Our Customer Confidentiality Policy
Customers trust us with not only their money and time but their personal information. Our responsibility to maintain the confidentiality of this information is one we treat with the greatest respect. As such, CTBC Financial Holding Co., Ltd. and its Taiwan-based subsidiaries (collectively, "we", "us", or "our") provide this Customer Confidentiality Policy so customers can understand what we collect, process, store, and use—and how we do it—in accordance with the Financial Holding Company Act, the Rules Concerning Cross-Selling by Financial Holding Company Subsidiaries, the Personal Information Protection Act, and other relevant laws and regulations.
When we collect customer information
We collect the personal or company information of the customers of CTBC Holding subsidiaries in accordance with applicable laws and regulations, only after informing customers and obtaining their consent, or as expressly stipulated in contractual documents signed by customers. We also collect information retrieved through other legitimate sources, including public information disclosed by government agencies or authorized third parties.
What information we collect
We collect data including personal, account, credit, investment, and insurance information, as described below. We may expand or narrow the scope of the information we collect in accordance with relevant laws and regulations.- Personal information, including name or company name, date of birth or establishment, ID number or government uniform invoice number, phone number, address, email address, legal capacity, and related parties or enterprises
- Account information, including account number or similar, credit or cash card account number, deposit account number, transaction account number, deposit and loan or transfer/remittance transaction data, and other transaction and financial information
- Credit information, including records of bounced checks, cancellations, rejections, credit and guarantee transactions, and business operation status
- Investment information, including the value and timing of the purchase and sale of investment products, including derivatives
- Insurance information, including the type, term, coverage, payment method, claims status, and rejection record of insurance policies
How we store customer information
Customer information is securely stored using our data processing systems for the duration of the specific purpose for which it was collected, or for the period prescribed by applicable laws and regulations (e.g., the Business Accounting Act), or for the retention period necessary for business operations, or for the retention period stipulated in individual contracts, whichever is the longest. If necessary, we may entrust customer information to information technology companies for storage; we will do so only to companies with strict security and management standards and in accordance with the law. Customer information can be accessed and used only as permitted by the information management rules that we set; furthermore, the data processing systems do not allow unauthorized users to access or change customer information.How we protect customer information
The data processing systems we use to store customer information have firewalls in place to prevent cyberattacks and store passwords within a securely protected mechanism to prevent illegal access by third parties and improper internal use.How we share and use customer information
With customer consent and to the extent permitted by applicable laws and regulations, CTBC Financial Holding Co., Ltd. and its subsidiaries may disclose customer information to CTBC Financial Holding Co., Ltd. and its subsidiaries, third parties, and other statutory authorities. Customer personal information may only be shared with third parties upon obtaining customer authorization. We disclose customer data in the following circumstances:
- To comply with government regulations
In order to comply with relevant laws and regulations or to cooperate with investigations by relevant government agencies, customer information may be disclosed to CTBC Financial Holding Co., Ltd. and its subsidiaries, competent authorities, tax collection authorities, courts, judicial authorities, and other agencies that have investigative power. - Information exchange among subsidiaries
To provide customers with a comprehensive range of financial products and services, their information may be provided to our subsidiaries for archival, disclosure, transferal, and exchanging for marketing purposes to the extent permitted by law or as consented to by the customer. The subsidiaries that may share and receive customer information are as follows:
CTBC Bank Co., Ltd.
Taiwan Life Insurance Co., Ltd.
CTBC Securities Co., Ltd.
CTBC Venture Capital Co., Ltd.
CTBC Asset Management Co., Ltd.
CTBC Investments Co., Ltd.
CTBC Security Co., Ltd.
Taiwan Lottery Co., Ltd.
CTBC Insurance Co., Ltd.
CTBC Finance Co., Ltd.
CTBC Securities Investment Service Co., Ltd.
CTBC Securities Venture Capital Co., Ltd. - The subsidiaries who may share and receive customer information are as following:
CTBC Bank Co., Ltd.
CTBC Securities Co., Ltd.
CTBC Finance Co., Ltd.
Taiwan Life Insurance Co., Ltd.
Change of customer information
Customers may inform us of changes to their information at one of our business locations, by phone, online, or through any other channel disclosed on the official website of CTBC Holding or a subsidiary.Share and use customer information Withdrawal
Customers have the right to request that we stop sharing their information. These requests can be made through the service channels mentioned in item (3) of Article 5 above. A withdrawal will take effect within three business days of a request being received.Any change to this Customer Confidentiality Policy will be announced on the websites of CTBC Holding and its subsidiaries or disclosed through other public channels as designated by the competent authorities.
For information regarding the privacy protection policies applicable to personal data collected through our website, including our policy on providing data to third parties, please refer to our website's Privacy Policy.
We also require our suppliers and business partners to comply with applicable personal data protection laws and management regulations. Please refer to our Supplier Management Principles.
