We respect your privacy and are committed to keeping your personal information and other data confidential and secure

We may collect the following types of personal data about you. In this privacy notice, “You” refers to you as an individual, as relevant if you are:

• a personal banking client;
• a representative of, or an individual related to, a personal banking client; or
• a representative of, or an individual related to a company, business or organisation that is our business or corporate banking client.

Personal data we collect with respect to business and corporate client relationships is primarily limited to the information on directors and officers, other employees, direct and indirect beneficial owners and authorised persons we need to enable us to meet our due diligence obligations, signatory details and contact information of individuals we interact with to enable the provision of products and services to clients.
 

If you give us someone else’s personal data, you must have their permission and explain to them how we’ll use it.
 

We may collect the following types of personal data about you, as relevant and allowed by law:

• Identification data – information that identifies (uniquely or semi uniquely) you. For example, your name, your date of birth, your gender, your user login credentials, your photographs, CCTV and video recordings of you and other identifiers, including official/government identifiers such as national identification number, passport number and tax identification number
• Contact data – information that allows addressing, sending or communicating a message to you. For example, your email address, your phone or mobile number and your residential or business address
• Professional data – information about your educational or professional background
• Financial and commercial data – your account and transaction information or information that identifies your financial position and background, status and history as necessary to provide relevant products and services. For example,  your debit or credit card details, your source of funds, your financial and credit rating history
• Geo-location data – information that provides or contains a device’s location. For example, your internet protocol (IP) address or your cookies identifier
• Behavioural data – analytics information that describes your behavioural characteristics relating to your use of our products and services. For example, usual transactional activities, browsing behaviour on our websites and how you interact as a user of our products and services, or those provided by third-party organisations, such as our advertising partners and social media platform providers
• Personal relationship data – information about associations or close connections between individuals or entities that can determine your identity. For example, spouse or employer relationships
• Communications data – information relating to you contained in voice, messaging, email, livechatsand other communications we have with you. For example, service requests.

We may sometimes need to collect more sensitive personal data about you, but we only do this if it’s necessary and with your consent, or where allowed by law. This sensitive personal data (sometimes known as special category personal data) may include things like:

• Racial or ethnic origin data – information which reveals your racial or ethnic origin
• Biometric data – information that identifies you physically. For example, facial recognition information, your fingerprint or voice recognition information

We usually get your personal data directly from you, but we may also obtain your personal data from other sources as necessary, depending on the relevant products and services that we are providing, including from:

• People you know – such as:
  • parents or guardians of minors. If you are a minor (normally this means if you are under 18 years old, but this might be younger depending on where you live). We will get your parent or guardian’s consent before collecting, using or sharing your personal data
  • your joint account holders
  • your referees; and
  • other people you appoint to act on your behalf
• Businesses and other organisations – such as:
  • your employer and/or company, business or organisation you represent or is related to you
  • other financial institutions and financial service providers
  • strategic referral partners, including business alliance, co-branding partners or other companies or organisations that the Standard Chartered Group cooperates with based on our contractual arrangements or other joint ventures to provide relevant third-party products and services
  • service partners, such as advertising and market research companies and social media platform providers
  • credit reference and fraud prevention agencies
  • regulatory and other entities with authority over the Standard Chartered Group, such as tax authorities, law enforcement or authorities imposing financial sanctions
• Our corporate and business clients – where you receive the benefit of our services in relation to our contract with the company, business or organisation you interact with. For example, resolving payment disputes with our merchant clients
• Publicly available resources – such as online registers or directories or online publications, social media posts and other information that is publicly available
• Cookies – when you visit, browse, or use our websites, online banking or mobile applications, we may use cookies to automatically collect certain information from your device. We may use such information, where relevant, for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content and to determine the security status of your account. For more information on how we use cookies and how you can control them when visiting our websites, please see our Cookies Policy.

We collect your personal data so that we can manage our relationship with you, respond to your requests, operate our business and provide our products and services.
 

We generally process your personal data with your consent where required by law or where otherwise permitted or required by applicable law including for the following lawful reasons:

• Contract – when we’re performing contractual obligations
• Legal Obligation – when we’re required to comply with laws and regulations

What we use your personal data for is often referred to as our purposes of processing and these are detailed below. We may not be able to offer or provide our products and services if you do not provide us with or want us to process the personal data that we consider is necessary and/or is required to meet our legal and regulatory obligations.
 

Purposes of Processing

We process your personal data for the following purposes, as necessary:
 

Operating our business (Legal basis: Legal Obligation or Consent)

This includes:

• engaging in business operational management, such as performing administrative tasks, risk management activities, audits and ensuring operation and security of our communications and processing systems
• developing, testing and analysing our systems, products and services, for example, to offer a well-functioning website or other applications to users
• monitoring and recording our communications with you, for example, phone calls, for training and quality purposes
• effecting transactions and acting on instructions or requests, such as transferring money between accounts and making payments to third parties for clients.

Improving our products and services (Legal basis: Legitimate Interest or Consent)

This includes:

• developing, testing and analysing our systems, products and services
• monitoring and recording our communications with you, for example, phone calls, for training and quality purposes
• conducting market research
• conducting demographic analytics and gathering insights by aggregating data such as behavioural data.

Promoting and protecting our brand (Legal basis: Consent or Legitimate Interest)

This includes:

• branding and corporate affairs management, creating publications, marketing campaigns and producing advertisements
• gathering insights by aggregating data from the use of our products and services and our applications, for example, social media listening to identify, assess and discover key
• social media monitoring to identify our brand mentions to protect our brand and reputation
• facilitating sponsorship, donations and events.

Getting in touch with you (Legal basis: Consent or Legal Obligation)

This includes:

• sending you requested publications, newsletters, reports and relevant content
• providing you with information and our range of products and services as requested
• responding to your reports of wrongdoing and complaints, including whistleblowing.

Keeping you and our people safe (Legal basis: Legal Obligation or Consent)

This includes:

• conducting identity verification security checks for building access
• using CCTV surveillance recordings at our branches, premises and ATMs for the purposes of preventing and detecting fraud and/or other crimes, such as theft
• investigating and reporting on incidents or emergencies on our properties and premises
• for the security of our systems and networks in order to keep your data safe and confidential
• for other health and safety compliance purposes.

Detecting, investigating and preventing financial crimes (Legal basis: Contract or Legal Obligation)

This includes:

• meeting or complying with Standard Chartered Group policies, including identifying individuals and performing investigative procedures, measures or arrangements for sharing data and information within the Standard Chartered Group
• any other use of data and information in accordance with any group-wide programmes for compliance with sanction or prevention or detection of money laundering, terrorist financing or other unlawful activities
• monitoring and recording voice and electronic communications and screening applications and transactions in connection with actual or suspected fraud, financial crime or other criminal activities
• recording and monitoring voice and electronic communications with us, to the extent permitted by applicable law, to ensure compliance with our legal and regulatory obligations and internal policies.

Complying with applicable laws, regulations and other requirements (Legal basis: Legal Obligation or Consent)

This includes:

• meeting or complying with Standard Chartered Group policies, including identifying individuals and performing investigative procedures, measures or arrangements for sharing data and information within the Standard Chartered Group
• any other use of data and information in accordance with any group-wide programmes for compliance
• complying with relevant local and foreign law, regulations, rules, directives, judgments or court orders, requests, guidelines, government sanctions, embargo, reporting requirements, restrictions, demands from or agreements with any authority (including domestic or foreign tax authorities), court or tribunal, enforcement agency or exchange body in any relevant jurisdiction where the Standard Chartered Group operates
• following any voluntary guidelines or recommendations as may be updated from time to time issued by legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers in any relevant jurisdiction where the Standard Chartered Group operates.

Exercising Standard Chartered Group’s legal rights and conducting legal proceedings (Legal basis: Legal Obligation or Consent)

This includes:

• tracing and exercising our rights and protecting ourselves against harm to our rights and interests
• retaining records as may be necessary as evidence for any potential litigation or investigation
• recovering debts and arrears
• conducting litigation to enforce our rights or the rights of any other member of the Standard Chartered Group
• obtaining professional advice
• investigating or making an insurance claim
• responding to any insurance related matter, action or proceeding
• defending or responding to any current or prospective legal, governmental or quasi-governmental, regulatory, or industry bodies or association related matter, action or proceeding or for establishing, exercising or defending legal rights.

Facilitating Standard Chartered Group mergers, acquisitions, and divestments (Legal basis: Consent)

This includes:

• evaluating our business and providing continuity of services to you after a transfer of our business as a result of a merger, acquisition, sale or divestment
• enabling an actual or potential assignee of all or any part of our business and/or asset or participant or sub-participant of our rights in respect of the data subject, to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation.

We may sometimes, and with your consent by providing additional privacy notice information as required by applicable law, use your contact details to send you relevant marketing communications (such as by post, email, telephone, SMS, secure messages, mobile app or social media) for direct marketing purposes.
 

We may send the following types of communications (unless you have informed us that you do not wish to receive such communications):

• news, offers and promotions about our or other Standard Chartered Group products and services
• information about products and services from or relating to third parties, such as financial institutions, insurers, credit card companies, securities and investment, mobile wallets and digital payment services providers
• details of our or relevant third-party reward, loyalty or privileges programmes and related services and products
• information about products and services offered by our co-branding partners (the names of such co-branding partners can be found in the application form(s) for the relevant products and services, as the case may be)
• market research
• information about our or relevant third-party competitions and lucky draws
• appeals by us or relevant third parties for charitable and/or non-profit making donations, sponsorships and contributions; and
• information and communication relating to our or relevant third-party seminars, webinars and other relevant events or opportunities.

We may conduct market research using demographic and insights analytics by aggregating the personal data that we hold about you to provide you with marketing communications, which are more relevant and tailored for you.
 

We may share limited information about you with social media platform providers we engage with for the purpose of online social media advertising where you have permitted us and the social media platform provider(s) to use cookies that support our marketing on these platforms. For example, to check whether you have an account with social media platform providers to ask them to display more relevant marketing communication messages to you about our products and services.
 

For more information on how we use cookies in relation to marketing, please see our Cookies Policy.
 

You may withdraw your consent or opt-out from receiving such marketing communications in accordance with your rights by contacting us using the details in the ‘How to get in touch’ section below.

We may use the personal data we collect to conduct data analytics, including profiling and behavioural analysis, to make quicker automated decisions in our business operations and to evaluate your personal characteristics to predict outcomes and risks. We require that rules followed by such automated systems are designed to make fair and objective decisions. We may use artificial intelligence and machine learning to help improve our communications and client experience, make our business operational processes safer and more efficient and enable us to provide faster responses and improve turnaround time. For example, we may use automated decision-making for the following:

• Client digital onboarding processes– account opening approval processes using electronic Know-Your-Customer (eKYC) checks by verifying the authenticity of scanned identification documents and a photo through biometric facial recognition and liveliness check
• Operational efficiency– voicebots for call centre identification verification
• Client engagement – client marketing campaigns and communications to recommend more tailored products and services based on insights from your personal data and your interactions with robo advisors and chatbots.
• Risk management – monitoring of accounts and transactions to detect unusual activities to prevent fraud or money laundering, terrorism and other financial crimes (for example, detecting whether the use of your credit card may be fraudulent) and approval of loan applications and credit decisions based on credit-scoring models.

For further information on your rights in relation to automated decisions that affect you, please refer to the ‘What are your personal data protection rights?’ section.

We may share your personal data within the Standard Chartered Group. Standard Chartered Group may share your personal data for the purposes of processing as set out in this privacy notice, including with our service providers, our business partners, other third parties and as required by law or requested by any authority. Who these are depends on your interactions with us as an individual.
 

We limit how, and with whom, we share your personal data, and take steps to ensure your personal data is kept confidential and protected when we share it. We may share your personal data for our purposes of processing with the following, where relevant and allowed by law:

• Other members of the Standard Chartered Group
• Authorised third parties
  • any other person you have authorised us by your consent to share your personal data with.
• Third parties that can verify your information
  • fraud prevention agencies and organisations.
  • other non-government third parties’ that conduct financial crime prevention databases checks to prevent money laundering, terrorism, fraud and other financial crimes.
• Our service partners
  • professional advisers such as auditors and legal counsel
  • insurers or insurance brokers
  • service providers (such as operational, administrative, data processing and other technology service providers), including anyone engaged or partnered with to analyse and facilitate improvements or enhancements in Standard Chartered Group’s operations or provision of products and services
  • providers of professional services, such as market researchers, forensic investigators and management consultants
  • advertising companies and social media platform providers.
• Strategic referral partners
  • business alliance, co-branding partners or other companies or organisations that the Standard Chartered Group cooperates with based on contractual arrangements or other joint ventures
  • social media and advertising companies
  • charitable and non-profit organisations.
• Other financial services organisations
  • other financial institutions, such as merchant banks, correspondent banks or national banks
  • payment service providers, including mobile wallet and digital payment service providers, merchants, merchant acquiring companies, credit card companies, payment processors and card association members, payment-initiation and card-based payment instrument service providers such as VISA and Mastercard
  • any financial institution and merchant acquiring company with which you have or propose to have dealings.
• Government authorities and law enforcement
  • as required by law or as requested by any authority, which includes any government, quasi-government, regulator, administrative, regulatory or supervisory body, court, tribunal, enforcement agency, exchange body or domestic or foreign tax authorities, having jurisdiction over any Standard Chartered Group member whether within or outside your jurisdiction and whether or not that Standard Chartered Group member has a relationship with you
  • self-regulatory or industry bodies or associations of financial services providers in any relevant jurisdiction where the Standard Chartered Group operates.
• Other third parties

any other person under a duty of confidentiality to us, including any other members of the Standard Chartered Group, which has undertaken to keep such information confidential

Your personal data may be processed, stored, shared, transferred or disclosed by us within the Standard Chartered Group or with other third parties for the purposes described in this privacy notice. We do this in order to operate effectively, efficiently and securely in facilitating transactions and providing products and services to our clients, to improve and support our processes and business operations and to comply with our legal and regulatory obligations. This may involve processing, storing, sharing, transferring or disclosing your personal data cross border to other jurisdictions.
 

Where recipients of your personal data are in jurisdictions that are outside Taiwan, and local laws may not have similar data protection laws as Taiwan, we will take all reasonable steps necessary to ensure that your personal data has an appropriate adequate level of protection and safeguards to comply with applicable law.

We take the privacy and security of your personal data very seriously. To protect your data, we have put in place a range of appropriate technical, physical and organisational measures to safeguard and keep your personal data confidential, for example, by using contracts with appropriate contractual confidentiality, data protection and security terms in our arrangements with third parties. Standard Chartered Group has implemented information security data privacy policies, including incident management and reporting procedures, rules and technical measures to protect personal data and to comply with legal and regulatory requirements. We train and require staff who access your personal data to comply with our data privacy and security standards. We require our service providers, or other third parties we engage with and to whom we disclose your personal data to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal data.

For the purposes described in this privacy notice, we keep your personal data for business operational or legal reasons while you engage with us and may retain your personal data for a period of time afterwards in accordance with our data retention policy standards and as required by applicable law and regulations. We will delete, anonymise, destroy and/or stop using personal data when we no longer need it or when the purpose described in this privacy notice ceases to exist or when the purpose described in this privacy notice ceases to exist.

We respect your personal data, and you have the following rights about how we use your information:

• Your right to access your data– you have the right to check whether we hold personal data about you, and you can ask us for a copy of such data and information on how we have used it.
• Your right to correct your data– if your personal details have changed, or you believe we have incorrect or out-of- date information about you, you can ask us to update it.
• Your right to delete your data– you can ask us to delete your personal data. However, we may need certain personal details to provide our products and services to you.
• Your right to restrict or object to processing– you can ask us to stop using your data or change how we use it. However, we may need certain personal details to engage with you or provide our products and services to you.
• Your right to object to automated decision making– you can ask us to review a decision made solely by automated processing if it negatively impacts you.
• Your right to data portability– you can ask us to provide your personal data to another organisation in a format that can be easily read by machines.
• Your right to change or withdraw consent– we may from time to time ask for your consent to process your personal data. If you change your mind, let us know. However, we may not be able to provide our products and services or engage with you without certain personal data.
• Your right to withdraw from direct marketing– you can withdraw your consent and can tell us to stop sending you marketing emails or invitations to surveys at any time.

We will respond to requests to exercise your personal data rights in line with applicable law. We may ask you to verify your identity before processing your request. If you have any questions about your rights, please contact us using the details below.

The following Standard Chartered Group entities act as the agency (sometimes known as controller in other jurisdictions) responsible for processing your personal data in Taiwan:

• Standard Chartered Bank (Taiwan) Limited
• Standard Chartered Bank, Taipei Branch

If you wish to exercise any of your rights under applicable personal data protection laws, please complete the Data Subject Request (DSR) form to help us process your request more efficiently.
 

For any enquiries about this Privacy Notice, you may contact us by sending a written request to the relevant postal address listed below, or by email at privacy.tw@sc.com.
 

For clients of Standard Chartered Bank (Taiwan) Limited:
 

Postal Address:
 

Standard Chartered Bank (Taiwan) Limited

6F, No.179, Liaoning St., Zhongshan Dist., Taipei 104, Taiwan, R.O.C.
 

For clients of Standard Chartered Bank, Taipei Branch
 

You may submit your DSR through the DSR Online Form or send the completed offline DSR to the following postal address:

Standard Chartered Bank, Taipei Branch

5F, No.179, Liaoning St., Zhongshan Dist., Taipei 104, Taiwan, R.O.C.
 

Got a complaint?

If you have any concerns or complaints about how we’re using your personal data, please use the details in the ‘How to get in touch’ section above.
 

Cookies

Please see our separate Cookie Policy.
 

Other Terms and Conditions

There may be specific terms and conditions in our banking and product agreements that govern the collection, use and disclosure of your personal data. Such other terms and conditions must be read in conjunction with this privacy notice.
 

This privacy notice was updated on 12 December 2025.

We may collect the following types of personal data about you. In this privacy notice, “You” refers to you as an individual, as relevant if you are:

• an individual vendor;
• a representative of, or an individual related to, an individual vendor; or
• a representative of, or an individual related to a company, business or organisation that is our business or corporate vendor.

Personal data we collect with respect to our vendors is primarily limited to the information on directors and officers, other employees, direct and indirect beneficial owners and authorised persons we need to enable us to meet our due diligence obligations, signatory details and contact information of individuals we interact with to enable the provision of products and/or services to the Standard Chartered Group.
 

If you give us someone else’s personal data, you must have their permission and explain to them how we’ll use it.
 

We may collect the following types of personal data about you, as relevant and allowed by law:

• Identification data – information that identifies (uniquely or semi uniquely) you. For example, your name, your photographs, CCTV and video recordings of you, building access data to our premises and other identifiers, including official/government identifiers such as national identification number, passport number and tax identification number
• Contact data – information that allows addressing, sending or communicating a message to you. For example, your email address, your phone or mobile number and your residential or business address
• Professional data – information about your educational or professional background. For example, occupation, title, licenses, and professional memberships, documents evidencing industrial track-record, client testimonials, current and previous employment details, curriculum vitae/resume, professional qualifications, references and work visa
• Financial and commercial data – information that identifies your financial position, status and history. For example, your account details when you are the recipient of a payment by us, your background information and background, such as your business financial credit report and score
• Geo-location data – information that provides or contains a device’s location. For example, your internet protocol (IP) address or your cookies identifier
• Behavioural data – analytics information that describes your behavioural characteristics. For example, browsing behaviour and on our websites how you interact as a user of the products and services provided by third-party organisations, such as our advertising partners and social media platform providers
• Personal relationship data – information about associations or close connections between individuals or entities that can determine your identity. For example, the agency, company, business or organisation you represent or is related to you
• Communications data – information relating to you contained in voice, messaging, email and other communications we have with you

We usually get your personal data directly from you, but we may also obtain your personal data from other sources as necessary, including from:

• People you know – such as such as your colleagues, contractors and associates
• Businesses and other organisations – such as:
  • your employer and/or company, business or organisation you represent or is related to you
  • other financial institutions and financial service providers
• Publicly available resources – such as online registers or directories or online publications, social media posts and other information that is publicly available
• Cookies – when you visit, browse, or use our websites, online banking or mobile applications, we may use cookies to automatically collect certain information from your device. We may use such information, where relevant, for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content and to determine the security status of your account. For more information on how we use cookies and how you can control them when visiting our websites, please see our Cookies Policy.

We collect your personal data so that we can manage our relationship with you, or the individual, company, business or organisation you represent or is related to, and operate our business.
 

We generally process your personal data with your consent where required by law or where otherwise permitted or required by applicable law including for the following lawful reasons:

• Contract – when we’re performing contractual obligations
• Legal Obligation – when we’re required to comply with laws and regulations

What we use your personal data for is often referred to as our purposes of processing and these are detailed below. You or the individual, company, business or organisation that you are related to or represent, may not be able to offer or provide products and/or services to us if you do not provide us with or want us to process the personal data that we consider is necessary and/or is required to meet our legal and regulatory obligations.

Purposes of Processing

We process your personal data for the following purposes, as necessary, depending on whether you provide goods and/or services to us directly or you represent, or are associated with, other individuals, companies, businesses or organisations who provide goods and/or services to us.

Onboarding, managing and monitoring our vendor relationships (Legal basis: Contract, Legal Obligation, Contract or Consent)

This includes:

• conducting vendor due diligence at onboarding, contract renewal and as required during the contract performance
• engaging with you as a representative of our vendor/service provider for the purpose of providing goods and/or services to us
• creating and maintaining our vendor account
• contacting you
• monitoring the performance of vendor contracts
• settling bills and accounts

Operating our business (Legal basis: Legal Obligation or Consent)

This includes:

• engaging in business operational management, such as performing administrative tasks, risk management activities, audits and ensuring operation and security of our communications and processing systems
• developing, testing and analysing our systems, products and services, for example, to offer a well-functioning website or other applications to users
• monitoring and recording our communications with you, for example, phone calls, for training and quality purposes.

Keeping you and our people safe (Legal basis: Legal Obligation or Consent)

This includes:

• conducting identity verification security checks for building access
• using CCTV surveillance recordings at our premises for the purposes of preventing and detecting fraud and/or other crimes, such as theft
• investigating and reporting on incidents or emergencies on our properties and premises
• for the security of our systems and networks in order to keep your data safe and confidential
• for other health and safety compliance purposes.

Detecting, investigating and preventing financial crimes (Legal basis: Contract, Legal Obligation or Consent)

This includes:

• meeting or complying with Standard Chartered Group policies, including identifying individuals and performing investigative procedures, measures or arrangements for sharing data and information within the Standard Chartered Group
• any other use of data and information in accordance with any group-wide programmes for compliance with sanction or prevention or detection of money laundering, terrorist financing or other unlawful activities
• conducting identity verification security checks against government and other official centralised databases, as required by law
• monitoring and recording voice and electronic communications and screening applications and transactions in connection with actual or suspected fraud, financial crime or other criminal activities
• recording and monitoring voice and electronic communications with us, to the extent permitted by applicable law, to ensure compliance with our legal and regulatory obligations and internal policies.

Complying with applicable laws, regulations and other requirements (Legal basis: Legal Obligation or Consent)

This includes:

• meeting or complying with Standard Chartered Group policies, including identifying individuals and performing investigative procedures, measures or arrangements for sharing data and information within the Standard Chartered Group
• any other use of data and information in accordance with any group-wide programmes for compliance
• complying with relevant local and foreign law, regulations, rules, directives, judgments or court orders, requests, guidelines, government sanctions, embargo, reporting requirements, restrictions, demands from or agreements with any authority (including domestic or foreign tax authorities), court or tribunal, enforcement agency or exchange body in any relevant jurisdiction where the Standard Chartered Group operates
• following any voluntary guidelines or recommendations as may be updated from time to time issued by legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers in any relevant jurisdiction where the Standard Chartered Group operates.

Exercising Standard Chartered Group’s legal rights and conducting legal proceedings (Legal basis: Legal Obligation or Legitimate Interest)

This includes:

• tracing and exercising our rights and protecting ourselves against harm to our rights and interests
• retaining records as may be necessary as evidence for any potential litigation or investigation
• recovering debts and arrears
• conducting litigation to enforce our rights or the rights of any other member of the Standard Chartered Group
• obtaining professional advice
• investigating or making an insurance claim
• responding to any insurance related matter, action or proceeding
• defending or responding to any current or prospective legal, governmental or quasi-governmental, regulatory, or industry bodies or associations related matter, action or proceeding or for establishing, exercising or defending legal rights.

We may share your personal data within the Standard Chartered Group. Standard Chartered Group may share your personal data for the purposes of processing as set out in this privacy notice, including with our other service providers, our business partners, other third parties and as required by law or requested by any authority. Who these are depends on your interactions with us an individual.
 

We limit how, and with whom, we share your personal data, and take steps to ensure your personal data is kept confidential and protected when we share it. We may share your personal data for our purposes of processing with the following, where relevant and allowed by law:

• Other members of the Standard Chartered Group
• Authorised third parties
  • any other person you have authorised us by your consent to share your personal data with.
• Third parties that can verify your information
  • credit bureaus or credit reference agencies (including the operator of any centralised database used by credit reference agencies) and fraud prevention agencies and organisations
  • other non-government third parties’ that conduct financial crime prevention databases checks to prevent money laundering, terrorism, fraud and other financial crimes.
• Our service partners
  • professional advisers, such as auditors and legal counsel
  • service providers, such as operational, administrative, data processing and other technology service providers, including anyone engaged or partnered with to analyse and facilitate improvements or enhancements in Standard Chartered Group’s operations or provision of products and services
  • providers of professional services, such as market researchers, forensic investigators and management consultants
  • advertising companies and social media platform providers.
• Other financial services organisations
  • other financial institutions, such as merchant banks, correspondent banks or national banks
• Government authorities and law enforcement
  • as required by law or as requested by any authority, which includes any government, quasi-government, regulator, administrative, regulatory or supervisory body, court, tribunal, enforcement agency, exchange body or domestic or foreign tax authorities, having jurisdiction over any Standard Chartered Group member whether within or outside your jurisdiction and whether or not that Standard Chartered Group member has a relationship with you
  • self-regulatory or industry bodies or associations of financial services providers in any relevant jurisdiction where the Standard Chartered Group operates.
• Other third parties
  • the individual, company, business or organisation, as applicable, that you represent or is related to you
  • third parties in case of a merger, acquisition or divestment: if we transfer (or plan to transfer) or assign any part of our business or assets. If the transaction goes ahead, the interested party may use or disclose your personal information in the same way as set out in this privacy notice, and subsequently notify you of any changes they may make in terms with how they process your personal data

any other person under a duty of confidentiality to us, including any other members of the Standard Chartered Group, which has undertaken to keep such information confidential.

Your personal data may be processed, stored, shared, transferred or disclosed by us within the Standard Chartered Group or with other third parties for the purposes described in this privacy notice. We do this in order to operate effectively, efficiently and securely in facilitating transactions and providing products and services to our clients, to improve and support our processes and business operations and to comply with our legal and regulatory obligations. This may involve processing, storing, sharing, transferring or disclosing your personal data cross border to other jurisdictions.

Where recipients of your personal data are in jurisdictions that are outside Taiwan, and local laws may not have similar data protection laws as the Taiwan, we will take all reasonable steps necessary to ensure that your personal data has an appropriate adequate level of protection and safeguards to comply with applicable law.

We take the privacy and security of your personal data very seriously. To protect your data, we have put in place a range of appropriate technical, physical and organisational measures to safeguard and keep your personal data confidential, for example, by using contracts with appropriate confidentiality, data protection and security terms in our arrangements with third parties. Standard Chartered Group has implemented information security data privacy policies, including incident management and reporting procedures, rules and technical measures to protect personal data and to comply with legal and regulatory requirements. We train and require staff who access your personal data to comply with our data privacy and security standards. We require our service providers, or other third parties we engage with and to whom we disclose your personal data to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal data.

For the purposes described in this privacy notice, we keep your personal data for business operational or legal reasons while you engage with us and may retain your personal data for a period of time afterwards in accordance with our data retention policy standards and as required by applicable law and regulations. We will delete, anonymise, destroy and/or stop using personal data when we no longer need it or when the purpose described in this privacy notice ceases to exist.

We respect your personal data, and you have the following rights about how we use your information:

• Your right to access your data– you have the right to check whether we hold personal data about you, and you can ask us for a copy of such data and information on how we have used it.
• Your right to correct your data– if your personal details have changed, or you believe we have incorrect or out-of- date information about you, you can ask us to update it.
• Your right to delete your data– you can ask us to delete your personal data. However, we may need certain personal details to provide our products and services to you.
• Your right to restrict or object to processing– you can ask us to stop using your data or change how we use it. However, we may need certain personal details to engage with you or provide our products and services to you.
• Your right to object to automated decision making– you can ask us to review a decision made solely by automated processing if it negatively impacts you.
• Your right to data portability– you can ask us to provide your personal data to another organisation in a format that can be easily read by machines.
• Your right to change or withdraw consent– we may from time to time ask for your consent to process your personal data. If you change your mind, let us know. However, we may not be able to provide our products and services or engage with you without certain personal data.
• Your right to withdraw from direct marketing– you can withdraw your consent and can tell us to stop sending you marketing emails or invitations to surveys at any time.

We will respond to requests to exercise your personal data rights in line with applicable law. We may ask you to verify your identity before processing your request. If you have any questions about your rights, please contact us using the details below.

The following Standard Chartered Group entities act as the agency (sometimes known as controller in other jurisdictions) responsible for processing your personal data in Taiwan:

• Standard Chartered Bank (Taiwan) Limited
• Standard Chartered Bank, Taipei Branch

If you wish to exercise any of your rights under applicable personal data protection laws, please complete the Data Subject Request (DSR) form to help us process your request more efficiently.

For any enquiries about this Privacy Notice, you may contact us by sending a written request to the relevant postal address listed below, or by email at privacy.tw@sc.com.

For clients of Standard Chartered Bank (Taiwan) Limited:

Postal Address:

Standard Chartered Bank (Taiwan) Limited

6F, No.179, Liaoning St., Zhongshan Dist., Taipei 104, Taiwan, R.O.C.

For clients of Standard Chartered Bank, Taipei Branch

You may submit your DSR through the DSR Online Form or send the completed offline DSR to the following postal address:

Standard Chartered Bank, Taipei Branch

5F, No.179, Liaoning St., Zhongshan Dist., Taipei 104, Taiwan, R.O.C.

Got a complaint?

If you have any concerns or complaints about how we’re using your personal data, please use the details in the ‘How to get in touch’ section above.

Cookies

Please see our separate Cookie Policy.

Other Terms and Conditions

There may be specific terms and conditions in our banking and product agreements that govern the collection, use and disclosure of your personal data. Such other terms and conditions must be read in conjunction with this privacy notice.

This privacy notice was updated on 12 December 2025.