

    (iii) PCL may from time to time access the mortgage count held by the credit reference agencies in the course of:

    1. considering mortgage loan application(s) made by the data subject (in any capacity);
    2. reviewing any credit facility (including mortgage loan) granted or to be granted to the data subject (in any capacity) which is in default for a period of more than 60 days with a view to putting in place any debt restructuring, rescheduling or other modification of the terms of such credit facility by PCL;
    3. reviewing any credit facility (including mortgage loan) granted or to be granted to the data subject (in any capacity), where there is in place any debt restructuring, rescheduling or other modification of the terms of such credit facility between PCL and the data subject consequent upon a default in the repayment of such credit facility for implementing such arrangement, and/or
    4. reviewing any credit facility (including mortgage loan) granted or to be granted to the data subject (in any capacity), with a view to putting in place any debt restructuring, rescheduling or other modification of the terms of any credit facility initiated by the request of the data subject.

    (iv) PCL may from time to time access the mortgage count held by the credit reference agencies in the course of (after 31 March 2013):

    1. reviewing and renewing mortgage loans granted or to be granted to the data subject (in any capacity); and/or
    2. considering the application for credit facility (other than mortgage loan) by the data subject (in any capacity other than mortgagor) and/or reviewing or renewing any facility (other than mortgage loan) granted or to be granted to the data subject (in any capacity other than mortgagor), in each case where such facility is in an amount not less than such level or to be determined by a mechanism as prescribed or approved by the Privacy Commissioner for Personal Data from time to time.
  7. USE OF DATA IN DIRECT MARKETING
    PCL intends to use a data subject’s data in direct marketing and PCL requires the data subject’s consent (which includes an indication of no objection) for that purpose. In this connection, please note that:

    1. the name, contact details, products and services portfolio information, transaction pattern and behaviour, financial background and demographic data of a data subject held by PCL from time to time may be used by PCL in direct marketing;
    2. the following classes of services, products and subjects may be marketed:
      1. credit facilities, financial, insurance, credit card and related services and products;
      2. reward, loyalty or privileges programmes and related services and products;
      3. services and products offered by PCL’s co-branding partners (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be); and
      4. donations and contributions for charitable and/or non-profit making purposes;
    3. the above services, products and subjects may be provided or (in the case of other promotion activities, donations and/or contributions) solicited by PCL and/or:
      1. third party financial institutions, insurers and credit card companies;
      2. third party reward, loyalty, co-branding or privileges programme providers;
      3. co-branding partners of PCL (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be); and
      4. charitable or non-profit making organisations;
    4. In addition to marketing the above services, products and subjects itself, PCL also intends to provide the data described in paragraph (g)(i) above to all or any of the persons described in paragraph (g)(iii) above for use by them in marketing those services, products and subjects, and PCL requires the data subject’s written consent (which includes an indication of no objection) for that purpose;
    5. PCL may receive money or other property in return for providing the data to the other persons in paragraph (g)(iv) above and, when requesting the data subject’s consent or no objection as described in paragraph (g)(iv) above, PCL will inform the data subject if it will receive any money or other property in return for providing the data to the other persons.

    If a data subject does not wish PCL to use or provide to other persons his/her data for use in direct marketing as described above, the data subject may exercise his/her opt-out right by notifying PCL.

  8. Under and in accordance with the terms of the Ordinance and the Code of Practice on Consumer Credit Data approved and issued under the Ordinance, any data subject has the right:
    1. to check whether PCL holds data about him and/or access to such data;
    2. to require PCL to correct any data relating to him which is inaccurate;
    3. to ascertain PCL’s policies and procedures in relation to data and to be informed of the kind of personal data held by PCL and/or he/she has access to;
    4. to be informed on request which items of data are routinely disclosed to credit reference agencies or debt collection agencies, and be provided with further information to enable the making of an access and correction request to the relevant credit reference agency(ies) or debt collection agency(ies); and
    5. in relation to any account data (including, for the avoidance of doubt, any account repayment data) which has been provided by PCL to a credit reference agency, to instruct PCL, upon termination of the account by full repayment, to make a request to the credit reference agency to delete such account data from its database, as long as the instruction is given within five years of termination and at no time was there any default of payment in relation to the account, lasting in excess of 60 days within five years immediately before account termination. Account repayment data includes amount last due, amount of payment made during the last reporting period (being a period not exceeding 31 days immediately preceding the last contribution of account data by PCL to the credit reference agency), remaining available credit or outstanding balance and default data (being amount past due and number of days past due, date of settlement of amount past due, and date of final settlement of amount in default lasting in excess of 60 days (if any)).
  9. In the event of any default of payment relating to an account, unless the amount in default is fully repaid or written off (other than due to a bankruptcy order) before the expiry of 60 days from the date such default occurred, the account repayment data (as defined in paragraph (h)(v) above) may be retained by the credit reference agencies until the expiry of five years from the date of final settlement of the amount in default.
  10. In the event any amount in an account is written-off due to a bankruptcy order being made against a data subject, the account repayment data (as defined in paragraph (h)(v) above) may be retained by the credit reference agencies, regardless of whether the account repayment data reveals any default of payment lasting in excess of 60 days, until the expiry of five years from the date of final settlement of the amount in default or the expiry of five years from the date of discharge from a bankruptcy as notified by the data subject with evidence to the credit reference agency(ies), whichever is earlier.
  11. In accordance with the terms of the Ordinance, PCL has the right to charge a reasonable fee for the processing of any data access request.
  12. Without limiting the generality of the foregoing, PCL may from time to time access the personal and account information or records of a data subject held by the credit reference agencies for the purpose of reviewing any of the following matters in relation to the existing credit facilities granted to a data subject or a third party whose obligations are guaranteed by a data subject:
    1. an increase in the credit amount;
    2. the curtailing of credit (including the cancellation of credit or a decrease in the credit amount); and
    3. the putting in place or the implementation of a scheme of arrangement with the data subject or the third party.
  13. PCL may have obtained a credit report on a data subject from one or more credit reference agency(ies) in considering any application for credit. In the event the data subject wishes to access the credit report, PCL will advise the contact details of the relevant credit reference agency(ies).
  14. Data of a data subject may be processed, kept, transferred or disclosed in and to any country as PCL or any person who has obtained such data from PCL referred to in (e) above considers appropriate. Such data may also be processed, kept, transferred or disclosed in accordance with the local practices and laws, rules and regulations (including any governmental acts and orders) in such country.
  15. The person to whom requests for access to data or correction of data held by PCL, or for information regarding PCL’s data policies and practices and kinds of data held by PCL are to be addressed is as follows:
    1. Data Protection Officer
    2. PrimeCredit Limited
    3. P.O. Box 23207, Wanchai Post Office, Hong Kong
    4. Telephone: 2163 0201
    5. Fax: 2134 3377
  16. Nothing in this Notice shall limit the rights of data subjects under the Personal Data (Privacy) Ordinance.

In this notice, unless inconsistent with the context or otherwise specified, the words in italic shall have the following meanings:

account means, for each Facility, Service or Product which PCL may from time to time make available to the data subjects, the account that is, opened and/or maintained in respect of it from time to time.

data subject(s) includes applicants for Facilities, Products and Services, customers, customer’s spouse, security providers, referees, corporate officers and managers, suppliers, agents, contractors, service providers and other contractual counterparties and any third party transacting with or through PCL.

disclose, disclosing or disclosure, in relation to personal data, includes disclose or disclosing information inferred from the data.

in any capacity means whether as a borrower, mortgagor or guarantor and whether in the data subject’s sole name or joint names with others.

mortgage count means the number of mortgage loans held by the data subject (in any capacity) with credit providers in the Hong Kong Special Administrative Region from time to time.

Should there be any inconsistencies between the English and Chinese versions, the English version shall prevail.

November 2022