Addendum to Prudential Hong Kong Privacy Notice / Personal Information Collection
Statement for Mainland China
This Addendum applies to you if you are within mainland of the People’s Republic of China. These terms are set out in addition to and from an integral part of the terms of the Prudential Privacy Notice / Personal Information Collection Statement. In the event of any conflict or inconsistency between the Prudential Privacy Notice / Personal Information Collection Statement and this Addendum, the terms of this Addendum shall govern and prevail.
Prudential’s Privacy Notice / Personal Information Collection Statement can be found here:
- Hong Kong: Privacy Notice and Personal Information Collection Statement
- Macau branch: Privacy Notice and Personal Information Collection Statement
1. PERSONAL INFORMATION WE PROCESS
For customers within mainland of the People’s Republic of China, we collect and process the following personal information:
- Personal and contact details including title, full name, contact details and contact details history;
- Travel document information including a copy of passport and the information specified therein, including the passport number, issuing country, issue and expiry date, name, date of birth and gender;
- Payment information including credit card details (credit card number, name and expiry date) and bank account information (bank name, account number and name);
- Demographic information including date of birth, gender and / or age, education level and occupation;
- Identification information including nationality and copies of the identity document that you provide, such as PRC national ID, HKID, Macau ID or passport (if relevant to the product or service);
- Policy information including details of policy holders, joint policy holders, insureds, beneficiaries, including minor beneficiaries, assignees, trustees and claimants of our products or services, claims history;
- Family member information including your family member’s name, contact details and age (as the case may be and only if relevant to the product or service);
- Communication records including records of your contact with us such as via the phone number of our customer service centre and, if you get in touch with us online using our online services or via our smartphone app, details such as your IP address;
- Usage information including the usage of our products and services, any claims and whether those claims were paid out or not (and details related to this);
- Health information including information about your health / medical records;
- Your residency and /or citizenship status;
- Family and marital information including marital status, family, lifestyle or social circumstances (if relevant to the product or service). For example, the number of dependents you have or if you are a widow or widower; and
- Financial information including information you provide to us about your financial needs and investment preferences (if you fill out a financial needs analysis form).
2. PURPOSES OF PROCESSING
For customers within mainland of the People’s Republic of China, we collect and process personal information either with your consent, where it is necessary for the performance of our contract with you or where it is necessary for the performance of our statutory duties or obligations, as further described below.
Purpose |
Personal Information |
The administration of our products and services, including to provide any relevant services as discussed with you prior to any purchase of a product or service |
|
To process your application for the product/service (e.g. insurance policy) |
|
To administer and process insurance policies, insurance claims, medical, security and underwriting checks |
|
To investigate and settle claims and detect and prevent fraud (whether or not relating to the policy issued in respect of this application) and/or other illegal activity, or security or technical issues |
|
To process payment instructions |
|
To provide you with insurance, financial and related products and services |
|
To communicate with you |
|
To comply with any regulatory or other legal requirements or other internal business requirements (whether imposed on us or any third party transferees), including but not limited to anti-money laundering and Know-Your-Client obligations |
|
To provide customer services and support, including after-sales enquiries and claims support |
|
To perform a policy review (e.g. renewal) or financial needs analysis |
|
To keep your information on record and carry out other internal business administration |
|
To send you direct marketing, personalise and tailor, customised promotions, messages and suggestions to you (only where we have obtained your specific consent) |
|
3. SENSITIVE PERSONAL INFORMATION
For the purposes stated in this Addendum, we may collect and process your sensitive personal information (these explicitly highlighted above). For example, we will collect your ID or passport number when you register a customer account with us; we may also need to collect your health / medical records and financial and medical information when providing products and services to you; and we need to collect your credit card details and bank account information to charge you for payment for the product/service purchased and to make payments to you as part of claims reimbursement. We will not be able to provide you with the product or service you have requested or to comply with statutory or contractual requirements if we fail to process such sensitive personal information. For example, without your ID information, we will not be able to verify your identity and process your application for our products/services, such as for an insurance policy, and without your health information, we will not be able to administer your health insurance claims.
We will process your sensitive personal information in strict accordance with PRC laws and regulations, only when necessary to provide you with Prudential products and services. To the extent required by applicable law, we will also obtain your separate consent before our collection, for example, if we rely on consent as the legal basis for the processing. We adopt, update and implement various technical, physical and administrative security policies and procedures in line with applicable laws and regulations and industry best practices to safeguard the confidentiality, privacy and integrity of your sensitive personal information. Sensitive personal information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used, including such information as biometric identification, religious belief, specific identity, medical health, financial account and whereabouts and tracks, as well as the personal information of minors under the age of 14.
4. MINORS
We generally do not directly collect personal information from a child under 14 years of age but may collect such personal information from the guardian of the child where such processing necessary for providing relevant services. The parent or legal guardian may exercise the minor’s rights set out in this Addendum by contacting us. We will comply with relevant rules on sensitive personal information.
5. ENTRUSTED PROCESSING, SHARING OF YOUR PERSONAL INFORMATION AND OVERSEAS TRANSFERS
Entrusted Processing
We engage certain third-party service providers (e.g. claims investigation companies) to perform tasks on our behalf and assist us in providing our products and services. We may transmit electronically your personal information to such third-party service providers to process such information for us in accordance with our instructions and in compliance with this Addendum as well as any other appropriate confidentiality and security measures.
Sharing of Personal Information with Third Parties
We will not provide your Personal Information to third parties in violation of law. For the purposes stated in this Addendum, we may share your Personal Information (including the Personal Information of third parties you provided to us) with third parties or affiliate companies. For example, for the purpose of administrating products and services, we may share categories of personal data to insurance agents, brokers, reinsures, claims investigation companies; for the purpose of providing you with products and services, only to the extent necessary and lawful, we may share your Personal Information with Prudential Affiliates ( https://www.prudentialplc.com/en/find-us/ ) located outside mainland China; for the purpose of providing online payment services, we may share categories of personal data to payment service providers. A list of the transferees of your Personal Information can be found below, including their contact information as well as the purposes and ways of processing the Personal Information. Please note that this list will be updated from time to time.
Name |
Contact Information |
Purpose and method of processing |
Type of information |
QHMS |
info@qhms.com |
For claims processing and medical services; by emails or pre-authorization forms
|
Personal and contact details, identity information and health information
|
Dr. Vio & Partners Limited |
852 28902222 |
||
HMMP |
info@hmmp.com.hk |
||
UMP |
business@ump.com.hk |
||
MediNet Services Ltd |
admin.office@medinet.com.hk |
||
Prudential affiliates |
service@prudential.com.hk |
Personal information is processed for purposes and methods set out in this Addendum |
All personal information set out in Section 1. Personal Information we Process of this Addendum |
Cross-border Data Transfers
Your personal information is processed by the overseas recipients, i.e., Prudential Hong Kong Limited and Prudential General Insurance Hong Kong Limited outside of mainland China for the purposes set out in this Addendum, as detailed below.
Overseas recipient |
Contact Information |
Purpose and method of processing |
Type of information |
Way of exercising right |
Prudential Hong Kong Limited |
For the purposes in this Addendum
|
All personal information set out in Section 1. Personal Information we Process of this Addendum |
Please refer to Section 8 of this Addendum |
|
Prudential General Insurance Hong Kong Limited |
We onward transfer your personal information to Prudential affiliates and the third parties listed in the table under the section “Entrusted Processing, Sharing of your Personal Information and Overseas Transfers”. Such onward transfers will be in accordance with PRC laws and regulations, including those on cross-border data transfer.
6. DATA RETENTION
We will only retain your information (i) for as long as we require to fulfil the necessary purposes of processing your information as stated in this Addendum, and (ii) for as long as we are required to under applicable laws or administrative regulations.
Your Personal Information will be securely deleted or disposed of thereafter. Unless we have to retain certain data due to legal reasons, we will only process such data to the extent required by laws and regulations and will not use it in our daily business activities.
7. INDIVIDUAL RIGHTS
You are entitled to the following rights under the China Personal Information Protection Law.
(1) Right of Access and Modification
If you want to access or modify your Personal Information, you may contact us through the contact details set out in this Addendum.
(2) Right to Obtain a Copy of Your Personal Information
You have the right to obtain a copy of your Personal Information. If you need a copy of your Personal Information collected by us, you may contact us through the contact details set out in this Addendum.
(3) Right to Withdraw Consent
If you wish to withdraw your consent to other use of your Personal Information, you may contact us through the contact details set out in this Addendum. If you withdraw your consent to the use of Personal Information, you may not be able to use relevant products and/or services.
(4) Right to Restrict or Object Processing
You have the right to restrict or object processing of your Personal Information by others. You may contact us through the contact details set out in this Addendum.
(5) Right to Unsubscribe Notifications and Messages
If you choose not to receive any notifications or marketing or promotional messages from us, please contact us through the contact details set out in this Addendum.
(6) Right to Object to Personalized Recommendations
Certain of our online services provide targeted services for you based on your characteristics using automated decisions. You may turn off personalized recommendations in the corresponding mobile applications.
(7) Right of Deletion
You have the right to request that your Personal Information be deleted if: (a) we violate laws or regulations in collecting or using your Personal Information; (b) we have no lawful basis for collecting your Personal Information or you withdraw your consent; (c) we collect or use your Personal Information in violation of our agreement with you; (d) you deregister your account; or (e) we no longer provide products or services for you.
Please note that if the Personal Information you have requested to delete is necessary for the performance of certain services, we may not continue to provide such services to you. This will not, however, prevent us from providing other services that are not related to that Personal Information.
(8) Right of Deregistration
If you would like to deregister your account, please contact us through the contact details set out in this Addendum and we will take reasonable steps to deregister your account. We will delete your Personal Information upon your request or as required by laws and regulations.
By providing your personal information with us, you acknowledge that you have carefully read, fully understood and accepted this Addendum. By accepting this Addendum, you have granted your consent, to authorise us to collect and process your personal information in accordance with this Addendum.
8. CONTACT US
If you wish to exercise any of your rights under the Personal Information Protection Law of China, you may make your request or complaint to Prudential Hong Kong Limited or Prudential General Insurance Hong Kong Limited (P.O. Box No. 28058, Gloucester Road Post Office, Hong Kong) at:
Hong Kong
Macau Branch
We may need to verify your identity if you are requesting information about yourself or a close relative.
This Addendum may be updated from time to time, and you’ll always be able to find the most recent version on this site.
Last updated: 31 July 2025