1. Futu Securities International (Hong Kong) Ltd ("Futu Securities", "we" or "us") is committed to provide clients with the excellent securities services. Based on the service needs, we shall collect and use client's personal data. We understand that clients are extremely concerned about the use and confidentiality of their personal data ("information" or "data"). 2. Futu Securities always handle seriously about the security and privacy of client data. Therefore, we have established the following policies and committed to protect the privacy, confidentiality and security of client data by complying with the requirements of Personal Data (Privacy) Ordinance (Cap 486) ("PDPO"). 3. Where our operations are subject to privacy legislation other than that of Hong Kong, this Statement shall apply so far as it is consistent with such local legislation. 4. According to the PDPO, Data Subject is the individual who is the subject of the personal data. 5. Please note that this Statement may be amended from time to time without prior notice. You are advised that you need to check the latest version on our websites on a regular basis.
- Provide clients with our products or services;
- Verify client’s identity as part of initiaand on-going Know-Your-Client (KYC) due diligence process and fulfilour obligations under the AMlaws and regulations;
- Conduct certification services recognized by the Electronic Transactions Ordinance (Cap 553) such as services provided by certification authorities in Hong Kong or other places (including but not limited to China) for client identity verification purpose;
- Deawith the service application raised by the client, for the client’s guarantors or any one or more than one person who offers the client the third party pledge, or deawith the daily operations of the services provided to the client or such person or persons;
- Perform credit check, verification procedures, data verification, due diligence and risk management;
- Assist other financiainstitutions to conduct credit checks and collect debts;
- Ensure that client or any guarantor maintains a reliable credit;
- Maintain client or any guarantor’s credit records for current or future reference;
- Design financiaservices or related products for client’s use (including the provision of financiaadvice to clients in appropriate cases);
- Promote financiaservices and related products to clients (please refer to paragraphs 10-12 below for further details);
- Determine the amount of debt between the client or any guarantor and Futu Securities;
- Demand to collect debts from the client or any guarantor;
- Meet the information disclosure requests or requirements put forward by laws;
- Enable the actuaor suggested transferee on the conditions of merge, combination, re-organization or other conditions to evaluate the trading planned to be transferred;
- Any purposes allowed by laws;
- In any court or competent authority to expand or defense or participate in any legaor administrative proceedings in other ways;
- Observe the requirements of the "Codes on Takeovers and Mergers and Share Buy-backs" (as amended from time to time) which are issued by the SFC and/or the laws and/or regulatory rules in Hong Kong and/or other places; and
- Any functions related to the foregoing.
11. Client data (and other data) held by Futu Securities will be kept confidential. The client is required to provide the related data such that we may disclose such data in order to provide services, product and related data to client. Futu Securities may be unable to provide service, product or information if client fail to provide such data. We may disclose the data (and other data) to the following persons:
- Any related officers, employee, agents, contractors or third party service providers who provides administrative, credit data, debt collection, telecommunications, computing, payment or other services related to its business operations (e.g. IT vendor or electronic storage vendor);
- Any Futu group companies, including but not limited to holding companies or affiliated companies located in Hong Kong or other places;
- Any person as guarantor or intended to be guarantor;
- Any person who holds the duty of confidentiality to Futu Securities, including any person of Futu group companies has promised the confidentiality of such data;
- Any financiainstitution trading with or intended to trade with clients;
- Credit data service institutions or debt collecting institutions (in case if the client owes money);
- Any actuaor proposed assignee or transferee of Futu Securities, or participant or sub-participant or transferee of Futu Securities in respect of client’s rights;
- Any person or entity or data recipient who has established or to be established any business relationship with Futu Securities;
- Any certification authority whether in Hong Kong or other places (including but not limited to China);
- Any agencies in Hong Kong or other places for compliance with the existing or future applicable laws, regulations, rules or guidelines regarding the automatic exchange of financiaaccount information (CRS) or the Foreign Account Tax Compliance Act (FATCA) promulgated by the United States; and
- Any legaagency, regulatory bodies, government, tax authorities, law enforcement agency, administrative or statutory agency, stock exchange or clearing house, or other self-regulatory agency or industry organization or group in Hong Kong or other places (including but not limited to China).
- Subject to confidentiality requirements and it can only use the data in accordance with this policy;
- Disclose such data in accordance with legarequirements, such as when we fulfilthe legaobligations, or establish, exercise or maintain our legarights.
14. Futu Securities may use the data to send to visitor about the information of products, services and other marketing materials that we deem he/she might be interested in. We may also invite visitors to this website/application to participate in marketing research, surveys and other similar activities. You can choose to receive marketing and other promotional materials by email. If you do not wish to receive email or direct mail of promotional materials, you may select to opt-out at any time. 15. Futu Securities intends to use your personal data for direct marketing purposes, for which we have to obtain your consent (including no objection). Part VIA of the Personal Data (Privacy) (Amendment) Ordinance 2012 introduces specific requirements for obtaining your consent (including no objection). In this regard, please pay attention to:
- Your name, contact details, product and service, investment portfolio information, trading patterns and conduct, financiabackground and statistics held by Futu Securities from time to time may be used for direct marketing;
- The following categories of services, products and promotionaslogans are available for promotion: - Finance, insurance, securities, commodities, investment and related services and products and facilities; - Rewards, loyalty or privileges programmes for the promotion slogan category; - Services and products in the category of promotional slogans are provided by associates of Futu Securities (the names of such associates are provided on the application form for services and products, as the case may be); and - Donations and financial aid for charitable and / or non-profit making purposes;
- The above services, products and promotionaslogans may be provided by Futu Securities and/or the following persons or fundraising (if related to donations and grants): - Any member of Futu Group; - Third-party financial institutions, underwriters, securities, commodities and investment service providers; - Providers of third-party reward, loyalty, co-branding or privileges programme; - The associates of Futu Securities (the names of such co-branding partners will be provided on the application form for services and products, as the case may be); - Charitable or non-profit organization;
- In addition to promoting the above services, products and promotionaslogans, Futu Securities also intends to provide the above data to alor any of the persons as mentioned above for the purpose of promoting such services, products and promotionaslogans (We may or may not receive remuneration) and we shalobtain your written consent (including no objection) for this purpose;
- If you do not wish Futu Securities to use or provide your data to other persons for the above direct marketing purposes, you may send a written notice to Customer Service Department of Futu Securities in order to exercise your right to refuse to participate in direct marketing activities.
- Pair, compare or exchange any data or other data provided by or with the client with the data (or other data) held by us or any other person for the following purposes: - Credit review; - Data (or other data) verification; - Propose or verify data (or other data) that may be used to take actions that are unfavorable to the client or any other person at any time; - Transfer such data (or other data) to any place in Hong Kong or other places (whether such data or other data is processed, held or used outside Hong Kong or not).
17. Futu Securities implements protection measures to safeguard and secure client personal data to ensure personal data is protected against unauthorised or accidental access, processing or erasure:
- Access or use of such data is limited to authorized staff or agents in accordance with the principle of “need to know” basis and secured method (personadata is encrypted when necessary);
- We do not distribute client data to other persons except for conducting business activities, complying with applicable laws, protecting against fraud or making products and services that we believe may be in the client’s interest;
- The use of client data between the companies of Futu Group is subject to strict internasecurity standards, confidentiality policies, privacy laws and other applicable laws;
- We bind our employees to fully comply with such standards, policies and laws; and
- We wiloffer training to staff on proper handling of client’s data.
19. According to and in accordance with the terms of the PDPO, each client has the right to:
- obtain information regarding the processing of the Data and access to the Data which we hold about the Data Subject;
- withdraw the consent to our processing of the Data at any time. Please note, however, that we may stilbe entitled to process the Data if we have another legitimate reason (other than consent) for doing so;
- in some circumstances, receive some Data in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to the Data which the Data Subject have provided to us;
- request that we rectify the Data if it is inaccurate or incomplete;
- request that we erase the Data in certain circumstances. Please note that there may be circumstances where the Data Subject asks us to erase the Data but we are legally entitled to retain it;
- object to, and the right to request that we restrict, our processing of the Data in certain circumstances. Again, there may be circumstances where the Data Subject objects to, or asks us to restrict, our processing of the Data but we are legally entitled to continue processing the Data and / or to refuse that request;
- lodge a complaint with the data protection regulator (details of which are provided below) if the Data Subject thinks that any of his/her data privacy rights have been infringed by us;
- in relation to consumers’ credit record, to be informed on request which items of Data are routinely disclosed to credit reference agencies or debt collection agencies, and be provided with further information to enable the marking of an access and correction request to the relevant credit reference agency or debt collection agency; and
- upon satisfactory termination of the credit by fulrepayment and on condition that there has been, within five years immediately before such termination, no materiadefault under the credit as determined by Futu Securities, to instruct Futu Securities to make a request to the relevant credit reference agency to delete from its database any account data relating to the terminated credit.
23. The retention period of personal data collected depends on circumstances by taken into consideration of different factors, including:
- Usage: we have to continue to retain the data for such objective; and
- Legaobligation: the minimum retention period of the data which is stipulated in the laws and regulations.