隐私与安全政策
Privacy and Security Policy
贵方的隐私权利
本隐私与安全政策（“隐私政策”）规定了当贵方使用我们用于提供服务的网站（www.xtransfer.cn）或任何其他网站链接（“URL”）、应用程序和工具（统称为“网站”）时，XTransfer有限公司（以及我们的子公司、控股公司、控股公司的子公司，统称为“XTransfer”、“我们”）收集、使用、存储、共享和保护贵方的个人或公司信息的基础，XTransfer有限公司的注册办公地位于Unit 417, 4/F, Lippo Centre Tower 2, No.89 Queensway, Admiralty, Hong Kong（香港），公司编号为2547407。当贵方与我们共享信息时，例如注册XTransfer账户时，我们可以提供更好的服务体验。通过使用我们的服务，贵方接受并同意以下规定，同时我们希望贵方了解我们将如何使用贵方信息以及贵方可以采用哪些方式保护隐私。如果贵方对本政策有任何问题，请发送电子邮件与我们联系：privacy@xtransfer.cn
贵方所拥有的相关权利包括：
1) 访问权：贵方可以随时要求获得我们拥有的关于贵方的个人信息。我们将尽力在收到贵方请求后的5个工作日内回复贵方的询问；
2) 更新权：如果贵方发现我们保存贵方的个人数据有任何不准确或不完整，请通过访问贵方的账户在网上更新信息。如果在访问贵方的账户或在线更改时有任何问题，请告知我们，我们将对记录进行相应更新；
3) 停止营销权：贵方有权要求我们不要将贵方的个人信息用于营销目的或向我们告知不希望通过privacy@xtransfer.cn收到我们的任何进一步通信；
4) 数据迁移权：贵方有权要求我们将贵方的个人信息提供给其他数据控制者，例如第三方服务提供商；
5) 信息删除权：贵方有权要求我们删除不再需要或不再受到XTransfer相关法律义务约束的数据，或删除任何过时信息；
贵方还可以随时通过privacy@xtransfer.cn联系我们，要求我们审查我们保留的任何信息、我们的使用方式以及我们的披露对象（除非受到法律限制）。
XTransfer如何收集贵方的信息？
贵方自愿提供信息，我们也直接从贵方那里收集信息，但我们也可能会从第三方收到关于贵方的信息（如营销机构、市场调查公司、我们在集团公司的供应商、承包商和顾问、贵方的同事和业务联系人、公共网站和公共机构），以及当贵方使用我们的网站和服务时自动发送的信息。
我方以及我方采用的第三方服务提供商将通过cookies、网络信标和其他技术收集有关贵方使用我方网站和我方服务的信息。
Cookies是我们通过您的网络浏览器传输到您的计算机硬盘驱动器上的字母数字标识符，用于保存记录，并通过了解和记住您的特定浏览偏好，在未来为您提供量身定制的体验。贵方可以编辑贵方的浏览器选项，以便屏蔽cookies。我们网站的访问者如果将网络浏览器设置为不接受cookies，仍然可以浏览我们的网站。但如果贵方禁用了所有cookies（包括必需的cookies），大部分网站功能将无法正常工作，甚至可能无法登录使用我们的服务。可以在我们的Cookie政策中找到更多信息。
XTransfer何时收集贵方的信息？
我方可能会在贵方使用我方服务时收集和保存贵方向我方提供的任何信息，包括贵方在网页表单上添加信息、添加或更新贵方的账户信息、参与争议解决，或以其他方式就我方的服务与我方进行通信。
XTransfer收集哪些信息？
我们可能会收集和使用关于贵方的以下数据：
- 贵方向我们提供的数据——当贵方注册使用我们的服务时提供的关于贵方的数据，例如：当贵方向我们提供姓名和电子邮件地址等个人资料时。这还包括贵方通过继续使用我们的服务，参与我们网站上的社交媒体功能，参加竞赛、推广或调查、以及向我们报告服务问题时提供的信息。贵方向我们提供的信息可能包括贵方的姓名、地址、电子邮件地址、电话号码、财务信息（包括信用卡、借记卡或银行账户信息）、付款原因、地理位置、护照/身份证号、个人描述和照片；
- 我们收集的信息——我们和我们的第三方服务提供商收集的信息：您的域名、您的浏览器类型和操作系统、您的互联网协议（IP）地址、您访问我们网站或使用我们服务的持续时间、您在我们网站上的活动，以及将您引导到我们网站的引用URL或网页; 如果您使用我们的应用程序，我们和我们的第三方服务提供商收集的信息还包括：您的设备Mac地址、唯一设备识别码（IMEI/android ID/IDFA/OPENUDID/GUID、SIM 卡 IMSI 信息）。
我们还可能需要贵方提供更多商业和/或身份信息，例如，如果贵方发送或接收某些高价值或高额交易，或根据遵守适用法律规定的反洗钱义务的需要。
在贵方使用我们的服务期间，如果向我们提供任何个人（除贵方以外）的个人数据，贵方保证已经获得了相关个人的同意向我们披露他/她的个人数据，并且他/她同意我们出于本隐私政策规定的目的收集、使用和披露这些个人数据。
但我们不会在未经贵方事先同意的情况下收集和处理任何类型的个人敏感数据，除非法律要求，例如关于贵方种族或族裔、宗教信仰、个人健康信息等方面的详细信息。
XTransfer如何使用贵方的信息？
我方收集贵方信息的主要目的在于向贵方提供一个安全、流畅、有效和定制化的体验。我方可能将贵方的个人信息用于以下目的：
- 验证贵方的身份；
- 为了行使与双方合同相关的我们的权利并履行我们的义务，与贵方沟通关于我们的服务或任何服务条款和条件变更的相关情况；
- 实现贵方具体向我方提供信息的目的，包括对贵方的询问做出回复、提供贵方要求的信息以及提供客户服务支持等；
- 对我方向贵方发送或展示的内容及信息进行定制化，以及以其他方式向贵方提供在使用我方网站和服务时的个性化体验；
- 管理我们的内部运营服务，包括用于故障排除、数据分析、测试、研究、统计和调查目的；
- 保护我们的客户、员工和公司财产——例如，对涉及我方或与我方开展业务的其他公司的欺诈、骚扰或其他类型的非法活动进行调查；
- 遵守香港内外任何适用的法律和/或监管规定；
- 向贵方提供或允许选定第三方向贵方提供我们认为贵方可能感兴趣的商品或服务信息；
- 用于与上述各项直接相关或附带的目的。
XTransfer何时共享贵方的信息？
我们将只选择出于以下原因与第三方共享贵方的信息，包括服务提供商、代理和供应商、受监管机构（如金融机构）、关联实体和业务合作伙伴：
- 履行和执行我们与他们或贵方签订的任何合同；
- 回应法律程序——遵守法律、司法程序、传票、法院命令或其他法律程序；
- 保护我方与其他人——我方若认为有必要调查、防止非法活动、疑似欺诈、对我方服务条款和条件或本隐私政策的违反或就其采取行动，或作为涉及我方的诉讼证据时，我方可能会披露贵方的信息；
- 在我方被另一实体收购或与之合并的情况下，或如果我方实质全部资产被转让给该其他实体；
- 仅负责为贵方和其他方选择并提供相关广告的广告商和广告网络；
- 协助我们改进和优化我们网站的分析和搜索引擎提供商；和
- 我们的集团实体或子公司，可点击此处查询。
我们从贵方收集的数据可能会被传输并存储在香港以外的目的地。也可能由上一条所述的在香港以外地区运营的实体进行处理。
在提交贵方的个人数据时，贵方同意在香港以外地区传输、存储或处理数据。在这些情况下，我们确保自己和合作伙伴都将采取适当的技术、物理和组织安全措施来保护贵方的数据。我们还确保与这些第三方签订了适当的合同来保护贵方的相关数据。
我们没有公布与我们与其共享贵方数据的所有第三方的列表，因为这将严重依赖于贵方对我们服务的具体使用。但如果贵方希望进一步了解我们与谁共享了贵方数据，或者希望提供一份关于贵方的特定列表，可以通过书面形式联系privacy@xtransfer.cn提出要求。
XTransfer如何保存和保护贵方的信息？
贵方向我方提供的所有信息均保存在我方的安全服务器中。任何数据传输将使用TLS/SSL技术加密。
如果我方给予贵方（或贵方选择）密码，使得贵方可以进入我方网站的某一部分，则贵方有责任对该密码予以保密。我方要求贵方不得与任何人共享密码。我方将采用严格的程序和安全措施以防止未经授权的访问。我们将采取所有合理必要的措施，确保对贵方的数据进行安全处理并且符合本隐私政策。
XTransfer会将贵方的信息保存多长时间？
作为一家受监管的金融机构，根据法律规定，在贵方关闭在我们公司的账户之后，XTransfer仍需存储一些贵方的个人和交易数据。贵方的数据只会基于必要情况在内部访问，并且只有在绝对必要的情况下才将对其进行访问或处理。自XTransfer与贵方终止业务关系之日起或自XTransfer为贵方提供的单次服务结束之日起，贵方的信息将会被保存六年。当贵方或与贵方相关的交易涉及反洗钱或反恐融资等法律调查或诉讼，并且相关法律调查或诉讼在满六年保存期限之时仍未完结，相关的信息将会被保存至该调查或诉讼结束。
我们将会删除不再需要的信息。我们必须保存的所有信息将采用最高安全等级。
我方隐私与安全政策的变更
我方可以在任何时候对本隐私政策进行修订并通过在我方网站发布修订版本。在适当的情况下，将通过电子邮件或在网站上“我的账户”中告知贵方。修订版本将自有效发布日起生效。
语言
如果本政策的英语和中文版本之间出现差异，将以英语版本为准。
Privacy and Security Policy
Your Privacy Rights
This Privacy and Security Policy ("Privacy Policy") sets out the basis on which XTransfer Limited with registered office at Unit 417, 4/F, Lippo Centre Tower 2, No.89 Queensway, Admiralty, Hong Kong and Company Number 2547407 (together with our subsidiaries, our holding company, subsidiaries of our holding company from time to time, collectively called "XTransfer", "our", "us" or "we") collect, use, store, share and protect your personal or company information as you use our website (www.xtransfer.cn) or any other Uniform Resource Locators ("URL"), application and tools (collectively, the "Website") through or on which we provide services offered to you (the "Services"). When you share information with us, for example by registering for a XTransfer account, we can make that service experience even better. By using our Services, you accept and consent to the practices set out below and at the same time we want you to be clear how we’re using your information and the ways in which you can protect your privacy. If you have any questions with regards this policy, please contact us on email: privacy@xtransfer.cn
Your rights include:
i. Right to access: you can ask details of your personal information we hold about you at any time. We will endeavor to respond to your query within 5 business days of receiving your request;
ii. Right to update: if you find out any inaccuracy or incompleteness for your personal data that we hold for you, you are responsible to update the information online through your account access. If case of problems accessing your account or changing online, please inform us and we will update our records accordingly;
iii. Right to stop marketing: You have the right to ask us not to use your personal information for marketing purposes or let us know that you do not wish to receive any further communication from us by contacting at privacy@xtransfer.cn ;
iv. Right to data portability: You have a right to ask us to provide your personal information to another data controller, for e.g. a third-party provider of services;
v. Right to delete your information: You have the right to ask us to delete your data when it is no longer necessary, or no longer subject to a legal obligation to which XTransfer is subject to, or to have any obsolete information removed;
You can also ask us to review any of the information we have retained, how we have used it, and to whom we have disclosed it (except where restricted by law) at any time by contacting us on email privacy@xtransfer.cn
How Does XTransfer Collect Your Information?
You voluntarily provide, and we collect information directly from you, but may also receive information about you from third parties (e.g., marketing agencies, market research companies, our suppliers, contractors and consultants at our group companies, your colleagues and business contacts, public websites and public agencies) automatically, when you use our Website and the Services.
We, and our third party service providers，automatically collect your information about your use of our Website and our Services through cookies, web beacons, and other technologies.
Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes and in order to offer you a more tailored experience in the future, by understanding and remembering your particular browsing preferences. You can edit your browser options to block cookies. Visitors to our Website who disable their web browsers’ ability to accept cookies will still be able to browse our Website. However, most website features will not function correctly, if you disable all cookies (including essential cookies) and you may not even be able to login to use our Services. More information can be found in our Cookie policy.
When Does XTransfer Collect Your Information?
We may collect and store any information you provide us when you use our Services, including when you add information on a web form, add or update your account information, participate in dispute resolutions, or when you otherwise correspond with us regarding our Services.
What Information Does XTransfer Collect?
We may collect and use the following data about you:
- Information you give us - information about you when you sign up to use our Service, e.g. when you provide us with your personal details, such as your name and email address. This also includes information you provide through your continued use of our Services, participate in social media functions on our Website, enter a competition, promotion or survey, and when you report a problem with our Services. The information you give us may include your name, address, e-mail address, phone number, financial information (including credit card, debit card, or bank account information), payment reason, geographical location, passport/identification number, personal description and photograph;
- Information we collect - We, and our third-party service providers, collect: your domain name, your browser type and operating system, your Internet protocol (IP) address, the duration of your visit to our Website or use of our Services, your activities on our Website, and the referring URL or the webpage that led you to our Website; If you use our APP, we and our third-party service providers also collect: your device’s MAC address, and your unique device ID（IMEI/android ID/IDFA/OPENUDID/GUID, IMSI number of SIM）.
We may also need additional commercial and/or identification information from you e.g. if you send or receive certain high-value or high-volume transactions or as needed to comply with our anti-money laundering obligations under applicable law.
In providing the personal data of any individual (other than yourself) to us during your use of our Services, you promise that you have obtained consent from such individual to disclose his/her personal data to us, as well his/her consent to our collection, use and disclosure of such personal data, for the purposes set out in this Privacy Policy.
We do not, however, collect and process any types of personal sensitive data without your prior consent or unless we are required to by law, for e.g. details about your race or ethnic origin, religious beliefs, personal health information, etc.
How Does XTransfer Use Your Information?
Our primary purpose in collecting personal information is to provide you with a secure, smooth, efficient, and customized experience. We may use your personal information:
- To validate your identity;
- To exercise our rights and perform our obligations relating to your contract with us, to communicate with you about our Services or any changes in the Service’s terms and conditions that apply to you;
- For the specific purposes you provide the information to us, including to respond to your queries, to provide any information that you request, and to provide customer support;
- To tailor the content and information that we may send or display to you, and to otherwise personalize your experiences while using our Website and our Services;
- To administer our Services for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- To protect our customers, employees or property — for instance, to investigate fraud, harassment or other types of unlawful activities involving us or other companies that we do business with;
- To comply with any applicable legal and/or regulatory requirements in or outside of Hong Kong;
- To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you.
- For purposes directly related or incidental to the above.
When Does XTransfer Share Your Information?
We will only choose to share your information with third parties, including service providers, agents and suppliers, regulated institutions (e.g., financial institutions), affiliated entities, and business partners for the following reasons:
- For performance and execution of any contract we enter into with them or you;
- In response to legal process – to comply with the law, a judicial proceeding, summons, court order, or other legal proceedings;
- To protect us and others – we may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our Services’ terms and conditions or this Privacy Policy, or as evidence in litigation in which we are involved;
- In connection with business transfers – to another entity if we are acquired by or merged with such other entity, if substantially all of our assets are transferred to such other entity;
- For advertisers and advertising networks solely to select and serve relevant adverts to you and others;
- For analytics and search engine providers that assist us in the improvement and optimisation of our site; and
- For our group entities or subsidiaries, which can be found here
The data that we collect from you may be transferred to and stored at a destination outside Hong Kong. It may also be processed by entities referred to in this clause above, who operate outside Hong Kong.
By submitting your personal data, you agree to this transfer, storing or processing of data outside Hong Kong. In these cases, we ensure that both ourselves and our partners take adequate and appropriate technical, physical and organisational security measures to protect your data. We also ensure we have appropriate contractual protections in place with these third parties.
We do not have a published list of all of the third parties with whom we share your data with, as this would be heavily dependent on your specific use of our Services. However, if you would like further information about who we have shared your data with, or to be provided with a list specific to You, this can be requested by writing to privacy@xtransfer.cn
How Does XTransfer Store and Protect Your Information?
All information you provide to us is stored on our secure servers. Any data transmission will be encrypted using TLS/SSL technology.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping the password confidential. We ask you not to share a password with anyone. We will use strict procedures and security features, trying to prevent unauthorised access. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
How Long Does XTransfer Store Your Data?
As a regulated financial institution, XTransfer is required by law to store some of your personal and transactional data beyond the closure of your account with us. Your data is only accessed internally on a need to know basis, and it will only be accessed or processed if absolutely necessary. Your information shall be kept for six years from the year when the business relationship is terminated or the year when the one-off service is ended. Where you or your transaction(s) are involved with investigation (such as anti-money laundering and Counter-Terrorist financing) or other legal actions, and if such investigation or legal action is still on-going upon the expiration of 6 years, the related information will be kept until the end of such investigation/legal action.
We always delete information that we no longer need. And everything we need to keep is subject to the highest levels of security.
Changes to Our Privacy and Security Policy
We may amend this Privacy Policy at any time by posting a revised version on our website and, where appropriate, by notifying you by email or in your "My Account" on the Website. The revised version will be effective as of the published effective date.
Languages
In case of discrepancies between the English and Chinese language versions of this policy, the English version shall prevail.
APP