This Privacy Notice outlines how Mynco manages any personal information collected about you in accordance with the EU General Data Protection Regulation 2018 ('GDPR') and the Personal Information Protection Law of China ('PIPL').
Information we collect
We collect information about you when you engage us for wealth management, investment, or other services. Most of the data comes directly from you, while some may be gathered indirectly from third parties, such as policy providers. We may also collect information when you contact us or provide feedback.
The information we collect may pertain to your personal and financial circumstances, which can include sensitive categories of data, such as health information, when necessary for service provision.
Your data is stored electronically on our secure back-office systems and servers. Any physical documents that need to be retained are securely stored, and when they are no longer required, they are safely destroyed.
We also collect anonymous information about your website usage via cookies. These text files are placed on your device to gather standard internet log information and visitor behavior. This data allows us to personalize your experience during future visits. For more details, please refer to our Cookie Policy.
Purpose of data collection
The primary legal basis for processing your data is to fulfill our contractual obligations, and the information we collect is essential for delivering the services you require. Without your personal data, we would be unable to meet our legal and regulatory obligations.
When special category data is necessary, we will obtain your explicit consent to collect and process this information.
Use of client information
We collect your information to provide the services specified in our Terms of Business. This may also include gathering personal information about your close family members, dependents, or individuals holding power of attorney. It is your responsibility to ensure that you have obtained their consent to share their information with us and to provide them with this Privacy Notice.
To effectively deliver our services, we may share your information with third parties, such as compliance providers and custodians, as well as product and platform providers necessary for arranging financial products on your behalf.
For any third parties involved in processing your data, we will ensure that a contract is in place that clearly defines the nature and purpose of the processing, their duty of confidentiality, and that they will only act according to our written instructions.
In compliance with regulations related to the prevention of money laundering and financial crime, we may send your information to a third-party company for identity verification, and the results of this check may provide us with additional information about you.
We do not share your information for marketing purposes with any other companies.
Job applicants
Any personal data you submit for job applications will be used to match you with current or future job vacancies. Your data will be securely stored and shared within the organization only among those involved in the recruitment process. If your application is successful, your information will be transferred to our personnel system. If your application is unsuccessful, we will retain your data for 12 months, after which it will be securely destroyed.
Data retention
We will retain your personal data for as long as necessary to provide our services to you. We will take reasonable steps to ensure your data remains accurate and up to date and will not retain personal data longer than 10 years after notification of your death, subject to regulatory requirements that necessitate retaining data for specific minimum periods.
We reserve the right to retain data longer if it may be required to defend against future claims, and you have the right to ask for the deletion of your personal data, subject to regulatory obligations and legitimate interests.
Accessing your information
You have the right to ask for a copy of the information we hold about you. To obtain a copy of your personal information, please contact us.
When your personal data is processed automatically, you can ask that we transfer your data to another organization. We have one month to provide the information (two months for complex or numerous requests), and we are required to verify your identity for this request.
Your rights under data protection law include:
- Your right of access: You can ask for copies of your personal information.
- Your right to rectification: You can ask for corrections to inaccurate personal information and incomplete information.
- Your right to erasure: You can ask for the deletion of your personal information in certain circumstances.
- Your right to restriction of processing: You can ask that we limit the processing of your personal information in certain circumstances.
- Your right to object to processing: You can object to the processing of your personal information in certain circumstances.
- Your right to data portability: You can ask for the transfer of your personal information to another organization or yourself in certain circumstances.
Other websites
Our website may use links to other websites, but this Privacy Notice only applies to our website. When you link to other websites, you should first read their privacy policies.
What if you have a complaint about how your personal data is processed?
We ask that you contact us in the first instance and allow us the opportunity to correct the issue. Otherwise, you have the right to complain to the supervisory authority for data protection, which, in China, is the Central Cyberspace Affairs Commission (https://www.cac.gov.cn).
Changes to our privacy policy
We review our Privacy Notice regularly, and any updates will be reflected on this page. Please get in touch with us if you have any questions.
