PERSONAL DATA (PRIVACY) ORDINANCE (“the Ordinance”) The policies and practices of Company in relation to the collection, use, security and access of personal data of our customer are as follows: Types of Personal Data Held There is no obligation for our customers to provide their personal data to us. However, if the personal data requested by us is not provided, we may not be able to provide the services and/or products (“Services”) required by our customers. We hold details of our customers including the names, addresses, identity numbers, telephone numbers, data relating to Services and billing together with other data necessary for the provision of our Services. Purpose We collect and hold the personal data of our customers to facilitate our business as a provider of related Services and/or products. The purposes for which personal data relating to our customers may be used are as follows: – the daily provision of our Services to our customers; – conduct credit reference checks; – processing of any payment instructions, direct debit facilities and/or credit facilities in relation to provisioning of our Services or requested by our customers; – publication in telephone directory; – enabling the daily operation of our customers’ accounts and/or the collection of amounts outstanding in our customers’ accounts in relation to our Services; – conduct market research, customer, product and service surveys; – processing of any benefits arising out of or in connection with our Services; – subject to the requirements of the Ordinance, direct marketing of our Services; – handling of complaints and enquiries from our customers; – enabling us to comply with our obligations to interconnect or other industry practices; – prevention or detection of crime; – provisioning of emergency services; – joint marketing programs with third parties; – provisioning of our Services by third parties; – observing any legal, governmental or regulatory requirements including any disclosure or notification requirements, to which we are subject; and – any other purposes ancillary and relating thereto. We also utilise specific personal data to assist us in protecting our customers against unauthorized use of our Services. Transfer of Personal Data Personal data of our customers will be kept confidential but we may disclose and transfer (whether in Hong Kong or abroad) such data to: – debit-collection agencies or other debt-recovery organizations; – subsidiaries, associated or related companies, or – any third party who provides services to us in connection with the operation of our business for the purposes mentioned above, subject to the provisions of the Ordinance. Security of Personal Data We restrict access to personal data to persons who have a need to use the data only. Retention of Personal Data We retain personal data of customers for as long as reasonably necessary to fulfill the purposes of collecting and using the data. RIGHT OF ACCESS TO PERSONAL DATA If you have any queries regarding the Company’s personal data and privacy policy or should you wish to request access to your personal data or if you wish to correct it, you may email your queries or request to Sun Media Marketing Limited.