This Statement applies to Metro Property Service Limited (referred to as “Metro” or “we”).

In this Statement, the term “data subjects” or “you” shall include visitors to this website, users of Metro Chatbot, applicants for loan facilities and customers of loan facilities.

The content of this Statement shall apply to all data subjects and form part of the terms and conditions of the Loan Agreement and/or any agreement or arrangement that the data subjects have or may enter into with Metro from time to time. In the event of any inconsistency or discrepancy between this Statement and the relevant agreement or arrangement, this Statement shall prevail insofar as it relates to the protection of the data subject’s personal data.

Privacy Policy Statement

Our Privacy Principles

Metro values your trust. Metro is committed to the full implementation and compliance with the six data protection principles and the requirements of the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong) (the “Ordinance”). This Statement is intended to assist you in understanding Metro’s privacy policies and practices in relation to the personal data.


Our Pledge

We pledge to safeguard your personal data by complying with the requirements of the Ordinance as well as the relevant codes of practice and guidance notes issued by the Office of the Privacy Commissioner for Personal Data. We will ensure that all our employees and third parties with permitted access to your personal data uphold these obligations.


Collection of Personal Data

Personal data means any information relating to an individual from which the identity of the individual can be ascertained, directly or indirectly. We may collect the following data relating to you, which may be personal data from time to time, including but not limited to:
• name;
• age;
• gender;
• phone number;
• email address;
• HKID number of passport number;
• nationality or residency status;
• birth date;
• personal finance status, intention or goals (including need for loans);
• income or assets information;
• education level;
• employment information;
• residential information;
• bank account or stored value facility account details; • Facebook ID and first name displayed in Facebook;
• LinkedIn ID and related information;
• preferences related to any products or services;
• communications between you and Metro;
• data regarding your visits to and use of Metro website and Metro Chatbot; and
• location data.

In addition, when you use Metro website or services, we may automatically collect certain data which may, when combined with other information about you, be personal data, including but not limited to:
• attributes of the equipment or device you are using, such as the operating system, hardware version, device settings, software and device identifiers;
• connection information such as the name of your mobile operator, ISP or other service provider, browser type and IP address;
• the website from which you have reached Metro website;
• the Metro website pages viewed;
• details of the products and services on the Metro website that you look at, information, tools and content available on Metro website that you use; and
• links from Metro website that you click on.

With your request or authorization, Metro may additionally receive information about you from our business partners or co-branding partners or from credit reference agencies. Metro may also obtain information about you from the public domain.

We may use the personal data collected for the purpose set out in the Personal Information Collection Statement (see below). The use and disclosure of personal data and your right to access or correct your personal data held by Metro are also set out in the Personal Information Collection Statement (see below).


Use of Cookies

Cookies are small data files which are placed on data subject’s device when data subject visits Metro’s website, interacts with Metro Chatbot or clicks on Metro’s online advertisements. Cookies or similar technologies are used for the following purposes:

a. statistical analysis of your on-site behaviour such as number of visits to our site, page views, length of time spent on each page. These are aggregated and therefore anonymous.
b. provide enhanced user experience, remember your preference within our website, enable easy navigation between public section and member owner section of our web property.
c. promote personalized products using your visited pages, and the website links you have followed to:
     i. make Metro’s website more relevant to your interests;
     ii. provide online advertisements or offers on Metro’s website or third-party websites which are most likely to interest you;
     iii. evaluate the effectiveness of Metro’s online marketing and advertising programs.

The above cookies may be placed on data subject’s device by Metro or by third parties on Metro’s behalf (for example, advertising networks and providers of external services like web traffic analysis services). Information recorded through the use of cookies by third parties are aggregated and then shared with Metro as anonymous aggregated research data. No personal contact information about data subjects is collected or shared by third parties with Metro as a result of the use of cookies.
Most web browsers are initially set up to accept cookies. Should you wish not to be tracked by this kind of technology, you can choose to ‘not accept’ cookies by changing the settings on your web browser. However, if you block all cookies, including strictly necessary cookies, you may not be able to use the Metro website or Metro Chatbot properly.


Retention of Personal Data

We will take practical steps to ensure that your personal data will not be kept longer than necessary and that we will comply with all statutory and regulatory requirements in Hong Kong concerning the retention of personal data.


Security Measures

We provide and maintain stringent security measures to protect Metro’s system and information and personal data retained therein, including:
• use of OTP to authenticate users or customers;
• use of firewalls and network segregation to protect unauthorized access;
• use of encryption to keep data subject’s personal data private at rest and in transit;
• regular review of our information collection, use, storage and processing practices;
• restriction of access of personal data to relevant employees on a “need-to-know” basis; and
• training to employees on the proper handling of personal data.

While internet is not an inherently secure environment for communications, we continuously review and apply industry best practices to protect and secure this channel throughout our systems. Your personal device security and general measure in handling your own personal and transactional digital data are equally important. In most cases, an imprudent transmission and handling of sensitive data such as confidential documents, password, personal identifiers etc. would facilitate unauthorized access resulting in a data breach. Hence, we remind you to be cautious when using Metro’s website and handling your own sensitive documents and data.

Personal Information Collection Statement

Purpose of Collection

1. For the purposes of the provision of services by Metro, it is necessary for data subjects to supply Metro with personal data for the opening or continuation of accounts and for the purposes of the establishment or continuation of loan facilities and related financial services or the processing of new or renewal applications or other services through Metro website.
2. Failure to supply such personal data by data subjects may result in Metro being unable to open or continue accounts, provide loan facilities and related financial services or process applications or other services.
3. For the purposes of the provision of services by Metro, personal data of data subjects may also be obtained from credit reference agency (whose contact details can be provided upon request) or from the public domain through different channels, including public registers, public search engines, public directories or any social media with public view setting authorized by the data subject. In addition, device information may be collected from data subjects’ web browsers.


Use of Personal Data

4. The personal data of data subjects may be used by Metro for:
     a. considering and processing applications for products and services and the daily operation of products and services (including loan facilities and related financial products and services provided to data subjects);
     b. conducting credit checks whenever appropriate (including at the time of application for loan and when we review credit which normally takes place one or more times each year);
     c. creating and maintaining Metro’s credit scoring or risk related models;
     d. ensuring ongoing credit worthiness and good standing of data subjects;
     e. assisting other financial institutions to conduct credit checks and to collect debts;
     f. designing and developing loan/credit facilities and related financial products and services for customers’ use;
     g. conducting marketing research or developing membership programmes;
     h. subject to obtaining the consent of data subjects, direct marketing services, marketing products, services and other subjects as described in paragraphs 6 and 7 below;
     i. determining the amounts of indebtedness owed to or by data subjects;
     j. exercising Metro’s rights under contracts with data subjects, including collecting amounts outstanding from data subjects;
     k. meeting obligations, requirements and arrangements, of Metro or its affiliates within the Metro Group, whether compulsory or voluntary, to comply with or in connection with:
             i. any law, regulation, judgement, court order, voluntary code, sanctions regime applicable to Metro or its affiliates within the Metro Group, existing currently or in the future;
             ii. any guidelines, guidance, rules or codes of practice or requests given, published or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, relevant stock exchange, self-regulatory or industry bodies or associations of financial service providers within or outside Hong Kong existing currently or in the future;
             iii. any present or future contractual or other commitment with legal, regulatory, judicial, administrative, public or law enforcement body, or governmental, tax, revenue, monetary, court or other authorities, relevant stock exchange, self-regulatory or industry bodies or associations of financial service providers or any of their agents that is assumed by, imposed on or applicable to Metro or its affiliates within the Metro Group; and
             iv. any agreement or treaty between the authorities described in (iii) above;
     l. complying with any obligations, requirements, policies, procedures, measures or arrangements of Metro or its affiliates within Metro Group for the use of data and information for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
     m. enabling an actual or proposed assignee or transferee of all or any part of Metro’s business and/or assets, or participant or sub-participant of Metro’s rights in respect of loans/credit facilities relating to data subjects, to evaluate the transaction intended to be the subject of the assignment, transfer, participation or sub-participation and enabling the actual assignee or transferee to use such data in the operation of the business or rights assigned;
     n. comparing data of data subjects or other persons for credit checking, data verification or otherwise producing or verifying data, whether or not for the purpose of taking action against such data subjects;
     o. maintaining a credit history of the data subjects (whether or not there exists any relationship between the data subjects and Metro) for present and future reference;
     p. administering, enhancing, maintaining and providing Metro Chatbot and processing, handling or communicating with data subjects in respect of any enquiry or requests raised by data subjects via Metro Chatbot; and
     q. any other purposes relating to the purposes listed above.


Disclosure of Personal Data

5. All personal data held by Metro will be kept confidential, but Metro may disclose or transfer such information to the following parties for the purposes set out in paragraph 4 above:
     a. any agent, contractor, sub-contractor or associates of Metro or its affiliates within the Metro Group (including its employees, officers, agents, contractors, service providers and professional advisers);
     b. any third-party service provider who provides administrative, professional, advisory, telecommunication, information service, computer, payment, data processing, debt collection or other services to Metro or its affiliates within Metro Group in connection with the operation or maintenance of its business;
     c. any other person who is under a duty of confidentiality to Metro and has undertaken to keep such information confidential
     d. the drawee bank providing a copy of a paid cheque (which may contain data about the payee) to the drawer;
     e. credit reference agencies and, in the event of default, debt collection agencies;
     f. any authority, body, association or persons mentioned in paragraph 4(k) above;
     g. any actual or proposed assignee or transferee or Metro or, participant or sub-participant of Metro’s rights in respect of loans/credit facilities relating to data subjects;
     h. any persons giving or proposing to give a guarantee or security to guarantee or secure the data subject’s obligations to Metro;
     i. any entities within the Metro Group;
     j. business partners or co-branding partners of Metro, together with whom Metro provides products or services to data subjects;
     k. subject to obtaining the consent of data subjects in connection with the purpose set out in paragraph 4(h) above:
             i. third party financial institutions, insurers, credit card companies, securities, commodities and investment services providers, third-party membership programme providers or our co-branding partners; and
             ii. external service providers (including but not limited to mailing houses, telecommunication companies, telemarketing and direct sales agents, call centres, data processing companies and information technology companies).
Personal data collected in Hong Kong by Metro may be transferred in and to a place outside Hong Kong.


Direct Marketing

6. Metro intends to use a data subject’s data to conduct direct marketing of products or services and requires the data subject’s consent (which includes an indication of no objection) for that purpose. In this connection, please note that:
     a. the name, contact details, products and other service portfolio information, transaction pattern and behaviour, financial background and demographic data of data subject held by Metro from time to time may be used by Metro in direct marketing;
     b. the classes of services, products and subjects which may be marketed includes credit/loan facilities and other financial services and products, membership programmes and related products and services, products and services offered by our co-branding partners;
     c. the above services, products and subjects may be provided by Metro or its affiliates within the Metro Group, third party financial institutions, insurers, securities and investment services providers, third-party membership programme providers or our co-branding partners;
     d. in addition to marketing the above services, products and subjects itself, Metro also intends to provide the data described in sub-paragraph (a) above to all or any of the persons described in sub-paragraph (c) above for use by them in marketing those services, products and subjects, and Metro requires the data subject’s consent (which includes an indication of no objection) for that purpose; and
     e. Metro may receive money or other property in return for providing the data to the other persons in sub-paragraph (c) above and, when requesting data subject’s consent or no objection as described in sub-paragraph (d) above, Metro will inform the data subject if we will receive any money or other property in return for providing the data to the other persons.
7. If you do not wish Metro to use or provide to the other persons your data for use in direct marketing as described above, you may exercise your opt-out right by notifying us:

Data Protection Officer
Rm 1105 Hip Kwan Commercial Building,
38 Pitt Street, Yau Ma Tei, Kowloon, Hong Kong
Email: support@metrofinanceservices.com


Access and Correction of Personal Data

8. Under and in accordance with the terms of the Ordinance and the Code of Practice on Consumer Credit Data (the “Code”), you have the right:
     a. to check whether Metro holds personal data about you and to access such data;
     b. to require Metro to correct any personal data relating to you which is inaccurate;
     c. to ascertain Metro’s policies and practices in relation to personal data and to be informed of the kind of personal data held by Metro;
     d. in relation to consumer credit data, to be informed, upon request, which items of personal data are routinely disclosed to credit reference agencies or debt collection agencies and be provided with further information to enable the making of an access and correction request to the relevant credit reference agency or debt collection agency; and
     e. in relation to consumer credit data, upon termination of your account by full repayment and on condition that there has not been, within 5 years immediately before account termination, any material default on your account, to instruct Metro to make a request to the credit reference agency to delete from its database any account data relating to your terminated account.
9. If you default in repayment, unless the amount in default is fully repaid or written off (otherwise than due to a bankruptcy order) before the expiry of 60 days from the date such default occurred, your account repayment data (as defined in the Code) may be retained by the credit reference agency until the expiry of 5 years from the date of final settlement of the amount in default.
10. If any amount owed by you is written off due to a bankruptcy order being made against you, your account repayment data (as defined in the Code) may be retained by the credit reference agency, regardless of whether the account repayment data reveals any material default, until the expiry of 5 years from the date of final settlement of the amount in default or the expiry of 5 years from the date of your discharge from bankruptcy as notified to the credit reference agency by you with evidence.
11. In accordance with the terms of the Ordinance, Metro has the right to charge a reasonable fee for the processing of any data access request.
12. You should send any requests for access to personal data or correction of personal data or for information regarding our policies and practices to:

Metro Property Service Ltd.
Data Protection Officer
Rm 1105 Hip Kwan Commercial Building,
38 Pitt Street, Yau Ma Tei, Kowloon, Hong Kong
Email: support@metrofinanceservices.com
13. Nothing in this Notification shall limit the rights of the data subjects under the Ordinance.
14. In case of discrepancies between the English and Chinese versions, the English version shall prevail.。
Updated as of Dec 2022




Privacy Policy and Personal Information Collection Statement