Privacy Policy Statement
Bond Connect Company Limited (“BCCL” , “we”, “our” or “us”) recognises its responsibilities in applicable data protection laws. Data will be collected only for lawful and relevant purposes and all practicable steps will be taken in relation to the collection, holding, processing, use and/or transfer of personal data under ensure that personal data held by us is accurate.
This Privacy Policy Statement (“Statement”) describes how BCCL collect, store, use, process, retain, transfer, disclose and protect your personal data. This Statement applies to all users to our official website, Bond Connect (include but are not limited to Northbound Bond Connect, FX Risk Management Information Service (“FX Services”), NCD Primary Subscription Service, Defaulted Bond Transfer, Backup Trading Service, Settlement Failure Reporting Services and CSTP Data Interface Service), Swap Connect, Repo Business, e-Prime System, PMIP System, e-Filing System, CNYPlus System, and its associated sites and microsites accessed through the services/systems (collectively the “services/systems”).
This Statement may change from time to time. If we make material changes to how we treat personal data, we will post the revised Statement on this page and, where appropriate, notify you via our website’s homepage or other communication channels. You can come back and check this page to review any changes we have made. Equally, it is important that the personal data we hold about you is accurate, current and relevant. Please keep us informed if your personal data changes during your relationship with us. In relation to personal data supplied to us through the BCCL’s website or by other means, your continued use of the BCCL’s website or your continued relationship with us shall be deemed as your acceptance of and consent to this Statement, which may be amended from time to time. We encourage you to review this Statement periodically to stay informed about how we protect your personal data.
What personal data do we collect and how do we collect it
We will collect and store any personal data you enter into the website, or the services/systems operated by us, including, but not limited to, your name, nationality, gender, date of birth, contact number, e-mail address, address, location, company, position etc. Please note that if you do not provide us with your personal data, we may be unable to provide (or continue to provide) the information or services/systems to you, or comply with any laws or guidelines issued by regulatory or other authorities.
IP address of the computer you used to visit our site may be recorded and used for statistical purposes. Such information does not include personal data and will not identify you as an individual.
Why do we collect and use your personal data
We will use your personal data for the following purposes or any of them (which may vary depending on the nature of your relationship with us):
For e-Filing System, Bond Connect, Swap Connect and Repo Business
Direct marketing
We may use your name, mailing address, telephone number and email address to deliver promotional materials to you as a contact person or a relevant individual acting on behalf of an entity. The promotional materials are in relation to BCCL’s products and services, and the products or services offered by any entity affiliated with BCCL. The promotional materials are not provided to you in your capacity.
If you, as a contact person or a relevant individual acting on behalf of an entity, do not wish to receive any promotional and direct marketing materials from us or do not wish to receive particular types of promotional and direct marketing materials or do not wish to receive such materials through any particular means of communication, you may withdraw your consent to the use and provision to a third party of your personal data for direct marketing purposes at any time, and thereafter we shall, without charge to you, cease to use such data for direct marketing purposes. If you wish to withdraw your consent, please contact us (details in “Contact Us” module below) or one of the communication channels set out in the “Contact Us” section of our website. To ensure that your request can be processed quickly please provide your full name, email address, log in name (if any) and details of the system(s)/service(s) service you have subscribed.
Who do we share your personal data with
We may disclose personal data we have collected from or about you to such third-party organisations and partners (“third parties”) who may use your personal data for the purpose set out in this Statement. These third-party personal data recipients and specific transfer purposes are set out below:
How long do we keep the personal data
We keep your personal data only as required or permitted by applicable laws and our retention schedule.
Where any personal data is no longer necessary for the purposes for which it is collected, we shall cease the processing of that personal data as soon as reasonably practicable (although copies may be retained as necessary for archival purposes, for use in any actual or potential dispute, or for compliance with applicable laws), and take reasonable measures to destroy or anonymize the relevant personal data.
How do we keep your personal data secure
We take the security of your personal data seriously. We take appropriate security protection measures in line with industry standards, including data encryption, access control, and security training, to prevent unauthorized access, use, modification, damage, or loss of the personal data you provide. We have an incident response plan for personal data breaches. Should a breach occur that affects you, we will promptly inform you using appropriate channels, which may include email, letter, phone call, or push notification. If individual notification of personal data subjects is not feasible, we will communicate through reasonable and effective public announcements. In addition, we will also report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.
How we use cookies
If you access our information or services through BCCL’s website, you should be aware that cookies are used. Cookies are data files stored on your browser. The BCCL’s website automatically installs and uses cookies on your browser when you access it. Two kinds of cookies are used on the BCCL’s website:
Session Cookies: temporary cookies that only remain in your browser until the time you leave the BCCL’s website, which are used to obtain and store configuration information and administer the BCCL’s website, including carrying information from one page to another as you browse the site so as to, for example, avoid you having to re-enter information on each page that you visit. Session Cookies are also used to compile anonymous statistics about the use of the BCCL’s website.
Persistent Cookies: cookies that remain in your browser for a longer period of time for the purpose of compiling anonymous statistics about the use of the BCCL’s website or to track and record user preferences.
The cookies used in connection with the BCCL’s website do not contain personal data. You may refuse to accept cookies on your browser by modifying the settings in your browser or internet security software. However, if you do so you may not be able to utilize or activate certain functions available on BCCL’s website.
Compliance with laws and regulations
BCCL may be required to retain, process and/or disclose your personal data in order to comply with applicable laws and regulations or in order to comply with a court order, subpoena or other legal process (whether in Hong Kong or elsewhere), or to comply with a request by a government authority, law enforcement agency or similar body (whether situated in Hong Kong or elsewhere) or to perform or discharge our functions as a person registered to provide automated trading services under Part III of the Securities and Futures Ordinance. BCCL may need to disclose your personal data in order to enforce any agreement with you, protect our rights, property or safety, or the rights, property or safety of our employees, or to perform or discharge the functions described above.
How to access or correct your personal data held by us
If you wish to seek access to or correction of your personal data held by BCCL under the Personal Data (Privacy) Ordinance, you may do so in writing through the “Contact Us” section.
Contact us
If you have any questions or comments relating to the content of this Statement, report any concerns about our personal data processing, or if you would like to exercise your data subject rights, please contact us through the channels below:
By Post:
Bond Connect Company Limited
Attn: Head of Risk Control
Suite 1906–1908, 19/F, Two Exchange Square
8 Connaught Place, Central, Hong Kong
By Phone / Fax:
Tel: +852 2327 0033
Fax: +852 2327 0987
By Email: Dataprivacy@chinabondconnect.com
Individuals Residing in the Chinese Mainland only
If you are an individual residing in the Chinese Mainland as defined in the Personal Information Protection Law of the People’s Republic of China, please view our BCCL Supplemental Privacy Statement for Individuals in the Chinese Mainland which describes your rights and disclosures of your personal data.
If there is any inconsistency or conflict between the English and Chinese version of this Privacy Policy Statement, the English version shall prevail.
Last updated in Jan. 2026
This Privacy Policy Statement (“Statement”) describes how BCCL collect, store, use, process, retain, transfer, disclose and protect your personal data. This Statement applies to all users to our official website, Bond Connect (include but are not limited to Northbound Bond Connect, FX Risk Management Information Service (“FX Services”), NCD Primary Subscription Service, Defaulted Bond Transfer, Backup Trading Service, Settlement Failure Reporting Services and CSTP Data Interface Service), Swap Connect, Repo Business, e-Prime System, PMIP System, e-Filing System, CNYPlus System, and its associated sites and microsites accessed through the services/systems (collectively the “services/systems”).
This Statement may change from time to time. If we make material changes to how we treat personal data, we will post the revised Statement on this page and, where appropriate, notify you via our website’s homepage or other communication channels. You can come back and check this page to review any changes we have made. Equally, it is important that the personal data we hold about you is accurate, current and relevant. Please keep us informed if your personal data changes during your relationship with us. In relation to personal data supplied to us through the BCCL’s website or by other means, your continued use of the BCCL’s website or your continued relationship with us shall be deemed as your acceptance of and consent to this Statement, which may be amended from time to time. We encourage you to review this Statement periodically to stay informed about how we protect your personal data.
What personal data do we collect and how do we collect it
We will collect and store any personal data you enter into the website, or the services/systems operated by us, including, but not limited to, your name, nationality, gender, date of birth, contact number, e-mail address, address, location, company, position etc. Please note that if you do not provide us with your personal data, we may be unable to provide (or continue to provide) the information or services/systems to you, or comply with any laws or guidelines issued by regulatory or other authorities.
IP address of the computer you used to visit our site may be recorded and used for statistical purposes. Such information does not include personal data and will not identify you as an individual.
Why do we collect and use your personal data
We will use your personal data for the following purposes or any of them (which may vary depending on the nature of your relationship with us):
For e-Filing System, Bond Connect, Swap Connect and Repo Business
- Processing the investor’s application to participate as an eligible foreign investor (“EFI”) in financial instruments traded through the Bond Connect, Swap Connect and Repo Business;
- Performing or discharging our functions as a person registered to provide automated trading services under Part III of the Securities and Futures Ordinance;
- Treating you as a contact person for the investor; and/or
- Providing you (and the investor) with our services including, without limitation, operating and developing the Bond Connect, Swap Connect and Repo Business and providing related services.
- Processing the applications to subscribe to the Issuance Services or the Northbound Subscription Services provided via the e-Prime System;
- Treating you as a contact person for any of the entities; and/or
- Providing you (and any of the entities) with the Issuance Services or the Northbound Subscription Services including, without limitation, using the platform on the e-Prime System to set up deals, enter orders, undertake other bookbuilding functions, transmit information or data in relation to the deals or orders amongst users acting as the syndicate, debt capital market, sales or issuers, transmit information and messages in relation to primary issuance of debts or such other financial products that can be purchased or subscribed through the e-Prime System and effect transactions in respect of the subscription or sale and purchase of such primary issuance debt or such other types of financial products amongst users acting as issuers, dealers or investors.
- Providing you (and any of the EFI, the trading execution entities or Hong Kong settlement banks) Settlement Failure Reporting Services and/or FX Services (including Reporting Service and Data Enquiry Service) in the CNYPlus System;
- Processing applications from you (and any of the EFI, the trading execution entities or Hong Kong settlement banks) for Settlement Failure Reporting Services and/or FX Services (including Reporting Service or Data Enquiry Service) in the CNYPlus System;
- Treating you as a contact person for any of the EFI, the trading execution entities or Hong Kong settlement banks.
- Providing you with our services concerning PMIP System and processing your applications, subscriptions and registration in relation to the PMIP System.
- To conduct intelligent recommendations or business promotion for service based on your usage;
- To provide you, as the contact person of any entity (whether a current investor or prospect), with promotional materials of BCCL products and services;
- To perform research and/or design new services and/or revamp any of our existing services;
- To conduct research, classification of information, internal analysis, statistical study;
- To comply with applicable law or any request from any relevant regulator or governmental authority; and/or
- Other purposes directly relating to any of the above.
Direct marketing
We may use your name, mailing address, telephone number and email address to deliver promotional materials to you as a contact person or a relevant individual acting on behalf of an entity. The promotional materials are in relation to BCCL’s products and services, and the products or services offered by any entity affiliated with BCCL. The promotional materials are not provided to you in your capacity.
If you, as a contact person or a relevant individual acting on behalf of an entity, do not wish to receive any promotional and direct marketing materials from us or do not wish to receive particular types of promotional and direct marketing materials or do not wish to receive such materials through any particular means of communication, you may withdraw your consent to the use and provision to a third party of your personal data for direct marketing purposes at any time, and thereafter we shall, without charge to you, cease to use such data for direct marketing purposes. If you wish to withdraw your consent, please contact us (details in “Contact Us” module below) or one of the communication channels set out in the “Contact Us” section of our website. To ensure that your request can be processed quickly please provide your full name, email address, log in name (if any) and details of the system(s)/service(s) service you have subscribed.
Who do we share your personal data with
We may disclose personal data we have collected from or about you to such third-party organisations and partners (“third parties”) who may use your personal data for the purpose set out in this Statement. These third-party personal data recipients and specific transfer purposes are set out below:
- We may share your personal data with our affiliates, including but not limited to the China Foreign Exchange Trade System (“CFETS”) and People’s Bank of China (“PBoC”), in Hong Kong or other jurisdictions, for purposes such as processing applications, providing services, or fulfilling regulatory obligations.
- Where you have given your consent, we may share your name, mailing address, telephone number and email address to any third parties affiliated with BCCL for the purpose of enabling those third parties to send promotional materials to you and conduct direct marketing activities in relation to their products or services.
- We may share your personal data with agents, contractors or third party who provides administrative, telecommunications, computer, payment, debt collection, data processing or other services to the BCCL, whether in Hong Kong or elsewhere.
- In the event of a business reorganization, merger, acquisition, or sale of assets, your personal data may be transferred to the relevant third party. We will ensure that the transferee is contractually obliged to protect your personal data in a manner consistent with this Statement. You will be notified of any such change via our website or direct communication. Please note that such a third party may be located outside of Hong Kong.
How long do we keep the personal data
We keep your personal data only as required or permitted by applicable laws and our retention schedule.
Where any personal data is no longer necessary for the purposes for which it is collected, we shall cease the processing of that personal data as soon as reasonably practicable (although copies may be retained as necessary for archival purposes, for use in any actual or potential dispute, or for compliance with applicable laws), and take reasonable measures to destroy or anonymize the relevant personal data.
How do we keep your personal data secure
We take the security of your personal data seriously. We take appropriate security protection measures in line with industry standards, including data encryption, access control, and security training, to prevent unauthorized access, use, modification, damage, or loss of the personal data you provide. We have an incident response plan for personal data breaches. Should a breach occur that affects you, we will promptly inform you using appropriate channels, which may include email, letter, phone call, or push notification. If individual notification of personal data subjects is not feasible, we will communicate through reasonable and effective public announcements. In addition, we will also report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.
How we use cookies
If you access our information or services through BCCL’s website, you should be aware that cookies are used. Cookies are data files stored on your browser. The BCCL’s website automatically installs and uses cookies on your browser when you access it. Two kinds of cookies are used on the BCCL’s website:
Session Cookies: temporary cookies that only remain in your browser until the time you leave the BCCL’s website, which are used to obtain and store configuration information and administer the BCCL’s website, including carrying information from one page to another as you browse the site so as to, for example, avoid you having to re-enter information on each page that you visit. Session Cookies are also used to compile anonymous statistics about the use of the BCCL’s website.
Persistent Cookies: cookies that remain in your browser for a longer period of time for the purpose of compiling anonymous statistics about the use of the BCCL’s website or to track and record user preferences.
The cookies used in connection with the BCCL’s website do not contain personal data. You may refuse to accept cookies on your browser by modifying the settings in your browser or internet security software. However, if you do so you may not be able to utilize or activate certain functions available on BCCL’s website.
Compliance with laws and regulations
BCCL may be required to retain, process and/or disclose your personal data in order to comply with applicable laws and regulations or in order to comply with a court order, subpoena or other legal process (whether in Hong Kong or elsewhere), or to comply with a request by a government authority, law enforcement agency or similar body (whether situated in Hong Kong or elsewhere) or to perform or discharge our functions as a person registered to provide automated trading services under Part III of the Securities and Futures Ordinance. BCCL may need to disclose your personal data in order to enforce any agreement with you, protect our rights, property or safety, or the rights, property or safety of our employees, or to perform or discharge the functions described above.
How to access or correct your personal data held by us
If you wish to seek access to or correction of your personal data held by BCCL under the Personal Data (Privacy) Ordinance, you may do so in writing through the “Contact Us” section.
Contact us
If you have any questions or comments relating to the content of this Statement, report any concerns about our personal data processing, or if you would like to exercise your data subject rights, please contact us through the channels below:
By Post:
Bond Connect Company Limited
Attn: Head of Risk Control
Suite 1906–1908, 19/F, Two Exchange Square
8 Connaught Place, Central, Hong Kong
By Phone / Fax:
Tel: +852 2327 0033
Fax: +852 2327 0987
By Email: Dataprivacy@chinabondconnect.com
Individuals Residing in the Chinese Mainland only
If you are an individual residing in the Chinese Mainland as defined in the Personal Information Protection Law of the People’s Republic of China, please view our BCCL Supplemental Privacy Statement for Individuals in the Chinese Mainland which describes your rights and disclosures of your personal data.
If there is any inconsistency or conflict between the English and Chinese version of this Privacy Policy Statement, the English version shall prevail.
Last updated in Jan. 2026
Supplemental Privacy Statement for Individuals in the Chinese Mainland
To fulfil the requirements of the applicable data protection laws in the People’s Republic of China (“China”) including the Personal Information Protection Law of China (“PIPL”), this BCCL Supplemental Privacy Statement (“Supplemental Statement”) is provided. It forms part of BCCL's Privacy Policy Statement.
With respect to the handling activities of personal data of individuals in the Chinese Mainland, if there is any conflict between this Supplemental Statement for Individuals in the Chinese Mainland and BCCL's Statement, this Supplemental Statement for Individuals in the Chinese Mainland shall prevail; and if there is any conflict between this Supplemental Statement and the laws and regulations of China, the laws and regulations of China shall prevail.
Legal basis for collecting and processing your personal data
We collect and use personal data on the following legal bases:
How we collect and use your personal data
Personal data will be collected for the e-Prime System on Northbound Subscription Service and Issuance Service, the detailed purposes are listed as the following:
How we share your personal data
How your personal data is transferred across borders
How long do we keep the personal data
We keep your personal data only as required or permitted by applicable laws and our retention schedule.
Where any personal data is no longer necessary for the purposes for which it is collected, we shall cease the processing of that personal data as soon as reasonably practicable (although copies may be retained as necessary for archival purposes, for use in any actual or potential dispute, or for compliance with applicable laws), and take reasonable measures to destroy or anonymize the relevant Personal Data.
How do we keep your personal data secure
We take the security of your personal data seriously. We take appropriate security protection measures in line with industry standards, including data encryption, access control, and security training, to prevent unauthorized access, use, modification, damage, or loss of the personal data you provide. We have an incident response plan for personal data breaches. Should a breach occur that affects you, we will promptly inform you using appropriate channels, which may include email, letter, phone call, or push notification. If individual notification of personal data subjects is not feasible, we will communicate through reasonable and effective public announcements. In addition, we will also report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.
Your rights in your personal data processing activities
The following data subject rights may be exercised to the extent provided under applicable data protection laws:
Minors
As our website and the services/systems we operate are not aimed at children under the age of 14. If a parent or legal guardian discovers that a child under 14 has provided us with personal data without their consent, please contact us using the contact details described in “Contact Us” module and we will delete such personal data.
If there is any inconsistency or conflict between the English and Chinese version of this Supplemental Privacy Statement, the English version shall prevail.
Last updated in Jan. 2026
With respect to the handling activities of personal data of individuals in the Chinese Mainland, if there is any conflict between this Supplemental Statement for Individuals in the Chinese Mainland and BCCL's Statement, this Supplemental Statement for Individuals in the Chinese Mainland shall prevail; and if there is any conflict between this Supplemental Statement and the laws and regulations of China, the laws and regulations of China shall prevail.
Legal basis for collecting and processing your personal data
We collect and use personal data on the following legal bases:
- Consent: With the explicit consent of the individual.
- Contractual Necessity: Necessary for the conclusion and performance of a contract to which you are a party.
- Statutory Obligations: Necessary for fulfilling statutory duties or obligations.
- Emergency Response: Required to respond to public health emergencies or to protect the life, health, and safety of individuals in urgent situations.
- Public Interest: Collected and used within a reasonable scope for public interest purposes, such as news reporting and public opinion oversight.
- Disclosure Compliance: In accordance with applicable laws and regulations, we process your personal data that you have disclosed or that has been legally disclosed within a reasonable scope.
- Other Legal Circumstances: As provided for by relevant laws and administrative regulations.
How we collect and use your personal data
Personal data will be collected for the e-Prime System on Northbound Subscription Service and Issuance Service, the detailed purposes are listed as the following:
| Business / Service | Personal data that we may need to collect and use | Processing Method / Purpose |
|---|---|---|
| Northbound Subscription Service | name, email address, address, company, position/role, department, telephone | Processing the applications to subscribe to the Issuance Services or the Northbound Subscription Services provided via the e-Prime System. |
| Designation as a Contact Person | name, email address, address, company, position/role, department, telephone | Treating you as a contact person for any of the entities |
| Provision of Core Trading Services | name, email address, company, position, department, telephone, BBG ID, business card | Providing you (and any of the entities) with the Issuance Services or the Northbound Subscription Services including, without limitation, using the platform on the e-Prime System to set up deals, enter orders, undertake other bookbuilding functions, transmit information or data in relation to the deals or orders amongst users acting as the syndicate, debt capital market, sales or issuers, transmit information and messages in relation to primary issuance of debts or such other financial products that can be purchased or subscribed through the e-Prime System and effect transactions in respect of the subscription or sale and purchase of such primary issuance debt or such other types of financial products amongst users acting as issuers, dealers or investors. |
| Intelligent Recommendation & Business Promotion | name, email address, location, company, position, department, role | To conduct intelligent recommendations or business promotion for service based on your usage and to provide you, as the contact person of any entity (whether a current investor or prospect), with promotional materials of BCCL products and services. |
| Service Research & Development | name, email address, location, company, position, department, role, telephone | To perform research and/or design new services and/or revamp any of our existing services. |
| Internal Analysis & Statistical Research | name, email address, location, company, position, department, role, telephone | To conduct research, classification of information, internal analysis, statistical study. |
| Legal & Regulatory Compliance | name, email address, address, location, company, department, position/role, telephone, BBG ID, business card | To comply with applicable law or any request from any relevant regulator or governmental authority. |
How we share your personal data
- Entrusted Processing
We may disclose personal data we have collected from or about you to such Third-Party who may use your personal data for the purpose set out in this Supplemental Statement. These Third-Party personal data recipients and specific transfer purposes are set out below:
- We may share your personal data with our affiliates, including but not limited to CFETS and PBoC, in Hong Kong or other jurisdictions, for purposes such as processing applications, providing services, or fulfilling regulatory obligations.
- Where you have given your consent, we may share your name, mailing address, telephone number and email address to any entity affiliated with BCCL for the purposes of enabling those to send promotional materials to you and conduct direct marketing activities in relation to their products or services.
- We may share your personal data with agents, contractors or third party who provides administrative, telecommunications, computer, payment, data processing or other services to the BCCL, whether in Hong Kong or elsewhere.
- Sharing
We do not share your personal data with any company, organization, or individual outside of BCCL, except in the following circumstances:
- With your explicit consent;
- As required by laws and regulations or by administrative and judicial authorities; or
- With BCCL affiliates, sharing only necessary data for stated purposes. Affiliates must comply with this Supplemental Statement or seek your renewed consent for new purposes.
- Transfer of Personal Data
We do not transfer your personal data to any company, organization, or individual, except in the following circumstances:
- With your explicit consent; or
- In the event of a merger, division, acquisition, dissolution, or bankruptcy, if the transfer of personal data is involved, we will inform you of the recipient’s name and contact details. We will also require the new holder of your personal data to continue complying with this Supplemental Statement. If they cannot do so, we will request that they obtain your renewed consent.
- Public Disclosure of Personal Data
We will only publicly disclose your personal data under the following circumstances and with appropriate security measures in place that meet legal and industry standards:
- With your separate and explicit consent; or
- As required by laws, legal procedures, litigation, or mandatory requests from government authorities. In such cases, we will ensure that the requesting party provides the necessary legal documentation before disclosing any data, in accordance with applicable laws and regulations.
- Exceptions to Prior Consent for Sharing, Transfer, or Public Disclosure
In the following situations, we may share, transfer, or publicly disclose your personal data without obtaining your prior consent:
- When directly related to national security or national defense.
- When directly related to public safety, public health, or major public interests.
- When directly related to criminal investigations, prosecutions, trials, or enforcement of judgments.
- When it is necessary to protect the life, property, or other significant lawful rights and interests of the data subject or others, and it is difficult to obtain the data subject’s consent.
- When the personal data has been voluntarily disclosed by you to the public; or
- When the personal data is collected from lawful public sources, such as legitimate news reports or government disclosures.
How your personal data is transferred across borders
- Necessity of Cross-Border Transfer and Its Impact on Personal Rights
You consent to BCCL providing the specified personal data to its affiliated entities, as listed in this Supplemental Privacy Statement, whether located within or outside Chinese Mainland, for the stated processing purposes. You may exercise your rights by contacting us (details in “Contact Us” module below) or make a request through the “Contact Us” section in our website.
Please note that if you do not consent to the cross-border transfer of your personal data, BCCL may be unable to provide you with the relevant services. - Processing Methods of Overseas Recipients
When transferring your personal data across borders, BCCL will ensure that the data is handled in a manner that minimizes any potential impact on your personal rights and interests.
How long do we keep the personal data
We keep your personal data only as required or permitted by applicable laws and our retention schedule.
Where any personal data is no longer necessary for the purposes for which it is collected, we shall cease the processing of that personal data as soon as reasonably practicable (although copies may be retained as necessary for archival purposes, for use in any actual or potential dispute, or for compliance with applicable laws), and take reasonable measures to destroy or anonymize the relevant Personal Data.
How do we keep your personal data secure
We take the security of your personal data seriously. We take appropriate security protection measures in line with industry standards, including data encryption, access control, and security training, to prevent unauthorized access, use, modification, damage, or loss of the personal data you provide. We have an incident response plan for personal data breaches. Should a breach occur that affects you, we will promptly inform you using appropriate channels, which may include email, letter, phone call, or push notification. If individual notification of personal data subjects is not feasible, we will communicate through reasonable and effective public announcements. In addition, we will also report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.
Your rights in your personal data processing activities
The following data subject rights may be exercised to the extent provided under applicable data protection laws:
- Access and correction of personal data
You have the right to ascertain whether we hold your personal data, to obtain a copy of the data, and to correct any data that is inaccurate. You may also request us to inform you of the type of personal data held by us. - Right to opt-out
In accordance with applicable privacy law and under specific circumstances, you possess the right to object to the processing of your personal data by the BCCL by withdrawing your consent for processing, particularly where such processing is predicated upon our legitimate interests. Furthermore, you retain an absolute right to withdraw your consent to the use of your personal data for direct marketing purposes. - Right to deletion
If, for any reason, you do not wish for us to retain or use your personal data, you have the right to request its deletion. Upon receiving your request, we will take appropriate measures to remove your personal data from our records. Please note that in certain circumstances, we may be legally required to retain some personal data, such as to comply with regulatory obligations or legal requirements. - Restrict the processing of your personal data
You may request that we suspend the processing of your personal data in certain circumstances, for example if you contest the accuracy of the personal data or have issues with how we processed your data. In most cases restrictions will be in place for a certain period while BCCL verifies the accuracy of your personal data or considers their legitimate grounds for processing. - Explanation on the rules of processing the Personal Data
You have the right to request us to explain the rules for processing personal data. - Extension of the data subject rights to a surviving next-of-kin where the applicable laws permit
If the data subject is deceased, their close relatives may, based on their own legitimate and lawful interests, request to access, copy, correct, or delete the deceased's personal data. However, if the data subject had made other arrangements during their lifetime, those wishes shall prevail. - Transfer of your Personal Data to your designated party, where the applicable laws permit
You can request the transfer of your personal data to the personal data processor designated by you, and BCCL will provide a way to transfer it if the conditions stipulated by Cyberspace Administration of China are met. - Cancellation of any subscription or account that you have with us
You may request to cancel the subscription or account you hold with us. Upon successful identity verification and in compliance with applicable laws and regulations, BCCL will assist in completing the account cancellation process. - How to exercise the above rights
Requests for exercising your data subject rights or for information regarding policies and practices and kinds of data held by us should be addressed in writing and sent by post to us (details in “Contact Us” module below) or make a request through the “Contact Us” section in our website.
We will endeavor to respond to you as soon as possible and, in any event, within the timeframe stipulated under the applicable data protection law. In the event of a potential delay, we will provide an explanation and the expected timeframe for delivery. Under applicable data protection law, we may also be required to charge a reasonable fee for the cost of processing the request.
Minors
As our website and the services/systems we operate are not aimed at children under the age of 14. If a parent or legal guardian discovers that a child under 14 has provided us with personal data without their consent, please contact us using the contact details described in “Contact Us” module and we will delete such personal data.
If there is any inconsistency or conflict between the English and Chinese version of this Supplemental Privacy Statement, the English version shall prevail.
Last updated in Jan. 2026
Personal Information Collection Statement
Bond Connect Company Limited (“BCCL”, “we”, “our” or “us”) recognises its responsibilities in data protection and privacy under the Personal Data (Privacy) Ordinance. Data will be collected only for lawful and relevant purposes and all practicable steps will be taken to in relation to the collection, holding, processing, use and/or transfer of personal data under ensure that personal data held by us is accurate.
Why do we collect and use your personal data
We will use your personal data for the following purposes or any of them (which may vary depending on the nature of your relationship with us):
For e-Filing System, Bond Connect, Swap Connect and Repo Business
Who do we share your personal data with
We may disclose personal data we have collected from or about you to such third-party organizations and partners (“third parties”) who may use your personal data for the purpose set out in this Personal Information Collection Statement (“PICS”). These third-party personal data recipients and specific transfer purposes are set out below:
We take the security of your personal data seriously. We take appropriate security protection measures in line with industry standards, including data encryption, access control, and security training, to prevent unauthorized access, use, modification, damage, or loss of the personal data you provide. We have an incident response plan for personal data breaches. Should a breach occur that affects you, we will promptly inform you using appropriate channels, which may include email, letter, phone call, or push notification. If individual notification of personal data subjects is not feasible, we will communicate through reasonable and effective public announcements. In addition, we will also report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.
Direct Marketing
We may use your name, mailing address, telephone number and email address to deliver promotional materials to you as a contact person or a relevant individual acting on behalf of an entity. The promotional materials are in relation to BCCL’s products and services, and the products or services offered by any entity affiliated with BCCL. The promotional or direct marketing materials are not provided to you in your capacity.
If you, as a contact person or a relevant individual acting on behalf of an entity, do not wish to receive any promotional and direct marketing materials from us or do not wish to receive particular types of promotional and direct marketing materials or do not wish to receive such materials through any particular means of communication, you may withdraw your consent to the use and provision to a third party of your personal data for direct marketing purposes at any time, and thereafter the Company shall, without charge to you, cease to use such data for direct marketing purposes. If you wish to withdraw your consent, please contact us (details in “Contact Us” module below) or one of the communication channels set out in the “Contact Us” section of our website. To ensure that your request can be processed quickly please provide your full name, email address, log in name (if any) and details of the services/systems you have subscribed.
Contact us
If you have any questions or comments relating to the content of this Personal Information Collection Statement, report any concerns about our personal data processing, or if you would like to exercise your data subject rights, please contact us through the channels below:
By Post:
Bond Connect Company Limited
Attn: Head of Risk Control
Suite 1906–1908, 19/F, Two Exchange Square
8 Connaught Place, Central, Hong Kong
By Phone / Fax:
Tel: +852 2327 0033
Fax: +852 2327 0987
By Email: Dataprivacy@chinabondconnect.com
Additional Information
For more information on our privacy policy, please refer to the Privacy Policy Statement on this web page.
BCCL Supplemental Privacy Statement for Individuals in the Chinese Mainland ("Supplementary Privacy Statement") additionally applies to individuals residing in the Chinese Mainland as defined in the Personal Information Protection Law of the People's Republic of China. You can access this Supplementary Privacy Statement on this web page.
If there is any inconsistency or conflict between the English and Chinese version of this Personal Information Collection Statement, the English version shall prevail.
Last updated in Jan. 2026
Why do we collect and use your personal data
We will use your personal data for the following purposes or any of them (which may vary depending on the nature of your relationship with us):
For e-Filing System, Bond Connect, Swap Connect and Repo Business
- Processing the investor’s application to participate as an eligible foreign investor (“EFI”) in financial instruments traded through the Bond Connect, Swap Connect and Repo Business;
- Performing or discharging our functions as a person registered to provide automated trading services under Part III of the Securities and Futures Ordinance;
- Treating you as a contact person for the investor; and/or
- Providing you (and the investor) with our services including, without limitation, operating and developing the Bond Connect, Swap Connect and Repo Business and providing related services.
- Processing the applications to subscribe to the Issuance Services or the Northbound Subscription Services provided via the e-Prime System;
- Treating you as a contact person for any of the entities; and/or
- Providing you (and any of the entities) with the Issuance Services or the Northbound Subscription Services including, without limitation, using the platform on the e-Prime System to set up deals, enter orders, undertake other bookbuilding functions, transmit information or data in relation to the deals or orders amongst users acting as the syndicate, debt capital market, sales or issuers, transmit information and messages in relation to primary issuance of debts or such other financial products that can be purchased or subscribed through the e-Prime System and effect transactions in respect of the subscription or sale and purchase of such primary issuance debt or such other types of financial products amongst users acting as issuers, dealers or investors.
- Providing you (and any of the EFI, the trading execution entities or Hong Kong settlement banks) Settlement Failure Reporting Services and/or FX Services (including Reporting Service and Data Enquiry Service) in the CNYPlus System;
- Processing applications from you (and any of the EFI, the trading execution entities or Hong Kong settlement banks) for Settlement Failure Reporting Services and/or FX Services (including Reporting Service or Data Enquiry Service) in the CNYPlus System;
- Treating you as a contact person for any of the EFI, the trading execution entities or Hong Kong settlement banks.
- Providing you with our services concerning PMIP System and processing your applications, subscriptions and registration in relation to the PMIP System.
- To conduct intelligent recommendations or business promotion for service based on your usage;
- To provide you, as the contact person of any entity (whether a current investor or prospect), with promotional materials of BCCL products and services;
- To perform research and/or design new services and/or revamp any of our existing services;
- To conduct research, classification of information, internal analysis, statistical study;
- To comply with applicable law or any request from any relevant regulator or governmental authority; and/or
- Other purposes directly relating to any of the above.
Who do we share your personal data with
We may disclose personal data we have collected from or about you to such third-party organizations and partners (“third parties”) who may use your personal data for the purpose set out in this Personal Information Collection Statement (“PICS”). These third-party personal data recipients and specific transfer purposes are set out below:
- We may share your personal data with our affiliates, including but not limited to the China Foreign Exchange Trade System and People’s Bank of China, in Hong Kong or other jurisdictions, for purposes such as processing applications, providing services, or fulfilling regulatory obligations.
- Where you have given your consent, we may share your name, mailing address, telephone number and email address to any third parties affiliated with BCCL for the purpose of enabling those third parties to send promotional materials to you and conduct direct marketing activities in relation to their products or services.
- We may share your personal data with agents, contractors or third party who provides administrative, telecommunications, computer, payment, debt collection, data processing or other services to BCCL, whether in Hong Kong or elsewhere.
- In the event of a business reorganization, merger, acquisition, or sale of assets, your personal data may be transferred to the relevant third party. We will ensure that the transferee is contractually obliged to protect your personal data in a manner consistent with this PICS. You will be notified of any such change via our website or direct communication. Please note that such a third party may be located outside of Hong Kong.
We take the security of your personal data seriously. We take appropriate security protection measures in line with industry standards, including data encryption, access control, and security training, to prevent unauthorized access, use, modification, damage, or loss of the personal data you provide. We have an incident response plan for personal data breaches. Should a breach occur that affects you, we will promptly inform you using appropriate channels, which may include email, letter, phone call, or push notification. If individual notification of personal data subjects is not feasible, we will communicate through reasonable and effective public announcements. In addition, we will also report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.
Direct Marketing
We may use your name, mailing address, telephone number and email address to deliver promotional materials to you as a contact person or a relevant individual acting on behalf of an entity. The promotional materials are in relation to BCCL’s products and services, and the products or services offered by any entity affiliated with BCCL. The promotional or direct marketing materials are not provided to you in your capacity.
If you, as a contact person or a relevant individual acting on behalf of an entity, do not wish to receive any promotional and direct marketing materials from us or do not wish to receive particular types of promotional and direct marketing materials or do not wish to receive such materials through any particular means of communication, you may withdraw your consent to the use and provision to a third party of your personal data for direct marketing purposes at any time, and thereafter the Company shall, without charge to you, cease to use such data for direct marketing purposes. If you wish to withdraw your consent, please contact us (details in “Contact Us” module below) or one of the communication channels set out in the “Contact Us” section of our website. To ensure that your request can be processed quickly please provide your full name, email address, log in name (if any) and details of the services/systems you have subscribed.
Contact us
If you have any questions or comments relating to the content of this Personal Information Collection Statement, report any concerns about our personal data processing, or if you would like to exercise your data subject rights, please contact us through the channels below:
By Post:
Bond Connect Company Limited
Attn: Head of Risk Control
Suite 1906–1908, 19/F, Two Exchange Square
8 Connaught Place, Central, Hong Kong
By Phone / Fax:
Tel: +852 2327 0033
Fax: +852 2327 0987
By Email: Dataprivacy@chinabondconnect.com
Additional Information
For more information on our privacy policy, please refer to the Privacy Policy Statement on this web page.
BCCL Supplemental Privacy Statement for Individuals in the Chinese Mainland ("Supplementary Privacy Statement") additionally applies to individuals residing in the Chinese Mainland as defined in the Personal Information Protection Law of the People's Republic of China. You can access this Supplementary Privacy Statement on this web page.
If there is any inconsistency or conflict between the English and Chinese version of this Personal Information Collection Statement, the English version shall prevail.
Last updated in Jan. 2026