[Note] Please carefully read the Statement of Industrial and Commercial Bank of China on User Information Confidentiality, and make sure that you have been aware of our rules on handling user information. If you disagree to any term of the Statement, you should immediately stop access to the customer APP operated by ICBC.
Contents:
I. User Information Protection Guide and Product Introduction
II. Information Collected by Us and Necessary Authority
III. Information Storage
IV. Information Security Protection
V. Way of Information Use
VI. How to Manage User Information
VII. Provision of Information
VIII. Use of Positioning Information
IX. Information Protection for Minors
X. Notification and Modification
XI. How to Contact Us

Statement of Industrial and Commercial Bank of China on User Information Confidentiality

Version issue date: Apr. 14th, 2019
Effective date: Apr. 14th, 2019

This Statement will help you understand the following contents:
I. User Information Protection Guide and Product Introduction
The Industrial and Commercial Bank of China ("We" or "ICBC", registered at No.55 Fuxingmennei Street, Xicheng District, Beijing, P.R.C) attaches great importance to the protection of user information. When you uses ICBC's online products and/or services, we may collect and utilize your related information. Through the Statement of Industrial and Commercial Bank of China on User Information Confidentiality (the "Statement"), we hope to let you know how we collect, utilize, store and share the information when you use our products and/or services, and the way of access to, update, deletion and protection of such information that we provide to you.
Introduction to "ICBC Business" Products:
ICBC has developed an App for overseas corporate customers, enabling customers to handle account inquiry, generate and check e-receipts, and other banking services anytime and anywhere. Financial reminding information sent by ICBC can also be received by this App. With convenient functions of fingerprint/face log-on, this App provides safe and convenient mobile financial service experience for corporate customers.
The App applies to the corporate customers from ICBC Singapore Branch, Sydney Branch, ICBC (Asia), ICBC (Macau), ICBC (Thai), ICBC (New Zealand), ICBC (Europe) and other overseas institutions.

 

II. Information Collected by Us and Necessary Authority
When you use "ICBC Business" services, the App will collect, in a way set out below, the information provided by you when using such services or generated due to use of such services, so as to render services to you, optimize our services and ensure your account security:
2.1 When you register "ICBC Business" services, we will collect your nickname, head portrait and mobile phone number, for the purpose of helping you complete registration, protecting your App account security and rendering relevant services. If you do not provide such information, you possibly cannot use our services normally.
2.2 When you use "ICBC Business" services, we will collect the following log information in order to ensure you use our services normally, safeguard the normal operation of our services, improve our services and protect your account security:
Equity model number, operating system, equity identifier, IP log-on address, way of network access, type and state, network quality data, operation log, service log.
Such information is the basic information that must be collected to render services.
2.3 When you use "ICBC Business" services, we may require you to grant the following personal authorities to us in order to ensure you use our services normally, safeguard the normal operation of our services, improve our services and protect your account security:
Camera: Scanning QR code;
Album: Sending pictures
Positioning: Obtaining user location, automatically providing corresponding regional services and network maps and other functions
Fingerprint/FaceID: Log-on or certification

Such authorization information is sensitive information. Refusal to provide such information will not only disenable you to use corresponding authorization functions, but also affect your normal use of other App functions.
2.4 According to relevant laws, regulations and national standards, in the following circumstances, we may collect and use your related user information without your authorization or approval:
(1) Information directly relating to national security and defense and other national interests; information directly relating to public security, public health, public right to know and other major public interests;
(2) Information directly relating to crime detection, prosecution, judgment and execution of judgment;
(3) For the purpose of safeguarding your or other persons' life, property, reputation and other major legitimate rights and interests, for which personal consent is hard to obtain;
(4) The user information collected is made public by you;
(5) The user information collected from the information disclosed to the public according to law, including legal news report, government information and other channels;
(6) Information necessary for signing and executing a contract according to your requirements;
(7) Information necessary for maintaining the safe and stable operation of products or services provided, e.g. finding and handling product or service failure;
(8) Other circumstances as stipulated by laws and regulations.
Please make sure that the functions and services we provide to you will be updated and developed from time to time. If a certain function or service is not included in the above description and we have collected your information, we will inform you of the content, scope and purpose of information collection by page prompt, interactive process and announcement on website, so as to solicit your consent.

 

III. Information Storage
We will properly store your user information according to relevant laws and regulations of China and countries (regions) where our business is conducted.
Generally, we only keep your user information for a period necessary for realizing customer services, e.g.:
User account picture: If you need to use "ICBC Business" services, we will keep the account picture uploaded by you, and will delete corresponding information within a time limit required by laws and regulations after you cancel the services.
User name: If you need to use "ICBC Business" services, when you select to remember user name, we will keep your user name, and will delete corresponding information within a time limit required by laws and regulations after you cancel the services.
In case of suspension of our products or services, we will inform you by notice, announcement, etc., and will delete your user information or make it anonymous within a reasonable time limit according to relevant laws and regulations.

 

IV. Information Security Protection
We strive to provide guarantee for users' information security, so as to avoid information loss, improper use, and unauthorized access or disclosure.
We will take various security protection measures to ensure information security within a reasonable security level. For example, we will protect your user information by encryption technique (e.g. SSL), anonymous processing and other means.
We will constantly improving technical means to strengthen the security capability of the software installed to your devices, and prevent the leakage of your user information. For example, we will complete encryption of part of information in your local devices for the purpose of transmission security.
We will establish special management rules, processes and organizations to safeguard information security. For example, we will strictly restrict the scope of persons with access to information, and require them to observe confidentiality obligations and conduct audits.
If security events, including user information leakage, occur, we will initiate an emergency plan to prevent the deterioration of such events, and inform you by notice, announcement, etc.

 

V. Way of Information Use
In order to ensure service security and give us a better knowledge of the operating status of our application programs, we may record relevant information, including your application program use frequency, crash data, overall use condition, performance data and sources of application programs. We will not combine our information stored in the analysis software with any personal identity information that you provide to the application programs.
We will not use the "address list", "photos" or information on other APIs with access to user data to create the database of your contact persons for self-use or distribution to a third party, nor will we collect other Apps installed in your device for the purposes of, among other, analyzing or launching advertising/marketing. Meanwhile, we will not contact you by the information collected via the "address list" or "photos".
If we use your user information in excess of the purposes stated at the time of collection and the scope of direct or reasonable association, before using such information, we will inform you by online notice or other means and obtain your express consent or authorization.

 

VI. How to Manage User Information
6.1 When you use "ICBC Business" services, you can change your head portrait in "My Enterprise" tab. You can close "fingerprint/face ID certification" through "My Enterprise – Safety Certification Management" and close "fingerprint/face log-on" through "My Enterprise – Log-on Management", or refuse to provide fingerprint and face ID information to prevent us from obtaining your relevant user information. The above methods may hinder us from providing you with the corresponding services.
6.2 You may inquire about the permissions for "ICBC Business" to access your camera, album and positioning through mobile system, and change and withdraw the access granted to us at any time. Refusing to provide such information may only make you unable to use the corresponding authorization function, but will not affect your normal use of other functions of the App.

 

VII. Provision of Information
We will not share your user information with any third party.
We will not make public the user information we collected. If we must disclose it to the public, we will inform you of its purpose, the type of information to be disclosed and sensitive information possibly involved, and solicit your express consent or authorization by online notice or other means.
Besides, according to relevant laws, regulations and national standards, in the following circumstances, we are likely to share and make public user information without soliciting the authorization or consent of user information owner:
(1) Information directly relating to national security or defense;
(2) Information directly relating to public security, public health and other major public interests;
(3) Information directly relating to crime detection, prosecution, judgment and execution of judgment;
(4) For the purpose of safeguarding the user information owner's or other persons' life, property and other major legitimate rights and interests, for which personal consent is hard to obtain;
(5) The user information made public by the user information owner;
(6) The user information collected from the information disclosed to the public according to law, including legal news report, government information and other channels.

 

VIII. Use of Positioning Information
When you use "ICBC Business" services, we will collect your positioning information in order to ensure you use our services normally, safeguard the normal operation of our services, improve our services and protect our accurate security. Such information is sensitive information, which can only be used to provide you with relevant services only if we obtain your authorization. Refusing to provide the information will only make you unable to use location-related functions, but will not affect your normal use of other functions of the App.

 

IX. Information Protection for Minors
"ICBC Business" provides financial services to overseas business users, and we do not collect information on minors who do not have independent financial capacity.

 

X. Notification and Modification
In order to provide you with better service, this User Information Policy will also be updated from time to time with business development. However, without your explicit consent, we will not reduce your rights that you should enjoy under this Policy. We will post an update on the website or the App and notify you by means of a website announcement or other appropriate means before the entry into force.

 

XI. How to Contact Us
If you have any questions, comments or suggestions about this User Information Policy or your user information, please use the "Contact Us" function of the client to understand the customer service channels of the Bank, and contact us by calling the customer service of ICBC's overseas institutions or other means.