Chong Hing Bank Limited (the "Bank")
Notice to Customers and other Persons relating to the
Personal Data (Privacy) Ordinance (the "Ordinance")

the daily operation of the banking, financial or insurance services and facilities provided to customers;

conducting credit checks at the time of application for credit and at the time of regular or special reviews which normally will take place one or more times each year;

creating and maintaining the Bank´s credit scoring models;

assisting other financial institutions to conduct credit checks and collect debts;

ensuring ongoing credit worthiness of customers or other persons;

designing banking, financial and insurance services and products for customers´ use;

marketing the following services and products (in respect of which the Bank may or may not be remunerated):

1.	banking, financial, insurance, credit card and related services and products;
2.	reward, loyalty or privileges programmes and related services and products; and
3.	services and products offered by the Bank´s co-branding partners (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be); and

these services or products may be provided and/or marketed by:

1.	the Bank and the Bank´s group companies;
2.	third party financial institutions, insurers, credit card companies, securities and investment services providers;
3.	third party reward, loyalty or privileges programme providers; and
4.	co-branding partners of the Bank and the Bank´s group companies;

determining amounts owed to or by customers or other persons;

collection of amounts outstanding from customers and those providing security for customers´ obligations;

meeting the requirements to make disclosure under the requirements of any law binding on the Bank or any of its branches or under and for the purposes of any guidelines issued by regulatory or other authorities with which the Bank or any of its branches are expected to comply;

enabling an actual or proposed assignee of the Bank or participant or sub-participant of the Bank´s rights in respect of the customers to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation; and

purposes relating thereto.

any agent, contractor or third party service provider who provides administrative, telecommunications, computer, payment or securities clearing or other services to the Bank in connection with the operation of its business;

any other person under a duty of confidentiality to the Bank including a group company of the Bank which has undertaken to keep such information confidential;

the drawee bank providing a copy of a paid cheque (which may contain information about the payee) to the drawer;

credit reference agencies, and, in the event of default, to debt collection agencies;

any person to whom the Bank is under an obligation to make disclosure under the requirements of any law binding on the Bank or any of its branches or under and for the purposes of any guidelines issued by regulatory or other authorities with which the Bank or any of its branches are expected to comply;

any actual or proposed assignee of the Bank or participant or sub-participant or transferee of the Bank´s rights in respect of the customer; and

1.	the Bank´s group companies;
2.	third party financial institutions, insurers, credit card companies, securities and investment services providers;
3.	third party reward, loyalty and privileges programme providers;
4.	co-branding partners of the Bank and the Bank´s group companies (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be); and
5.	external service providers (including but not limited to mailing houses, telecommunication companies, telemarketing and direct sales agents, call centres, data processing companies and information technology companies) that the Bank engages for the purposes set out in paragraph (d)(vii).

Such information may be transferred to a place outside Hong Kong.

to check whether the Bank holds data about him and of access to such data;

to require the Bank to correct any data relating to him which is inaccurate;

to ascertain the Bank´s policies and practices in relation to data and to be informed of the kind of personal data held by the Bank;

to be informed on request which items of data are routinely disclosed to credit reference agencies or debt collection agencies, and be provided with further information to enable the making of an access and correction request to the relevant credit reference agency or debt collection agency; and

in relation to data which has been provided by the Bank to a credit reference agency, to instruct the Bank upon termination of an account by full repayment to make a request to the credit reference agency to delete such data from its database, as long as the instruction is given within five years of termination and at no time did the account have a default of payment lasting in excess of 60 days within 5 years immediately before account termination. In the event the account has had a default of payment lasting in excess of 60 days the data may be retained by the credit reference agency until the expiry of five years from the date of final settlement of the amount in default or five years from the date of discharge from a bankruptcy as notified to the Bank, whichever is earlier.