Privacy policy - Canon HongKong

Privacy Policy

Effective Date: 6 November 2023

Scope and Application of this Privacy Policy

1.1 This privacy policy (this “Privacy Policy”) is owned by Canon Hongkong Company Limited (hereinafter referred to as "Canon", "we", "our" or "us" in this Privacy Policy). This Privacy Policy describes how we collect, use, disclose, store, transfer and/or process any personal data (as defined in the Personal Data (Privacy) Ordinance (Cap. 486, the laws of Hong Kong) (the “Ordinance”)) (“personal data”) collected through our Hong Kong official website (this “Website”), any of our sub-sites, mobile applications, social media platforms (collectively, “our sites”), marketing programs, events and/or any other services (references to this Website hereinafter shall be extended to cover any of our sub-sites, mobile applications, social media platforms, marketing programs, events and/or any other services unless otherwise specified under the terms and conditions of such sites/sub-sites/programs) which is linked to, incorporated or for which you are provided with a copy of this Privacy Policy (collectively, “our products/services"), how we respect your privacy rights and the choices you have about how we process your personal data.

1.2 We will endeavour to take all reasonably practicable steps to ensure our personal data policies and practices comply with the requirements of the Ordinance and all applicable laws in the Hong Kong Special Administrative Region (“Hong Kong”).

1.3 Please note that our sites and our products/services are not directed at any data subjects in the European Union or mainland China. Our sites and our products/services are directed for local users above the age of eighteen (18) in Hong Kong and Macau only.

1.4 This Privacy Policy and your use of any of our sites and/or our products/services shall be governed in all respects by the laws of Hong Kong and by continuing to use any of sites and/or our products/services, you agree to irrevocably submit to the exclusive jurisdiction of the Courts of Hong Kong.

Types of Personal Data Collected and for What Purposes

2.1 Personal data provided by you
2.1.1 The types of personal data that you provide to us are generally based on the specific function of our sites and/or products/services that you request or sites for which you register on a voluntary and independent basis to enable us to provide you with products/services, customer care support, billing for the products/services you request, (for Hong Kong residents) to market products/services which may be of interest to you (subject to your prior written consent), or to communicate with you for other purposes which are apparent from the circumstances upon which we inform you when we collect your personal data.
2.1.2 For example, this may include your name, correspondence address, email address, contact number(s), age, birth date, gender, photo(s)/video(s)/recording(s), education, professional experience and/or interest(s)/hobby(ies). Any personal data relating to other people disclosed by you to us or to our service providers in connection with our products/services shall be understood as being accompanied by your representation that you have the authority to do so and to allow us to use the personal data in accordance with this Privacy Policy.
2.1.3 Personal data provided by you is on a voluntary and independent basis. You have the right to refuse providing any personal data to us. However, certain functions and/or services may not be available to you if such personal data is not supplied, incomplete, incorrect or misleading.

2.2 Personal data received from other sources/third parties
We may combine, aggregate and/or anonymize personal data with data collected from or about you from other sources, both online and offline, such as public databases, providers of demographic information, joint marketing partners, social media platforms and/or other third parties.

2.3 Information from website usage analytics
2.3.1 We gather information about activities on our sites, such as the number of visitors, the pages you visit, the website you come from, the duration of your visit, your searches, your subscriptions, your demographic data and click behaviour etc.. We may use such information to help improve the contents of our products/services and to compile aggregate statistics about visitors to our sites for our usage statistics and market research purposes. In doing this, we and/or our third-party service providers may use a tracking tool which links to the URL and/or install "Cookies" that collect the domain name of the user, your IP address, your internet service provider, your operating system, details of the site(s) you come from and have visited and the date and time of access. Our sites do not automatically collect personal data unless you provide such information or login with your account credentials.
2.3.2 Cookies are small bits of data automatically stored in the hard drive of the end user, which can save the user from registering again when re-visiting a web site and are commonly used to track preferences in relation to the subject of such website. If you enable these cookies, then your web browser adds the text in a small file. You may wish to set your web browser to notify you of a cookie placement request or refuse to accept cookies by modifying relevant internet options or browsing preferences of your computer system. However, if you do not accept our cookies, you may not be able to use certain available functions on our sites.
2.3.3 This Website uses the following cookies:

remember user logon ID	If you select the Remember My Login option when logging on to this Website, the cookie remembers that you have selected this box.If you select the Remember My Login option when logging on to this Website, the cookie remembers that you have selected this box.
Google, Inc. (“Google”) Google Analytics 4 ("GA4") Google AdWords Conversion Pixel Google Remarketing Google Tag Manager	Google uses cookies, which are text files placed on your computer, to collect and process data about how you use this Website. These cookies help us to understand your behaviour and allow us to make improvements to better your user experience. For more information regarding how Google uses data when you use this Website and how to opt out, please visit: https://policies.google.com/privacy?hl=en
Facebook, Inc. (“Facebook”) Facebook Conversion Pixel Facebook Remarketing Pixel	Facebook uses cookies to collect general information about the browsing session for the purpose of targeting the advertising we do on Facebook more effectively. For more information regarding how Facebook uses data when you use this Website and how to opt out, please visit: https://www.facebook.com/about/privacy/

2.3.4 By accessing and using our sites, you consent to the storage of cookies, other local storage technologies, beacons and other information on your devices. You also consent to the access of such cookies, local storage technologies, beacons and information by us or our representatives or agents.

Purposes for Which we use Your Personal Data

3.1 Personal data supplied by you may be used for any of the following purposes and/or for other purposes as may be agreed between you and us and/or as required by law:
3.1.1 registering, operating or maintaining your account with us;
3.1.2 providing products/services to you;
3.1.3 following up with your enquiries and/or providing customer care support to you such as the membership services you have subscribed for and/or otherwise communicating with you;
3.1.4 verifying and processing your personal data and payments for the products/services you have purchased and/or subscribed for;
3.1.5 managing payment, billing, account, credit checks and/or debt-recovery matters;
3.1.6 monitoring or recording phone calls and/or any other customer-facing interactions for identity verification, quality assurance, employee training and/or performance evaluation purposes;
3.1.7 sending you direct marketing communications regarding our products/services and/or upcoming events, promotions, campaigns, contests and/or lucky draws that may be of interest to you and/or personalizing your customer experience with us if you are a Hong Kong resident holding a valid Hong Kong identity card (subject to your prior written consent);
3.1.8 conducting data analysis and market research to improve our products/services, advertising and customer communications;
3.1.9 enabling you to participate in polls, surveys, promotions, subscriptions or other interactive features to allow us to serve you better;
3.1.10 managing, developing and/or improving our business operations and/or processes to serve you better;
3.1.11 enabling us to comply with our obligations such as audits, fraud prevention, risk management and/or potential misuse of our products/services;
3.1.12 enabling us, as deemed reasonably necessary in good faith, under applicable laws, including laws outside Hong Kong:
1. to comply with legal and regulatory requirements;
2. to respond to requests from government authorities, including authorities outside Hong Kong;
3. to enforce our rights and obligations;
4. to protect our business operations and processes (including those of our affiliates);
5. to protect the security and integrity of our products/services and the respective rights, privacy, safety, property of us, our affiliates, you or others; and
6. to allow us to pursue available remedies or limit the damages that we may sustain;
3.1.13 facilitating business asset transactions (which may extend to any mergers, acquisitions or asset sales);
3.1.14 serving any other purposes which we have obtained your consent; and/or
3.1.15 serving any other purposes reasonably necessary, ancillary or related to any of the foregoing

3.2 We will not store any personal details related to your bank account or credit or debit card details used when purchasing products/services from our online store. Payments for purchases will be completed through third-party payment platforms. Your banking details will not be shared with Canon.

3.3 We may use information that does not personally identify you for any purpose, except where we are required to do otherwise under applicable law.
Direct Marketing and Your Opt-out Rights (For Hong Kong Residents Only)

4.1 We will not use your personal data for direct marketing activities unless we have obtained your prior written consent. With your consent, we may send you direct marketing communications that may be of interest to you, including but not limited to providing promotional information and offers of our consumer imaging & information and/or business service and solution and production printing products and services, membership newsletters, activities and other related notifications from Canon to you.

4.2 Personal data supplied by you will not be provided to third parties for direct marketing activities of products or services by such third parties unless we have obtained your prior written consent and such data transfer shall be in accordance with the requirements set out under the Ordinance.

4.3 If you no longer wish to be on our mailing list for direct marketing communications, you may opt out anytime by contacting our Personal Data Officer (please refer to Clause 9 below for details).
How we Protect and how Long we Retain Your Personal Data

5.1 We will endeavour to protect your personal data in our possession or control through reasonable and appropriate security measures. We strive to ensure that our systems are secure and that they meet industry standards. To prevent unauthorized access, maintain data integrity and confidentiality, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and protect your personal data.

5.2 Personal data supplied by you will be retained in one or more of our databases and in different formats and be secured with restricted access by our authorized personnel through appropriate security protocols for authentication and authorisation (which may include the use of SSL, encryption, firewalls and/or data backup). Your personal data will be kept in the strictest confidence and for a reasonable period necessary to attain the purposes specified in this Privacy Policy unless otherwise required or permitted by law.

5.3 We shall implement appropriate technical and organizational measures for ensuring that only personal data which are necessary for each specific purpose of the processing are processed. We shall implement data protection impact assessment which include:
5.3.1 Consideration of how personal data will be processed and for what purposes;
5.3.2 Assessment of whether the proposed processing of personal data is both necessary and proportionate to the purpose(s);
5.3.3 Assessment of the risks to individuals in processing the personal data; and
5.3.4 Use of techniques such as data minimization, pseudonymisation and/or anonymisation will be considered where applicable and appropriate.

5.4 Notwithstanding our security measures for protecting your personal data, you acknowledge that no data transmission over the Internet is completely secure, and by providing your personal data you are transmitting information at your own risk.
When and to Whom Your Personal Data may be Disclosed or Transferred

6.1 We will not sell your personal data to any third parties.

6.2 We will not disclose or transfer personal data provided by you to third parties except in accordance with the Ordinance or in the following events:
6.2.1 requested by governmental, regulatory and/or statutory authorities and/or court orders in compliance with applicable laws;
6.2.2 to our affiliates;
6.2.3 to third party service providers which provide support services to us who (i) are under duty of confidentiality to us with respect to the use, hold, process, retain and/or transfer of personal data supplied by you; and (ii) have the need to know or handle such personal data; or
6.2.4 to third party buyers or assignees in the event of a reorganisation, merger, or sale of us.

6.3 Any personal data provided to us may be processed, accessed, stored and/or transferred outside Hong Kong and/or Macau and/or to our affiliates or third party service providers including but not limited to cloud server providers situated outside Hong Kong and/or Macau. Such locations may offer a different level of protection of personal data. If we transfer your personal data outside Hong Kong and/or Macau, we will make sure to protect your personal data by applying the level of protection required under applicable data privacy laws.
How we Deal with Children’s Personal Data

You shall consult your parent or guardian before giving us your personal data if you are under the age of eighteen (18). If we find out that you are under the age of eighteen (18) and we have not received consent from your parent or guardian to give us your personal data, we will take steps to delete your personal data.
Links to Third Party Products/Services

We may have third party merchants or service providers hosted in this Website which are operated by third party merchants or service providers. If you want to use, order or receive any services and/or products from any of them, you may refer to such merchants’ or service providers’ privacy policies and practices and shall take the risk that your personal data, once provided to any of such merchants or service providers, will be beyond our control and thus outside the scope of protection afforded by us.
What Your Rights are and how you can Exercise Your Rights

9.1 Whenever we process personal data, we take reasonably practicable steps to keep your personal data accurate and up-to-date for the purposes for which they were collected. You may exercise the following rights under the conditions and within the limits under the Ordinance, subject to confidentiality obligations:
9.1.1 the right to access your personal data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request the update; and
9.1.2 the right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal.

9.2 If you have any question about our Privacy Policy or wish to exercise any of the above rights, please contact our Personal Data Officer by post or email as follows:-

By post:
The Personal Data Officer
Canon Hongkong Company Limited
5/F, Tower A, China Life Center,
18 Hung Luen Road, Hung Hom,
Kowloon, Hong Kong

By email: privacy_officer@chk.canon.com.hk

9.3 Additionally, you may also withdraw your consent for direct marketing messages via the “unsubscribe” option as stated in our email or other digital marketing messages. For Club Canon Members, you may login your member profile to “unsubscribe” by choosing the “No” checkbox under “Configuration”.

9.4 In withdrawing your consent, you acknowledge that we may not be able to provide or continue to provide certain products/services to you and that we may cease such provision accordingly without any liability. Please note that it may take up to 7 days for any request for consent withdrawal to be reflected in our systems.

9.5 When handling a data access or correction request from you, for your protection, we will verify your identity to ensure that you are entitled to make the request and may refuse a request in the circumstances specified under the Ordinance. We may charge a reasonable fee for complying with your data access request.
Privacy Policy Updates

10.1 We may update this Privacy Policy from time to time without prior notice to you. Subject to your rights under the Ordinance, you agree to be bound by the prevailing terms of this Privacy Policy as updated from time to time.

10.2 The date stated at the top of this Privacy Policy indicates the last time this Privacy Policy was updated. We encourage you to check back regularly for the latest version of this Privacy Policy and your continued use of our products/services after such updates constitutes your agreement.