Privacy Policy隐私政策
How we collect, use, protect and disclose personal data, under Hong Kong's Personal Data (Privacy) Ordinance.我们如何依据香港《个人资料（私隐）条例》收集、使用、保护及披露个人资料。
This Policy is published in English and Chinese. In the event of any inconsistency between the two versions, the English version shall prevail.本政策以中文及英文发布。两个版本如有任何不一致，以英文版本为准。
Contents目录
1Who is the data user谁是资料使用者
This Privacy Policy explains how GROW Digital Wealth (思睿数字财富) ("GDW", "we", "us", "our") collects, uses, discloses and protects personal data, in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the "PDPO") and its Data Protection Principles.
GDW is the operator of the Platform and a data user in respect of the personal data processed through it. Depending on the service, your advisory Firm and GROW Asset Management (HK) Limited may also be data users in respect of your account and asset-management services. This policy covers GDW's handling of personal data as platform operator; your Firm may have its own privacy notice for the services it provides.
本《隐私政策》说明 GROW Digital Wealth（思睿数字财富）（"GDW""我们"）如何依据香港《个人资料（私隐）条例》（第 486 章）（"条例"）及其保障资料原则，收集、使用、披露及保护个人资料。
GDW 是本平台的运营者，就通过本平台处理的个人资料而言，GDW 是资料使用者。视乎所涉服务，您的理财机构及 GROW Asset Management (HK) Limited 就您的账户及资产管理服务而言，亦可能是资料使用者。本政策涵盖 GDW 作为平台运营者对个人资料的处理；您的理财机构就其提供的服务，可能另有其自身的私隐通知。
2What we collect我们收集的资料
Depending on how you use the Platform, we may collect:
- Identity and KYC data — name, date of birth, nationality, identity-document type, number and copies, residential and correspondence address, and tax residency and tax identification numbers.
- Financial data — bank-account details, source of funds and source of wealth, holdings, transactions and valuations.
- Risk-assessment data — your answers to suitability and risk-profiling questionnaires.
- Contact data — email, phone number, and the messages you send us.
- Usage and technical data — log-in records, device and browser information, IP address, and how you use the Platform.
- Documents — files that you or your Firm upload, such as identity documents, statements and agreements.
视乎您使用本平台的方式，我们可能收集：
- 身份及 KYC 资料——姓名、出生日期、国籍、身份证件类型、号码及副本、住址及通讯地址，以及税务居民身份及税务编号。
- 财务资料——银行账户资料、资金来源及财富来源、持仓、交易及估值。
- 风险评估资料——您对合适性及风险取向问卷的回答。
- 联系资料——电子邮箱、电话号码，以及您向我们发送的信息。
- 使用及技术资料——登录记录、设备及浏览器信息、IP 地址，以及您使用本平台的方式。
- 文件——您或您的理财机构上传的文件，例如身份证件、结单及协议。
3How we use it我们如何使用
We use personal data to:
- onboard clients and meet know-your-client (KYC) and anti-money-laundering (AML) obligations;
- provide, operate and secure the Platform;
- process instructions and orders;
- communicate with you about your account and service matters;
- improve and develop the service; and
- meet our legal, regulatory and risk-management obligations.
我们使用个人资料以：
- 为客户开户，并履行了解你的客户（KYC）及反洗钱（AML）义务；
- 提供、运营并保障本平台的安全；
- 处理指令与订单；
- 就您的账户及服务事宜与您沟通；
- 改进及开发本服务；以及
- 履行我们的法律、监管及风险管理义务。
4How long we keep it保留期限
We keep personal data only as long as necessary for the purposes above and as required by applicable law and regulatory requirements.
Financial and identity records are typically kept for at least seven years after the end of the relationship or the completion of a transaction, in line with anti-money-laundering and securities-regulation requirements, and may be kept longer where a legal claim or investigation requires. When personal data is no longer needed, we take reasonable steps to erase or anonymise it.
我们仅在为上述目的所需的期间内，以及适用法律与监管要求所规定的期间内，保留个人资料。
按照反洗钱及证券监管的要求，财务及身份记录通常在关系结束或交易完成后至少保留七年，并可能在法律索赔或调查有此需要时保留更长时间。当个人资料不再需要时，我们会采取合理措施将其删除或匿名化。
5Who we share it with披露与转移
We may disclose personal data to:
- your advisory Firm;
- GROW Asset Management (HK) Limited, where it provides account or asset-management services;
- service providers acting on our behalf — cloud hosting and storage, email delivery, and AI service providers that process content to power Platform features;
- professional advisors, such as lawyers and auditors; and
- regulators, law-enforcement agencies or courts, where required by law.
Some of these providers may be located outside Hong Kong, so your personal data may be transferred across borders. Where it is, we take steps to ensure it remains protected to a standard consistent with the PDPO. We do not sell your personal data.
我们可能向以下各方披露个人资料：
- 您的理财机构；
- GROW Asset Management (HK) Limited，当其提供账户或资产管理服务时；
- 代表我们行事的服务提供商——云托管与存储、电邮发送，以及为本平台功能提供支持而处理内容的 AI 服务提供商；
- 专业顾问，例如律师及审计师；以及
- 监管机构、执法机关或法院，当法律有此要求时。
部分上述提供商可能位于香港以外，因此您的个人资料可能被跨境转移。在此情况下，我们会采取措施确保其继续受到与条例一致的标准保护。我们不会出售您的个人资料。
6How we protect it安全保障
We protect personal data with technical and organisational measures, including encryption of data in transit, access controls that limit who can see your data, and audit logging that records changes to key records. No system is completely secure, but we work to protect your data against unauthorised access, loss or misuse.
我们以技术及组织措施保护个人资料，包括传输中数据的加密、限制可查看您数据人员范围的访问控制，以及记录关键记录变更的审计日志。没有任何系统是绝对安全的，但我们致力于保护您的数据，防止未经授权的访问、遗失或滥用。
7Cookies and local storageCookie 与本地存储
The Platform and this website use cookies and browser local storage for essential purposes — keeping you signed in, remembering preferences such as your language choice, and keeping the service secure. We do not use third-party advertising or cross-site tracking cookies.
You can control cookies through your browser, though disabling essential ones may stop parts of the service from working.
本平台及本网站为必要目的使用 Cookie 及浏览器本地存储——保持您的登录状态、记住诸如语言选择等偏好，以及保障服务安全。我们不使用第三方广告或跨站追踪 Cookie。
您可通过浏览器控制 Cookie，但停用必要的 Cookie 可能导致部分服务无法正常运作。
8Direct marketing直接促销
Under the PDPO, we will only use your personal data to send you direct marketing — such as product or platform updates — with your consent. You can withdraw that consent and opt out at any time, at no charge, by using the unsubscribe link in a message or by contacting us.
Opting out of marketing does not stop essential service messages — for example account, security or transaction notices — which are not marketing.
根据条例，我们只会在取得您同意的情况下，使用您的个人资料向您发送直接促销信息——例如产品或平台更新。您可随时免费撤回该同意并选择退出，方法是使用信息中的取消订阅链接或联系我们。
退出促销不会停止必要的服务信息——例如账户、安全或交易通知——该等信息并非促销。
9Your rights under the PDPO您在条例下的权利
You have the right to ask whether we hold personal data about you, to request a copy of it, and to ask us to correct data that is inaccurate. To make a request, contact us using the details below; we may need to verify your identity first.
We will respond within the time the PDPO requires. A reasonable fee may be charged for complying with a data-access request, as the PDPO permits.
您有权查询我们是否持有关于您的个人资料、索取其副本，并要求我们更正不准确的资料。如需提出请求，请使用下方的联系方式与我们联系；我们可能需要先核实您的身份。
我们将在条例所要求的时间内回复。按条例允许，就处理查阅资料要求，我们可能收取合理费用。
10Changes to this policy本政策的变更
We may update this policy from time to time. Material changes will be notified within the Platform, and the last-updated date shown at the top of this page will be updated.
我们可能会不时更新本政策。重大变更会在本平台内通知，本页顶部所示的更新日期亦会更新。
11Contact联系我们
Questions, requests or complaints about privacy and personal data can be sent to our data-privacy contact at privacy@growdigitalwealth.co, or through our contact page.
GROW Digital Wealth · 2109, 21/F, New World Tower I, 16-18 Queen's Road Central, Central, Hong Kong.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).
有关私隐及个人资料的疑问、请求或投诉，可发送至我们的资料私隐联系人 privacy@growdigitalwealth.co，或通过我们的联系我们页面提出。
GROW Digital Wealth · 香港中环皇后大道中 16-18 号新世界大厦一期 21 楼 2109 室。
如您对我们的回复不满意，可联系香港个人资料私隐专员公署（PCPD）。