Credit Information Services Limited Privacy Policy
- Who We Are
- Where We Collect Your Personal Data
- How We Use and Disclose Your Personal Data
- Retaining Your Personal Data
- Protecting Your Personal Data
- Your Data Subject Rights
- Changes to this Privacy Policy
- English Version Prevails
1. Who We Are
1.1 TransUnion Credit Information Services Limited (“TUCIS”, “we”, “us” or “our”) is a selected Credit Reference Agency (“CRA”) under Credit Data Smart (“CDS”). We use systems to collect, analyze, and share credit information. This helps us look at credit profiles, give credit reports and scores, and help with credit decisions.
1.2 This privacy policy explains how we collect, use and disclose your personal data. We promise to protect your privacy and follow all laws, including the Personal Data (Privacy) Ordinance.
1.3 You can contact our Consumer Services and Operations Department or Data Protection Officer by:
Post – Suite 811, 8th Floor, Tower 5, The Gateway, 15 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
Email – hkcontact@transunion.com
Hotline – (852) 2577-1816
2. Where We Collect Your Personal Data
2.1 We collect your personal data from various sources, including:
Type of Information | Description | Source |
Personal identifiers and contact details | Basic personal data about you, your citizenship and how to contact you. | We may collect directly from you or financial institutions participating in CDS. |
Organization-related details | Information about your organization and your role, like your job title and colleagues. | |
Proof of identity or authority | Information to confirm who you are, like identity documents and biometric data. If you enquire on behalf of someone, we might need proof of authority or supporting documents. | |
Details about your open and closed accounts, overdue amounts, credit enquiries, and review checks. | We usually receive from financial institutions participating in CDS. | |
Employment-related details | Information about your jobs, performance, benefits, and references. | We usually collect directly from you or may sometimes create for you (in case of job reviews and password reset). |
Account information | Your username, password and payment history for our services. | |
Contact history | Information about our interactions, like emails you opened/ sent or links you clicked. | We produce it ourselves. |
Device information | Details about your device, like type, operating system, browser, IP address, and cookies. | |
Audio or video recordings | Voice, image, and video recordings from our hotline and cameras. | |
Scores, grades, and screening results | This shows your financial health and how reliable you are. | We produce it ourselves or via third party services. |
Public records | Information from public sources, like official notices and court judgments. | We collect it from the public domain. |
2.2 Without your personal data, we may not be able to confirm who you are and provide our products/ services (defined under our Service Agreement).
3. How We Use and Disclose Your Personal Data
3.1 We handle your personal data only with your consent or when law allows.
3.2 We do not make automated decisions that affect you legally. We use and share your personal data to:
- Confirm who you are before offering services;
- Provide products/ services to you and CDS Subscribed Members;
- Personalize services to suit your needs better;
- Manage relationships with you and other parties;
- Improve and promote products/ services;
- Gather data about market trends and consumer needs;
- Maintain and protect our data and systems;
- Keep our staff and visitors safe;
- Ensure compliance and conduct audits; and
- Follow laws and defend our interests.
3.3 Each CDS Subscribed Member has its own privacy notice to explain how it shares information with us or uses the information we provide. We may also give you extra privacy notices to read with this policy.
3.4 We mainly store and process data in Hong Kong. We may share your personal data with other companies in the TransUnion group and third parties who help us use it as described in Section 3.2, such as TransUnion Limited. These third parties, wherever they are, cannot use your data for their own purposes without your consent.
3.5 We may also share anonymized data that cannot reasonably identify you.
4. Retaining Your Personal Data
4.1 We follow legal requirements and internal retention schedule to keep your personal data only as long as needed. We shred physical records and anonymize digital files to prevent unauthorized access or use. Check our General FAQs for more details on how long we keep your credit information.
5. Protecting Your Personal Data
5.1 We take data protection seriously. We have physical, electronic, and managerial measures to protect your personal data. Wherever we store and process data, we work with CDS Subscribed Members and third parties to protect data transfers and prevent fraud.
5.2 For more details on our security practices, see our General FAQs and Data Security Statement.
6. Your Data Subject Rights
6.1 You can request a free copy of your credit report once every 12 months. You can also get one within one (1) calendar month of a credit refusal by a CDS Subscribed Member who used our report. Additional reports are available for a fee. If you find errors in your data, we will verify and correct it with CDS Subscribed Members.
6.2 To access or correct your personal data, contact our Consumer Services and Operations Department as set out in Section 1.3.
6.3 We aim to provide the best service. If you are not happy with our use of your information, please contact us so we can look into your concerns. You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, the data regulator in Hong Kong.
7. Changes to this Privacy Policy
7.1 We review this policy regularly and may change it at any time without notice. The current policy was last updated on 1 November 2025.
8. English Version Prevails
8.1 If there are differences between the English and Chinese versions of this policy, the English version shall prevail.
v.1.2