Privacy Policy

Wing Fung Credit Limited ("the Company")
Notice to Customers and Other Individuals Relating to the Personal Data (Privacy) Ordinance (the "Notice")

It is the policy of Wing Fung Credit Limited ("the Company") to respect and safeguard the privacy of an individual's personal data. Compliance with the Ordinance is not only the prime objective of the management but also direct responsibility of every staff member of the Company. The Company shall preserve the confidentiality of all information provided by customers. This Notice stipulates the purpose of the data collection and customer's data protection. Data subject always has the right to access his/her personal data and update it whenever appropriate. Data subject is advised to take note of the following:


  1. 1. The term "data subject(s)", wherever mentioned in this Notice, includes the following categories of individuals:
     
    • applicants for or customers/users of credit facilities and related financial services and products and so forth provided by a Company and their authorized signatories;
    • sureties, guarantors and parties providing security, guarantee or any form of support for obligations owed to a Company;
    • directors, shareholders, officers and managers of any corporate applicants and data subjects/users; and
    • suppliers, contractors, service providers and other contractual counterparties of the Company.
  2. 2. From time to time, it is necessary for data subjects to supply the Company with data in connection with the opening or continuation of accounts and the establishment or continuation of credit facilities or installment loans or provision of other services which include but not limited to personal loan, revolving loan, property mortgage and property valuation services. The Company will also collect data relating to the customer from third parties, including third party service providers with whom the customer interacts in connection with the marketing of the Company’s products and services and in connection with the customer’s application for the Company’s products and services (including receiving personal data from credit reference agencies approved for participation in the Multiple Credit Reference Agencies Model (hereinafter referred to as “credit reference agencies”)).
  3. 3. Failure to supply such data may result in the Company being unable to open or continue accounts or establish or continue credit facilities or installment loans or provide other services.
  4. 4. It is also the case that data are collected from data subjects in the ordinary course of business for the purpose of processing of new or renewal of loan application or services either application in person, through telephone or Internet. This includes information obtained from credit reference agencies.
  5. 5. The purposes for which data relating to the data subjects may be used as follows:
     
    • the daily operation of the services and credit facilities provided to the data subjects;
    • conducting credit checks at the time of application for credit/loan and at the time of regular or special reviews which normally will take place one or more times each year. The Company undertakes these reviews to determine whether the data subjects existing credit/loan amount should be increased, decreased or where appropriate remained unchanged;
    • creating and maintaining the Company's credit scoring models;'
    • assisting other credit providers in Hong Kong approved for participation in the Multiple Credit Reference Agencies Model (hereinafter referred to as “credit providers”) to conduct credit checks and collect debts;
    • ensuring ongoing credit worthiness of data subjects;
    • designing financial services or related products for data subjects' use;
    • marketing financial services or related products provided by the Company or selected third party entities or business partners and monitoring the provision, operation and use of such products or services;
    • determining amounts owed to or by the data subjects;
    • collection of amounts outstanding from the data subjects and those providing security for the data subjects' obligations;
    • complying with the requirements for disclosing and using data that apply to the Company or any of its branches according to any law binding;
    • complying with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within the group companies of the Company and/or any other use of data and information in accordance with any group-wide programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
    • comparing data of the data subjects or other persons for credit checking, data verification or otherwise producing or verifying data, whether or not for the purpose of taking action against the data subjects;
    • enabling an actual or proposed assignee of the Company, or participant or sub-participant of the Company's rights in respect of the data subjects to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation; and
    • purposes relating thereto.
  6. 6. Data held by the Company relating to data subjects will be kept confidential but the Company may provide such data to the following parties for the purposes set out in Paragraph (5):
     
    • any agent, contractor or third party service provider who provides administrative, telecommunications, computer, payment or securities clearing or other services to the Company in connection with the operation of its business;
    • any other person under a duty of confidentiality to the Company including a group companies of the Company which has undertaken to keep such information confidential;
    • the drawee bank providing a copy of a paid cheque (which may contain information about the payee ) to the drawer;
    • any person making payment into the data subject's account;
    • credit reference agencies, and , in the event of default, to debt collection agencies;
    • any person to whom the Company is under an obligation to make disclosure under the requirements of any law binding on the Company or any of its branches; and
    • any actual or proposed assignee of the Company or participant or sub-participant or transferee of the Company's rights in respect of the data subject.
  7. 7. For the purpose of Paragraph 5(b) above, the Company may from time to time access and obtain consumer credit data of the data subject from credit reference agencies for reviewing any of the following matters in relation to the credit facilities granted:
     
    • an increase in the credit amount;
    • the curtailing of credit (including the termination of credit or a decrease in the facility amount); or
    • the putting in place or the implementation of a scheme of arrangement with the data subject.

      When the Company accesses consumer credit data about a data subject held with a credit reference agency, it must comply with the Code of Practice on Consumer Credit Data approved and issued under the Ordinance.
  8. 8. With respect to data in connection with mortgages applied by the data subject (if applicable, and whether as a borrower, mortgagor or guarantor and whether in the data subject's sole name or in joint names with others) on or after 1 April 2011, the following data relating to the data subject (including but not limited to any updated data of any of the following data from time to time) may be provided by the Company, on its own behalf and/or as agent, to credit reference agencies:
     
    • full name;
    • capacity in respect of each mortgage (as borrower, mortgagor or guarantor, and whether in the data subject's sole name or in joint names with others);
    • identity card number or travel document number;
    • date of birth;
    • correspondence address;
    • mortgage account number in respect of each mortgage;
    • type of the facility in respect of each mortgage;
    • mortgage account status in respect of each mortgage (e.g., active, closed, write-off (other than due to a bankruptcy order), write-off due to a bankruptcy order); and
    • if any, mortgage account closed date in respect of each mortgage.

      Credit reference agencies will use the above data supplied by the Company for the purposes of compiling a count of the number of mortgages from time to time held by the data subject with credit providers in Hong Kong Special Administrative Region, as borrower, mortgagor or guarantor respectively and whether in the data subject's sole name or in joint names with others, for sharing in the consumer credit database of credit reference agencies by credit providers (subject to the requirements of the Code of Practice on Consumer Credit Data approved and issued under the Ordinance).
  9. 9. Under and in accordance with the terms of the Ordinance and the Code of Practice on Consumer Credit Data approved and issued under the Ordinance, any data subject has the right:
     
    • to check whether the Company holds data about him and of access to such data;
    • to require the Company to correct any data relating to him which is inaccurate;
    • to ascertain the Company's policies and practices in relation to data and to be informed of the kind of personal data held by the Company;
    • to be informed on request which items of data are routinely disclosed to credit reference agencies or debt collection agencies, and be provided with further information to enable the making of an access and correction request to the relevant credit reference agencies or debt collection agencies; and
    • in relation to data which has been provided by the Company to a credit reference agency, to instruct the Company, upon termination of the account by full repayment, to make a request to the credit reference agency to delete such account data from its database, as long as the instruction is given within 5 years of termination and at no time was there any default of payment in relation to the account, lasting in excess of 60 days within 5 years immediately before account termination. In the event of any default of payment relating to an account lasting in excess of 60 days, the data may be retained by the credit reference agency until the expiry of 5 years from the date of final settlement of the amount in default or 5 years from the date of discharge from a bankruptcy as notified to the Company, whichever is earlier.
  10. 10. The Company may, in accordance with the customer's instructions to the Company or third party service providers engaged by the customer, transfer customer's data to third party service providers using the Company's API for the purposes notified to the customer by the Company or third party service providers and/or as consented to by the customer in accordance with the Ordinance.
  11. 11. In accordance with the terms of the Ordinance, the Company has the right to charge a reasonable fee for the processing of any data access request.
  12. 12. Use of data in direct marketing

      The Company intends to use a data subject's data in direct marketing and the Company requires the data subject's consent (which includes an indication of no objection) for that purpose. In this connection, please note that:
     
    • the name, contact details, products and services portfolio information, transaction pattern and behaviour, financial background and demographic data of a data subject held by the Company from time to time may be used by the Company in direct marketing;
    • the following classes of services, products and subjects may be marketed:
       
      1. all loan products services; 
      2. reward, loyalty or privileges programmes and related services and products;
      3. services and products offered by the Company's co-branding partners (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be); and
      4. donations and contributions for charitable and/or non-profit making purposes;
    • the above services, products and subjects may be provided or (in the case of donations and contributions) solicited by the Company and/or:
       
      1. any member of the group companies of the Company;
      2. third party reward, loyalty, co-branding or privileges programme providers;
      3. co-branding partners of the Company and the group companies of the Company (the names of such co-branding partners can be found in the application form(s) for the relevant services and products, as the case may be); and
      4. charitable or non-profit making organisations;
    • In addition to marketing the above services, products and subjects itself, the Company also intends to provide the data described in paragraph (12)(a) above to all or any of the persons described in paragraph (12)(c) above for use by them in marketing those services, products and subjects, and the Company requires the data subject's written consent (which includes an indication of no objection) for that purpose;
    • The Company may receive money or other property in return for providing the data to the other persons in paragraph (12)(d) above and, when requesting the data subject's consent or no objection as described in paragraph (12)(d) above, the Company will inform the data subject if it will receive any money or other property in return for providing the data to the other persons.

      * If a data subject does not wish the Company to use or provide to other persons his/her data for use in direct marketing as described above, the data subject may exercise his/her opt-out right by notifying the Company.
  13. 13. Data subjects may, at any time and without charge, choose not to receive any direct marketing material or message from the Company by informing the Data Protection Officer in writing.
  14. 14. The person to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of data held are to be addressed is as follows:
      The Data Protection Officer
    Wing Fung Credit Limited
    Unit 1001-8, 10/F., COSCO Tower, Grand Millennium Plaza, 183 Queen’s Road Central, Hong Kong
    Telephone: 2303 8633
    Facsimile: 2334 2859
  15. 15. The Company may have obtained credit report(s) on the data subject from credit reference agencies in considering any application for credit and for future account review. In the event that the data subject wishes to access the credit report(s), the data subject may contact the following credit reference agencies :

    (I) “Personal Customer Services”
    TransUnion Limited
    Suite 811, 8th Floor, Tower 5, The Gateway, 15 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
    Telephone: 2577 1816
    Email：[email protected]


    (II) “Customer Service Center”
    Nova Credit Limited
    21/F, Billion Plaza 2, 10 Cheung Yue Street, Cheung Sha Wan, Kowloon, Hong Kong
    Telephone：3854 0188
    Email：[email protected]
  16. 16. Nothing in this Notice shall limit the rights of data subjects under the Personal Data (Privacy) Ordinance.
  17. 17. The contents of this Notice shall form part of the terms and conditions of the Loan Agreement and/or the agreement or arrangement that the data subjects have or may enter into with the Company from time to time. If there is any inconsistency or discrepancy is found, this Notice shall prevail.

Date: November 2023
Remarks: In case of discrepancies between the English and Chinese versions, the English version shall prevail.

 


Wing Fung Credit Limited ("the Company")
Statement of Practice

Collection of Personal Data


the Company may collect personal data from you, including but not limited to your identification information, contact details, financial details, etc. for the purposes specified in the Personal Information Collection Statement provided to you on or before the collection of such personal data. The provision of personal data by you is voluntary. However, if you do not provide the personal data requested, the Company may not be able to provide you with the information, services or activities you request in full, and may not be able to fulfill your requests or respond to your enquiries.


Principles


The following data protection principles will be observed.


  1. Principle 1 - Collection purpose and means of personal data
    Personal data will be collected for a lawful purpose directly related to a function or activity of the Company. Only data which is necessary for or directly related to that purpose will be collected and the Company will ensure that the data is adequate but not excessive. The collection will be lawful and by fair means, and all practical steps will be taken to ensure that the data subject is informed of the purpose of its collection.
     
  2. Principle 2 - Accuracy and retention
    All practical steps will be taken to ensure that personal data is accurate and up-to-date. Personal data shall not be kept longer than is necessary to fulfil the purpose (including any directly related purpose) for which the data is to be used.
     
  3. Principle 3 - Use of personal data
    Data subjects are assured that without their prescribed consent, their personal data will not be used for any purpose other than the purpose designated at the time of collection or a directly related purpose.
     
  4. Principle 4 - Security of personal data
    All practical steps will be taken to ensure that personal data are protected against unauthorised or accidental access, processing, erasure or other use.
     
  5. Principle 5 - Openness
    All practical steps will be taken to ensure that a person can ascertain the Company′s policies and practices in relation to personal data, the kind of personal data held by it and the main purposes for which such data are held or are to be used.
     
  6. Principle 6 - Access and correction
    A data subject is entitled to ascertain whether the Company holds his/her personal data and to request access to and/or correction of his/her personal data.
     

Date: July 2021
Remarks : In case of discrepancies between the English and Chinese versions, the English version shall prevail.