HSC collects two types of online information: non-personal and personal.

• Non-Personal Information
  When users visit HSC website, HSC automatically record details about the visit (your IP address, the type of browser software used, the date and the duration of your visit). HSC also collect information regarding the computer or mobile device (“Device”) used to access this website, such as its operating system, and model name, as well as its user configurations and settings.

• Personal Information
  We collect personal information when you voluntarily fill those forms on website:
  • Account opening applications or other forms to submit an inquiry, register for using our particular product or service.
  • Job Application Form.
  • Communications via email.

It may include: Your fullname, address and other contact details; age, occupation and marital status; extensive financial information, including investment experience and objectives, risk tolerance; passport, national identity card number or driver's license, tax code, etc.

HSC may use personal information of users to:

• Administer, operate, facilitate and manage relationship, transactions and/or account with HSC. This may include sharing such information internally as well as disclosing it to third parties, as described in the following Section 5;
• Contact users, if applicable, authorized representative(s) by post, telephone, electronic mail, facsimile, etc., in connection with relationship, transactions and/or account of users;
• Provide users with information (such as investment research), recommendations or advice concerning products and services offered by HSC;
• Facilitate our internal business operations, including assessing and managing risk and fulfilling our legal and regulatory requirements.

If a user's transaction with HSC ends, HSC will continue to process the user's personal information, to the extent HSC may, as described in this Policy.

• HSC uses security measures, in compliance with applicable law, to protect personal information from unauthorized access or use. However, the open nature of the internet is such that information and personal information may flow, over the control of HSC security measures, may be accessed and used by people other than those for whom the data is intended.
• To safeguard against unauthorized access to personal information by third parties, all electronic personal information held by HSC is maintained on systems protected by secure network architectures that contain firewalls and intrusion detection devices. The servers holding personal information are “backed up” (i.e., recorded) on a regular basis in an effort to avoid any inadvertent erasure or destruction of such personal information and are stored in facilities with appropriate security and response system.
• When users contact HSC with questions about the website or the services, HSC may confirm identity of users on the phone before discussing information. The questions and answers users select when logging into this website for the first time are used for this identification process.

• HSC may disclose or share personal information about its clients to its branches, transaction offices, representative offices, affiliates, as permitted by law, in order for its branches to provide services.
• HSC may also share personal information with government agencies and law enforcement authorities as required or permitted by law, rule, regulation or legal process, including, without limitation, for governmental reporting or to enforce any obligations that HSC may have against you as necessary, such as providing the information required by a court, competent authority or State Securities Commission of Vietnam, Stock Exchanges, Vietnam Securities Depository.
• HSC may disclose your personal information (i) to our internal or external auditors or attorneys; (ii) when HSC believes disclosure is necessary or appropriate to prevent physical harms or financial losses in connection with an investigation of suspected or actual illegal activities.
• HSC may disclose or share your personal information about its users to non-affiliated third parties with whom it has contracted to perform services on its behalf, HSC requires its third-party servicers to agree to comply with appropriate privacy and security standards or to undertake to provide similar and appropriate levels of protection as HSC when processing personal information. In addition, HSC may share personal information and other information collected through the website and the services with a successor entity in the event of a merger, acquisition or similar transaction.

• Website users information will be stored by HSC for a minimum of 10 years or another period as required by law.
• HSC will only delete user information if requested by the user, except for information stored in accordance with the law.

• As a person who provides HSC with personal information, you are entitled to access any of your personal data held by HSC by sending a written request to HSC. You will be provided reasonable access to your personal information, if appropriate, with the ability to modify and delete inaccuracies as set out on the relevant HSC’s policies, procedures. HSC will cooperate in providing such access.
• You must strictly keep confidential the log-in password to access this website. In the event the password is stolen or is suspected to have been revealed, you must immediately notify HSC via email to the address above. Within 24 (twenty-four) hours from the time HSC receives a written request from you, HSC will re-activate the log-in password and will notify you thereof. Your failure to notify or belated notification to HSC of the password being stolen or suspected to be revealed will constitute a sufficient ground to release/exempt HSC from any liability for any loss or damage to your information.

• The terms of this Policy are subject to any other additional contractual terms you have entered into with HSC such as client privacy policies or notices, and any applicable mandatory laws and regulations.
• HSC may occasionally contact you by post, telephone, electronic mail, facsimile, etc., with details of products and services that we believe may be of interest to you. If you do not wish to be contacted in this way, or if you wish to exercise your rights of correction and access, or if you require further information regarding our privacy, please contact HSC.