25 May 2018
Your privacy is important to us. This notice (Privacy Notice) applies to personal information we collect from you when you use this website. If you’re a HSBC customer, or otherwise have a relationship with us, we may also have provided you with a separate privacy notice setting out how we use your personal information, which will also apply. You can also find that privacy notice by visiting the website for the product or services we provide you (for example, https://business.ciiom.hsbc.com/) or by contacting your customer service team.
Some of the links on this website may lead to HSBC or non-HSBC websites with their own privacy notices, which may be different to this Privacy Notice, and you should read those notices carefully.
Please note that this website is hosted in Jersey and issued by HSBC Bank plc Jersey Branch. For us to address any concerns, comments or complaints about this website most effectively, we recommend that these should be directed to either to our customer service team (details on the website), our data protection officer in Jersey or the local data protection regulator (details provided below).
For the purposes of this Privacy Notice, the data controller will be HSBC Bank plc, a company incorporated in England and Wales and operating in the Channel Islands and Isle of Man through locally regulated branches. HSBC Bank plc’s registered office is 8 Canada Square, London, E14 5HQ, United Kingdom.
The address for HSBC Bank plc (Jersey Branch) is HSBC House, Esplanade, St Helier, Jersey JE1 1HS, Channel Islands; for HSBC Bank plc (Guernsey Branch) it is Arnold House, St Julian’s Avenue, St Peter Port, Guernsey, GY1 3NF, Channel Islands; and for HSBC Bank plc (Isle of Man Branch) it is HSBC House, Ridgeway St, Douglas IM1 2SG, Isle of Man.
We’ve also set out contact details for our data protection officer towards the end of this notice.
Information we may collect from you
We may collect and process the following information about you:
- Information that you provide to us, such as when you fill out a contact or web form, or if you register to receive alerts or updates
- Information that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data
- If you are browsing our website, you can view the Website Privacy Notice here.
We may also ask you for information if you experience problems when using this site. We may also ask you to complete surveys for research purposes, although you don’t have to respond to these.
If we have an existing relationship with you, and we are able to identify you from information obtained or provided by your use of the site, we may associate those sets of information, for example to enable us to respond to a query you have submitted.
Please note that this website is not designed or intended for children and we do not knowingly collect data relating to children.
How we use your information
We’ll only use your information where we have your consent or we have another lawful reason for using it. Unless we say otherwise below, we’ll use your personal information on the basis that it’s within our legitimate interests in operating and maintaining the site, and providing you with site functionality and related services.
We use information provided or obtained via this site to:
- respond to your queries and reports (for example, if you’ve asked a question or submitted a report via the site)
- provide you with information, products or services you have requested or which we think may interest you, unless you tell us otherwise
- carry out our obligations from any contracts entered into between you and us
- allow you to participate in any interactive features of the site
- notify you about changes to the site
- provide you with alerts or updates where you’ve consented to receive these by registering on the site. You can opt out of these at any time by clicking the “unsubscribe” link at the bottom of each email we send you.
- ensure site content is presented in the most effective manner for the device you’re accessing it from (e.g. your mobile phone, personal computer or other electronic device)
- undertake data analytics to learn more about how you and others interact with this site and with our advertising
- detect and prevent misuse or abuse of this site or our services
We also use information to meet our compliance obligations, to comply with applicable laws and regulations and to share with regulators and other authorities that HSBC Group companies are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes). We’ll only do this on the basis that it’s needed to comply with a legal obligation, it’s in our legitimate interests and that of others or to prevent or detect unlawful acts.
If you are browsing our website, you can view the Website Privacy Notice here.
Who we’ll share your information with
We may share your information in order to provide you with products or services you’ve requested (for example, if they’re not provided by the HSBC entity operating this site), if we have a legitimate interest in doing so (e.g. to manage risk, verify your identity, to combat fraud, abuse of our site or services), or where you’ve agreed to us doing so.
We may share your information with others including other HSBC group companies and (where legitimate and necessary) any of our service providers, anyone else whose products and services you’ve requested, anyone who we’re under an obligation to disclose information to or where it’s in the public interest, for example to prevent or detect fraud, abuse of our site or services).
We may collect information about your computer (or mobile device), including where available your IP address, operating system and browser type, for system administration or for our own commercial purposes. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
How long we’ll keep your information
We keep your information in line with our data retention policy. For example, we’ll normally keep correspondence for a period of six months. This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as dealing with any enquiries.”
We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, e.g. to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc.
If we don’t need to retain information for this period of time, we may destroy, delete or anonymise it more promptly.
Transferring your information overseas
Your information may be transferred to and stored in locations outside the Channel Islands and Isle of Man or the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful.
You can obtain more details of the protection given to your information when it’s transferred outside the Channel Islands and the Isle of Man and EEA by contacting us using the details in the ‘More details about your information’ section below.
You have a number of rights in relation to the information that we hold about you. These rights include:
- the right to access information we hold about you and to obtain information about how we process it;
- in some circumstances, the right to withdraw your consent to our processing of your information, which you can do at any time. We may continue to process your information if we have another legitimate reason for doing so;
- in some circumstances, the right to receive certain information you have provided to us in an electronic format and / or request that we transmit it to a third party;
- the right to request that we rectify your information if it’s inaccurate or incomplete;
- in some circumstances, the right to request that we erase your information. We may continue to retain your information if we’re entitled or required to retain it;
- the right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we’re entitled to continue processing your information and / or to refuse that request.
You can exercise your rights by contacting us using the details set out in the ‘More details about your information’ section below.
You have also the right to complain to the data protection regulator in the country where you live or work. For Channel Islands and Isle of Man, these are:
- the Office of the information Commissioner in Jersey by visiting www.dataci.je
- the Office of the Data Protection Commissioner in Guernsey, by visiting www.dataci.gg
- the Information Commissioner in the Isle of Man by visiting www.inforights.im
In addition if you are dissatisfied with the decision you may have a right of appeal to the courts
How we keep your information secure
We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.
More details about your information
If you’d like further information on anything we’ve said in this Privacy Notice, or to contact our Data Protection Officer, contact us at HSBC House, Esplanade, St Helier, JE1 1HS, Jersey, addressed ‘for the attention of the DPO’.
This Privacy Notice may be updated from time to time, and you’ll always be able to find the most recent version on http://www.business.ciiom.hsbc.com/en-gb/hsbc/generic/legal-information.