Privacy Policy

1. Who We Are

HSBC Group of Banks Ltd. ("we", "us", "our") is a licensed banking institution incorporated in the Cayman Islands (Company Registration No. CI-2005-04771). Our registered address is Harbour Drive, Grand Cayman, KY1-1106, Cayman Islands. We are regulated by the Cayman Islands Monetary Authority (CIMA) under the Banks and Trust Companies Law (2021 Revision).

We act as the data controller for personal information collected through our website, e-banking platform, and client onboarding processes.

2. Data We Collect

We collect and process the following categories of personal data:

• Identity data: full name, date of birth, nationality, passport or ID number, and photographs.
• Contact data: email address, telephone number, residential and mailing address.
• Financial data: bank account details, transaction history, source of funds documentation, and credit information.
• Technical data: IP address, browser type, login timestamps, and device identifiers collected via our e-banking platform.
• KYC/AML data: politically exposed person (PEP) status, sanctions screening results, and beneficial ownership information.
• Communications: records of calls, emails, and secure messages with our relationship managers.

3. How We Use Your Data

We use your personal data for the following purposes:

• Opening and managing your bank account and any associated financial products.
• Processing transactions and providing our banking services.
• Complying with anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations.
• Fraud prevention, security monitoring, and protecting the integrity of our systems.
• Personalising our services and communicating relevant financial opportunities to you.
• Meeting our reporting obligations to regulatory authorities.

4. Legal Basis for Processing

We process your data on the following legal bases: (a) Contract performance — processing necessary to provide you with banking services; (b) Legal obligation — compliance with Cayman Islands law, CIMA regulations, and international AML/CTF standards; (c) Legitimate interests — fraud prevention, network security and service improvement; (d) Consent — for marketing communications, which you may withdraw at any time.

5. Data Sharing

We share your data only where necessary. Recipients include: our correspondent banks and payment network participants for transaction processing; regulatory authorities including CIMA, the Financial Reporting Authority (FRA), and law enforcement as required by law; our trusted service providers (IT, legal, audit) who are bound by data processing agreements; and with your explicit consent, financial advisors or other parties you authorise.

We do not sell your personal data to third parties. We do not share client data with advertising networks.

6. International Data Transfers

Due to the international nature of banking, your data may be transferred to and processed in countries outside the Cayman Islands, including Switzerland, Singapore, the UAE, and Malta. All transfers are conducted under appropriate safeguards including contractual standard clauses, adequacy decisions, or binding corporate rules.

7. Data Retention

We retain your personal data for a minimum of seven (7) years following the termination of your banking relationship, as required by the Cayman Islands Anti-Money Laundering Regulations. In certain circumstances, data may be retained for longer where required by law or for legitimate dispute resolution purposes.

8. Your Rights

Subject to applicable law, you have the right to: access your personal data; correct inaccurate data; request erasure (where legally permissible); object to processing; request restriction of processing; and data portability. To exercise any of these rights, contact our Data Protection Officer at dpo@hsbcgroup.com.

9. Cookies

Our website uses strictly necessary cookies for security and session management. We do not use analytics, advertising, or tracking cookies. No consent banner is required as we use only essential cookies. You may disable cookies in your browser settings, but this may affect the functionality of our e-banking portal.

10. Contact Us

For privacy-related enquiries, contact our Data Protection Officer: dpo@hsbcgroup.com or by post at HSBC Group of Banks Ltd., Attention: DPO, Harbour Drive, Grand Cayman, KY1-1106, Cayman Islands.