MetLife always conducts business endeavours with truth, sincerity and fairness and is committed to comply with the requirements of the Personal Data (Privacy) Ordinance of Hong Kong Special Administrative Region (“Hong Kong”) (Cap, 486 Laws of Hong Kong) (“Ordinance”) and all applicable data privacy laws in Hong Kong.
This Statement sets out how MetLife may collect, use and disclose customers’ personal data and data access and correction rights of the customers. This Statement applies to all products and services provided by MetLife. This Statement contains both English and Chinese versions. In case of discrepancies between English and Chinese versions, the English version shall prevail.
A. Kinds of Personal Data to be Collected and/or Held
Personal data that MetLife may collect and/or hold, for the purposes as stated in this Statement, comprises all the customers’ information, name, contact information (including but not limited to residential and correspondence address, phone number, fax number, email address), biographical information (including but not limited to date of birth, nationality, Hong Kong identity card or travel document number, gender, employment and occupation record, family and educational background, etc.), policy information (including but not limited to policy account value, sum assured, investment appetite and portfolio and experience, financial information and needs, etc.), transaction records, bank and credit card account information, medical and health data, and demographic information or identifier that held in a cookie or processor serial number that is combined with other personal information (collectively “Personal Data”).
B. Purposes of Collection, Use and Transfer of Personal Data
Personal Data may be collected and/or used by MetLife and/or transferred to the entities or individuals as specifically mentioned in this Statement for the following purposes:
- Processing applications for insurance products or services, as well as any changes, cancellations, renewals, reinstatements, and any other relevant matters.
- Verifying the customers’ identities and eligibilities for insurance or financial products or services and ensuring ongoing due diligence of the customers.
- Facilitating the daily operation of the insurance or financial or related services or products provided by MetLife , including without limitation arranging insurance contracts, managing customers’ accounts, monitoring sum assured, performing ongoing and future administration and assessment and underwriting any insurance policy issued by MetLife.
- Providing and designing any insurance or financial or related product or service.
- Enforcing the customers’ obligations under the insurance contracts including without limitation collection of insurance premiums and identification documents.
- Marketing insurance or financial product or service (including without limitation reward, loyalty or privileges programmes or members’ club) of MetLife, or of any of its parent companies, subsidiaries, affiliates, related companies or group companies, or partnering banking and/or financial services providers and telecommunications and social media companies or entities, by mail, fax, electronic mail or other means of communications, or telephone calls addressed to the customers, in respect of which MetLife may or may not be remunerated (collectively “ Direct Marketing Purposes”)
- Processing (including but not limited to investigating and analyzing) any claim under any insurance policy issued by MetLife and any credit, medical security and underwriting checks.
- Matching Personal Data (including without limitation sum assured) to determine and recommend any insurance or financial or related products or services that may be of customers’ interest.
- Creating and maintaining MetLife’s customer profile and segregation and business model and performing risk management.
- Complying with the compliance program and internal policies of MetLife and with all laws, regulations, codes or guidelines issued by regulatory or other authorities binding to MetLife or its parent companies, subsidiaries, affiliates, related companies or group companies.
- Meeting any disclosure requirements imposed by laws, regulations, codes or guidelines issued by regulatory or other authorities on or binding to MetLife, or of any of its parent companies, subsidiaries, affiliates, related companies or group companies, or partnering banking and/or financial services providers and telecommunications and social media companies or entities.
- Comparing Personal Data of the customers and other individuals for de-duplication, sum assured monitoring, credit-checking, data verification or otherwise producing or verifying data, whether or not for the purpose of taking adverse action against the customers.
- Maintaining a history of the customers (whether or not there exists any relationship between the customers and MetLife) for present and future reference
- Providing customer services (including but not limited to processing enquiries and complaints, performing policy review or needs analysis).
- Performing marketing research or survey or analysis or statistics which may be beneficial to the improvement of customer services and daily operation and provision of the insurance and financial and related products and services by MetLife or of any of its parent companies, subsidiaries, affiliates, related companies or group companies, or partnering banking and/or financial services providers and telecommunications and social media companies or entities.
- Communicating with the customers via telephone, mail, e-mail, facsimile or any other means of communications.
- Evaluating the policy intended to be the subject of reinsurance by an actual or proposed reinsurer of MetLife.
- Conducting medical or health reference checks.
- Exercising any right of subrogation or any other right given to MetLife under the insurance policies
- Preventing, detecting or reporting any crime or any fraudulent or dishonest behaviour, or any other purpose relating thereto.
- Enabling the industry association / federation to carry out its regulatory functions or such other functions that are required in the interest of the insurance industry or any members of the association / federation.
- Managing reporting and potential withholding obligations in compliance with applicable laws and regulations in Hong Kong or an overseas jurisdiction.
- Other purposes as notified at the time of collection.
- Fulfilling any other purposes directly related to (1) to (23) above.
It is necessary for the customers and other individuals (including without limitation the insured persons and beneficiaries) to supply MetLife with Personal Data in connection with the purchase and continuation of the insurance policies with MetLife, provision of insurance and financial services and compliance with any laws, regulations, codes or guidelines issued by regulatory or other authorities by MetLife. Personal Data are to be collected from customers in the ordinary course or during the continuation of the business relationship between the customers and MetLife, for example, when the customers make any claims or change the personal particulars or beneficiaries under the insurance policies.
Failure to supply such Personal Data may result in MetLife being unable to offer or continue the insurance policies, provide insurance and financial products and services, continue the business relationship between the customers and MetLife in the ordinary course, and comply with any laws, regulations, codes or guidelines issued by regulatory or other authorities.
MetLife shall not use Personal Data, without relevant consents from the customers and relevant individuals, for any purpose other than the purposes as stated in this Statement.
C. Disclosure and Transfer of Personal Data
MetLife undertakes to keep all Personal Data confidential, but MetLife may provide any such Personal Data to the following parties (whether within or outside Hong Kong) (“Recipients”) for any of the purposes set out in this Statement:
- Any parent companies, subsidiaries, affiliates, related companies or group companies of MetLife.
- Product distributors, authorized agents, insurance companies and intermediaries of MetLife.
- Partnering banking and/or financial services providers, telecommunications companies or entities, social media companies or entities of MetLife.
- Call centres, mailing houses, research house, data processing companies engaged by MetLife.
- Debt collection agencies, credit reference agencies, any financial institution or credit / charge card issuer related to premium payment account engaged by MetLife.
- Professional advisors, reinsurance and claims investigation company, any loss adjusters, providers of risk intelligence engaged by MetLife.
- Persons or entities which provides administration, operational, technical, data-processing, marketing and promotion, research, payment, printing, redemption, information technology, hosting, mailing, and telecommunications, customer service, and reward, loyalty or privileges programmes or club membership support to MetLife.
- Any relevant industry association or federation, and any member or committee of such association or federation, any governmental and judicial bodies, and tax authorities or regulators, any person to whom MetLife or its parent companies, subsidiaries, affiliates, related companies or group companies is required to transfer and make disclosure of the relevant Personal Data.
- Other parties as notified to the customers at the time of collection.
Personal Data may be processed by, kept by, disclosed to, used by or transferred to Recipients in any country or place outside Hong Kong as MetLife considers appropriate for any of the purposes as set out in this Statement, in respect of which MetLife may or may not be remunerated. Such Personal Data may be processed, kept, used or disclosed in accordance with local laws, regulations, codes, guidelines or practices including any governmental acts and orders in such country.
D. Retention of Personal Data
MetLife takes all practicable steps to:-
- Ensure the accuracy of Personal Data and to erase such Personal Data after fulfillment of the purposes as set out in this Statement.
- Erase Personal Data no longer required for the purposes as set out in this Statement unless prohibited under any law or public interest requires otherwise.
- Ensure that Personal Data is protected against unauthorized or accidental access, processing, erasure, loss or use other than such purposes as set out in this Statement.
- Ensure that Personal Data will be kept in a secure manner and not be kept longer than necessary for the purposes as set out in this Statement.
- Comply with all the relevant requirements under the Ordinance.
E. Data Access and Correction
- In accordance with the Ordinance, any individual has the right to:
(a) check whether MetLife holds Personal Data of such individual and, if so, has access to such Personal Data;
(b) require MetLife to correct Personal Data of such individual that is inaccurate; and
(c) ascertain MetLife's policies and practices in relation to Personal Data and to be informed of the kind of Personal Data held by MetLife.
2. In accordance with the Ordinance, MetLife has the right to charge a reasonable fee for the processing of any data access request.
3. Any request for access to Personal Data or correction of Personal Data, or for information regarding policies and practices and kinds of Personal Data held can be addressed to:
The Data Privacy Officer
Metropolitan Life Insurance Company of Hong Kong Limited /
Level 20, Cityplaza 3,
14 Taikoo Wan Road,
F. General Enquiries
If any individual has any questions concerning this Statement, or if the customer does not wish to receive any direct marketing promotions or offers from MetLife, please contact The Data Privacy Officer of Metropolitan Life Insurance Company of Hong Kong Limited / MetLife Limited at the address stated in section (E)(3).