At Chow Tai Fook Life Insurance Company Limited (“CTF Life”, “we”, “us”or“our”), we hold as one of our core values the protection of privacy of our customer’s personal data. As a provider of insurance products and services, collection and use of personal data of our customers is at the heart of our business. CTF Life respects the privacy of your personal data and are committed to fully complying with the Personal Data (Privacy) Ordinance (Cap. 486). This Personal Information Collection Statement (this “Statement”) is made by CTF Life, and applies between us and you (“you”, or “your”). This Statement should be read together with the terms and conditions (if any) of any instrument, documentation, form (the “Documentation”) and/or software application (the “Application” (as applicable), and the website at https://www.ctflife.com.hk (the “Website”) that refers to and/or contains this Statement (the “Terms and Conditions”), provided that, in the event of any inconsistency between this Statement and the Terms and Conditions concerning matters relating to personal data, this Statement shall prevail.

CTF Life is a related company of the New World group of companies including New World Development Company Limited (“NWD”) and its affiliated or related companies from time to time (the “New World Group”, or “NWG”) whose activities include real estate (sale, leasing and investment), mortgage services, retail, property management, facilities management, activity planning and management, infrastructure, shopping malls, loyalty programmes, department stores, jewelleries and luxury products, e-commerce, hospitality services, food and beverages, convention and exhibition centres, sports and recreational facilities, education, health care and senior care, other health and wellness products and services, financial services and insurance, transportation, sustainability programmes and products, TMT (Technology, Media and Telecom), corporate innovation, accelerator and incubation programmes, organization of competitions, conferences and events, start up and social innovation programmes and charitable pursuits including sports, recreation, art and cultural programmes, relief of poverty, advancement of education, advancement of religion, and other purposes that are beneficial to the community (the “Goods and Services”) (the New World Group and joint venture companies together referred to as “Affiliates”).

In order to enable us to perform the Purposes (as defined in the “Purposes for using personal data collected” section below), you are required to provide all the requested/mandatory personal data in the Documentation, the Application, and/or the Website (as applicable) that refers to and/or contains this Statement. If you do not provide the required personal data, then we may not be able to perform the Purposes and/or provide goods or services to you.

Kinds of personal data collected

The kinds of personal data we may collect from you and/or from other sources as mentioned below in this Statement and/or hold (whether pursuant to the Documentation or any other contracts, agreements or other binding arrangements which you have entered into or intend to enter into with CTF Life), use and/or disclose/share with (whether contained here or otherwise obtained) include your name, gender, age (or age range), date of birth, identity/ travel document details, nationality, contact details, e-mail address, mailing/residential/correspondence address, contact number, policy details, transaction records, credit information, membership number, marital status, family status, educational and training details, employment details, financial details, tax details, medical and health records, claims history and information on your family, lifestyle and social circumstances, occupation details, username and password, Log Files (see below), interests and favourite activities, tracking information about your use of the Application and/or the Website (as the case may be) and transaction information (including your characteristics and transaction behaviour)(“Tracking Data”), social media account information and etc. as well as information in relation to your insured, policy beneficiaries, assignees, trustees, third party payor (if applicable). For Tracking Data collected through the use of cookies and other tracking mechanisms, please also refer to our related policies (including but not limited to the CTF Life Privacy Policy Statement) for further details as to how we collect, use and process Tracking Data.

Purposes for using personal data collected

The personal data to be collected from you and/or from other sources as mentioned below in this Statement will be used and retained by us (and/or our Affiliates and/or our Marketing Partners as defined in the “Direct Marketing” section below, as applicable) for the following purposes (as may be applicable from time to time) (together, the “Purposes”):

1. Administration of insurance or reinsurance related business, which includes underwriting, processing and evaluation of applications, identity and credit checking, suitability checking, policy servicing, collateral assignment arrangement (e.g. for premium financing purpose), claims processing, claims investigation, claims settlement, fraud detection and prevention (whether or not relating to the policy issued in respect of this application), account/debt collection, litigation, communications, preparing statistics, data analysis and research, internal and external audit, maintaining quality services, sales and marketing, corporate brand building and customer loyalty building;
2. Identifying and verifying your identity and/or as a member;
3. Registering you as a user of the Application and/or the Website (as the case may be);
4. To serve you better and/or maintain your personal data and/or information across multiple pages within or across one or more sessions when using the Application and/or the Website (as the case may be);
5. Following registration as a user, accessing your account information (including, but not limited to, your name, membership number, etc.) and managing your account (including, but not limited to, changing your password, updating your personal information, subscribing/unsubscribing from direct marketing, etc.);
6. Research, development, and analysis in relation to your/customer behaviour including carrying out data sorting and analysis to enable us to better understand your characteristics and transaction behaviour (subject to your consent for direct marketing, if/where applicable) to provide other goods and/or services better tailored to your needs, and to assist us in selecting Marketing Subjects (see below) that are likely to be of interest to you, and carrying out aggregated behavioural analysis, including using personal data for statistical analysis, data science studies and data mining;
7. For you to make enquiries, complaints, and/or suggestions to us in relation to the Purposes and/or the Goods and Services (including, but not limited to, through an in-app text box on your mobile device or through our official social media page and/or our official website, or by text message, email and/or mail, and/or other media whether now known or available in the future);
8. Seeking your feedback, including through surveys, in relation to the Purposes and/or the Goods and Services (including, but not limited to, through an in-app text box on your mobile device or through our official social media page and/or our official website, or by text message, email and/or mail, and/or other media whether now known or available in the future);
9. Improving the Documentation, the Application and/or the Website, the Purposes, and our and our Affiliates’ and Marketing Partners’ Goods and Services;
10. Direct marketing and cross-marketing for the Marketing Subjects, subject to consent (see below section entitled “Direct marketing”);
11. Data analytics, profiling, information management and database administration;
12. Deterring, detection, investigation and/or prevention of activities that may violate, or may be suspected to violate, our policies or may be abusive, illegal, and/or criminal;
13. Compliance with the obligations, requirements or arrangements for disclosing and using data that apply to CTF Life or with which it is expected to comply according to:
    • a).any law binding or applying to it within or outside Hong Kong existing currently and in the future;
    • b).any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside Hong Kong existing currently and in the future; and
    • c).any present or future contractual or other commitment with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers that is assumed by or imposed on CTF Life by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations.
14. Collection or recovery of any debt owed by you to us or our Affiliates;
15. The normal management, operation, and maintenance of the Application and/or the Website and the provision of the Goods and Services to you;
16. Storing your personal data (whether by a single or multiple Affiliates (including us) or our Marketing Partners) for the purpose of sharing such personal data with our Affiliates and/or our Marketing Partners for any and all of the other Purposes listed above (and subject to your consent in the event that transfer to any or all such data transferees for direct marketing are involved); and/or
17. Other purposes ancillary or related to the above.

Those with whom we share personal data

The personal data you provide to CTF Life will be kept confidential, except that it may be disclosed/shared with the following parties:

1. any insurance agent, broker, independent financial advisor acting on your behalf or your assignee, adjusters, employers, health care professionals, hospitals, accountants, financial advisors, solicitors, and/or organizations that consolidate claims and underwriting information for the insurance industry; fraud prevention organizations; other insurance companies (whether directly or through fraud prevention organization or other persons named in this paragraph), the police and databases or registers (and their operators) used by the insurance industry to analyse and check information provided against existing information) for any of the Purposes;
2. loss adjusters, private investigators, letter shopping service providers, debt collectors, and any other agent, contractor or third party service provider, in each case, that provides risk intelligence, administrative, telecommunications, computer, Internet or payment services to CTF Life for any of the Purposes;
3. any actual or proposed reinsurers of CTF Life for any of the Purposes;
4. any person to whom CTF Life is under an obligation or otherwise required to make disclosure under the requirement of any law binding on or applying to CTF Life or any of its Affiliates, or any disclosure under and for the purposes of any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers with which CTF Life is expected to comply or any disclosure pursuant to any contractual or other commitment of CTF Life with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers, all of which may be within or outside Hong Kong and may be existing currently and in the future.

We may also engage agents, contractors, suppliers and service providers (whether within or outside the Hong Kong Special Administrative Region of the People’s Republic of China (“Hong Kong”)) in connection with the Purposes and/or the provision of the Goods and Services, e.g. IT/software solutions/technology services providers, marketing agents, social media, research companies, and service providers of development and maintenance, administrative, data processing, digital storage, or other similar services, and may transfer to or share your personal data with them for the Purposes within or outside Hong Kong. We may also share your personal data (subject to your consent, if/where applicable) with our Affiliates, our Marketing Partners (see below) and the social media platforms that we and/or our Affiliates/our Marketing Partners (see below) use for such Purposes. Where we are required by the law of any country or place or requested by any court, regulatory body or governmental body of any country or place, we may also disclose your personal data as required. In the event of any actual or proposed transfer of business, transfer of shares, re-structuring, amalgamation, merger, sale, transfer, or purchase of us or our business or our Affiliates or our Affiliates' businesses, your personal data may be transferred to the new entity as part of the transaction, provided that the new entity abides by this Statement and continues to exercise the same level of care, in respect of your personal data, as we would. You will be notified of such event and you may decide to withdraw your consent to the use of your personal data.

Your personal data may be transferred to and/or stored by us in physical locations and/or servers located within or outside Hong Kong and/or shared with our Affiliates and/or our Marketing Partners (see below) located within or outside Hong Kong. However, we will take all reasonable measures to ensure that your personal data is stored and processed securely, regardless of the country or place in which it is stored, and we procure by contract or use our reasonable endeavours to ensure that our Affiliates and our Marketing Partners (see below) do the same.

Direct marketing

Subject to your consent, we may use your personal data to send you direct marketing (including, but not limited to, special offers, news, information and marketing) about us, our Affiliates and/or our Marketing Partners (see below) in relation to the Marketing Subjects (see below) whether by in-app messages and/or notifications and/or push notifications to your mobile device, post, email, telephone, text message, or other media whether now known or available in the future.

Subject to your consent, we may also use your personal data for, or provide your personal data to, our Affiliates and/or our Marketing Partners (see below) so that they may send you direct marketing (including, but not limited to, special offers, news, information and marketing) about us, our Affiliates and/or our Marketing Partners (see below) in relation to the Marketing Subjects (see below) whether by in-app messages and/or notifications and/or push notifications to your mobile device, post, email, telephone, text message, and/or other media whether now known or available in the future.

Our “Marketing Partners” include property developers, banks, financial and investment institutions, insurance companies, insurance brokerage companies, insurance corporate agencies, private clubs, concierge and customer service providers, retail outlets and online businesses (products and services including fashion and beauty, health and personal cares, luxury, home and living, food, wine and beverage, books and stationery), shopping malls, department stores, watches and jewellers (such as Chow Tai Fook Jewellery Group Limited), hotel chains, catering services providers, healthcare and senior care, services and/ or products providers including health and wellness, art and culture, gallery and exhibition, green and nature, sports and recreation, travel and accommodation, leisure and entertainment, transportation and logistics, telecommunication, media and information technology, corporate innovation, accelerator and incubation programmes, competitions, conferences and events, pre-school, primary, secondary and/or tertiary education institutions.

As we may share your personal data with our Affiliates and/or our Marketing Partners, we may also receive your personal data from them. Subject to your consent given to our Affiliates and/or our Marketing Partners, we may also use such personal data to send you direct marketing about us, our Affiliates and/or our Marketing Partners in relation to the Marketing Subjects (see below).

The types of products, services, events and charitable initiatives that we, our Affiliates and/or our Marketing Partners may market to you include the following (together, the “Marketing Subjects”):

1. goods and services offered by us and/or our Affiliates in relation to the Goods and Services;
2. finance, banking, securities, mortgage, insurance and other related services and products by banks, financial and investment institutions, securities companies and insurance companies;
3. access and privileges at private clubs;
4. professional consultation on customer services, including but not limited to event planning, holidays, hotels, travel, and tickets reservation;
5. consumer products and services by retail outlets and/or online businesses, including clothing, shoes, fashion, fashion accessories and beauty, health and personal cares, luxury, home and living, household products, food, wine, liquor and beverages, confectionary, groceries, books and stationery, toys, cigarettes and cigars, fragrances and cosmetics, baby products, telephones and mobile devices, electronics and electrical appliances, computer software, and games, bags and luggage, furniture, sports and leisure equipment;
6. pharmaceutical products, medical and pharmaceutical services, therapeutical products and services, and therapy services by therapists;
7. tutoring, mentoring, home cleaning, janitor services, landscape and plant maintenance services, agricultural services, part time housekeeping, plumbing services, locksmiths, barber and salon services, gym and fitness services, laundry services, florists, vehicle towing, and motor vehicle services;
8. reward, loyalty, privileges programmes and promotions at shopping malls and department stores;
9. reward, loyalty, privileges programmes and promotions for customers and/or potential customers of the New World Group;
10. watches, jewelleries and accessories;
11. restaurants, catering services on food, wine and beverage;
12. travel, hospitality and accommodation services and products, including but not limited to hotels and serviced apartments, holiday package products and services offered by travel agents, tickets to attractions;
13. transportation and logistics services, including but not limited to air travel and non-air transportation services such as hotel transfers, car rentals, bus operators, train operators and cruise operators, and courier services and shipping services ;
14. conference and exhibition management services, consultancy and marketing research services, supply chain management, event and project management services, gaming services, advertising and public relations services, media production services;
15. tickets for concerts, galleries, exhibitions, films, theatricals, sporting, special and cultural events;
16. green and nature activities;
17. technology, telecommunication, internet and mobile communication services, social networking and media;
18. graphic and interior design services, photography services, printing and publishing services;
19. legal services, medical services, accounting, auditing, bookkeeping and taxation services, engineering services, architectural services, surveying services, equipment rental services, hospitality services;
20. professional advice and/or consultation on education and/or personal enhancement;
21. charitable initiatives which support areas including sports, recreation, art and cultural programmes, relief of poverty, advancement of education, advancement of religion and other purposes that are beneficial to the community.

We cannot use or provide your personal data for direct marketing purposes and/or provide your personal data to third parties (whether to our Affiliates and/or our Marketing Partners) for their direct marketing purposes unless you consent. Even if you give your consent, you can opt out of direct marketing at any time (or you may request that we cease to provide your personal data to third parties, at which point we will cease to do so), free of charge, by emailing csc@ctflife.com.hk or writing to our Data Protection Officer, CTF Life Customer Service Centre, Chow Tai Fook Life Insurance Company Limited, at CTF Life, 7/F, NEO, 123 Hoi Bun Road, Kowloon, Hong Kong SAR (marked Confidential).

Your rights

Apart from your right to opt out of direct marketing as mentioned above, you have the following additional rights:

1. to check whether we hold any of your personal data;
2. access your personal data held by us;
3. require us to correct any personal data which is inaccurate; and
4. ascertain our policies and practices (from time to time) in relation to personal data and the types of personal data held by us.

If you would like to make a request in relation to the above (or make any general enquiries), please contact our Data Protection Officer, CTF Life Customer Service Centre, Chow Tai Fook Life Insurance Company Limited at CTF Life, 7/F, NEO, 123 Hoi Bun Road, Kowloon, Hong Kong SAR or csc@ctflife.com.hk(marked Confidential). In accordance with the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong) (the “PDPO”), we have the right to charge you a reasonable fee for the processing of any personal data access request.

Privacy Policy Statement

You can find out more about our policy on personal data protection by accessing the CTF Life Privacy Policy Statement available at https://www.ctflife.com.hk/en/disclaimer . If there is any inconsistency or conflict between the CTF Life Privacy Policy Statement and this Statement, this Statement shall prevail.

Please also see the CTF Life Privacy Policy Statement for our policies and information about:

1. our collection and/or use of Log Files (data relating to your use of/visits to the Application and/or the Website (as the case may be), including but not limited to your IP address, domain name, browser type and access time);
2. the use of cookies and other tracking mechanisms;
3. retention of your personal data;
4. third party merchants and/or websites that may be contained in the Application and/or the Website (as the case may be);
5. how we keep your personal data secure;
6. use of your personal data in legal proceedings.

Inconsistency or conflict

If there is any inconsistency or conflict between the English and Chinese version of this Statement, the English version shall prevail.

Miscellaneous

This Statement may be updated from time to time to reflect changes to our policy with respect to personal data protection and/or changes to personal data/data privacy laws and regulations. Where there are significant changes, we will notify you and obtain your acceptance of the changes, consents, and/or opt in (as necessary or applicable). If you do not accept the changes and/or provide your consent, then we may not be able to perform the Purposes and/or provide goods or services to you. You are advised to check the Application and/or the Website (as the case may be) for updates to this Statement on a regular basis.

Nothing in this Statement shall limit your rights under the PDPO.

If you are:

(i) an individual located in Mainland China who visits CTF Life’s relevant website(s) or uses relevant mobile application(s) of CTF Life, or otherwise uses CTF Life’s products and/or services by phone or any other means from Mainland China; and/or

(ii) an individual holding a Mainland China passport and/or resident identity card who visits the service centres or other physical premises of CTF Life in Hong Kong or otherwise uses CTF Life’s products and/or services by phone or any other means in Hong Kong,

your personal data will be processed by CTF Life in accordance with the “People’s Republic of China Addendum” in addition to the(i) CTF Life Privacy Policy Statement and (ii) this Statement, as well as the applicable data protection laws and regulations in Mainland China which, for the current purposes, excludes Hong Kong, the Macau Special Administrative Region of the People’s Republic of China and Taiwan.

This Statement shall be governed by, and construed in accordance with, the laws of Hong Kong.