Privacy & Data
Collection Policy

HC Capital Group Limited ("we," "us," or "our"), a licensed money lender duly registered under the Money Lenders Ordinance (Cap. 163) of Hong Kong (License No. [0778/2024]), is committed to protecting the privacy and security of your personal data in strict compliance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and other applicable laws and regulations. This comprehensive Privacy Policy and Personal Data Collection Statement outlines in detail our practices concerning the collection, use, processing, storage, disclosure, and protection of your personal information when you engage with our services through any channel, including but not limited to our physical offices, official website ([website URL]), mobile application, telephone services, or any other digital platforms operated by us.

Collection of Personal Data

We collect various categories of personal data that are necessary for the provision of our licensed money lending services. This includes, but is not limited to:

Identification particulars: Your full name, Hong Kong Identity Card number or passport details (including copies of these documents), date of birth, and facial recognition data where required for identity verification purposes.
Contact information: Current residential address, correspondence address (if different), telephone numbers (both mobile and landline), and email address.
Financial and employment details: Monthly income, employment status, employer information, bank account details, existing liabilities, credit history, and other financial commitments.
Transaction records: Details of your loan applications, approved loans, repayment history, and any correspondence related to your account.
Technical data: When you interact with our digital platforms, we automatically collect your IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access our services.

Purposes of Data Collection and Use

Your personal data is collected and processed for specific, explicit, and legitimate purposes, including:

Loan Application Processing: To assess your eligibility for our loan products, verify your identity, and make credit decisions in accordance with our internal policies and regulatory requirements.
Credit Assessment: To conduct credit checks with authorized credit reference agencies in Hong Kong under the Multi-agency Credit Reference Agencies (MCRA) model, which involves sharing your personal data with these agencies and receiving your credit report for evaluation.
Account Management: To administer your loan account, process payments, send account statements, and provide customer service support throughout the loan tenure.
Regulatory Compliance: To fulfill our legal obligations under various ordinances including but not limited to the Money Lenders Ordinance, Anti-Money Laundering and Counter-Terrorist Financing Ordinance, and Inland Revenue Ordinance.
Risk Management: To detect, investigate, and prevent fraudulent activities, money laundering, terrorist financing, and other financial crimes.
Service Improvement: To analyze customer behavior and preferences to enhance our products, services, and overall customer experience.
Direct Marketing: Only with your explicit prior consent, we may use your personal data to send you promotional materials about our financial products and services, special offers, and market research invitations.

Data Sharing and Disclosure

We may disclose your personal data to third parties under strict confidentiality agreements and only when necessary for the purposes stated above, including:

Credit Reference Agencies: Such as TransUnion Limited or other authorized agencies under Hong Kong's MCRA framework for credit checking and account status reporting purposes.
Regulatory Authorities: Including but not limited to the Hong Kong Monetary Authority, Hong Kong Police Force, and other government bodies when required by law.
Service Providers: Such as cloud storage providers, IT system maintenance companies, payment processors, and debt collection agencies (in cases of default).
Professional Advisors: Including our auditors, lawyers, and consultants when necessary for business operations.

Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and reporting requirements. Typically:

Successful loan applications: Data is retained for 7 years after the full repayment and closure of your account.
Rejected applications: Data is retained for 2 years from the date of rejection.
Marketing data: Retained until you withdraw your consent or opt-out of marketing communications.

Your Rights Under PDPO

As a data subject under Hong Kong law, you have the right to:

Request access to a copy of your personal data held by us.
Request correction of any inaccurate personal data.
Withdraw consent for direct marketing at any time.
Request information about our data policies and practices.
In relation to consumer credit data, request deletion of your account repayment data from credit reference agencies under specific conditions.

Security Measures

We implement robust technical and organizational security measures to protect your personal data against unauthorized or accidental access, processing, erasure, loss, or use, including:

Encryption of sensitive data during transmission (TLS 1.2 or higher) and at rest.
Strict access controls and authentication protocols.
Regular security audits and penetration testing.
Comprehensive staff training on data protection.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to:

Ensure proper functionality of our online services.
Analyze website traffic and user behavior.
Personalize your online experience (with your consent).
You may manage your cookie preferences through your browser settings, though disabling certain cookies may affect website functionality.

Privacy & Data Collection Policy