1. Statement of policy

The Investor Compensation Company Limited (ICC) pledges to meet fully recognised standards of personal data privacy protection in complying with the requirements of the Personal Data (Privacy) Ordinance (PDPO). In doing so, the ICC strives to ensure compliance by our staff with the strictest standards of security and confidentiality.

2. Data Collection and Use

(a) Personal data submitted in lodging a claim to the ICC will be used, disclosed or transferred only for those purposes related to the claim (for example, it may need to be disclosed to the person/company in respect of whom a claim has been made), for discharging the ICC's functions or where permitted or required by law. If the information provided is inaccurate or incomplete, consideration of the claim may be affected. A claimant must inform the ICC by writing to the address set out below, if he/she would like to keep his/her identity confidential or if he/she does not want his/her personal data used for purposes related to the claim. In such a case, the ICC may be unable to effectively process the claim.

(b) The information you provide for making enquiries, comments or suggestions is used by the ICC for the purpose of responding to your enquiries, comments or suggestions or for a directly related purpose. The personal data will not be used for any other purposes, disclosed or transferred without your consent, unless such use, disclosure or transfer is permitted or required by law.

3. Retention

(a) The ICC takes all reasonably practicable steps to ensure that personal data will not be kept longer than is necessary for the fulfilment of the purposes (or any directly related purpose) for which the data is or is to be used, unless the retention is otherwise permitted or required by law.

(b) Personal data submitted in lodging a claim to the ICC is retained for such period as may be necessary for the proper discharge of the ICC's functions.

(c) Personal data provided for making enquiries, comments or suggestions will be deleted 90 days after any follow-up action has been completed or the fulfilment of the purposes for which the data was collected.

4. Security

The ICC takes appropriate steps to protect personal data it holds against loss, unauthorised access, use, modification or disclosure.

5. Access and correction

If you wish to request access to and/or correction of your personal data held by the ICC, you may do so in writing addressed to the Data Privacy Officer, the Investor Compensation Company Limited, 21st Floor, Cheung Kong Center, 2 Queen's Road Central, Hong Kong. Please note that all data access requests should be made using the form specified by the Privacy Commissioner for Personal Data which is accessible from the following link: "Data Access Request Form". The ICC will handle access and/or correction requests in accordance with the PDPO. When handling a data access or correction request, the ICC will check the identity of the requestor to ensure that he/she is the person legally entitled to make the data access or correction request. The ICC has the right to charge a fee for processing of any data access request.

The ICC does not provide online facilities for you to delete or correct personal data held by the ICC.