App Privacy Notice

About HSBC

The Hongkong and Shanghai Banking Corporation Limited, Macau Branch ('HSBC') collects, uses and shares information about you so that it can provide you with a bank account and related services. This App Privacy Notice explains how we collect, use and share your information when you use this app, including information about the device that the app is installed on e.g. your mobile phone or tablet. You can find full information in our main privacy notice: https://www.hsbc.com.mo/misc/app-privacy-notice/ This app is provided by HSBC Global Services (UK) Limited and on behalf of HSBC; and all products and services accessed via this app are provided by HSBC.

Your privacy rights

You can contact us and exercise your rights by writing to The Hongkong and Shanghai Banking Corporation Limited, Macau Branch, Avenida da Praia Grande, PO Box 476, Macau SAR, and marking your letter referenced as "Privacy Rights".

Protecting your information

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

Keeping your information

We'll keep your information in line with our data retention policy. This allows us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise. We may need to keep your information for longer where we need the information to comply with regulatory or legal requirements, help detect or prevent fraud and financial crime, answer requests from regulators etc. If we don't need to keep information for this length of time, we may destroy, delete or anonymise it sooner.

Sharing your information within the HSBC Group

We may share your information with other HSBC group companies and any sub-contractors, agents or service providers who work for us or other HSBC group companies. This includes employees, sub-contractors, service providers, directors and officers. We do this so that we can provide you with the products or services that you ask for (such as bank accounts and payments), and as explained in our main privacy notice. This type of data sharing is not included in the sections below.

Collecting information from your device

We collect various information about your device’s make, model and its operating system, how it’s connected to the network and internet, and its various settings. We use this to protect both you and us from fraud and cybersecurity attacks. This table explains what other information HSBC collects from your device and how it uses it. In some cases, e.g. when accessing the contacts stored on your device, or photos that you take with your device, HSBC will first ask your permission before collecting the data.
Information accessed	What it is used for
Your phone book	This allows our app to access your contacts so that you can transfer money to people in your address book using their phone number or email.
Your device's camera and photo library	This allows you to take a photo or video and immediately share it with us, so that you can make a payment by scanning a QR code
Your biometric information	You can use biometrics authentication (like fingerprints or facial recognition) to logon to our app. We cannot access your biometric information.
Your location	When you’re using the app we may use your location to help us detect and prevent fraud.
Your Device Information and Internet Access	This allows us to use your internet connection to access our banking systems and check you have a working connection.

We collect various information about your device’s make, model and its operating system, how it’s connected to the network and internet, and its various settings. We use this to protect both you and us from fraud and cybersecurity attacks. This table explains what other information HSBC collects from your device and how it uses it. In some cases, e.g. when accessing the contacts stored on your device, or photos that you take with your device, HSBC will first ask your permission before collecting the data.
Information accessed	Your phone book
What it is used for	This allows our app to access your contacts so that you can transfer money to people in your address book using their phone number or email.

Information accessed	Your device's camera and photo library
What it is used for	This allows you to take a photo or video and immediately share it with us, so that you can make a payment by scanning a QR code

Information accessed	Your biometric information
What it is used for	You can use biometrics authentication (like fingerprints or facial recognition) to logon to our app. We cannot access your biometric information.

Information accessed	Your location
What it is used for	When you’re using the app we may use your location to help us detect and prevent fraud.

Information accessed	Your Device Information and Internet Access
What it is used for	This allows us to use your internet connection to access our banking systems and check you have a working connection.

Software that our app uses

Our app includes some software provided by organizations other than HSBC. The software helps our app to work properly and safely. The information below lists that software and what it does. It also sets out which organizations provide it to us, and how you can contact them if you need to exercise your privacy rights.
Who is it shared with	What it is used for
AppDynamics	Helps track app performance so that it can keep running smoothly
Tealium (tag manager)	Allows us to manage cookies based on your preferences
RASP - Shield	Allows us to detect and stop fraud on our app
Zimperium	Allows us to detect signs of possible security issues on your device, for example by checking your device for signs of malware
Transmit（Mauth）Security	Allows us to ensure logon and authentication is more secure
Vasco DigiPass	Allows us to detect and prevent fraudulent activities on our app
Tealium EventStream	Allows us to collect data to understand how you use our app and to personalise our app and other services
WafMobileSdk	Allows us to manage the token authorization

Our app includes some software provided by organizations other than HSBC. The software helps our app to work properly and safely. The information below lists that software and what it does. It also sets out which organizations provide it to us, and how you can contact them if you need to exercise your privacy rights.
Who is it shared with	AppDynamics
What it is used for	Helps track app performance so that it can keep running smoothly

Who is it shared with	Tealium (tag manager)
What it is used for	Allows us to manage cookies based on your preferences

Who is it shared with	RASP - Shield
What it is used for	Allows us to detect and stop fraud on our app

Who is it shared with	Zimperium
What it is used for	Allows us to detect signs of possible security issues on your device, for example by checking your device for signs of malware

Who is it shared with	Transmit（Mauth）Security
What it is used for	Allows us to ensure logon and authentication is more secure

Who is it shared with	Vasco DigiPass
What it is used for	Allows us to detect and prevent fraudulent activities on our app

Who is it shared with	Tealium EventStream
What it is used for	Allows us to collect data to understand how you use our app and to personalise our app and other services

Who is it shared with	WafMobileSdk
What it is used for	Allows us to manage the token authorization