Personal Information Collection Statement

PERSONAL INFORMATION COLLECTION STATEMENT FOR USER ACCOUNT ON AIA+

(this "Statement")

We, AIA International Limited (acting through its Hong Kong branch) ("we", "us" or "our"), is a wholly owned subsidiary of AIA Group Limited. AIA Group Limited, together with its subsidiaries and affiliates are collectively referred to in this Statement as the "AIA Group" and individually referred to as an "AIA Entity".

In order for us to provide related services under our online platform AIA+ to you, as an applicant for a membership under the AIA+, as a member of AIA+ or as a customer of an AIA Entity (collectively referred to as "you" or "your"), it will be necessary for us to collect, use and share certain personal data about you. Customers and potential customers expect us to maintain their information accurately, protected against manipulation and errors, secure from theft and free from unwarranted disclosure. We protect the data security of our customers and potential customers by complying with the Personal Data (Privacy) Ordinance (the "Ordinance"), and all relevant local laws, and ensure compliance by our staff with strict standards of security and confidentiality.

This Statement provides you with notice as to what personal data we will collect from you, why your personal data is collected, how it is intended to be used, to whom your personal data may be provided, from whom your personal data may be collected and how to access, review and amend your personal data.

From time to time, it is necessary for you, to provide us with certain personal data relating to you in connection with your application for a membership and our provision of the AIA+ related services. The provision of your personal data is voluntary. You may choose not to provide us with the requested data, but failure to do so may inhibit our ability to provide you with the AIA+ related services. During your use of AIA+, further personal data relating to you may also be collected in the ordinary course of our business. If you provide personal data to us about another individual, you confirm that you are either (i) the parent or legal guardian of the individual, or (ii) you have obtained the individual's consent to provide his or her personal data to us, and for such personal data to be used, processed, disclosed and transferred in accordance with this Statement.

(1) PURPOSES FOR COLLECTING PERSONAL DATA

Personal data relating to you held or collected by us may be used by us for the following purposes ("Purposes"):

to process, administer, implement and effect the requests, transactions or services contemplated at the time you use AIA+:
1. sign up for an account;
2. authenticate your identity;
3. link an insurance policy and/or pension scheme;
4. manage your membership;
5. submit a claim;
6. make enquiries; or
7. otherwise use your user account;
to personalize, enhance and / or develop our benefits, services and recommendations to meet your needs under AIA+, perform functions and activities incidental to AIA+, including, without limitation, maintenance of online and other services, identity verification, data analysis, research and statistical analysis;
to design new or enhance existing activities that we provide;
to improve your experience of our application, portal or website(s) and ensuring the data collection purposes can be fulfilled by collecting your information through cookies and other tracking technologies;
to communicate with you, including sending you updates and future changes to AIA+ or your AIA+ account, and administrative communications about any account you may have with us, responding to enquiries, updating you about future changes to this Statement;
for statistical or actuarial research undertaken by us, the financial services industry or the respective regulators of the aforementioned parties;
for our internal business and administrative purposes;
to facilitate payment for products and/or services provided by any AIA Entity or any Alliance Program Partners (as defined in paragraph (3)(iii)), including but not limited to the verification of credit card details with credit card issuers or other third party service providers;
to comply with the obligations, requirements and/or arrangements for disclosing and using data that bind on or apply to us and/or we are expected to comply with according to:
1. any law binding on or applying to us within or outside the Hong Kong Special Administrative Region ("Hong Kong") existing currently and in the future (e.g. the Inland Revenue Ordinance and its provisions including those concerning automatic exchange of financial account information);
2. any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of insurance or financial services providers within or outside Hong Kong existing currently and in the future (e.g. guidelines or guidance given or issued by the Inland Revenue Department including those concerning automatic exchange of financial account information); or
3. any present or future contractual or other commitment with local, national or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of insurance or financial services providers that is assumed by or imposed on us or AIA Group by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations;
to comply with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within us and/or any other use of data and information in accordance with any group-wide programs for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
to enable an actual or proposed assignee or transferee of our rights or business (or portions thereof) to evaluate or carry out the transaction intended to be the subject of the assignment or transfer or to enable us to evaluate or carry out a proposed or actual assignment or transfer of a third party's rights or business (or portions thereof) to us. In the event that we purchase a third party's rights or business, the personal data received from the third party, to the extent that the rights or business are/is relevant to AIA+, will be treated in accordance with this Statement. In the event that we sell our rights or business, to the extent that the rights or business are/is relevant to AIA+, a provision will be included in the sales contract requiring the assignee or transferee to treat your personal data in the same manner required by this Statement;
to comply with present or future contractual or other commitments with any of our co-branding partners, marketing partners and/or any AIA Entity;
for promotional and marketing purposes - subject to paragraph (3) below; and
other purposes relating to the purposes listed above.

(2) TRANSFER OF PERSONAL DATA

Personal data held by us relating to you will be kept confidential but we may provide such data to the following parties, whether inside or outside of Hong Kong, to fulfil one or more of the Purposes set out above in paragraph (1) of this Statement:-

any AIA Entity for the purposes specified above;
any person authorized to act as any of AIA Entity's agent for the distribution of products and services offered by any AIA Entity;
the Alliance Program Partners (as defined in paragraph (3)(iii)) and their agents for the provision of services under AIA+;
any agent, contractor or third party service provider (within or outside AIA Group) who provides services to us in connection with the operation of our business including administration, data processing, storage, investigation, telecommunications, computer, payment, debt collection or securities clearing, technology outsourcing, call centre services, mailing and printing services and provision of certain activities which we make available to you through AIA+;
other companies who assist us with statistical or actuarial research relating to AIA+, such as research companies;
any other person or entity under a duty of confidentiality to us which has undertaken to keep such data confidential;
any person or entity to whom we are under an obligation or otherwise required to make disclosure under the requirements of any law or rules, regulations, codes of practice, guidelines or guidance given or issued by any legal, regulatory, self-regulatory, industry bodies or associations, governmental, tax, law enforcement or other authorities, financial services providers binding on or applying to us, or with which we are expected to comply, or to establish, exercise or defend or to protect legal claims, to protect our rights, property or safety, or any disclosure pursuant to any of our contractual or other commitment(s) with local, national or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, financial services providers, all of which may be within or outside Hong Kong and may be existing currently and in the future;
any authorized medical panels or its relevant associates, nominees or subsidiaries for assessing, processing, evaluating and determining requests of application for medical claims or services referral and analysing, investigating, approving and/or determining your claims submitted;
agents, contractors or third party service providers (within or outside AIA Group) who help deliver our services, such as reinsurance companies, investment management companies, claims investigation companies, industry associations or federations;
third party reward, loyalty, co-branding and privileges program providers;
any actual or proposed assignee or transferee of our rights or business or any third party whose rights or business is the subject of an actual or proposed assignment or transfer to us;
external service providers (including but not limited to mailing houses, telecommunication companies, telemarketing and direct sales agents, call centres, data processing companies and information technology companies) that we engage for the purposes set out in paragraph (1)(xiii) of this Statement; and
any persons who/which you have given instructions, authorization and consent to us in order to communicate with and provide information to them.

In relation to any personal data collected by us associated with activities that we make available to you in respect of our mandatory provident fund schemes and occupational retirement schemes (collectively the "Retirement Schemes"), such personal data would only be transferred to the relevant AIA Entity for the purpose of providing any Retirement Schemes-related activities.

(3) USE AND PROVISION OF PERSONAL DATA IN DIRECT MARKETING

Subject to your consent, we may use your personal data we collected for direct marketing and provide your personal data to our Alliance Program Partners (as defined below) for their direct marketing as described below:

your name, your contact details, products and services portfolio information, transaction pattern and behavior, financial background and demographic data of you collected by us from time to time may be used by us in direct marketing;
the following services, products, advice and subjects may be marketed:
1. insurance, annuities, wellness services and products, pension schemes, wealth management, credit cards, financial, banking and related services and products;
2. reward, loyalty, lucky draw programs or privileges programs and related services and products;
3. services and products offered by the co-branding partners and/or marketing partners of us and/or any AIA Entity (the names of such co-branding partners and/or marketing partners can be found in the application form(s) and/or promotional material for the relevant services and products, as the case may be); and
4. charitable/ non-profitable, educational, recruitment and training causes,
  
  (collectively "Classes of Marketing Subjects");
the above Classes of Marketing Subjects may be provided by us and/or the persons/providers below:
1. any AIA Entity;
2. third party reward, loyalty, co-branding or privileges program providers;
3. co-branding partners and/or marketing partners of us and/or any AIA Entity(the names of such co-branding partners and/or marketing partners can be found in the application form(s) and/or promotional material for the relevant services and products, as the case may be); and/or
4. medical/ healthcare and wellness service providers
  
  (collectively "Alliance Program Partners");
in addition to the above Classes of Marketing Subjects, we also intend to provide your personal data described in paragraph 3(i) above to all or any of the Alliance Program Partners described in paragraph (3)(iii) above for use by them in any of the Classes of Marketing Subjects described in paragraph 3 (ii) above to contact you and/or send you promotional materials for direct marketing in relation to the Classes of Marketing Subjects that they offer (these materials may be sent to you by postal mail, email or other means). We will obtain your written consent (which includes an indication of no objection) before we pass your personal data to Alliance Program Partners for use any direct marketing purpose.

If you do not wish us to use or transfer your personal data we collected to our Alliance Program Partners for direct marketing, you may exercise your opt-out right by notifying us. To exercise your opt-out right, you may write to our Data Protection Officer at the address and email address provided in paragraph (4) of this Statement, or provide us with your opt-out choice in the relevant application form (if applicable).

(4) DATA ACCESS AND CORRECTION RIGHT

In accordance with the Ordinance, you have the right to request access to and the correction of any of your personal data held by us, by writing to our Data Protection Officer at the following address and email:

The Data Protection Officer

AIA International Limited (acting through its Hong Kong Branch)

12/F, AIA Tower, 183 Electric Road, North Point, Hong Kong

Email: AIAHK.Compliance@aia.com

According to the Ordinance, we have the right to charge a reasonable fee for the processing of any data access request.

You also have the right to request our policies and practices in relation to personal data and to be informed of your personal data that is held by us by writing to our Data Protection Officer at the address and email provided in paragraph (4) above.
Nothing in this Statement shall limit your rights under applicable laws.
We retain the right to change this Statement.
A Privacy Addendum under the Personal Information Protection Law of the People's Republic of China supplements this Statement and is available at https://www.aia.com.hk/en/privacy-statement-main. The Privacy Addendum applies to you if you are within mainland China.

Issued by AIA International Limited (acting through its Hong Kong Branch)

Last updated: Oct 2024