1. 本文件的目的 Purpose of this Document
本隱私政策概述了金億創建香港有限公司(“金承”, “本公司“, “我們“) 如何根據香港《個人資料(私隱)條例》(第486章)收集、使用、儲存和保護您的個人資料。通過開設帳戶使用本公司的服務,您即表示同意遵守香港《個人資料(私隱)條例》(第486章)的規定。
This Privacy Policy outlines how Gold Bullion Creation Hong Kong Limited ("Gold X", "the Company", "we") collects, uses, stores and protects your personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486). By opening an account and using the Company's services, you agree to comply with the provisions of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
2. 定義和收集個人資料 Definition and Collection of Personal Data
我們收集、使用和儲存的個人資料類型將取決於您要求的服務和/或與我們的互動性質。我們收集這些個人資料是為了驗證您的身份、處理交易、提供服務、改善產品及遵守法規要求。
The types of personal data we collect, use and store will depend on the services you request and/or the nature of your interactions with us. We collect this personal data to verify your identity, process transactions, provide services, improve products and comply with regulatory requirements.
我們收集和處理以下類型的個人資料:
We collect and process the following types of personal data:
- 身份資料:包括您的姓名、身份證號碼、出生日期、用戶名或類似標識符、國籍、居住國家和性別等
- 聯絡資料:包括您的電話號碼、電郵地址、住址、帳單地址、送貨地址等
- 財務資料:包括您的銀行帳戶、支付卡、信用卡帳戶資訊等
- 交易資料:包括有關閣下的付款或收款的詳細資料，以及閣下從本公司購買或出售的產品和服務的資料等
- 技術資料:包括您的 IP 地址、登錄數據、瀏覽器類型和版本、時區設定和位置、瀏覽器插件類型和版本、操作系統和平台以及您用於訪問本網站的設備上的其他技術等
- Identity data: including your name, ID card number, date of birth, username or similar identifier, nationality, country of residence and gender.
- Contact data: including your phone number, email address, residential address, billing address, delivery address, etc.
- Financial data: including your bank account, payment card, credit card account information, etc.
- Transaction data: including details of payments to or from you, and the products and services you have purchased or sold from the Company.
- Technical data: including your IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
我們不收集任何您的特殊類別個人資料(包括有關您的種族或民族、宗教或哲學信仰、性生活、性取向、政治意見、工會會籍、健康狀況以及遺傳和生物特徵數據的詳細資訊)。我們也不收集任何有關犯罪定罪和罪行的資訊。
We do not collect any of your special categories of personal data (including detailed information about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, and genetic and biometric data). We also do not collect any information related to criminal convictions and offences.
3. 收集個人資料的方式 Methods of Personal Data Collection
3.1 直接互動Direct Interaction
我們會收集您通過填寫表格或通過本公司網站、郵寄、電話、電子郵件等方式與我們聯繫時提供的身份、聯絡、財務、交易和技術資料。
We collect identity, contact, financial, transaction and technical data that you provide to us through completing forms or contacting us via the Company's website, mail, telephone, email, etc.
3.2 自動化技術和互動 Automated Technologies and Interaction
當您瀏覽我們的網站時,我們會自動收集一些有關您使用設備和上網行為的技術性數據。我們主要是通過使用 cookies 和其他類似的數字跟蹤技術來實現這一目的。如果您不希望啟用 cookies, 您可以在瀏覽器設置中選擇拒絕接受我們或第三方放置的 cookies。請注意,如果完全禁用 cookies,可能會影響您使用網站的某些功能。
When you browse our website, we automatically collect some technical data about your device usage and browsing behaviour. We primarily achieve this through the use of cookies and other similar digital tracking technologies. If you do not wish to enable cookies, you can choose to refuse the cookies placed by us or third parties in your browser settings. Please note that completely disabling cookies may affect the functionality of the website.
3.3 第三方 Third Parties
除了從您直接提供的個人信息中收集數據外,我們也會從一些合作夥伴那裡獲取其他補充性的信息。具體來說,我們會從分析服務商, 廣告網絡及搜索信息提供商獲取一些技術性數據。
In addition to collecting data directly from you, we also obtain supplementary information from some of our partners. Specifically, we obtain some technical data from analytics service providers, advertising networks and search information providers.
同時,我們也會從提供技術、支付和物流服務的合作夥伴那裡,獲取您的聯繫資料、財務及交易等相關資料。
Additionally, we receive your contact information, financial and transaction-related data from our cooperation partners who provide technical, payment and logistics services.
除此以外,本網站可能包含連結至第三方網站、外掛程式及應用程式的連結。點擊這些連結或啟用這些連結,可能會允許第三方收集或共用關於您的資料。
Furthermore, this website may contain links to third-party websites, plugins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.
我們無法控制這些第三方網站,亦無法對它們的隱私聲明負責。因此,當您離開本網站時,我們建議您仔細閱讀每個您造訪的網站的隱私政策。
We cannot control these third-party websites and are not responsible for their privacy statements. Therefore, when you leave our website, we suggest you carefully read the privacy policy of each website you visit.
4. 個人資料的使用 Use of Personal Data
金承尊重閣下的私隱。根據條例要求，本公司所持有或收集的所有個人資料都會受到保障，即代表未經您的同意下，本公司絕不會故意向任何第三方披露客戶及/或會員的個人身份資料。本公司可能會向合作夥伴或其他第三方提供有關客戶的合計或總結數據，數據並沒有任何個人資料。本公司不會售賣或分享個別客戶的任何個人資料。
Gold X respects your privacy. In accordance with the Ordinance, all personal data held or collected by the Company will be protected. This means the Company will not intentionally disclose any customer and/or member's personal identity information to any third party without your consent. The Company may provide its cooperation partners or other third parties with aggregate or summary data about customers, but without any personal data. The Company will not sell or share any individual customer's personal data.
我們亦承諾不會將您的個人資料用於最初收集目的以外的新用途,除非該新用途與原有目的相容,或我們已事先通知您並給予您拒絕的機會。
We also undertake not to use your personal data for any new purpose beyond the original purpose for which it was collected, unless the new purpose is compatible with the original purpose, or we have notified you in advance and given you the opportunity to object.
除下述用途外,我們不會在未經您同意的情況下使用您的個人資料:
Except for the following purposes, we will not use your personal data without your consent:
4.1履行合約義務Fulfilling Contractual Obligations
我們收集並保存閣下在使用本網站時自願提供給我們的個人資料。我們使用閣下提供的個人資料，以便我們能供應閣下從我們的網站或商店所訂購的產品和服務，包括 :
We collect and store the personal data you voluntarily provide to us when using our website. We use the personal data you provide to supply the products and services you order from our website or store, including:
- 註冊為新客戶 ;
- 驗證閣下的身份;
- 處理和交付您的訂單
- 提供購買產品、回購處理和貴金屬儲存服務等交易服務
- Registering as a new customer;
- Verifying your identity;
- Processing and delivering your orders;
- Providing transaction services such as product purchases, repurchase processing and precious metal storage.
4.2 提供客戶支援Providing Customer Support
我們會使用您提供的聯繫資料和其他相關詳情,以回應您透過電話、電郵等方式提出的查詢。我們可能會利用您在瀏覽網站時留下的IP地址、設備類型和位置資料,以改善網站的運作並為您提供更好的體驗。我們還會使用您的個人資料,向您提供有關網站的任何變更以及相關的網站內容和廣告。如果有任何查詢或爭議,我們可能會使用相關個人資料來調查和解決。
We will use your contact information and other relevant details to respond to inquiries you make by phone, email, etc. We may use your IP address, device type and location data gathered during website browsing to improve the website's operation and provide you with a better experience. We will also use your personal data to inform you of any changes to the website and related website content and advertising. If there are any inquiries or disputes, we may use relevant personal data to investigate and resolve them.
4.3 改善產品和服務 Improving Products and Services
我們將分析客戶使用我們產品/服務的趨勢和見解,以幫助我們改進現有產品和服務,並開發新的產品和服務。我們也可能會邀請您參加抽獎、競賽或問卷調查,以收集寶貴的客戶反饋。
We will analyze trends and insights in how customers use our products/services to help us improve our existing products and services and develop new ones. We may also invite you to participate in prize draws, competitions or surveys to collect valuable customer feedback.
4.4 管理和保護網站 Managing and Protecting the Website
我們將使用您的個人資料來管理和保護我們的網站,包括提供IT服務、確保網絡安全、防範欺詐行為。
We will use your personal data to manage and protect our website, including providing IT services, ensuring network security, and preventing fraudulent activities.
4.5 遵守法律法規 Compliance with Laws and Regulations
我們可能會在法律要求或允許的情況下,使用您的個人資料來遵守任何適用的法律,包括但不限於與反洗錢、法院命令或其他司法程序有關的法律。
We may use your personal data to comply with any applicable laws, including but not limited to laws related to anti-money laundering, court orders or other legal proceedings, where required or permitted by law.
此外,我們還可能會使用您的個人資料來防止、偵測和調查欺詐、違反安全、違法行為和其他濫用網站的行為。
Additionally, we may use your personal data to prevent, detect and investigate fraud, security breaches, illegal activities and other abuses of the website.
4.6 第三方服務 Third-Party Services
我們可能會與第三方服務供應商(如支付處理商、資訊科技服務供應商或監管機構)共享您的個人資料,但僅限於提供服務或遵守法規的必要範圍。我們承諾不會在未經您同意的情況下出售、出租或交易您的個人資料。
We may share your personal data with third-party service providers (such as payment processors, IT service providers or regulatory authorities), but only to the extent necessary to provide services or comply with regulations. We undertake not to sell, rent or trade your personal data without your consent.
4.7 直接促銷 Direct Marketing
在獲得您的同意後,我們可能會使用您的姓名、郵寄地址、電子郵件和電話號碼等個人資料,向您發送有關貴金屬相關產品和服務的優惠、推廣、廣告和問卷調查等直接促銷資訊。您可隨時要求我們停止使用您的個人資料進行直銷。您可根據以下程序選擇不接收。
With your consent, we may use your name, mailing address, email and phone number as personal data to send you information about offers, promotions, advertisements and surveys related to precious metal products and services. You can request us to stop using your personal data for direct marketing at any time. You can opt-out following the procedures below.
4.7.1 退出選項Opt-Out Options
我們非常重視保護您的隱私權和個人資訊安全。為此,我們對向您發出的各類通訊都施加嚴格的管控措施:
We place strict control measures on all communications we send to you to protect your privacy and the security of your personal information:
- 選擇退出:每次我們收集您的個人資料時,您都可以選擇拒絕接收某些類型的通訊,例如電子郵件、新優惠或新功能的業務通知等。您只需隨時與我們聯繫,即可完成退訂。
Opt-out: Each time we collect your personal data, you can choose to refuse to receive certain types of communications, such as emails, business notifications about new offers or features. You can contact us at any time to complete the un-subscription. - 變更偏好設定:如果您希望變更電子郵件接收偏好或取消直銷電子郵件訂閱,可致電4615 8655或發送電郵至www.goldx.hk,註明「取消訂閱」即可。
Change preferences: If you wish to change your email preferences or cancel your subscription to direct marketing emails, you can call 4615 8655 or email www.goldx.hk with "Unsubscribe" in the subject. - 不影響其他用途:當您選擇退出接收這些營銷信息或郵件時,並不會影響我們基於產品或服務購買、體驗或其他交易而收集的個人數據。我們仍將繼續處理該數據,以履行與您的合同義務或遵守監管和法律要求。
No impact on other uses: When you choose to opt-out of receiving these marketing messages or emails, it will not affect the processing of personal data collected for product or service purchases, experiences or other transactions. We will continue to process that data to fulfil our contractual obligations to you or comply with regulatory and legal requirements.
5. 法律依據 Legal Basis
我們處理您個人資料的合法依據如下:
The legal basis on which we process your personal data is as follows:
- 履行合約義務 Performance of a Contract
我們必須處理您的個人資料,以履行您與我們之間的合約,或在簽訂合約前準備提供您所需的產品或服務。
We must process your personal data to fulfil the contract between you and us, or in preparation for entering into a contract to provide you with the required products or services. - 您的同意 Your Consent
若您已明確同意我們出於特定目的處理您的個人資料,例如向您提供宣傳資訊和優惠,我們將依據您的同意進行處理。
If you have explicitly consented to us processing your personal data for specific purposes, such as providing you with promotional information and offers, we will process it based on your consent. - 合法利益 Legitimate Interests
在某些情況下,我們基於合法商業利益處理您的個人資料,這有利於為您和其他客戶提供最佳產品和服務。
In some cases, we process your personal data based on our legitimate business interests, which benefit providing you and other customers with the best products and services. - 法律義務 Legal Obligations
有時我們必須處理您的個人資料,以履行適用法律法規施加的法定義務。
Sometimes we must process your personal data to fulfil legal obligations imposed by applicable laws and regulations. - 重大利益 Vital Interests
此外,出於重大公共利益、法定職能或司法程序的必要性,我們也可能需要處理您的個人資料。
Additionally, we may need to process your personal data due to the necessity of a matter of substantial public interest, official functions, or legal proceedings. - 保護您的利益 Protecting Your Interests
在某些緊急情況下,我們可能會出於保護您的重要利益而處理您的個人資料。
In certain emergency situations, we may process your personal data to protect your vital interests.
我們會根據具體情況,在上述合法依據中選擇適當的法律基礎來處理您的個人信息。
We will choose the appropriate legal basis from the above to process your personal information based on the specific circumstances.
6. 閣下的權利 Your Rights
- 查閱和獲取個人資料副本Access and Obtain Copies of Personal Data
您有權要求查閱我們持有的關於您的個人資料,並索取複印本。我們將在收到您的請求後盡快提供。
You have the right to request access to the personal data we hold about you and obtain copies of it. We will provide it as soon as possible after receiving your request. - 更正個人資料 Correction of Personal Data
如果您發現我們持有的個人資料有任何不準確或不完整的地方,請告知我們,我們將及時作出更正（除非我們有合法權利或義務將其保留）。
If you find any inaccuracies or incompleteness in the personal data we hold, please inform us, and we will make the corrections in a timely manner (unless we have a legal right or obligation to retain it). - 限制處理資料的權利 Right to Restrict Data Processing
您有權要求我們限制使用您的個人資料,我們將按您的要求予以限制。
You have the right to request us to restrict the use of your personal data, and we will comply with your request. - 撤回同意 Withdrawal of Consent
我們依照閣下的同意作為處理閣下個人資料的法律依據，您可以隨時撤回我們處理您個人資料所依據的同意。
Since we rely on your consent as the legal basis for processing your personal data, you can withdraw the consent at any time. - 反對個人資料處理 Objection to Data Processing
對於我們基於合法權益、公共利益或直接營銷目的而處理的個人資料,您有權提出反對。
For personal data we process based on legitimate interests, public interest or direct marketing purposes, you have the right to object. - 要求刪除個人資料 Request Deletion of Personal Data
除非我們有合法理由保留,否則您可以要求我們刪除我們持有的關於您的個人資料。
Unless we have a lawful reason to retain it, you can request us to delete the personal data we hold about you. - 資料可攜性 Data Portability
如果我們依據您的同意或合同履行而處理您的個人資料,您有權要求我們以結構化、常用的電子格式向您提供或傳送給另一資料控制者。
If we process your personal data based on your consent or contract performance, you have the right to request that we provide or transmit that personal data to you or another data controller in a structured, commonly used electronic format. - 投訴 Complaints
如果您對我們的個人資料管理有任何不滿,歡迎隨時與我們聯繫。您也有權向香港個人資料私隱專員公署提出投訴。
If you have any dissatisfaction with our personal data management, you are welcome to contact us at any time. You also have the right to file a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.
若您希望行使上述任何權利,歡迎隨時致函至我們的辦公地址或者發送電郵給我們。
If you wish to exercise any of the above rights, you are welcome to send a letter to our office address or email us.
如果您要求我們以某種方式停止處理或刪除您的個人資料,而該資料又是我們提供網站服務或其他服務所必需的,那麼您可能無法如往常般使用我們的網站或服務。
If you request us to stop processing or delete your personal data in a way that is necessary for providing the website or other services, you may not be able to use our website or services as usual.
這不包括您拒絕我們將您的個人資料用於直銷用途的權利。對此,您可以隨時無限制地行使。我們建議您至少提前3個工作日提出此類要求。
This does not include your right to refuse the use of your personal data for direct marketing purposes, which you can exercise without restriction at any time. We suggest you make such requests at least 3 business days in advance.
7. 存儲閣下的個人資料 Storage of Your Personal Data
儘管我們已盡最大努力確保閣下的個人信息安全,但通過網絡傳輸的資料仍存在一定風險。因此,我們強烈建議閣下妥善保管好自己的密碼等敏感信息。
Although we have made our best efforts to ensure the security of your personal information, data transmitted over the internet still carries certain risks. Therefore, we strongly recommend that you properly safeguard your sensitive information such as passwords.
- 安全基礎設施 Secure Infrastructure
我們將您的個人資料存儲在安全可靠的伺服器上,並使用多種合理的技術和組織措施來保護您的資料,減低遺失、濫用、未經授權訪問、披露和更改的風險。這些措施包括:
We store your personal data on secure and reliable servers, and use various reasonable technical and organizational measures to protect your data, reducing the risks of loss, misuse, unauthorized access, disclosure and alteration. These measures include:
- 基礎設施安全:我們使用防火牆、加密等技術手段來加強伺服器和數據中心的保護。
Infrastructure Security: We use technologies like firewalls and encryption to enhance the protection of our servers and data centres. - 網絡傳輸安全:我們知道通過互聯網傳輸資料並非百分之百安全,因此即使盡最大努力保護,也無法完全排除風險。我們建議您妥善保管好自己的密碼等敏感信息。
Secure Network Transmission: We know data transmission over the internet is not 100% secure, so despite our best efforts, we cannot completely eliminate the risks. We recommend you carefully protect your sensitive information like passwords. - 收到您個人資料後,我們會採取嚴格的存取控制措施,防止任何未經授權的人員訪問。
After receiving your personal data, we will implement strict access control measures to prevent unauthorized personnel from accessing it.
- 基礎設施安全:我們使用防火牆、加密等技術手段來加強伺服器和數據中心的保護。
- 權限管控 Access Control
閣下的個人資料僅供必要的工作人員依職責需求進行查閱和處理,其餘人員無權接觸。我們對所有員工進行了安全保護政策的培訓。
Your personal data can only be accessed and processed by necessary personnel based on their job responsibilities. All other employees are not allowed to access it. We have trained all staff on our security protection policies. - 第三方服務 Third-Party Services
我們可能會與運輸、IT支援、數據存儲等第三方服務供應商適當共享閣下的個人資料,但他們僅可出於執行相關職能的需要使用,不得滥用。
We may appropriately share your personal data with third-party service providers for transportation, IT support, data storage, etc., but they can only use it for executing their relevant functions and are not allowed to misuse it. - 跨境傳輸 Cross-Border Transfer
如果需要將閣下的個人資料傳輸至香港以外的地區,我們會確保該地區的個人資料保護水平符合相關要求,以確保資料安全。
If we need to transfer your personal data to regions outside of Hong Kong, we will ensure the personal data protection level of that region meets the relevant requirements to ensure data security. - 資料保留期限 Data Retention Period
我們僅在必要的業務和法律要求範圍內保留閣下的個人資料。根據法律規定,我們必須為稅務目的保留客戶的基本資訊(包括身份資料、聯絡資料、財務資料和交易記錄)至少7年,即客戶終止合作後的7年內。為了研究或統計目的,我們可能會將您的個人資料進行匿名化處理,屆時我們可能會無限期地使用這些已匿名的資訊,而無需另行通知您。
We only retain your personal data for as long as necessary for business and legal requirements. According to legal regulations, we must retain basic customer information (including identity, contact, financial and transaction data) for at least 7 years for tax purposes, even after the customer relationship ends. For research or statistical purposes, we may anonymize your personal data, and then use the anonymized information indefinitely without further notice to you. - 分享限制 Sharing Restrictions
我們不會出售、出租閣下的個人資料,也不會與任何人進行超出閣下授權範圍的交易。
We will not sell, rent or trade your personal data to anyone beyond the scope of your authorization.
8. 私隱政策的修改 Changes to the Privacy Policy
我們會定期檢視和修訂本私隱政策而毋須事先通知。一般而言,您提供給我們的個人資料,我們都會按照您授權時有效的隱私條款來使用和保護。無論是否經過您的同意,只要您繼續使用我們的網站或服務,都表示您已充分理解並接受我們最新的隱私政策。
We will review and revise this Privacy Policy regularly without prior notice. Generally, we will use and protect your personal data in accordance with the privacy terms that were in effect at the time you provided it to us. Whether or not you consent, your continued use of our website or services indicates that you fully understand and accept our latest privacy policy.
9. 語言 Language
如本私隱政策的中英文版本之間存在任何不一致或衝突，一概以英文版本為準。
If there is any inconsistency or conflict between the Chinese and English versions of this Privacy Policy, the English version shall prevail.