HSBC Australia Mobile Banking App Privacy Collection Notice

HSBC Bank Australia Limited (ABN 48 006 434 162, AFSL 232595) ('HSBC', ‘our’, 'we' or 'us') collects, uses and shares information about you so that it can provide you with access to your banking account and related services. This HSBC Australia Mobile Banking App Privacy Collection Notice (‘App Collection Notice’) explains how HSBC collects, holds, uses and shares your personal information when you use the HSBC Australia Mobile Banking App (‘App’), including information about the device that the App is installed on your mobile phone or tablet. For more details of how HSBC collects, uses and shares personal information about you, refer to our Privacy Policy. You can find it on our website: https://www.hsbc.com.au/privacy-policy/

The App is provided by HSBC Global Services (UK) Limited and all products and services accessed via the App are provided by HSBC Bank Australia Limited.

We use a range of measures to keep your personal information safe and secure, such as encryption and other forms of security. We require our staff and any third parties who undertake work on our behalf to comply with regulatory standards to protect your­­­ personal information and apply security measures for the use and transfer of your personal information.

For more information about how we safeguard your personal information, please refer to our Privacy Policy.

We take all practicable steps to ensure that your personal information will not be kept longer than necessary. We will use your personal information as described in this App Collection Notice to carry out activities relating to your account management and administration, or deal with any disputes or concerns that may arise. We may need to keep your personal information in order to comply with any regulatory or legal requirements, help detect or prevent fraud and financial crime, or respond to and assist law enforcement, or regulatory agencies. If we no longer need to keep your personal information, we may de-identify or delete it.

We may share your personal information:

• with others who help us provide services to you or who act for us (such as our professional advisers and business partners)
• with other HSBC group companies, locally or overseas
• with third parties, if you consent to us sharing your information with them
• with local or overseas law enforcement agencies, industry bodies, regulators or authorities
• with the other third parties outlined in our Privacy Policy.

Please refer to our Privacy Policy for more details on the countries and territories in which we operate and where the recipients of your personal information are likely to be located.

HSBC collects personal information from your device when you use or access the App. HSBC will ask for your permission before accessing your personal information, such as location data on your device. Some functions of the App will not be available if you do not give us permission.

• Identification Information - We collect information about your identity such as your name and contact details like email address and telephone number. This may include information contained in your identity documents or government documents provided by you or someone acting on your behalf, such as your drivers’ licence, passport, Medicare number, or government issued concession cards you hold.
• Personal Details - We collect information about your personal circumstances (e.g. marital status, date of birth, gender, occupation, salary and information about your partner or family).
• App Analytics and Usage - We collect information about your use of the App, including your login details, preferences, activity logs, IP address, online activity data and information collected by cookies. Please refer to our Cookie Policy for more details on our use of cookies. This data is used at an aggregate level to help us measure the performance of the App’s core features and services. We also record information when you log-in into the App to ensure the App and your account information is only accessed by you or a genuine user.

• Device Information – We collect information about the electronic devices (mobile phones, or tablets) you use to access the App and how you use them. This includes information about your device, operating systems, browsers, other applications and settings. We also collect information on how you use our App such as pages your visit on our App, click rates, scrolling or swiping activity, mouse movements, or typing speed. We may collect and process this information to generate a behavioural profile.

• Applications Installed on your Device - We collect information about applications installed on your device to check whether you might have risky applications. This helps us protect you from financial crime and detect any unusual activity.
• Application Tracking Transparency – If you grant permission to track your activities across other companies' apps and websites, we use this information to help improve how our App works and what you’re interested in on our App and on social media. This enables us and our partners to personalise our marketing to you.
• Biometric Information - You can use biometrics authentication (like fingerprints or facial recognition) to log-on to our App and authenticate your requests within the App. If you do so, we rely on your device's technology to authenticate you. We also use your device camera and third party facial recognition technology to verify your identity and authenticate you. We collect information about your physical interactions with the device including the screen. This allows us to check any unusual or suspicious activity on your device to prevent payment scams and fraudulent activities.
• Device ID & Call Information - Where you select this functionality, we will collect your device ID and telephone number to contact HSBC directly through the App without having to manually dial a telephone number.
• External Storage - This lets the App save files onto your device's external storage, such as the devices’ memory card or photo library. This allows you to store and send documents and share files, such as loan documents.
• High Sampling Rate Sensors - This allows us to check any unusual or suspicious activity on your device to prevent payment scams and fraudulent activities.
• Location Data - We may collect information relating to your device’s approximate location to help you to locate your closest branch or ATM or customise what you see in our App based on your location and what we know about you. You can update your location permissions within the App. If you choose not to enable location services, you may not be able to use certain features.
• Mobile Data/ Wi-Fi – We collect information associated with your access to the App such as information relating to the wi-fi network or mobile network used by your devices. This allows us to use your internet connection to access our digital banking systems.
• Additional Information – We collect information you provide in free text fields, such as surveys, search terms and/or information disclosed when you interact with our chat function on our App.
• Phone Number – This shares your device's phone number with us.
• Push Notification Settings - This allows you to receive instant notifications from our App about activity on your account or offers and promotions.
• Tax File Number – You can provide your Australian Tax File Number (TFN) to us via the App. We are authorised by taxation law to collect TFN from account holders. You are not obliged to provide your TFN, however if you choose not to provide it and you do not have a TFN exemption, we may deduct withholding tax. If you are unsure if you are required to provide your TFN, please - Contact Us | Chat or call for help & support - HSBC AU.

We may collect the above information from you directly or from third parties, such as someone acting on your behalf, a parent or guardian, agent, or authorised operator of your account or third-party service providers who capture data when you use our platforms on our behalf. Where you give us information about others, you must have their authority and tell them what's in this App Collection Notice.

We collect, use and share your personal information to make the App available to you. We also use your personal information for other reasons including:

• To verify your identity and manage our relationship with you, including to contact you about updates to our App, or communicate with you.
• To facilitate payment requests and carry out your instructions.
• To administer, analyse, and personalise our App. This includes testing and trouble-shooting to improve our App so we can offer you a better user experience and personalised marketing content. To do this we may combine data collected through other channels and third parties, to help us understand more about our customers so we can improve our features, products and services.
• To ensure network and information security, including monitoring users’ access to our App for the purpose of preventing cyber-attacks, unauthorised use of our systems and App, prevention and detection of crime and protection of personal information.
• To prevent, detect and investigate suspicious, fraudulent, criminal or other activity that may cause you, us or any of our business partners, or others harm, including in relation to our App.
• To determine whether you are eligible for products or lending facilities you apply for or enquire about.
• To send you information about products and services you might be interested in, including those offered by our business partners.
• To comply with our legislative and regulatory requirements in Australia and overseas, respond to legal process requests, or requests from law enforcement bodies or other third parties.
• To defend and enforce our rights including against legal claims that involve use and to manage regulatory matters, investigations, data breaches and privacy requests.
• For any other purpose you consent to or opt in to, including sharing or enabling functionality with our business partners.
• For any other purpose which is required or authorised by law, regulations, codes of practice or as set out in our Privacy Policy.

If you don’t provide or allow us to collect your personal information, we may not be able to give you access to the App or its full functionality, or access to other products and services we may offer you from time to time.

Our App includes software provided by third parties. The software helps our App to operate effectively and safely. The information below lists the software and what it does, including the third parties who provide it to us.

Software for Android and iOS devices:

BioCatch

• What information is collected - Information about your accounts with HSBC, your approximate or exact location, information about your account transactions and App usage information.
• What is it used for - BioCatch allows us to check unusual or suspicious activity on your device, such as fraud user behaviour, so that we can help prevent payment scams and fraudulent activities.
• Who is the information shared with - BioCatch.
• How can I contact BioCatch - Contact support@biocatch.com.

LP Messaging SDK

• What information is collected - Your contact information and App usage information.
• What is it used for - The platform of LP Messaging SDK, which provides a chat feature/bot feature and is used by our Contact Centre to provide help to you.
• Who is the information shared with - LivePerson.
• How can I contact LivePerson - Contact livepersonsupport@hsbc.com

Threatmetrix

• What information is collected - Information about the device you’re using, your approximate or exact location and App usage information.
• What is it used for - Threatmetrix allows us to help protect you against fraud by identifying if there is any malware or risky software installed on your device.
• Who is the information shared with: LexisNexis.
• How can I contact LexisNexis: Visit https://www.lexisnexis.com/global/privacy/privacy-center-hub.pagehttps://www.lexisnexis.com/global/privacy/privacy-center-hub.page

Zimperium

• What information is collected: Information about your accounts with HSBC, your approximate or exact location, information about your account transactions and App usage information.
• What is it used for: Zimperium provides mobile threat defence solutions to protect mobile devices, applications, and networks from cyberattacks.
• Who is the information shared with: Zimperium.
• How can I contact Zimperium: Contact privacy@zimperium.com

Request access or correct to your personal information

You can request access to your personal information or credit-related information we hold about you. For more information on how to request access to your personal information, please visit our website where you can learn under “Access your personal information” – Important Information for HSBC Customers - HSBC AU.

Request to correct your personal information

It’s important that we have your correct details, such as your current home address, email address and phone number. You can check or update your information via the App by clicking your profile and “Update my details”.

Update your direct marketing preferences

You can update your marketing preference within the App by selecting your Profile under “Communication preferences”. Please refer to our Privacy Policy for details on how to update your preferences and how we contact you, or ask not to receive direct marketing.

Making a complaint

Please refer to our Privacy Policy for details on how to make a privacy-related complaint and how we deal with it.

This App Collection Notice contains links to third party websites, which may have privacy policies or collection notices which differ from our own. We are not responsible for the activities and practices that take place on those third-party websites.

You can contact HSBC’s Privacy Officer via the following methods:

Mail - HSBC Bank Australia Limited, GPO Box 5302, Sydney NSW 2001

Email - privacy@hsbc.com.au

For more contact options, please see https://www.hsbc.com.au/help/contact/

We may change or update this App Collection Notice from time to time by publishing it on our website www.hsbc.com.au or by accessing within the App itself.