Personal Information Collection Statements

This Personal Information Collection Statement (this “Statement”) is made in accordance with the requirements of the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (the “PDPO”) and the guidelines issued by the Office of the Privacy Commissioner for Personal Data. This Statement notifies you of the personal data from time to time collected, processed and held by eMPF Platform Company Limited (“we”, “us” or “eMPF Company”), the purposes for which your personal data will be used and to whom it may be disclosed, and your rights under the PDPO to access and correct your personal data. 

You may learn more about our policies on the collection, use, transfer, retention and protection of your personal data from our Privacy Policy, which is available at www.empf.org.hk/page/privacy-policy .

1. Personal Data collected and maintained by eMPF Company 

The “electronic MPF system” (as defined in the MPFSO) administered and operated by eMPF Company is designated by the Secretary for Financial Services and the Treasury under the Mandatory Provident Fund Schemes Ordinance (Chapter 485 of the Laws of Hong Kong) (the “MPFSO”) to, inter alia, provide Mandatory Provident Fund (“MPF”) scheme administration services to facilitate approved trustees of registered schemes in performing their scheme administration functions. eMPF Company provides such MPF scheme administration services through the “electronic MPF system” and other offline facilities including the service centres, administrative centres and call centres (collectively the “eMPF Platform”). Personal data which may from time to time be collected, processed and held by eMPF Company in respect of you includes:   

  1. information which you provide during enrolment to an MPF scheme; 
  2. information which you provide during registration for the eMPF Platform and, regardless of any such registration, when you transact with the eMPF Platform;  
  3. information disclosed by or transferred from approved trustees of your MPF schemes; 
  4. details of transactions or other dealings in connection with your MPF schemes including, without limitation, information collected to handle your enquiries, complaints, applications, instructions and requests;  
  5. (processed with your consent if required under the PDPO) information from other third parties and public sources, including but not limited to government authorities; and 
  6. information obtained or generated in the course of our performance of scheme administration services and other statutory functions under the MPFSO.  

        Please note that personal data and other information requested (except those marked as “optional”) must be provided before we can provide you with the relevant service(s) under the eMPF Platform. If you fail to provide such personal data and other information, or if they are inaccurate or incomplete, we may not be able to process your transactions and / or requests, or otherwise provide you with the relevant service. 

        2. Purposes of Collection of Personal Data 

        We may collect, process and hold your personal data for the following purposes:  

        1. to facilitate your access to, and the management of your MPF account; 
        2. to process, administer and implement your applications, requests or instructions, and to provide you with such services as may from time to time be agreed with the approved trustees of your MPF schemes, all in connection with your MPF schemes; 
        3. for data matching with personal data and other information about you or your employer(s) for scheme administration and other related purposes;  
        4. for our internal business and administrative purposes, including but not limited to maintaining the security of the eMPF Platform, improvement of user experience, development of the eMPF Platform, administration of our risk management policies and procedures and for the purpose of compiling statistics and undertaking data analysis and other research; 
        5. to communicate with you, and to provide you with customer services;  
        6. for complying with applicable laws and regulations, and any request or direction of, or responding to requests from, regulators, law enforcement agents or other government authorities;  
        7. for protecting or exercising the rights of eMPF Company, including but not limited to dealing with your complaints or inquiries, and taking any legal actions;  
        8. for handling any legal, regulatory or administrative proceedings, investigations or inquiries before any court or competent authority;  
        9. for detecting and preventing crime and other unlawful behaviour;  
        10. for any other purposes or functions from time to time specified or designated under the MPFSO;  
        11. with your consent (including any indication of no objection), for conducting direct marketing in accordance with Section 4 below, whether for itself or on behalf of approved trustees of your MPF schemes; and 
        12. other purposes directly relating to any of the above.  

        3. Classes of Transferees 

        Your personal data may be transferred or disclosed to the following parties for the purposes mentioned above:  

        1. your employers and approved trustees of your MPF schemes; 
        2. our agent, adviser, service provider and contractor who provides administrative, telecommunications, computer, payment, fraud prevention, insurance, data processing, information technology, legal, accounting, operational and/or other services or support to us in connection with the operations of the eMPF Platform;  
        3. the Mandatory Provident Fund Schemes Authority (“MPFA”), other government authorities and agencies, courts, regulatory or administrative bodies, law enforcement agencies and other bodies or persons to whom we are under an obligation to make disclosure under any legal, regulatory or administrative requirements applicable to us; and 
        4. any other person as agreed with you from time to time. 

              Your personal data may be provided to any of the above parties who may be located in or outside of Hong Kong. If we do transfer your personal data outside of Hong Kong, we will do so in compliance with the requirements of the PDPO.  

              4. Direct Marketing 

              With your consent, we may use your name, contact details, date of birth, business registration / identification number, financial background, demographic data and information about your MPF schemes, transaction patterns and your interactions with the eMPF Platform (as applicable) for the purposes of:  

              1. marketing the eMPF Platform and related products and services; and 
              2. offering or advertising the availability of the MPFA’s facilities or services relating to its publicity, promotional, educational or other similar activities.  

              With your written consent, we may provide your personal data as mentioned in the paragraph above to the approved trustees of MPF schemes in which you participate or have participated in, for their direct marketing of: 

              1. pension, financial, insurance and related services and products; and 
              2. rewards, loyalty or privileges programmes and related services and products. 

                You may withdraw your consent at any time by paper form or via the web portal. Once your request is processed by us, we will not use your personal data and/or will not transfer the same to the relevant approved trustees (as the case may be) for direct marketing purposes.  

                5. Access and Correction 

                You may request access to, or correction of, your personal data being held by us. For any such request, please contact our Data Protection Officer: 

                Mail : PO Box 98929 Tsim Sha Tsui Post Office 
                Email : dpo@support.empf.org.hk 

                Please note that all data access or correction requests should be made using the Data Access Request Form (No. OPS003) form. You may also visit the eMPF Service Centre in person to obtain and submit the Data Access Request Form (No. OPS003) form.  

                Please note that we may refuse to comply with a data access or correction request in the circumstances specified in sections 20 or 24 of the PDPO, including but not limited to circumstances where the data access or correction request is not made in Chinese or English 

                We may require you to provide identity proof for handling your data access or correction request, and we may charge a fee for complying with your data access request. 

                6. Miscellaneous 

                We may update this Statement from time to time, and the most recent version can be found at www.empf.org.hk/pics . We will notify you of any update to this Statement and, where required by the PDPO, obtain your consent. 

                If there is any inconsistency between the English and Chinese versions of this Statement, the English version will prevail.  

                Last Revision Date: 19/04/2024

                Back To Top