Summary

We fully understand the importance of your personal information and appreciate your trust in us. This policy explains how CPIC Life (HK) Official Website collects, protects, uses, and shares your information, as well as outlines your rights. The key points are as follows:

1. Collection of Personal Information

• (1) Collection methods include direct collection (e.g., telephone inquiry), indirect collection (through platform use), and lawful acquisition from third parties;
• (2) Information collected includes identity information (name, ID number, contact details), sensitive information (education background, employment information, previous salary information, etc.), and technical information (IP address, device information, browser type, etc.);
• (3)Collection Content: To meet recruitment needs, personal information such as professional and educational background will be collected.

2. Purpose of Use and Retention Period of Personal Information

• (1)Purpose: Your personal information may be used for legitimate purposes such as recruitment, statistical analysis and remuneration determination
• (2)Retention Period and Security: Data will be retained until the collection purposes are fulfilled and legal requirements are met, after which it will be securely destroyed. We only retain your personal information for the period necessary to achieve the collection purposes and implement strict administrative, technical (e.g., encryption, access control), and physical measures to protect its security, preventing unauthorized access, disclosure, use, or loss.

3. Sharing and Transfer of Personal Information

• (1) Your personal information may be shared with group companies, partners, service providers, and other third parties.
• (2) Transfer may occur within Hong Kong or cross-border, but security protection will be ensured.

4. Cookies and Similar Technologies

• (1) Purpose and Use: To distinguish users, enhance experience, and improve products, this platform uses Cookies and similar tracking technologies. These technologies help analyze user numbers, browsing behavior, and enable personalized functions.
• （2）Cookie Types:
  Strictly Necessary Cookies: Essential for the normal operation of the platform.
  Analytics/Performance Cookies: Used to track visitor numbers and analyze user browsing patterns to optimize the platform.
  Functional Cookies: Used to recognize users with existing browsing behavior to provide personalized services.
• (3) User Control
  You can manage or refuse Cookies/advertising identifiers through your browser or device settings. Continued use of this platform signifies your acceptance of the use of these Cookies.

5. User Rights and Method of Exercising Rights

• （1）User Rights: The right to inquire whether we hold your personal information and request access, request correction of inaccurate persona l information, withdraw consent for the use of personal information for direct marketing, request deletion of your personal information (under specific conditions, e.g., the processing purpose has been achieved, you withdraw consent, or we violate legal provisions), and the right to make inquiries or complaints regarding personal information policies and practices.
• (2) Method of Exercising Rights: To exercise the above rights or for any inquiries, please contact our Data Protection Officer (Human Resources and Administration Department) in writing at:
  Address: Room 1802, 18/F, Lee Garden One, 33 Hysan Avenue, Causeway Bay, Hong Kong

PRIVACY POLICY STATEMENT

China Pacific Life Insurance (H.K.) Company Limited (collectively “CPIC Life (HK)”, “we”, “us” or “our”) are committed to protecting the privacy, confidentiality, and security of the personal data we hold by complying with the requirements of Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) ("Ordinance") with respect to the management of your personal data. This Privacy Policy Statement applies to our recruitment and selection process and human resource management and generally sets out what, when and how we may collect, use, and disclose your personal data.

Part I - Principles

(A) Collection of Personal Data

i. We may collect and store your personal data either:

• • directly when you provide such information to us (for example, when you make enquiry with us in phone);
• • indirectly through your use of our websites or through other job application websites; or
• • where you have provided it to us through any other means

In some occasions, we may obtain lawfully collected personal data about you from our affiliated entities, business partners and other independent third parties’ sources. We may also collect some information about your computer or other devices used when you visit our website.

ii. The personal data that we may collect includes the following:

• • identity in nature – name, identity card number, contact information;
• • sensitive in nature – education details, employment details, your previous salary details; and
• • technical in nature – such as IP address, browser type and version, time zone settings, browser plugin types, operating systems and platform.

iii. We will usually identify any information which is mandatory when we collect the personal data from you. You may choose not to provide us with the requested data, but failure to do so may limit or even inhibit us from processing your job applications or managing our employment relationships.

iv. At or before the time we collect personal data, we will take practical steps to ensure you are aware of:

• • the purposes for which the personal data is collected and used;
• • the classes of persons to whom we may transfer the personal data;
• • whether it is obligatory or voluntary for you to provide the personal data. If it is obligatory for you to provide the personal data, the consequences if personal data is not provided; and
• • your rights to request access to and to request the correction of the personal data and the title and address of the individual to whom any such request may be made.

In general, your personal data may be used for the following purposes:

• • assessing the job applicant’s suitability to assume the job duties of the position for which the job applicant has applied;
• • determining preliminary remuneration, bonus payment, and benefit package to be discussed with the job applicant;
• • negotiating with and making offers of employment to selected job applicant;
• • maintaining, reviewing and developing the overall human resources arrangements of CPIC Life (HK), its parent company China Pacific Life Insurance Co., Ltd. ("CPIC Life") and its group company China Pacific Insurance (Group) Co., Ltd (“CPIC Group”) (together with "CPIC Life", hereinafter collectively referred to as "CPIC Group Company").
• • setting up staff record, payroll and enrolment of benefit schemes for employees;
• • identifying and distinguishing the individual identity of the applicant;
• • confirming the accuracy of the information collected from job applicant;
• • performing any function or activity related to recruitment, including (but not limited to) data research and analysis;
• • conducting matching procedures, including statistic and research, classification and analysis of job applicant and / or employee, maintenance of his/her files, data comparison for any of purposes set out in this section, and establishment of database to defect fraud (“matching procedure” is defined in the Ordinance. It broadly includes comparison of two or more sets of the data subject’s data for purposes of taking actions adverse to the interests of the data subject).
• • conducting identity, bankruptcy, civil litigation and/or credit checks.
• • other purposes notified at the time of collection.
• • any purposes directly relating to any of the purposes above.

v. For the statement on collecting your personal data by Cookies, please see Part II - Cookies policies.

(B) Transfer of Personal Data

The personal data collected by us will be kept confidential but may be transferred and disclosed to 3rd parties for the purposes as notified at the time of collection. Such transfer may be within or outside Hong Kong. Class of these 3rd party transferees depends on the nature of the purpose of data collection and in usual circumstances, it includes:

• a.CPIC Group Company;
• b.Insurance intermediaries, insurance companies, banks, financial institution partners and medical service providers;
• c.mandatory provident fund administrator or account manager;
• d.any governmental and judicial bodies or regulators;
• e.any company or third party who represents us to fulfil contractual or statutory obligations owed to the data subjects;
• f.local and foreign regulatory bodies, government agencies and tax authorities, law enforcement agencies, courts and judicial bodies; and;
• g.any other parties as notified to you at the time of collection;

Your personal data may be provided to any of the above persons who may be located in other jurisdictions or territories to that in which you are located. Your data may be transferred to, stored, and processed in other jurisdictions where CPIC Group Company is located, or jurisdictions where a third-party contractor is located or from which the third-party contractor provides us services. Where required under relevant law, we may seek your consent to the transfer of such information outside your jurisdiction to our facilities or to those third parties with whom we share it as described above. The personal data will only be transferred to other locations, where we are satisfied that adequate levels of protection exist to protect the integrity and security of the personal data.

(C) Data Security and Retention

We uphold the obligations and requirements as imposed by the Ordinance and comply with the strictest standards of security and confidentiality. We may retain your personal data so long as necessary in order to fulfil the purposes for which it is collected in accordance with Part A above and apply practicable security measures to prevent unauthorized or accidental access, processing, erasure, loss or use including limiting physical access to personal data within our systems, restricting access of personal data to relevant employees on a "need-to-know" basis, providing relevant training to our employees to handle personal data properly, and applying encryption of personal data when transferring such data. Reasonable steps will be taken to delete or destroy the personal data when it is no longer necessary for any of the purposes set out in Part A above unless in doing so, it is prohibited under any law or public interest requires otherwise.

(D) Access, Correction and Enquiries

We will take practical steps to ensure that the personal data we collect, use or disclose is accurate, complete and up to date, having regard to the purpose for which the personal data is or is to be used. Therefore, if you have any update on your personal data, please do not hesitate to contact us for change.

Pursuant to the provision of the Ordinance, you also have the following rights to:

• a.check whether we hold any personal data relating to you and request access to such personal data;
• b.request us to correct any personal data relating to you which is inaccurate;
• c.withdraw your consent for use or provision of personal data for direct marketing; and
• d.enquire about our policies and practices in relation to personal data.

To exercise the rights above, or if you have queries relating to your personal data or our policies and practices in relation to personal data, please make such a written request us at:

Data Protection Officer (Human Resources & Administration Department)

China Pacific Life Insurance (H.K.) Company Limited.
Room 1802, 18/F, Lee Garden One,
33 Hysan Avenue, Causeway Bay,
Hong Kong

Under the Ordinance, we have the right to charge costs which are directly related to and necessary for the processing of any personal data access request. However, your request will not be charged in general and we will tell you of the amount in advance of any charge being passed onto you before proceeding your request. For the avoidance of doubt, no fee is charged for data correction requests.

This Privacy Policy Statement may be subject to change and will be effective immediate upon posting.

Part II - Cookies Policy

Our website may use Cookies and/or similar tracking technologies to distinguish you from other users. We also use advertising identifiers in a similar manner to which we use Cookies. This helps us to provide you with a good experience when you use this website and also allows us to improve our offering. You may accept or decline Cookies/ advertising identifiers by modifying the setting in your browser or device. If you would like to do this, please see the help menu of your browser or device.

A Cookies is a small file of letters and numbers that we store on your browser or the hard drive of your computer. Cookies contain information that is stored on your computer's hard drive.

We may use the following types of Cookies:

Strictly necessary Cookies. These are Cookies that are required for the operation of our website. They include, for example, Cookies that enable you to log into our secure website;

Analytical/performance Cookies. These allow us to recognise and count the number of visitors to our website and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily; and

Functionality Cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

By continuing to use the website, you accept the use of Cookies as outlined above.

Part III – Other Information

Language

In the event of any ambiguity or inconsistency between the English and Chinese versions of this Privacy Policy Statement, the English version will prevail.

Please note:

At or before the time we collect personal data, we will take practical steps to ensure you are aware of our relevant Personal Information Collection Statement. For your ease of reference, please refer to the below Personal Information Collection Statement (for candidates):