隱私政策聲明

It is the policy of Forestville to respect the privacy of their customers and keep the information relating to a customer secure and confidential. The Group is committed to protecting the privacy, confidentiality and security of personal data Forestville holds by complying with the requirements of relevant laws and regulations with respect to the management of personal data. The Group is equally committed to ensuring that all its employees and agents uphold these obligations.

Practices and Types of Personal Data Held by the Group

There are different types of personal data and sensitive personal data held by the Group. There are mainly two broad categories of personal data held by the Group:

(A) data of potential and existing customers (including but not limited to (i) customers or applicants for our services, (ii) sureties, referees, guarantors and providers of security, (iii) shareholders, directors, officers and managers of corporate customers or applicants, and (iv) sole proprietors or partners of customers or applicants); and (B) data of employees.

In addition, personal data may also be provided by other persons, including but not limited to agents and business partners of the Group.

The types of personal data held by the Group may include but are not limited to name, title, address, email address, employment information, contact details, date of birth, nationality, financial information, credit information, marital status, identity card or passport numbers and other personal information in the public domain.

It is necessary for the Group to hold such data for various purposes including, without limitation, the establishment or continuation of our services.

Personal Data Collection and Usage

The Group collects personal data through fair and lawful means on a voluntary basis. The data is used by the Group for the purposes indicated in the respective screens in which individuals are invited to provide personal data.

Personal data held by the Group is kept confidential and the Group does not use personal data for any purpose other than those already specified in this Statement.

Personal data is collected through the use of the Group's website.

When an individual visits this website, Forestville records the visit only as a "hit" or records such use only as a "hit" but does not collect any personal identifiable information of the visitor or user. The Group will gather and analyze these records to compile general statistics about usage of our website. The Group also collects information about the visit or use by means of "cookies" files. "Cookies" are small pieces of data transmitted to and stored in the visitor's local hard drive. "Cookies" cannot retrieve information stored in the visitor's hard disk. The information collected by "cookies" is anonymous visitor's personalized settings information and contains no name or address information or any information that will enable anyone to contact the visitors via any means. The data obtained through the use of "cookies" will be used for our website's personalization and marketing.

Personal Data Disclosure Restrictions

Forestville follows strict privacy procedures in regard to protection of personal data. No disclosure of personal identifiable information to third parties is allowed unless the relevant individual has already been informed or has provided the consent (where required) or the disclosure is permitted or required by any law binding on Forestville.

Personal Data Retention

The Group retains all records of transactions for validation and auditing purposes. Appropriate retention periods apply and the Group takes all practicable steps to ensure that personal data will not be kept longer than is necessary for the fulfillment of the intended purpose and for compliance with the legal and regulatory requirements from time to time.

Under applicable circumstances, individuals may have the right to ask Forestville to delete their personal data or not to transfer or share their personal data.

Personal Data Security

All personal data provided to the Group is secured with restricted access by authorized and trained personnel. The Group has security measures in place to protect personal data. Encryption technology is employed for sensitive data to protect the privacy of individuals during data transmission.

Outsourcing Arrangement

If the Group engages outsourcing service providers or data processors to handle or process personal data, outsourcing service providers or data processors are required to adhere to specific standards to prevent any loss or unauthorised access, use, modification or disclosure, either by contractual provisions or other means.

Direct Marketing

The Group may use the collected personal data in direct marketing subject to the relevant individual's consent, which includes an indication of no objection. If an individual does not wish the Group to use his/her personal data in direct marketing, he/she may exercise his/her opt-out right by notifying us.

Changes to Privacy Policy Statement

This Privacy Policy Statement is subject to review and change from time to time. Please approach the Group or visit the Group's website for the Group's latest Privacy Policy Statement.