Privacy Policy
- Who We Are
- Where We Collect Your Personal Data
- How We Use and Disclose Your Personal Data
- Retaining Your Personal Data
- Protecting Your Personal Data
- Your Data Subject Rights
- Changes to this Privacy Policy
- English Version Prevails
1. Who We Are
1.1 TransUnion Limited (“TUHK”, “we”, “us” or “our”) is part of the TransUnion group. We operate TransUnion Hong Kong mobile application and website (“web services”). We also support TransUnion Credit Information Services Limited (“TUCIS”) for their products/ services.
1.2 This privacy policy explains how we collect, use and disclose your personal data. We promise to protect your privacy and follow all laws, including the Personal Data (Privacy) Ordinance.
1.3 You can contact our Data Protection Officer by:
Post – Suite 811, 8th Floor, Tower 5, The Gateway, 15 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
Email – dpotuhk@transunion.com
2. Where We Collect Your Personal Data
2.1 We collect your personal data from various sources, including:
Type of Information | Description | Source |
Personal identifiers and contact details | Basic personal data about you, your citizenship and how to contact you. | We may collect directly from you. |
Organization-related details | Information about your organization and your role, like your job title and colleagues. | |
Proof of identity or authority | Information to confirm who you are, like identity documents and biometric data. If you enquire on behalf of someone, we might need proof of authority or supporting documents. | |
Consumer credit data (defined under Code of Practice on Consumer Credit Data) | Details about your open and closed accounts, overdue amounts, credit enquiries, and review checks. | We usually receive from TUCIS with your consent. |
Employment-related details | Information about your jobs, performance, benefits, and references. | We usually collect directly from you or may sometimes create for you (in case of job reviews and password reset). |
Account information | Your username, password and payment history for our web services. | |
Contact history | Information about our interactions, like emails you opened/ sent or links you clicked. | We produce it ourselves. |
Device information | Details about your device, like type, operating system, browser, IP address, and cookies. | |
Audio or video recordings | Voice, image, and video recordings from our hotline and cameras. | |
Screening results | This shows how reliable you are. | We produce it ourselves or via third party services. |
Public records | Information from public sources, like official notices and court judgments. | We collect it from the public domain. |
2.2 Without your personal data, we may not be able to confirm who you are and provide our products/ services (defined under our Service Agreement).
3. How We Use and Disclose Your Personal Data
3.1 We handle your personal data only with your consent or when law allows.
3.2 We do not make automated decisions that affect you legally. We use and share your personal data to:
- Confirm who you are before offering services;
- Provide products/ services to you via web services;
- Personalize services to suit your needs better;
- Manage relationships with you and other parties;
- Improve and promote products/ services;
- Gather data about market trends and consumer needs;
- Maintain and protect our data and systems;
- Keep our staff and visitors safe;
- Ensure compliance and conduct audits; and
- Follow laws and defend our interests.
3.3 We may also give you extra privacy notices to read with this policy.
3.4 We mainly store and process data in Hong Kong. We may share your personal data with other companies in the TransUnion group and third parties who help us use it as described in Section 3.2. These third parties, wherever they are, cannot use your data for their own purposes without your consent.
3.5 We may also share anonymized data that cannot reasonably identify you.
4. Retaining Your Personal Data
4.1 We follow legal requirements and internal retention schedule to keep your personal data only as long as needed. We shred physical records and anonymize digital files to prevent unauthorized access or use. Check our General FAQs for more details on how long we keep your personal data.
5. Protecting Your Personal Data
5.1 We take data protection seriously. We have physical, electronic, and managerial measures to protect your personal data. Wherever we store and process data, we work with third parties to protect data transfers and prevent fraud.
5.2 For more details on our security practices, see our General FAQs and Security Policy.
6. Your Data Subject Rights
6.1 You have several rights regarding the personal data we hold about you. These are briefly described below. To exercise these rights, please contact us as set out in Section 1.3:
- Access: Find out what data we hold about you and how we use it.
- Rectification: Ask us to correct inaccurate or outdated data.
6.2 We aim to provide the best service. If you are not happy with our use of your information, please contact us so we can look into your concerns. You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, the data regulator in Hong Kong.
7. Changes to this Privacy Policy
7.1 We review this policy regularly and may change it at any time without notice. The current policy was last updated on 1 November 2025.
8. English Version Prevails
8.1 If there are differences between the English and Chinese versions of this policy, the English version shall prevail.
v.1.2