Privacy Policy

Privacy Policy and Personal Information Collection Statement (“Statement”)

Last Updated: October 16th, 2023

 

Effective Date: October 16th, 2023

 

Privacy Policy

 

  1. In this Statement, the following terms shall have their respective meanings:

 

        (a) "BCAN" refers to  the context of the SFC's Hong Kong investor identification regime and over-the-counter securities transactions reporting regime (when it comes into effect), has the meaning given to it in paragraph 5.6(b)(ii) of the Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (when it comes into effect);

 

        (b) "CID" refers to the context of the SFC's Hong Kong investor identification regime and over-the-counter securities transactions reporting regime (when it comes into effect), has the meaning given to it in paragraph 5.6(b)(iv) of the Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (when it comes into effect);

 

        (c) "data subject", in relation to personal data, means the individual who is the subject of the data;

 

        (d) "Pando Group" means Pando Finance and its subsidiaries, holding companies, subsidiaries of those holding companies and other associated or related entities;

 

        (e) "Pando Finance", or "we" or "us" means Pando Finance Limited;

 

        (f) "HKEX" means Hong Kong Exchanges and Clearing Limited;

 

        (g) "Hong Kong" means the Hong Kong Special Administrative Region of the People's Republic of China;

 

        (h) "China mainland" means the People's Republic of China, excluding Hong Kong, Macau, and Taiwan;

 

        (i) "PDPO" means the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong);

 

        (j) "personal data" means any data:

 

                (a)         relating directly or indirectly to a living individual;

 

                (b)        from which it is practicable for the identity of the individual to be directly or indirectly ascertained; and

 

                (c)         in a form in which access to or processing of the data is practicable;

 

        (k) "non-personal data" means any data not falling within the meaning of "personal data";

 

        (l) "SEHK" means the Stock Exchange of Hong Kong; and

 

        (m) "SFC" means the Securities and Futures Commission of Hong Kong.

 

  1. Pando Finance is committed to providing its clients with excellent investment services. Based on your service needs, we will collect and use different types of your personal data and non-personal data. We treat the use and confidentiality of our clients' personal data and non-personal data seriously.

 

  1. The security and privacy of our clients' personal data and non-personal data is a matter of utmost importance for Pando Finance. We are committed to protecting the privacy, confidentiality, and security of our clients' personal data and non-personal data; in the case of personal data by complying with the requirements of the PDPO through the implementation of the policies set out in this Statement.

 

  1. Where our operations are also subject to privacy legislation other than that of Hong Kong, such as the privacy laws of China mainland, we will seek to comply with all such applicable laws and regulations to the extent that it is possible for us to do so. Where there is a conflict between different systems of laws, we will, in most cases, comply with the system of law that imposes a stricter standard on us.

 

  1. Please note that this Statement may be amended from time to time, with prior notice to you. Nevertheless, you are advised to check the latest version of this Statement on our websites on a regular basis.

       

Collection and Use of Data

 

  1. Pando Finance may collect personal data provided voluntarily by visitors to this website/application.

 

  1. Individual (which includes you) may be required to provide us with the following data:

 

        (a) their personal data, including name, age, occupation, marital status, email address, telephone number, personal identity information, biometric data, photograph and video, electronic signature, address and other contact information, location data, financial information, credit history, source of wealth, risk tolerance, investment experiences and objectives;

 

        (b) transaction records;

 

        (c) account balance and securities portfolio;

 

        (d) IP address, browser type and version, time zone settings, browser plugin types, operating systems or platform and device data (including where the IMEI number of mobile device, wireless networks and general network data);

 

  1. Pando Finance may also obtain your personal data from publicly available sources of information, recording telephone conversations and/or communications by using electronic media, or from third party risk intelligence applications.

 

  1. Your personal data and non-personal data will be recorded when you visit this website/application, used for the purposes of data analysis, including analyzing the number of visitors to the website/application. For further information on how we make use of cookies, please refer to our Cookie Policy.

 

  1. We will only use the personal data we collect for the purposes set out in this Statement. If you do not supply the personal data requested, we may not be able to provide or continue to provide our services to you, including without limitation, providing you with trading services in respect of certain markets and/or products. Your personal data (whether individually, or aggregated with the personal data of other people) may be used for the following purposes:

 

        (a) Providing you with our products or services (including the provision of financial advice);

 

        (b) Verifying your identity as part of the initial and on-going Know-Your-Client (KYC) due diligence process and otherwise for the purposes of complying with anti-money laundering laws and regulations which we are subject to;

 

        (c) Conducting matching procedures (as defined in s.2 of the PDPO, which broadly includes comparison of two or more sets of your personal data, for the purpose of taking actions adverse to your interests, such as declining an application);

 

        (d) Conducting or arranging for you certification services recognized by the Electronic Transactions Ordinance (Cap 553) such as services provided by certification authorities in Hong Kong or other places (including but not limited to China mainland) for client identity verification purposes, and specifically, if you are domiciled in China mainland, for the purpose of applying for a certificate with the certification authority as we consider appropriate;

 

        (e) Dealing with service applications submitted by you or your security providers;

 

        (f) Performing credit checks, verification procedures, data verification, due diligence and risk management processes;

 

        (g) Designing financial and other related services and products for your use;

 

        (h) Promoting and marketing certain services and products to you (please refer to the section entitled "Use of Data in Promotion and Direct Marketing" below for further details);

 

        (i) Complying with any applicable laws, rules, regulations, court orders or the requests or requirements of any regulatory body;

 

        (j) Enabling any of our actual or proposed transferees / assignees to assess any proposed merger, re-organization or other similar process;

 

        (k) Any purposes allowed by applicable laws;

 

        (l) Defending our rights or participating in any legal or administrative proceedings;

 

        (m) Observing the requirements of the "Codes on Takeovers and Mergers and Share Buy-backs" (as amended from time to time) which are issued by the SFC and/or the laws and/or regulatory rules in Hong Kong and/or other places;

 

        (n) Conducting marketing research, surveys and other similar activities;

 

        (o) Generating unique internal identification numbers for organizational and reporting purposes and other forms of statistical analysis;

 

        (p) When the SFC's Hong Kong investor identification regime or over-the-counter securities transactions reporting regime comes into effect (as the case may be), allowing SEHK to:

 

                ○ collect, store, process and use your personal data (including CID and BCAN(s)) for market surveillance and monitoring purposes and enforcement of the Rules of the Exchange of SEHK;

 

                ○ disclose and transfer such information to the relevant regulators and law enforcement agencies in Hong Kong (including, but not limited to, the SFC) so as to facilitate the performance of their statutory functions with respect to the Hong Kong financial markets; and

 

                ○ use such information for conducting analysis for the purposes of market oversight;

 

        (q) When the SFC's Hong Kong investor identification regime or over-the-counter securities transactions reporting regime comes into effect (as the case may be), allowing the SFC to:

 

                ○ collect, store, process and use your personal data (including CID and BCAN(s)) for the performance of its statutory functions including monitoring, surveillance and enforcement functions with respect to the Hong Kong financial markets; and

 

                ○ disclose and transfer such information to relevant regulators and law enforcement agencies in Hong Kong in accordance with applicable laws or regulatory requirement;

 

        (r) allowing each of SEHK and the relevant SEHK Subsidiaries (as defined in the Rules of the Exchange) to disclose such information to the relevant regulators and law enforcement agencies in Hong Kong so as to facilitate the performance of their statutory functions with respect to the Hong Kong financial markets;

 

        (s) Generating anonymised statistics, information and reports in relation to, or for the purpose of, the design of our financial products and services and/or the marketing or provision of our services; and

 

        (t) Any functions related to the foregoing.

       

Disclosure of Personal Data

 

  1. Personal data held by Pando Finance will be kept confidential, but may be disclosed to the following persons for one or more of the purposes set out in paragraph 10:

 

        (a) Any of our officers, employees, agents, contractors or third party service providers who provide administrative, credit data, debt collection, telecommunications, client verification, due diligence, computing, payment, promotional, marketing or other services related to our business operations to us (e.g. IT vendors, electronic storage vendors, biometric authentication service providers);

 

        (b) Any member of the Pando Group;

 

        (c) Any of your security providers;

 

        (d) Any financial institution trading with or intending to trade with you, or any of your counterparties in a trade;

 

        (e) Any actual or proposed assignee or transferee of Pando Finance, or participant or sub-participant or transferee of Pando Finance in respect of our rights against you;

 

        (f) Any person or entity or data recipient who has already established or intends to establish any business relationship with Pando Finance;

 

        (g) Any certification authority whether in Hong Kong or other places (including but not limited to China mainland);

 

        (h) Any agencies in Hong Kong or other places for compliance with applicable laws, regulations, rules or guidelines regarding the automatic exchange of financial account information or the Foreign Account Tax Compliance Act promulgated by the United States; and

 

        (i) Any local or foreign legal agency, regulatory body, government, tax authority, law enforcement agency, administrative or statutory agency, stock exchange or clearing house, or other self-regulatory agency or industry organization or group in Hong Kong or other places (including but not limited to China mainland), and this includes the SEHK, the relevant SEHK Subsidiaries and the SFC.

 

  1. Pando Finance may transfer your personal data to a place outside Hong Kong in accordance with this Statement. Your personal data may not be afforded the same or similar level of protection as it is under the PDPO.

       

Use of Data in Promotion or Direct Marketing

 

  1. Pando Finance may use your personal data to send you information about products, services and other marketing materials that we think you might be interested in.

 

  1. You can choose to receive direct marketing materials by email, direct mail and/or other means. If you do not wish to receive such direct marketing materials, you may elect to opt-out at any time by contacting Pando Finance Limited. Pando Finance intends to use your personal data for direct marketing purposes, for which we have to obtain your consent (which includes an indication of no objection). In this regard, please note that:

 

In this regard, please note that:

        (a) Your name, contact details, product and service, investment portfolio information, trading patterns and conduct, financial background and statistics held by Pando Finance from time to time may be used for direct marketing;

 

        (b) The following categories of services, products and subjects may be marketed to you:

 

                (i) Finance, insurance, securities, commodities, investment and related services and products and facilities;

 

                (ii) reward, loyalty, co-branding or privileges programmes and related products and services;

 

                (iii) financial or banking products and services offered by our business partners (the names of such partners will be provided to you); and

 

                (iv) donations and contributions for charitable and/or non-profit making purposes;

 

        (c) The above services, products and subjects may be marketed by Pando Finance and/or the following persons:

 

                (i) Any member of the Pando Group;

 

                (ii) Third-party financial institutions, underwriters, securities, commodities and investment service providers;

 

                (iii) Providers of third-party reward, loyalty, co-branding or privileges programme (the names of such co-branding partners will be provided to you);

 

                (iv) Our business partners;

 

                (v) Charitable and/or non-profit organizations;

 

        (d) In addition to promoting the above services, products and subjects, Pando Finance may provide the personal data mentioned in paragraph 14(a) to any of the persons as mentioned in paragraph 14(c) above for the purpose of promoting their services, products and subjects.  In order for us to do so, we need to obtain your written consent (which includes an indication of no objection) for this purpose;

 

        (e) If you do not wish Pando Finance to use or provide your personal data to other persons for the direct marketing purposes set out in paragraph 14(d), please notify our Pando Finance Limited; and

 

        (f) We may receive money or other property in return for providing your personal data to the other persons in paragraph 14(d) and, when requesting your consent or no objection we will inform you if we will receive any money or other property in return for providing the personal data to the other persons.

   

Providing Another Person's Personal Data

 

  1. Where you provide to us personal data about another person, you must give to that person a copy of this Statement and, in particular, tell him/her that you have provided us with their personal data and how we may use his/her personal data.

       

Personal Data Protection Measures

 

  1. Pando Finance implements protective measures to safeguard and secure personal data to ensure it is protected against unauthorised or accidental access, processing, or erasure. These measures include the following:

       

 

           

Access or use of such data is limited to authorized staff or agents on a “need to know” basis and such data is accessed utilizing secured methods (e.g. personal data is encrypted when necessary);

 

           

We do not distribute your personal data to other persons except to the classes of transferees set out in this Statement and for the purposes set out in this Statement;

 

           

The use and transfer of your personal data between members of the Pando Group is subject to strict internal security standards, confidentiality policies, privacy laws and other applicable laws;

 

           

We ensure that our employees fully comply with such standards, policies and laws;

 

           

We provide training to our staff on the proper handling of your personal data; and

 

           

We will not share or sell the U.S. person's mobile information (including the name and phone numbers) to any external parties not under Pando Group regarding the external parties' marketing and/or promotional purposes.

 

       

 

  1. As we further develop new products and services, we will continue to make every effort to ensure that your personal data is properly used and protected.

       

Data Access and Correction Requests

 

  1. According to and in accordance with the terms of the PDPO, you have the right to:

       

 

           

obtain information regarding the processing of your personal data and access the personal data which we hold about you;

 

           

request that we rectify your personal data if it is inaccurate or incomplete; and

 

           

lodge a complaint with the Privacy Commissioner for Personal Data if you think that any of your data privacy rights have been infringed by us;

 

  1. You may ask that we erase some or all of your personal data, but please note that we are under no legal obligation to do so, and it may not be legally or operationally possible for us to do so.

 

  1. If there is a change to any of the personal data that you have provided to us, please contact Pando Finance Limited.

 

  1. You should send requests for access to, and correction of, your personal data to us at:

 

        Attention: Pando Finance Limited

        Address: Unit 12, 13/F, Shun Tak Centre West Tower, 200 Connaught Road, Central, Sheung Wan, Hong Kong

 

        Email: cs@pandofinance.com.hk

 

  1. In accordance with the terms of the PDPO, Pando Finance reserves the right to charge a reasonable fee for processing any data request.

 

  1. Nothing in this statement shall limit your rights under the PDPO.

       

Retention Period of Personal Data

 

  1. We will not keep personal data longer than is necessary for the fulfillment of the purpose for which it was collected. The retention period of personal data collected depends on different factors, including:

Usage: we may have to continue to retain the personal data for the purpose(s) for which it was collected for; and

 

Legal obligations: there may be minimum retention periods for that personal data, as stipulated in applicable laws and regulations.

Note In case of any discrepancy between the English and Chinese versions of this Privacy Policy Statement, the English version prevails.

 

(End)