Top of main content

Privacy and security

We build our business on trust between our customers and us. We understand that your data is important. Please see below our privacy notice which explains how we collect, store, use and share your data. 

Security

Security is a top priority for us. Both you and we play an important role in safeguarding against fraud. This section outlines what you need to do and what we will do to help maintain security when using this site/app.

 

What we will do

We try to protect your personal data against unauthorised or accidental access or processing. We do this by:

  • implementing appropriate physical, electronic and internal processes to safeguard and secure your personal data,
  • using 128-bit Transport Layer Security ("TLS") encryption technology, which is an industry standard for encryption over the internet to protect data, in the secure area of this site/app. When you provide sensitive information such as credit card details, it will be automatically converted into codes before being securely dispatched over the internet,
  • External storage device: if you take the screenshot of your mobile device, this allows the save of files onto your device's external storage.
  • protecting our web servers behind "firewalls" and our systems are monitored to try to prevent any unauthorised access,
  • using the secure email facility if we need to send personal data to you by email. We won’t send your personal data by ordinary email,
  • taking all practical steps to ensure that personal data will not be kept longer than necessary and we comply with all laws and regulations in Taiwan concerning the retention of personal data.

 

Keep your account details and security details secure.

This means taking steps like:

  • not sharing or allowing anyone else to know your username or password, so don’t write them down. We’ll never verbally ask you for your password,
  • choosing a username and password that are not easily identifiable by others (such as your birthday, telephone number or email address),
  • using the secure email facility on this app/website for general enquiries.

 

Keep your device on which you access the site/app secure.

This means taking steps like:

  • keeping your device locked when not in use, with a PIN, password or biometric authentication,
  • not sharing your device. If you do allow someone else to use your device, please supervise their use to ensure that they don’t access your accounts,
  • not sharing or allowing anyone else to know any access password that you use on your device,
  • if you choose to activate the feature that allows you to use your biometric credentials to log onto your device or this app, ensuring that only your biometric credentials are registered on the device to avoid unauthorised access by other people,
  • only downloading HSBC apps and its updates from an official app store and not from any unofficial sources,
  • installing the latest anti-virus and anti-spyware software on your device that you use to access this site/app, and keeping it updated. When installing protection, always use a reputable brand from a mainstream supplier,
  • ensuring the operating system running on your device and the security update is up to date,
  • not disclosing your online banking credentials to any third parties (including third party mobile aggregator apps),
  • not using HSBC apps and the Mobile Security Key Feature on any device or operating system that has been modified outside the mobile device or operating system vendor supported or warranted configurations. This includes devices that have been "jail-broken" or "rooted". A jail broken or rooted device means one that has been freed from the limitations imposed on it by your mobile service provider and the phone manufacturer without their approval. The use of HSBC apps and the Mobile Security Key feature on a jail broken or rooted device may compromise security and lead to fraudulent transactions which we may not be responsible for.

 

If you think that your device has been lost, stolen or is being used by another person or if you think your username or password is known by someone else, please tell us straight away. You may be responsible for unauthorised payments made from your accounts if you have not kept your device, account details or security details safe or if you haven’t followed the security precautions that we advise you to follow from time to time.

For more tips on staying safe on digital banking, please read: Security Centre

Use of Cookies

We may record your visit to this site/app for analysing the number of visitors to this site/app, general usage patterns and your personal usage patterns and improving your experience. We may gather some of this information through the use of "cookies".

 

What is a cookie?

Cookies are small bits of information that are automatically stored on your web browser in your computer, mobile phone or other device for accessing the internet that can be retrieved by this site/app. We will be able to access the information stored on the cookies and record how you use this site/app.

 

Why do you use cookies?

Cookies are useful because they allow us to recognise your device and they store information about your use of this site/app which enables us to provide more useful features to you, to tailor the content of our website and mobile applications to suit your interests and, where permitted by your marketing preferences, provide you with promotional materials or direct marketing based on your usage patterns.

 

What if I don’t want you to do this?

Most browsers are initially set to accept cookies. If you prefer, you can set your browser to disable cookies – you can do this through your browser setting (your browser’s ‘help’ function should tell you how to do this). You cannot manage cookies in the app.

By disabling cookies, you may not be able to take full advantage of this site, including HSBC Internet Banking.

If you accept cookies during your use of this site or continue to use this app, you will be acknowledging that your information is being collected, stored, accessed and used as outlined above.

 

Will you provide data obtained via cookies to anyone else?

We may work with third parties to research certain usage and activities on this site/app on our behalf. These third party agencies include Doubleclick, Yahoo!, Facebook, Nielsen//NetRatings and Adobe.

 

They use technologies such as cookies, spotlight monitoring (this manages tagging which is used for example, to track which advertisement users clicked on to take them to a site) and web beacons (these are used to monitor the behaviour of the user, for example whether they scroll down a page) to collect information for this research. They use the information collected through such technologies (i) to find out more about users of this site/app, including user demographics and behaviour and usage patterns, (ii) for more accurate reporting and (iii) to improve the effectiveness of our marketing. They aggregate the information collected and then share it with us. 

 

As part of the information that we share with them, we may share your advertising identifier and "installation event" (which means the data in relation to when you first install or use this site/app). No personally identifiable information about you is collected or shared by third party agencies with us as a result of this research.

Should you wish to disable the cookies associated with such technologies, you may change the setting on your browser. However, you may not be able to enter certain parts of this site, including HSBC Internet Banking.

To find out more about the use of cookies and the information-collecting practices and opt-out procedures of third party agencies, including Doubleclick, Yahoo!, Facebook, Nielsen//NetRatings and Adobe, please visit:

Yahoo!'s website https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html
Facebook’s website https://www.facebook.com/legal/FB_Work_Cookies
Nielsen//NetRatings website https://www.nielsen.com/us/en/legal/privacy-statement/digital-measurement/
Adobe’s website https://www.adobe.com/hk_en/privacy/policy.html
Doubleclick's website https://policies.google.com/technologies/ads

To find out more about the use of cookies and the information-collecting practices and opt-out procedures of third party agencies, including Doubleclick, Yahoo!, Facebook, Nielsen//NetRatings and Adobe, please visit:

Yahoo!'s website Facebook’s website
https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html https://www.facebook.com/legal/FB_Work_Cookies
Yahoo!'s website Nielsen//NetRatings website
https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html https://www.nielsen.com/us/en/legal/privacy-statement/digital-measurement/
Yahoo!'s website Adobe’s website
https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html https://www.adobe.com/hk_en/privacy/policy.html
Yahoo!'s website Doubleclick's website
https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html https://policies.google.com/technologies/ads

All of these links are external to HSBC and so we’re not responsible for the content of these links, which will open in new windows.

Use of Big Data & Artificial Intelligence ("BDAI")

Big data technologies and artificial intelligence (“BDAI”) enable companies to process and analyse a depth and breadth of data which has never been possible before. At HSBC, we are using big data and AI to, for example:

  1. Bring benefits to our customers, for example, by improving customer service
  2. Manage risks for ourselves and our customers
  3. Better identify and offer relevant products and services to customers
  4. Improve operational efficiencies.

Using these new technologies and opportunities come with new responsibilities: we must ensure that big data and AI are used ethically. That is why we have a set of principles to help us consider and address the ethical issues that may arise.

You can find our Principles for the Ethical Use of Data and Artificial Intelligence

Privacy Notice

Please refer to the attachment for more details regarding collecting, processing and using Personal Data.

IMPORTANT: By accessing this site/app and any of its pages you are agreeing to the terms set out above. Thank you for choosing HSBC.

Yahoo! is trademark and/or registered trademarks of Yahoo! Inc. in the U.S.

Facebook is a registered trademark of Facebook Inc. in the United States and other countries/regions.

Nielsen and Netratings are trademarks of The Nielsen Company (US), LLC. registered in the US.

"Adobe" is either registered trademark or trademark of Adobe Systems Incorporated in the United States and/or other countries/regions.

Doubleclick is a trademark of Google Inc.

HSBC TW Mobile Banking App - App Privacy Notice

The HSBC Bank (Taiwan) Limited (‘HSBC’) collects, uses and shares information about you so that it can provide you with a bank account and related services. This App Privacy Notice explains how HSBC collects, uses and shares your information when you use this app, including information about the device that the app is installed on e.g. your mobile phone or tablet.  For full details of our privacy notice, you can find it in our website: https://www.hsbc.com.tw/en-tw/privacy-and-security/

 

This app is provided by (i) HSBC Global Services (UK) Limited for iOS version for and on behalf of HSBC; and (ii) by HSBC for Android version, and all products and services accessed via this app are provided by HSBC.

 

You can contact us by calling:

Call us on (02) 6616-6000 (local) or +886 2 6616 6000 (Overseas), if you have any inquiries in relation to App Privacy Notice and/or exercise your rights

 

We try to protect your personal data against unauthorised or accidental access or processing by using a range of measures, which may include encryption and other forms of security. 

We’ll take all practicable steps to ensure that your information will not be kept longer than necessary and in line with our data retention policy. We may need to keep your information where we need the information to comply with regulatory or legal requirements, help detect or prevent fraud and financial crime, answer requests from regulators etc.  If we no longer need to keep your information, we may destroy or delete it.

This table explains what information HSBC collects from your device and how it uses it. In some cases, e.g. when accessing the contacts stored on your device, or photos that you take with your device, HSBC will first ask your permission. HSBC may share your information with other HSBC group companies, third parties who help us to provide services to you or who act for us or third parties who you consent to us sharing your data with and as explained in our privacy notice.

Information collected What it is used for
Access to your phone book   This allows our app to access your contacts so that you can transfer money to people in your address book using their phone number or email. 
Access to your device’s camera and photo library This allows you to take a photo or video and immediately share it with us (or access the content from the photo library) in order to allow us to provide you with a bank account or related services.  Non-exhaustive examples of when we may ask you to do this include to confirm your identity, to scan a QR code to make a payment or to pay with a cheque by taking a photo of it.
Biometric information You can use biometrics authentication (like fingerprints or facial recognition) to logon to our app. If you do so, we rely on your device’s technology to authenticate you and we do not collect or store your underlying biometric data. 
Your location  Your location can be used to help you to locate your closest branch. 
Screenshot sharing This allows us to help verify an image that has been saved after confirming a payment and to help you share it with someone else.
Push notification  This allows you to receive instant notifications from our app about activity on your account.
Mobile data/ Wi-Fi This allows us to use your internet connection to access our digital banking systems.

This table explains what information HSBC collects from your device and how it uses it. In some cases, e.g. when accessing the contacts stored on your device, or photos that you take with your device, HSBC will first ask your permission. HSBC may share your information with other HSBC group companies, third parties who help us to provide services to you or who act for us or third parties who you consent to us sharing your data with and as explained in our privacy notice.

Information collected Access to your phone book  
What it is used for This allows our app to access your contacts so that you can transfer money to people in your address book using their phone number or email. 
Information collected Access to your device’s camera and photo library
What it is used for This allows you to take a photo or video and immediately share it with us (or access the content from the photo library) in order to allow us to provide you with a bank account or related services.  Non-exhaustive examples of when we may ask you to do this include to confirm your identity, to scan a QR code to make a payment or to pay with a cheque by taking a photo of it.
Information collected Biometric information
What it is used for You can use biometrics authentication (like fingerprints or facial recognition) to logon to our app. If you do so, we rely on your device’s technology to authenticate you and we do not collect or store your underlying biometric data. 
Information collected Your location 
What it is used for Your location can be used to help you to locate your closest branch. 
Information collected Screenshot sharing
What it is used for This allows us to help verify an image that has been saved after confirming a payment and to help you share it with someone else.
Information collected Push notification 
What it is used for This allows you to receive instant notifications from our app about activity on your account.
Information collected Mobile data/ Wi-Fi
What it is used for This allows us to use your internet connection to access our digital banking systems.

Consultation and remedy under Privacy and Security Policy

Should you have any questions and comments on said Privacy and Security Policy, or should you be aware of any violation by relevant HSBC entities, please feel free to contact us via the following email box, or file a complaint via the same email box: customervoicetwm@hsbc.com.tw

 

Contact us

Requests for access to data or correction of data or for information regarding policies and practices and kinds of data held should be addressed to:

HSBC Bank (Taiwan) Limited 54F, No. 7, Sec. 5, Xinyi Rd., Xinyi Dist., Taipei City 110615, Taiwan (R.O.C.)

 

IMPORTANT: By accessing this website and any of its pages you are agreeing to the terms set out above. Thank you.

Listening to what you have to say about services matters to us. It's easy to share your ideas, stay informed and join the conversation. To improve the protection of customers' rights for the elderly or customers with special needs, the Bank provides relatives or friends to accompany them to participate in the communication to understand the product information, and provides enough time to consider whether to apply for related products. Please contact us via contact center (02)6616-6000 or email csr@hsbc.com.tw if any doubt/concern or further explanation is needed.