Last revised May 2022

Privacy Statement


Industrial and Commercial Bank of China (Canada) ("we", "us", “our” or "the Bank") is committed to respecting your privacy and the confidentiality of your personal information. We have prepared this Privacy Statement to inform you of our policy and practices concerning the collection, use and disclosure of personal information.

From time to time, we may make changes to this Privacy Statement. The Privacy Statement is current as of the “last revised” date which appears at the top of this page. We will treat personal information (as defined below) in a manner consistent with the Privacy Statement under which it was collected, unless we have your consent to treat it differently. This Privacy Statement applies to any information we collect or receive about you, from any source.

What Personal Information Will The Bank Collect?

"Personal information" means any information, recorded in any form, about an identified individual or an individual whose identity may be reasonably inferred or determined from such information.The Bank, in the course of its activities, will collect your personal information, which may include your:

(1) Identification information, such as name, home address, telephone, personal email address, date of birth, social insurance number (SIN), and marital status;
(2) Employment information, such as salary, job title;
(3) Financial information, such as assets held;
(4) If you choose to use the Bank's QR Code application, information required to enable you to use our Bank's QR Code application, such as card number, transaction amount, transaction date, time and location; and
(5) Other information necessary for the Bank's purposes, which will be collected with your consent in the course of your relationship with the Bank, or as otherwise permitted or required by law.

The personal information we ask for will depend upon which product or service you may obtain.

Our Purposes For Collecting, Using and Disclosing Your Personal Information

If you seek to or have acquired a product or service from us, the Bank will collect, use and may disclose your personal information for the purposes of:

(1) Understanding your needs and determining the suitability of particular financial products or services for you, including creating and maintaining the credit scoring models about you;
(2) Determining your eligibility for financial products and services, including identifying you, assessing your applications and conducting initial and periodic credit checks on you;
(3) Providing you with the relevant financial product, service or information, including information about promotions or other opportunities in which clients or others may be interested;
(4) Where circumstances require, collecting amounts outstanding from your and those providing security for you;
(5) Protecting against fraud;
(6) Meeting our legal and regulatory requirements, including reporting requirements or
(7) Such other purposes for which you provide your consent, from time to time.

The personal information we ask for will depend upon which product or service you may obtain. The Bank does not sell, trade, barter, exchange or disclose for consideration any personal information it has obtained. Unless permitted or required by law, no personal information is collected, used or disclosed by the Bank, without first obtaining the consent of the individual to the collection, use and disclosure of that information.

Personal information will be collected, to the extent possible, directly from the individual concerned. The Bank may collect from, use and disclose to external sources, including references you have provided, credit bureaus, personal information agents, law enforcement representatives, private investigators, and other groups or companies where collection is necessary for the purposes described above. For example, we need to know your credit worthiness for credit products and we may contact other lenders or credit bureaus to obtain information on your credit history. We may also contact employers or other personal references to verify the information you have given us. We will not do this without your consent.

Except with parental or guardian consent, the Bank does not knowingly collect personal information from anyone under age of 13 and will delete any such information if we discover that it has been provided by a person under that age without the consent of a parent or guardian.

Your Consent

We obtain your consent by fair and lawful means. We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing your personal information for any purpose, except where consent is not required by applicable law. You may provide your consent to us either orally, electronically or in writing. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the personal information and the reasonable expectations you might have in the circumstances.

In most cases, you are free to refuse or withdraw your consent at any time. The withdrawal of consent for the Bank's use of personal information for the purpose of providing information about other services will not affect the Bank's ability to provide financial products or services to you. You may do so by contacting the branch where your account is held. Unfortunately, some services can only be offered if you provide certain personal information to the Bank and, if you choose to refuse or withdraw consent for the Bank to use that information, we may not be able to offer you those services. To withdraw your consent, if applicable, contact the Privacy Officer using the contact information provided below.

The Circumstances Where The Bank May Disclose Your Personal Information

The Bank may disclose your personal information to organizations:

(1) Involved in providing, managing or administering financial products or services to you such as loyalty and affinity program partners, mortgage insurers and our advisers;
(2) Who are your appointed attorneys or agents;
(3) Involved in
    (a) a corporate re-organization of the Bank;
    (b) a transfer of all or part of the assets or business of the Bank;
    (c) the payments system including financial institutions, merchants and payment organizations;
(4) Which are your representatives including your legal advisers;
(5) Such other purposes for which you provide your consent, from time to time; or
(6) Such other purposes as are permitted or required by law.

We generally identify to whom, and for what purposes, we disclose your personal information, at the time we collect such information from you and obtain your consent to such disclosure.

We may also transfer your personal information to our third party service providers where such third parties are assisting us with permitted purposes, and who are contractually obligated to keep personal information confidential, use it only for the purposes for which we disclose it to them, and to process the personal information with the same standards set out in this policy. Whenever we engage a service provider, we require that its privacy and security standards adhere to this policy and Canadian privacy legislation.

Where obliged or permitted to disclose information without consent, the Bank will not disclose more information than is required.

Some of these uses and disclosures of personal information may occur in a variety of international jurisdictions. For example storage and processing of personal information may take place outside of Canada. As a result, the governments, courts, or law enforcement or regulatory agencies in those countries may be able to obtain disclosure of your information through local applicable laws.

The Accuracy And Retention Of Personal Information

We take reasonable steps to ensure that your personal information is kept as accurate, complete and up-to-date as possible. We will not routinely update your personal information, unless such a process is necessary. We expect you, from time to time, to supply us with written updates to your personal information, when required.

We keep your personal information only as long as it is required for to fulfill the purposes which it was collected. The length of time we retain information varies, depending on the product or service and the nature of the information. This period may extend beyond the end of your relationship with us but it will be only for so long as it is necessary for us to have sufficient information to respond to any legal issues that may arise at a later date. When your personal information is no longer required for the Bank's purposes, we have procedures to securely destroy, delete, erase or convert it into an anonymous form. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

Currently, the principal places in which the Bank holds personal information are in the cities in which it operates or nearby municipalities where off-site storage facilities are located.

Protecting Your Personal Information

The Bank endeavours to maintain appropriate physical, procedural and technical security with respect to its offices and information storage facilities so as to prevent any loss, misuse, or unauthorized access, disclosure, or modification of personal information.

The Bank further protects personal information by restricting access to it to those employees, contractors and agents that the management of the Bank has determined need to know that information in order that we may provide our products, services or information.

The Bank shall ensure that any contractors and agents, which perform services on behalf of the Bank or that who may receive personal information in the course of assisting the Bank as part of our delivery of services to our clients, agree to use and disclose such personal information solely for the purposes indicated by the Bank and, with respect to that information, to act in a manner consistent with the relevant principles articulated in this Policy Statement.

If any employee of the Bank misuses personal information, this will be considered as a serious offence for which disciplinary action may be taken, up to and including termination of employment. If any individual or organization misuses personal information – provided for the purpose of providing services to or for the Bank - this will be considered a serious issue for which action may be taken, up to and including termination of any agreement between the Bank and that individual or organization.

We audit our procedures and security measures from time to time to ensure that they remain effective and appropriate.

Bank Web Sites

The Bank provides clients with access to public web sites and restricted access to sub-sites to provide electronic banking services. In the course of your use of these sites, the Bank may collect information directly from you via e-mail or by on-line submission.

Our web servers also may track general information about visitors such as domain name and time of visit. The Bank's web servers also collect and aggregate information regarding which pages are being accessed as well as information volunteered by visitors through online surveys or subscriptions to electronic newsletters. This information is used internally, only in aggregate form, to better serve visitors by helping us to:
(1) Manage our web sites;
(2) Diagnose any technical problems; and
(3) Improve the content of our web sites

The Bank's web sites use cookies only for session management purposes. These cookies expire when the session is closed. You should be aware that if you set your browser to disable cookies, you may not be able to access services offered by the Bank.

Access To Your Personal Information

You have the right to request access to your personal information held by us. Written requests should be submitted to the Privacy Officer using the contact information provided below. We will respond to all such written requests within a reasonable time and no later than 30 days following the request, except where otherwise permitted by law. We will advise you in writing if we cannot meet your requests within this time limit.

At any time, you can challenge the accuracy or completeness of your personal information in our records. If you successfully demonstrate that your personal information in our records is inaccurate or incomplete, we will amend the personal information as required. Where appropriate, we will transmit the amended information to third parties having access to your personal information.

To guard against fraudulent or unauthorized requests for access, we may require you to provide sufficient identification to permit access to your personal information or to make corrections. Any such identifying information shall be used only for this purpose.

Resolving Your Privacy Concerns

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this policy, and with applicable privacy laws. If you have any questions or concerns about the Bank's collection, use, management or disclosure of personal information, or this Privacy Statement, or if you would like to request access to or correction of your personal information in our control, please contact the Operation Officer or Manager of the branch where your account is held.

If your concerns remain unresolved, you may contact the Privacy Officer of the Bank at:

Bay Adelaide Centre, West Tower,
Unit 3710, 333 Bay Street,
Toronto, ON M5H 2R2
Fax:    416-607-2000

If after contacting us, you do not feel that we have adequately addressed your concerns, you may contact:

The Office of the Privacy Commissioner of Canada,
30 Victoria Street,
Gatineau, Quebec K1A 1H3
Tel:   1-800-282-1376
Tel:   819-994-5444
Fax:  819-994-5424