私隱聲明

一、引言

本私隱聲明依據《個人資料(私隱)條例》(香港法例第 486 章)等相關法律法規制定,適用於本公司([電訊數碼證券有限公司],對客戶個人資料的收集、持有、處理、轉移、保安及查詢等事宜。無論客戶透過網路、行動應用程式、電話或其他任何方式與本公司互動,本公司均嚴格依照本政策處理客戶資料。本聲明於 [2025年7月1 日] 起生效,如有更新,將提前以適當方式通知客戶。

二、個人資料的收集

(一)收集方式
帳戶註冊與服務申請:當客戶註冊帳戶、申請服務(如證券交易帳戶開通、金融產品認購等)時,我們會收集必要信息,如姓名、身份證件號碼、聯繫方式(手機號碼、電子郵箱)、地址等,以完成身份驗證與服務開通流程。拒絕提供此類關鍵資訊將導致無法註冊帳戶或獲得相關服務。
服務使用流程:在客戶使用服務期間,我們自動收集設備資訊(設備型號、作業系統、唯一設備識別碼)、網路資訊(IP 位址、網路連線狀態)、使用日誌(登入時間、瀏覽頁面、交易作業記錄)等,用於服務最佳化、故障排查及安全監測。
客戶主動提供:客戶在諮詢客服、參與調查、回饋意見時主動提供的訊息,如諮詢內容、建議回饋、問卷答案等,將用於提升服務品質與解決客戶問題。
(二)敏感資訊收集
涉及金融帳戶資訊(如銀行卡號、支付密碼)、生物辨識資訊(指紋、臉部識別,若用於登入或交易驗證)、特定身分資訊(如稅務識別號)等敏感個人資訊時,我們將在收集前明確告知客戶收集目的、方式、儲存期限,並徵得客戶單獨同意。此類敏感資訊僅在實現特定服務功能所需的情況下收集,並採取更嚴格的安全保護措施。

三、個人資料的使用目的

提供服務:用於客戶身分驗證、帳戶管理、交易執行、金融產品交付、資訊推送等核心服務功能,確保服務正常運作與客戶需求滿足。
服務優化與個人化:分析客戶使用習慣、偏好及回饋,優化服務流程、介面設計,提供個人化服務推薦與客製化體驗,如個人化投資組合建議、符合客戶興趣的市場資訊。
安全保障:識別及防範詐欺、洗錢、帳戶被竊用等安全風險,進行身分驗證、交易風險評估、安全審計,維護客戶帳戶及資金安全。
合規與法律要求:遵守法規、法規要求,如反洗錢合規報告、稅務申報、配合司法調查等。

四、個人資料的揭露與轉移

(一)內部共享
在本公司內部,基於業務協作與服務提供需求,個人資料可能在關聯部門(如客戶服務、風險管理、技術支援)間共用。共享前明確告知相關部門使用目的、範圍及安全責任,確保資訊合理使用與保護。
(二)第三方共享
服務提供者:為履行服務,我們可能將個人資料分享給第三方服務供應商,如雲端運算服務供應商(用於資料儲存與運算)、支付處理機構(處理交易支付)、簡訊 / 郵件服務提供者(發送通知)等。共享前評估其資料安全能力,簽訂保密協議,要求其嚴格依本政策及法律規定處理資訊。
合作夥伴:在共同行銷、產品合作等活動中,經客戶同意,與合作夥伴分享必要訊息,如活動參與客戶名單、基本資訊(僅為活動所需),用於活動執行與客戶服務。
法律要求:依據法律法規、監理指示、司法程序要求,向政府機關、監理機關(如證券監理機關、稅務機關)、司法機關揭露個人資料,配合合規檢查、調查等工作。
(三)跨境轉移
若涉及將個人資料轉移至境外,確保接收方所在國家或地區有充分的資料保護水平,透過簽訂標準合約、取得認證等合規方式進行。轉移前告知客戶接收者資訊、資料保護措施、客戶權利等,徵得客戶同意(如適用法律要求)。

五、個人資料的安全保障

技術措施:採用業界標準加密技術(如 SSL/TLS 加密傳輸、AES 加密儲存)保護資料傳輸與儲存安全,防止資料外洩、竄改、遺失;部署防火牆、入侵偵測系統等網路安全設備,抵禦外部攻擊;定期進行資料備份,並儲存於安全位置,確保資料可復原。
管理措施:建立嚴格的資訊安全管理制度,明確員工資料存取權限與責任,進行資訊安全培訓,強化員工資料保護意識;實施資料分類分級管理,對敏感資訊重點保護;定期進行安全稽核與風險評估,及時發現與解決安全隱患。
緊急應變:制定資料安全事件緊急應變計畫,一旦發生資料外洩等安全事件,立即啟動緊急應變機制,採取措施遏止事件擴大,通知受影響客戶(依法要求),並向監理機關通報。

六、行銷訊息的選擇

客戶有權選擇是否接收本公司行銷訊息。若客戶不願接收與服務有關或無關的產品及服務推廣資料,可透過以下方式取消訂閱或拒絕:
直接回覆:在收到的行銷郵件、簡訊中,按提示回覆取消訂閱指示。
帳戶設定:登入帳戶,在個人設定或偏好設定中關閉行銷訊息接收選項。
聯絡客服:透過客服電話、電子郵件或線上客服管道,告知客服人員停止發送行銷訊息。

七、客戶的權利

(一)查閱權
客戶有權查閱本公司持有的其個人資料,可透過登入帳號自助查詢,或向本公司提交書面查閱申請,本公司將在規定時間內(如 15 個工作天)回應並提供相關資訊。
(二)更正權
若發現個人資料不準確、不完整,客戶可透過帳戶自助更正功能,或提交書面更正申請,本公司核實後及時更正。
(三)刪除權
在符合法律規定情況下(如處理目的已實現、客戶撤回同意等),客戶可要求刪除個人資料。本公司將依規定流程處理,刪除相關資料(在技術可行範圍內),但因法律留存要求無法立即刪除的除外。
(四)撤回同意權
客戶有權隨時撤回對個人資料收集、使用、分享等的同意。撤回後,本公司不再基於該同意處理相關訊息,但不影響撤回前已進行的合法處理行為。客戶可透過帳戶設定、聯絡客服等方式撤回同意。
(五)註銷帳戶權
客戶可隨時申請註銷帳戶,本公司在核實身分、確認符合註銷條件後,註銷帳戶並刪除相關個人資料(法律要求留存的除外)。註銷流程及結果將及時通知客戶。

、第三方服務說明

本公司服務可能包含第三方連結、外掛程式或服務(如廣告、第三方資訊)。客戶使用這些第三方服務時,其個人資料受第三方私隱政策約束,本公司不承擔責任。建議客戶在使用前仔細閱讀第三方私隱政策。

九、查詢與請求

所有查閱、更正、刪除個人資料的請求,或有關私隱政策和個人資料類型的查詢,可透過以下方式聯絡本公司:
電子郵件:[info@81181133.com]
郵寄地址:[香港九龍觀塘駿業街58號電訊數碼大樓12樓1202室,註明 「私隱政策相關事宜」]
客服電話:[81181133]
本公司將在收到請求後,依法令要求及時處理並回覆客戶,確保客戶的私隱權權益得到妥善保障。

Privacy Statement
1、Introduction

This Privacy Statement is formulated in accordance with the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong) and other applicable laws and regulations. It applies to the collection, retention, processing, transfer, security, and inquiry of personal data by our company, [Telecom King Securities Limited]. This policy governs how we handle personal data when clients interact with us via the internet, mobile applications, telephone, or other means. This Statement takes effect on 1 July 2025, and any updates will be communicated to clients in an appropriate manner in advance.

2、Collection of Personal Data

(a) Methods of Collection

  • Account Registration and Service Application: When clients register an account or apply for services (e.g., opening a securities trading account, subscribing to financial products), we collect essential information such as name, identity document number, contact details (mobile number, email), and address for identity verification and service activation. Failure to provide such key information may result in the inability to register or access related services.
  • Service Usage: During service usage, we automatically collect device information (device model, operating system, unique device identifier), network information (IP address, network connectivity status), and usage logs (login times, pages visited, transaction history) to optimize services, troubleshoot issues, and conduct security monitoring.
  • Voluntary Submission: Clients may voluntarily provide information when contacting customer service, participating in surveys, or submitting feedback (e.g., inquiry content, suggestions, questionnaire responses), which we use to improve service quality and resolve client issues.

(b) Collection of Sensitive Information
When collecting sensitive personal data—such as financial account information (e.g., bank card number, payment password), biometric data (e.g., fingerprint, facial recognition used for login or transaction verification), or specific identity information (e.g., tax identification number)—we will clearly inform clients of the purpose, method, and retention period prior to collection and obtain their separate consent. Such data is only collected when necessary for specific service functions and is protected with stricter security measures.

3、Purpose of Use of Personal Data
  • Provision of Services: For identity verification, account management, transaction execution, delivery of financial products, and information dissemination, ensuring proper service operation and fulfilment of client needs.
  • Service Optimization and Personalization: To analyze client usage patterns, preferences, and feedback, improve service processes and interface design, and offer personalized service recommendations and customized experiences (e.g., tailored investment portfolios, relevant market information).
  • Security Assurance: To detect and prevent fraud, money laundering, and account misuse, perform identity verification, assess transaction risks, conduct security audits, and ensure the safety of client accounts and funds.
  • Compliance and Legal Requirements: To comply with legal and regulatory obligations, such as anti-money laundering reporting, tax declarations, and judicial investigations.
4、Disclosure and Transfer of Personal Data

(a) Internal Sharing
Personal data may be shared among internal departments (e.g., customer service, risk management, technical support) for business collaboration and service provision. Each department is informed of the purpose, scope, and security responsibilities before sharing, ensuring proper use and protection of the information.
(b) Third-Party Sharing

  • Service Providers: Personal data may be shared with third-party providers to fulfill our services, such as cloud service providers (for data storage and processing), payment processors, and messaging/email service providers. We assess their data security capabilities, sign confidentiality agreements, and require them to handle data in compliance with this policy and applicable laws.
  • Business Partners: With client consent, we may share necessary information with business partners (e.g., for co-marketing or product collaborations), such as participant lists and basic data required for event execution and client service.
  • Legal Requirements: Personal data may be disclosed to government authorities, regulatory bodies (e.g., securities regulators, tax authorities), or judicial institutions in accordance with laws, regulations, supervisory directives, or legal procedures.

(c) Cross-Border Transfers
If personal data is transferred outside of Hong Kong, we ensure that the receiving country or region maintains an adequate level of data protection, using compliant means such as standard contracts or certifications. Clients will be informed in advance of the recipient’s details, protection measures, and their rights, and consent will be obtained where legally required.

5、Security of Personal Data
  • Technical Measures: We employ industry-standard encryption technologies (e.g., SSL/TLS for data transmission, AES for storage) to protect data from leakage, alteration, or loss. Firewalls, intrusion detection systems, and other cybersecurity tools are deployed to guard against external threats. Regular data backups are conducted and stored in secure locations to ensure recoverability.
  • Managerial Measures: Comprehensive information security policies are implemented, with clearly defined data access rights and responsibilities for employees. Security training is provided to enhance awareness, and data is categorized and managed by sensitivity level. Periodic security audits and risk assessments are conducted to promptly identify and address potential threats.
  • Incident Response: We have a contingency plan for data breaches. In the event of a data security incident, we will promptly initiate emergency response procedures, take measures to contain the incident, notify affected clients (where required by law), and report to the relevant supervisory authority.
6、Marketing Communications Preferences

Clients have the right to choose whether to receive marketing communications. To opt out of promotional materials related to our products or services, clients may:

  • Direct Reply: Respond to emails or SMS with unsubscribe instructions.
  • Account Settings: Disable marketing messages through personal or preference settings in the account.
  • Customer Service: Contact us via telephone, email, or online support to request cessation of marketing messages.
7、Client Rights

(a) Right of Access
Clients may access the personal data we hold by logging into their account or submitting a written request. We will respond within the timeframe prescribed by law (e.g., 15 business days).
(b) Right of Correction
If personal data is inaccurate or incomplete, clients may correct it via the account features or submit a written correction request. We will verify and update the data accordingly.
(c) Right of Deletion
Where legally permissible (e.g., the data has fulfilled its intended purpose, or consent is withdrawn), clients may request deletion of their personal data. We will follow proper procedures and delete relevant data (where technically feasible), except where retention is legally mandated.
(d) Right to Withdraw Consent
Clients may withdraw their consent regarding the collection, use, or sharing of their personal data at any time. Upon withdrawal, we will cease processing such data, though prior lawful processing remains unaffected. Consent may be withdrawn via account settings or by contacting customer service.
(e) Right to Account Cancellation
Clients may request account cancellation at any time. Upon identity verification and confirmation of eligibility, we will cancel the account and delete related personal data (except where retention is required by law). Clients will be notified of the process and outcome.

8、Third-Party Services

Our services may include links, plugins, or features from third parties (e.g., ads, external content). Client data used in such services is governed by the third party’s privacy policy, and we bear no responsibility for their practices. Clients are advised to review third-party privacy policies carefully before use.

9、Inquiries and Requests

For all requests regarding access, correction, or deletion of personal data, or for inquiries about our privacy policy and data types, please contact us via:

  • Email: [info@81181133.com]
  • Postal Address: [Room 1202, 12/F, Telecom Digital Tower, 58 Tsun Yip Street, Kwun Tong, Kowloon, Hong Kong – Attn: “Privacy Policy Matters”]
  • Customer Service Phone: [81181133]

We will respond promptly and in accordance with legal requirements to ensure proper protection of your privacy rights.