This Privacy Notice applies to personal information held by members of the HSBC Group as data controllers, or the organisation responsible for personal information under our control. It only applies for the purposes of operating the MyDeal website and mobile application. For all products, services and processes other than MyDeal, please refer to the data controller’s other relevant privacy notice.
This Privacy Notice explains what information we collect about you, how we’ll use that information, who we’ll share it with, the circumstances when we’ll share it and what steps we’ll take to make sure it stays private and secure. It will continue to apply even if your use of or agreement for MyDeal ends. This Privacy Notice may be updated from time to time and the most recent version can be found at https://mydeal.gbm.hsbc.com/.
This Privacy Notice applies to your use of the MyDeal website and mobile application. When we say ‘we’, we mean HSBC Bank plc and any other HSBC Group companies which act as a data controller in respect of your personal data. For the purposes of this notice, the relevant data controller is:
(a) HSBC Bank plc, as the operator of the MyDeal website and mobile application, in connection with the provision of these services; and
(b) the HSBC Group company that the entity you are acting on behalf of has a relationship with (as defined in the MyDeal terms and conditions).
You can find the contact details of the data controllers and their data protection officers (where relevant) by clicking on the Customer Support link on https://mydeal.gbm.hsbc.com/ and selecting the relevant country/territory.
The information we collect is required to provide you with access to our services, to fulfil our agreement with the entity you are acting on behalf of, to enable us to fulfil our legal and regulatory compliance obligations, and to address our legitimate business interests, as described below. Failure to provide your information (or if all personal data submitted to us is not complete, accurate, true and correct) may mean it is not possible to provide you with access to certain products or services which you or the entity you are acting on behalf of have requested.
We’ll only collect your information in line with relevant regulations and law. The information we collect may include:
The reasons we use your information include to:
We do not carry out automated decision making which might produce legal effects and/or otherwise affects you.
We may record details of your interactions with us, including emails, telephone conversations, live chats, video chats and any other kinds of communication that you may have with us regarding MyDeal. We may use these recordings to check your instructions to us, assess, analyse and improve our service, train our people, manage risk or to prevent and detect fraud and other crimes. We may also capture additional information about these interactions, such as information about the devices or software that you use.
We’ll use your information to meet our compliance obligations, to comply with other laws and regulations and to share with regulators and other authorities that HSBC Group companies are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes). We’ll only do this on the basis that it’s needed to comply with a legal obligation or it’s in our legitimate interests and that of others.
We’ll only use your information where we have identified a lawful basis for processing it. These reasons include where we:
We may share your information with others where lawful to do so including where we or they:
We may share your information for these purposes with others including the profile owner you represent, any other HSBC group companies and any sub-contractors, agents or service providers who work for us or provide services to us or other HSBC Group companies (including their employees, sub-contractors, service providers, directors and officers). This includes sharing your information with third party information providers operating in financial markets where required in connection with their services.
We keep your information in line with our data retention policy (for example, in some countries/territories we will retain information from MyDeal for a minimum 5 year period). This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise.
We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes e.g. to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc. If we don’t need to retain information for this period of time, we may destroy, delete or anonymise it more promptly.
Your information may be transferred to and stored in locations outside your home jurisdiction, including countries/territories that may not have the same level of protection for personal information. When we do this, we’ll ensure they have an appropriate level of protection and that the transfer is lawful. We may need to transfer your information in this way to carry out our contract with you, to fulfil a legal obligation, to protect the public interest and / or for our legitimate interests. In some countries/territories the law might compel us to share information with certain persons (e.g. with tax authorities). Even in these cases, we’ll only share your information with people who have the right to see it. You can obtain more details of the protection given to your information when it is transferred outside your home jurisdiction by contacting us using the details in the ‘More details about your information’ section below.
You have a number of rights in relation to the information that we hold about you. These rights include:
You can exercise your rights by contacting us using the details set out below. You may also have a right to complain to the relevant data protection regulator in the country/territory in which you live or work.
We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.
If you’d like further information on your data, or to contact our Data Protection Officer where applicable, please contact your usual HSBC representative, or use the Customer Support option on the https://mydeal.gbm.hsbc.com/ homepage, which sets out our contact details in applicable jurisdictions.
Where you are acting on behalf of an entity that has a relationship with a company of the HSBC Group (as defined in the MyDeal terms and conditions), you should read this document in conjunction with the Privacy Notice issued by that entity and available at:
Where the local notice conflicts with this Privacy Notice, the former shall apply.
You should also read our Cookie Policy at https://mydeal.gbm.hsbc.com/ to find out more about how HSBC and our trusted partners use cookies, which is relevant to your online security. We use cookies to make our website and mobile devices more secure and easier to use.