HSBC Australia Mobile Banking App Privacy Policy

HSBC Bank Australia Limited ('HSBC', 'we' or 'us') collects, uses and shares information about you so that it can provide you with access to your banking account and related services. This Mobile Banking App Privacy Policy explains how HSBC collects, uses and shares your information when you use the HSBC Australia Mobile Banking App (the App), including information about the device that the App is installed on, such as your mobile phone or tablet. For more details of how HSBC collects, uses and shares information about you, refer to our Privacy Policy. You can find it on our website: https://www.hsbc.com.au/privacy-policy/

The App is provided by HSBC Global Services (UK) Limited and all products and services accessed via the App are provided by HSBC Bank Australia Limited.

We use a range of measures to keep your personal information safe and secure, such as encryption and other forms of security. We require our staff and any third parties who undertake work on our behalf to comply with appropriate regulatory standards, including obligations to protect your­­­ personal information and apply security measures for the use and transfer of your personal information.

We'll take all practicable steps to ensure that your personal information will not be kept longer than necessary. We will use your personal information to carry out activities relating to your account management and administration, or dealing with any disputes or concerns that may arise. We may need to keep your personal information in order to comply with any regulatory or legal requirements, help detect or prevent fraud and financial crime, or respond to and assist law enforcement, or regulatory agencies. If we no longer need to keep your personal information, we may destroy or delete it.

We may share your personal information with other HSBC group companies and any sub-contractors, agents or service providers who work for us, or other HSBC group companies. This includes employees, sub-contractors, service providers, directors and officers. We do this so that we can provide you with our products or services. Please refer to our Privacy Policy located on our website for information on who we share your personal information with.

In the section below we explain what information HSBC collects from your device and how we use it. In some cases, HSBC will ask for your permission before accessing your information, such as location data on your device. Some functions of the App will not be available if you do not give us permission.

HSBC collects the following information about you and your device type:

• Application Analytics and Usage - Information on when you downloaded or updated the App. We record information about when and where you downloaded the App, together with the timestamp of when an installation of the App began, the App's version at the time when it was first installed and when you open the App. This data is used at an aggregate level to help us understand how many users are downloading, updating and removing the App, as well as measuring the performance of the App’s core features and services. We also record information on when you log-in into the App to ensure the App and your account information is only accessed by you or a genuine user. We also collect information on how you use our App so that we can improve how our App works and what you’re interested in on our App and on social media. This enables us and our partners to personalise our marketing to you.
• Applications Installed on your Device - We collect information about applications installed on your device to check whether you might have risky applications. This helps us protect you from financial crime and detect any unusual activity.
• Application Tracking Transparency - This allows you to grant us the permission to track your activities across other companies' apps and websites.
• Biometric Information - You can use biometrics authentication (like fingerprints or facial recognition) to log-on to our App. If you do so, we rely on your device's technology to authenticate you. We collect information about your physical interactions with the device including the screen. This allows us to check any unusual or suspicious activity on your device to prevent payment scams and fraudulent activities.
• Device ID & Call information - This allows you to contact HSBC directly through the App without having to manually dial a telephone number.
• External Storage - This lets the App save files onto your device's external storage, such as the devices’ memory card or photo library. This allows you to store and send documents and share files, such as loan documents.
• High Sampling Rate Sensors - This allows us to check any unusual or suspicious activity on your device to prevent payment scams and fraudulent activities.
• Location - Allows us to detect your approximate location to help you to locate your closest branch, or customise what you see in our App based on your location and what we know about you.
• Mobile Data/ Wi-Fi - This allows us to use your internet connection to access our digital banking systems.
• Phone Number – This shares your device's phone number with us.
• Push Notification Settings - This allows you to receive instant notifications from our App about activity on your account or offers and promotions.

Our App includes software provided by third parties. The software helps our App to operate effectively and safely. The information below lists the software and what it does, including the third parties who provide it to us.

Software for Android and iOS devices:

BioCatch

• What information is collected - Information about your accounts with HSBC, your approximate or exact location, information about your account transactions and App usage information.
• What is it used for - BioCatch allows us to check unusual or suspicious activity on your device, such as fraud user behaviour, so that we can help prevent payment scams and fraudulent activities.
• Who is the information shared with - BioCatch.
• How can I contact BioCatch - Contact support@biocatch.com.

LP Messaging SDK

• What information is collected - Your contact information and App usage information.
• What is it used for - The platform of LP Messaging SDK, which provides a chat feature/bot feature and is used by our Contact Centre to provide help to you.
• Who is the information shared with - LivePerson.
• How can I contact LivePerson - Contact livepersonsupport@hsbc.com

Threatmetrix

• What information is collected - Information about the device you’re using, your approximate or exact location and App usage information.
• What is it used for - Threatmetrix allows us to help protect you against fraud by identifying if there is any malware or risky software installed on your device.
• Who is the information shared with: LexisNexis.
• How can I contact LexisNexis: Visit https://www.lexisnexis.com/global/privacy/privacy-center-hub.page

You can contact HSBC’s Privacy Officer via the following methods:

Mail - HSBC Bank Australia Ltd, GPO Box 5302, Sydney NSW 2000

Email - privacy@hsbc.com.au