Introduction

Hansui Capital Company Limited (hereinafter referred to as "the Company") is committed to protecting your privacy and ensuring the security of your personal data. This privacy policy explains how the Company collects, uses, discloses, and protects your personal information when you visit the Company's website hansuicapital.com.hk (hereinafter referred to as "the Website").

This statement is formulated by the Company in accordance with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) ("Privacy Ordinance"). This statement is intended to notify you of the reasons for collecting personal data, the ways data is used, and to whom you can make requests for access and correction of data.

By accessing or using this Website, you agree to the terms set forth in this privacy policy.

Personal Data We Collect

Collection of Personal Data

Customers must provide personal data to the Company from time to time when applying to open or continue accounts, establish and continue securities brokerage, investment product distribution, financial credit facilities and/or other financial services provided by the Company. Failure to provide the required data to the Company may result in the Company being unable to open or continue accounts or establish or continue related services.

The Company may collect and process the following types of personal data:

• Identity Information: Name, gender, date of birth, position, company name, identity card or passport number, email address, telephone number, and mailing address
• Financial Information: Investment preferences, transaction records, account details, risk tolerance, credit information
• Technical Data: IP address, browser type and version, operating system, and device identifiers
• Usage Data: Information about how you interact with this Website (e.g., pages visited, time spent)
• Other Information: Any other details you voluntarily provide through forms or communications with the Company

Additionally, the Company collects non-personal data through Cookies and similar tracking technologies.

Purposes of Data Collection

The Company collects personal data for the following purposes:

1. To provide daily services and credit facilities to customers
2. For credit/background checks
3. To establish and maintain the Company's credit and risk-related models
4. To assist other financial institutions in credit checks and debt collection
5. To ensure customers maintain reliable credit
6. To design financial services or related products for customers
7. To promote services and products (including rewards, incentive or preferential programs and related services and products)
8. To determine amounts owed by the Company to customers or by customers to the Company
9. To collect debts from customers and persons providing guarantees or collateral for customers
10. To comply with legal and regulatory obligations under applicable laws
11. To improve the functionality and user experience of this Website
12. To conduct market research and analysis to promote business development
13. To conduct matching procedures
14. To comply with any laws, regulations, court orders, sanctions, guidelines or requirements issued by legal, regulatory, governmental, tax, law enforcement, exchange, self-regulatory, industry or other authorities in Hong Kong or overseas that are now or in the future applicable to the Company

Sharing of Personal Data

The Company may share your personal data in the following circumstances:

• With Affiliated Companies: For operational purposes or to enhance service delivery capabilities
• With Third-Party Service Providers: Including IT service providers or analytical partners who process data on behalf of the Company, who are bound by strict confidentiality agreements
• With Regulatory Authorities: As required by law or to comply with legal obligations
• In Business Transactions: Such as mergers or acquisitions that require data transfer
• With Financial Institutions: Third-party securities and investment service providers, insurance companies, or other financial institutions

The Company ensures that all third parties processing your data comply with applicable privacy laws and maintain strict confidentiality.

Provision of Personal Data for Direct Marketing

The Company may from time to time (whether or not for monetary or other consideration) provide customers' personal data to Group members so that they can use customers' personal data for direct marketing of different financial products and services. Customers' personal data provided to the Company's Group members for use in direct marketing will be limited to:

1. Name
2. Gender
3. Date of birth
4. Part of identity card or passport number
5. Contact information (including but not limited to telephone number, fax number, email address, correspondence address and residential address)
6. Information about products and/or services that customers have purchased or applied for

Data shall not be used as described above unless the Company has obtained the customer's consent for the proposed use. If customers no longer wish the Company to use their personal data for direct marketing, customers may contact the Company at any time to withdraw their consent.

Hong Kong Investor Identification Regime and Over-the-Counter Securities Transactions Reporting Regime

Customers understand and agree that, in order to provide customers with services related to securities listed or traded on The Stock Exchange of Hong Kong Limited (SEHK), and to comply with the rules and regulations of SEHK and the Securities and Futures Commission of Hong Kong (SFC) from time to time in effect, the Company may collect, store, process, use, disclose and transfer personal data relating to customers (including customers' client identification information and broker-to-client assigned number (BCAN)).

Customers also agree that even if customers subsequently claim to withdraw consent, the Company may continue to store, process, use, disclose or transfer customers' personal data for the above purposes after customers claim to withdraw consent.

Security Measures

The Company takes robust security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Using encryption technology to ensure secure data transmission
• Firewalls and intrusion detection systems
• Restricting access to personal data to personnel on a need-to-know basis
• Information submitted through this Website is protected by encrypted communication via Hypertext Transfer Protocol Secure (HTTPS)
• This Website has obtained SSL certificates from leading suppliers

Although the Company strives to protect your information security, no system can guarantee absolute security. You acknowledge that providing personal data is at your own risk.

Cookies and Tracking Technologies

The Company's website uses Cookies and similar tracking technologies to enhance user experience and analyze traffic. Cookies may collect information about browsing behavior and preferences. You can manage Cookie settings through your browser, but disabling Cookies may affect certain functions of the website.

User Rights

Under the Privacy Ordinance, customers have the following rights (subject to certain exemptions), including but not limited to:

Rights of Access and Correction

• Access: Inquire whether the Company holds personal data relating to customers and request access to their personal data
• Correction: Request the Company to correct personal data if it is inaccurate
• Deletion: Request deletion of your personal data within the scope permitted by law
• Objection: Object to certain types of processing (e.g., direct marketing)
• Data Portability: Receive copies of your data in structured format

The Company has the right to charge reasonable fees for processing any data access requests made under the Privacy Ordinance.

Data Retention

The Company retains your personal data only for the period necessary to achieve the purposes set forth in this privacy policy, or as required by law. The Company will retain personal data you submit for a reasonable period after the termination of relevant inquiries, applications or services (whichever is later). Once the retention period ends, the Company will securely delete or anonymize your data.

International Data Transfers

If the Company transfers your personal data to regions outside Hong Kong for processing or storage, the Company will ensure appropriate safeguards are in place to protect your information in compliance with applicable privacy regulations.

Children's Privacy

This Website is not directed at persons under 18 years of age. The Company does not knowingly collect personal data from minors without parental consent. If you believe the Company has collected such information, please contact the Company immediately.

Third-Party Links

This Website may contain links to third-party websites. The Company is not responsible for the privacy practices or content of these external websites. The Company recommends that you carefully read the privacy policies of these third-party websites before providing any personal information. The Company shall not be responsible for the content of such linked websites or the consequences of accessing such websites.

Limitation of Liability

The Company does not guarantee the accuracy, completeness and reliability of the information collected; nor does it assume any liability for any loss or damage arising from any inaccuracy, incompleteness or omission (whether in tort or contract or otherwise). In addition, since email communication may not be completely secure, the Company assumes no responsibility for any damage you may suffer if you communicate with the Company via email.

Privacy Policy Updates

The Company reserves the right to update this privacy policy at any time without prior notice. Any changes will be posted on this page with an updated effective date. Continued use of this Website constitutes acceptance of these changes.