Privacy notice

Privacy notice

Before we begin

Your privacy is important to us.  This notice (Privacy Notice) applies to personal information we collect about you when you use this Site, which provides information about certain APIs.  If you’re an HSBC Group customer, or otherwise have a relationship with us, we may also have provided you with a separate privacy notice setting out how we use your personal information, which will also apply.  You can also find that privacy notice by visiting the website for the product or services the HSBC Group provides to you (for example, www.hsbc.com) or by contacting your customer service team.

Some of the links on this website may lead to HSBC or non-HSBC websites with their own privacy notices, which may be different to this notice, and you should read those notices carefully.

For the purposes of this Privacy Notice, the data controller in relation to your access to this site (including your Site Account) is HSBC Bank plc (‘us’, ‘we’ and ‘HSBC’). The data controller in relation to your use of any API or any request to access any API or API Documentation will vary depending on the APIs being accessed, as further described at the end of this notice. We have also set out contact details at the end of this notice.


Information we may collect

We may collect and process the following information about you:

  1. Information that you provide to us, such as when you register to use this service, or provide us with feedback. This includes information such as:
    • Your use, or inability to use this Site, your Site Account, the API Documentation or the APIs; or
    • Your use of or reliance on any content accessed through this Site or the APIs.
  2. Information that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data
  3. Information about your organisation and its regulatory permissions, which we may gather from public sources including regulators and state authorities.

We may ask you for information if you experience problems when using this site.  We may also ask you to complete surveys for research purposes, although you don’t have to respond to these.


How we use your information

We’ll only use your information where we have your consent or we have another lawful reason for using it.  Unless we say otherwise below, we’ll use your personal information on the basis that it’s within our legitimate interests in operating and maintaining the site, and providing you with site functionality and related services.  We use information provided or obtained via this site to:

  1. enable us to provide the site and any associated products and services
  2. respond to your queries and reports (for example, if you’ve asked a question or submitted a report via the site)
  3. allow you to participate in any interactive features of the site
  4. notify you about changes to the site
  5. ensure site content is presented in the most effective manner for the device you’re accessing it from
  6. undertake data analytics to learn more about how you and others interact with this site
  7. detect and prevent misuse or abuse of this site or our services

We also use information to meet our compliance obligations, to comply with other laws and regulations and to share with regulators and other authorities that HSBC Group companies are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes), or monitoring who is accessing the Site, or the APIs. We’ll only do this on the basis that it’s needed to comply with a legal obligation, it’s in our legitimate interests and that of others or to prevent or detect unlawful acts.

We also use information to carry out our obligations from any contracts entered into between you and us or any obligations which we are subject to, for example to ensure you are eligible to use certain APIs or access API Documentation in relation to HSBC accounts that your organisation holds.


Who we’ll share your information with

We may share your information in order to provide you with products or services you’ve requested (for example, if they’re not provided by the HSBC entity operating this site), if we have a legitimate interest in doing so (e.g. to manage risk, verify your identity, to combat fraud, abuse of our site or services), a legal or regulatory obligation, or where you’ve agreed to us doing so.

We may share your information with others including other HSBC Group companies and any of our service providers who help us maintain this Site and the APIs, anyone else whose products and services you’ve requested via the Site or an API, and anyone who we’re under an obligation to disclose information to or where it’s in the public interest, for example to prevent or detect fraud, abuse of our site or services).


IP addresses

We may collect information about your computer (or mobile device), including where available your IP address, operating system and browser type, for system administration or for our own commercial purposes. This is statistical data about our users’ browsing actions and patterns.


Cookies

We use cookies and similar technologies to distinguish you from other users of this site, to improve your experience when accessing this site, and to improve the site.  Detailed information on the cookies we use and the purposes for which we use them are set out in our Cookie Notice.


How long we’ll keep your information

We keep your information in line with our data retention policy. This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as dealing with any enquiries.

We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, e.g. to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc.  If we don’t need to retain information for this period of time, we may destroy, delete or anonymise it more promptly.


Transferring your information overseas

Your information may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful.

You can obtain more details of the protection given to your information when it’s transferred outside the EEA by contacting us using the details in the ‘More details about your information’ section below.


Your rights

You have a number of rights in relation to the information that we hold about you. These rights include:

  1. the right to access information we hold about you and to obtain information about how we process it;
  2. in some circumstances, the right to withdraw your consent to our processing of your information, which you can do at any time. We may continue to process your information if we have another legitimate reason for doing so;
  3. in some circumstances, the right to receive certain information you have provided to us in an electronic format and / or request that we transmit it to a third party;
  4. the right to request that we rectify your information if it’s inaccurate or incomplete;
  5. in some circumstances, the right to request that we erase your information. We may continue to retain your information if we’re entitled or required to retain it;
  6. the right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we’re entitled to continue processing your information and / or to refuse that request.

You can exercise your rights by contacting us using the details set out in the ‘More details about your information’ section below. You also have a right to complain to the data protection regulator in the country where you live or work. You can find further information by visiting https://edpb.europa.eu/about-edpb/board/members_en


How we keep your information secure

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.


More details about your information

If you’d like further information on anything we’ve said in this Privacy Notice, or to contact our Data Protection Officer, contact us using the details for the relevant data controller below.

This Privacy Notice may be updated from time to time, and you’ll always be able to find the most recent version on this site.

Return to top


Additional Information

Where you are accessing develop.hsbc from one of the following countries/territories, this Privacy Notice must be read in conjunction with the following privacy policies which are highlighted below:

For the provision of products and services provided by:


Details of data controllers

Jurisdiction Data Controller Contact Details
Belgium HSBC Continental Europe, Brussels Branch HSBC Continental Europe, Brussels Branch, with registered office at Square de Meeus 23, 1000 Brussels, Belgium.

dataprotection@hsbc.fr
Czech Republic HSBC Continental Europe - pobočka Praha HSBC France, pobočka Praha, Na Florenci 2016/15, Praha 1, Czech Republic.  Please address correspondence ‘for the attention of the DPO’.
France HSBC Continental Europe (previously HSBC France) HSBC Continental Europe – Délégué à la Protection des Données

103 Avenue des Champs Elysées – 75008 Paris
Germany HSBC Trinkaus & Burkhardt AG Datenschutzbeauftragte/r

Königsallee 21/23

40212 Düsseldorf

Telefon: 0211 910-2006

Fax: 0211 910-9-2125

datenschutz@hsbc.de
 
Greece HSBC Continental Europe, Athens Branch HSBC Continental Europe, Athens branch, 109-111, Messoghion Avenue 115 26, Athens, Greece. Please address correspondence ‘for the attention of the DPO’.
Hong Kong SAR HSBC Corporation, Hong Kong The Data Protection Officer HSBC, PO Box 72677, Kowloon Central Post Office, Hong Kong. dfv.enquiry@hsbc.com.hk
Ireland HSBC Continental Europe, Dublin Branch 1 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.  Please address correspondence ‘for the attention of the DPO’.
Italy HSBC Continental Europe, Milan Branch Via Mike Bongiorno, 13

20124 Milan
 
Luxembourg HSBC Private Bank (Luxembourg) S.A. HSBC Continental Europe – Délégué à la protection des données 103 Avenue des Champs Elysées – 75008 Paris-France
Malta HSBC Bank Malta plc Legal Office, 32, Merchant Street, Valletta VLT 1173. Please address correspondence ‘for the attention of the DPO’.
Mexico HSBC Mexico plc., Multiple Banking Institution Financial Group HSBC ARCO Office located at Domicilio en Paseo de la Reforma Número 347, Colonia Cuauhtémoc, Alcaldía Cuauhtémoc, C.P. 06500, Ciudad de México
Netherlands HSBC Continental Europe, Amsterdam Branch De Entrée 236, 1101 EE, Amsterdam, The Netherlands

dataprotection@hsbc.fr
 
Poland HSBC Continental Europe (Spółka Akcyjna) Oddział w Polsce HSBC Bank Polska SA, Inspektor ochrony danych, ul. Kapelanka 42A, 30-347 Kraków

DPO_Poland@hsbc.com

Telefon: +48 12 399 36 50 z dopiskiem „do rąk inspektora ochrony danych”.
 
Spain HSBC Continental Europe, Sucursal en España Plaza Pablo Ruiz Picasso nº 1, Torre Picasso, floor 33, 28020, Madrid

dataprotection@hsbc.fr

banking.operations.spain@hsbc.com
 
UK HSBC UK Bank plc in relation to your Site Account, or where you are accessing APIs provided by or on behalf of HSBC UK Bank plc

HSBC Bank plc where you are accessing APIs provided by or on behalf of HSBC Bank plc

John Lewis Financial Services Limited where you are accessing APIs provided by or on behalf of John Lewis Financial Services Limited

Marks & Spencer Financial Services plc where you are accessing APIs provided by or on behalf of Marks & Spencer Financial Services plc

P.O. Box 6201, Coventry CV3 9HW, UK.  Please address correspondence ‘for the attention of the DPO’.

P.O. Box 6201, Coventry CV3 9HW, UK.  Please address correspondence ‘for the attention of the DPO’.

P.O. Box 6201, Coventry CV3 9HW, UK.  Please address correspondence ‘for the attention of the DPO’.

M&S Bank, PO Box 10565, 51 Saffron Road, Wigston, LE18 9FT or M&S Bank, Kings Meadow, Chester CH99 9FB.

Bahrain HSBC Bank Middle East Limited Bahrain Branch

HSBC Bank Middle East Limited Bahrain Branch

P.O. Box 57, Manama, Kingdom of Bahrain. Please address correspondence ‘for the attention of the DPO’.

Return to top