Summary

We fully understand the importance of your personal information and appreciate your trust in us. This policy explains how CPIC Life (HK) Official Website collects, protects, uses, and shares your information, as well as outlines your rights. The key points are as follows:

1. Collection of Personal Information

• (1) Collection methods include direct collection (e.g., telephone inquiry), indirect collection (through platform use), and lawful acquisition from third parties;
• (2) Information collected includes identity information (name, ID number, contact details), sensitive information (health, financial, family, occupation, etc.), and technical information (IP address, device information, browser type, etc.);
• (3) Collection Content: To provide insurance products and services, identity, financial, health, medical, and other personal data will be collected.

2. Purpose of Use and Retention Period of Personal Information

• (1）Purpose: Your personal information may be used for legitimate purposes such as insurance policy processing, customer service, product development, and statistical analysis.
• (2) Retention Period and Security: Data will be retained until the collection purposes are fulfilled and legal requirements are met, after which it will be securely destroyed. We only retain your personal information for the period necessary to achieve the collection purposes and implement strict administrative, technical (e.g., encryption, access control), and physical measures to protect its security, preventing unauthorized access, disclosure, use, or loss.

3. Sharing and Transfer of Personal Information

• (1) Your personal information may be shared with group companies, partners, service providers, and other third parties.
• (2) Transfer may occur within Hong Kong or cross-border, but security protection will be ensured.

4. Cookies and Similar Technologies

• (1）Purpose and Use: To distinguish users, enhance experience, and improve products, this platform uses Cookies and similar tracking technologies. These technologies help analyze user numbers, browsing behavior, and enable personalized functions.
• (2）Cookie Types:
  Strictly Necessary Cookies: Essential for the normal operation of the platform.
  Analytics/Performance Cookies: Used to track visitor numbers and analyze user browsing patterns to optimize the platform.
  Functional Cookies: Used to recognize users with existing browsing behavior to provide personalized services.
• (3) User Control
  You can manage or refuse Cookies/advertising identifiers through your browser or device settings. Continued use of this platform signifies your acceptance of the use of these Cookies.

5. User Rights and Method of Exercising Rights

• (1）User Rights: The right to inquire whether we hold your personal information and request access, request correction of inaccurate persona l information, withdraw consent for the use of personal information for direct marketing, request deletion of your personal information (under specific conditions, e.g., the processing purpose has been achieved, you withdraw consent, or we violate legal provisions), and the right to make inquiries or complaints regarding personal information policies and practices.
• (2) Method of Exercising Rights: To exercise the above rights or for any inquiries, please contact our Data Protection Officer in writing at:
  Address: Room 1802, 18/F, Lee Garden One, 33 Hysan Avenue, Causeway Bay, Hong Kong
  Email: wecare@cpiclife.com.hk

6. Notice for Mainland China Customers

• (1) The processing of your personal information is generally based on your consent, except for specific circumstances stipulated by law (e.g., performance of a contract, legal obligations, response to public health emergencies, protection of life and property safety, etc.).
• (2) Your personal information may be provided to China Pacific Life Insurance Co., Ltd. located in Mainland China for processing to provide you with products and services.
• (3) For sensitive personal information (e.g., financial accounts, medical health, biometric data, etc.), we may need to obtain your separate consent.

PRIVACY POLICY STATEMENT

China Pacific Life Insurance (H.K.) Company Limited (collectively “CPIC Life (HK)”, “we”, “us” or “our”) are committed to protecting the privacy, confidentiality, and security of the personal data we hold by complying with the requirements of Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) ("Ordinance") with respect to the management of your personal data. This Privacy Policy Statement applies to all products and services provided by us and generally sets out what, when and how we may collect, use, and disclose your personal data.

Part I - Principles

(A) Collection of Personal Data

i. We may collect and store your personal data either:

• • directly when you provide such information to us (for example, when you make enquiry with us in phone);
• • indirectly through your use of our websites; or
• • where you have provided it to us through any other means

In some occasions, we may obtain lawfully collected personal data about you from our affiliated entities, business partners and other independent third parties’ sources. We may also collect some information about your computer or other devices used when you visit this website.

ii. The personal data that we may collect includes the following:

• • identity in nature – name, identity card number, contact information;
• • sensitive in nature – family history, policy details, education details, employment details, financial details, health and medical information; and
• • technical in nature – such as IP address, browser type and version, time zone settings, browser plugin types, operating systems and platform.

iii. We will usually identify any information which is mandatory when we collect the personal data from you. You may choose not to provide us with the requested data, but failure to do so may inhibit our abilities to do business with you or to respond to your enquiries.

iv. At or before the time we collect personal data, we will take practical steps to ensure you are aware of:

• a.the purposes for which the personal data is collected and used;
• b.the classes of persons to whom we may transfer the personal data;
• c.whether it is obligatory or voluntary for you to provide the personal data. If it is obligatory for you to provide the personal data, the consequences if personal data is not provided; and
• d.your rights to request access to and to request the correction of the personal data and the title and address of the individual to whom any such request may be made.

In general, your personal data may be used for the following purposes:

• a.processing applications and verifying the eligibility for insurance products or services;
• b.designing new or enhancing existing insurance products, services and related products provided by CPIC Life (HK);
• c.administering the policies issued;
• d.processing payment instructions;
• e.processing any insurance claims;
• f.conducting statistical and actuarial research;
• g.direct marketing;
• h.performing policy review and needs analysis;
• i.meeting obligations and requirements imposed by any applicable laws, regulations, codes of practice or guidelines or assisting with law enforcement purposes, investigations by regulatory authorities in Hong Kong or elsewhere;
• j.other purposes as notified at the time of collection;
• k.other purposes directly relating to any of the above.

v. For the statement on collecting your personal data by Cookies, please see Part II - Cookies policies.

(B) Transfer of Personal Data

The personal data collected by us will be kept confidential but may be transferred and disclosed to 3rd parties for the purposes as notified at the time of collection. Such transfer may be within or outside Hong Kong. Class of these 3rd party transferees depends on the nature of the purpose of data collection and in usual circumstances, it includes:

• a.China Pacific Insurance (Group) Co., Ltd (the “Group”) and any other companies within the Group;
• b.any companies carrying on insurance and／or reinsurance related business;
• c.any licensed insurance intermediaries who have an agreement with CPIC Life (HK);
• d.any insurance claim investigators;
• e.any partnering financial institutions;
• f.any third party administrators;
• g.any agents, contractors or third parties who provide administration, technology, data processing, telecommunications, computer, payment, debt collection, call center services, direct marketing services, or other services to CPIC Life (HK) in connection with the operation of its business;
• h.any applicable and relevant associations and federations of the insurance industry that exist from time to time;
• i.any governmental and judicial bodies or regulators;
• j.any other parties as notified to you at the time of collection.

Your personal data may be provided to any of the above persons who may be located in other jurisdictions or territories to that in which you are located. Your data may be transferred to, stored, and processed in other jurisdictions where China Pacific Insurance (Group) Co., Ltd. is located, or jurisdictions where a third-party contractor is located or from which the third-party contractor provides us services. Where required under relevant law, we may seek your consent to the transfer of such information outside your jurisdiction to our facilities or to those third parties with whom we share it as described above. The personal data will only be transferred to other locations, where we are satisfied that adequate levels of protection exist to protect the integrity and security of the personal data.

(C) Data Security and Retention

We uphold the obligations and requirements as imposed by the Ordinance and comply with the strictest standards of security and confidentiality. We may retain your personal data so long as necessary in order to fulfil the purposes for which it is collected in accordance with Part A above and apply practicable security measures to prevent unauthorized or accidental access, processing, erasure, loss or use including limiting physical access to personal data within our systems, restricting access of personal data to relevant employees on a "need-to-know" basis, providing relevant training to our employees to handle personal data properly, and applying encryption of personal data when transferring such data. Reasonable steps will be taken to delete or destroy the personal data when it is no longer necessary for any of the purposes set out in Part A above unless in doing so, it is prohibited under any law or public interest requires otherwise.

(D) Access, Correction and Enquiries

We will take practical steps to ensure that the personal data we collect, use or disclose is accurate, complete and up to date, having regard to the purpose for which the personal data is or is to be used. Therefore, if you have any update on your personal data, please do not hesitate to contact us for change.

Pursuant to the provision of the Ordinance, you also have the following rights to:

• a.check whether we hold any personal data relating to you and request access to such personal data;
• b.request us to correct any personal data relating to you which is inaccurate;
• c.withdraw your consent for use or provision of personal data for direct marketing; and
• d.enquire about our policies and practices in relation to personal data.

To exercise the rights above, , or if you have queries relating to your personal data or our policies and practices in relation to personal data, please make such a written request us at:

Data Protection Officer

China Pacific Life Insurance (H.K.) Company Limited.
Room 1802, 18/F, Lee Garden One,
33 Hysan Avenue, Causeway Bay,
Hong Kong

Email:wecare@cpiclife.com.hk

Under the Ordinance, we have the right to charge costs which are directly related to and necessary for the processing of any personal data access request. However, your request will not be charged in general and we will tell you of the amount in advance of any charge being passed onto you before proceeding your request. For the avoidance of doubt, no fee is charged for data correction requests.

This Privacy Policy Statement may be subject to change and will be effective immediate upon posting.

Part II - Cookies Policy

Our website may use Cookies and/or similar tracking technologies to distinguish you from other users. We also use advertising identifiers in a similar manner to which we use Cookies. This helps us to provide you with a good experience when you use this website and also allows us to improve our offering. You may accept or decline Cookies/ advertising identifiers by modifying the setting in your browser or device. If you would like to do this, please see the help menu of your browser or device.

A Cookies is a small file of letters and numbers that we store on your browser or the hard drive of your computer. Cookies contain information that is stored on your computer's hard drive.

We may use the following types of Cookies:

Strictly necessary Cookies. These are Cookies that are required for the operation of our website. They include, for example, Cookies that enable you to log into our secure website;

Analytical/performance Cookies. These allow us to recognise and count the number of visitors to our website and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily; and

Functionality Cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

By continuing to use the website, you accept the use of Cookies as outlined above.

Part III – Other Information

Language

In the event of any ambiguity or inconsistency between the English and Chinese versions of this Privacy Policy Statement, the English version will prevail.

Please note:

At or before the time we collect personal data, we will take practical steps to ensure you are aware of our relevant Personal Information Collection Statement. For your ease of reference, please refer to the below Personal Information Collection Statement (for customers):