Effective Date: January 2026 · Sha Tin Group · Registration 33672200 · Hong Kong SAR
Sha Tin Group is committed to protecting your personal information in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and applicable international standards. This Privacy Policy explains how we collect, use, store, disclose, and safeguard data when you use our website, borrower portal, broker portal, and lending services.
Information We Collect. We collect personal identification data (full name, date of birth, nationality, passport number, gender), contact information (email, phone, WhatsApp, residential address), financial and corporate data (bank details, company registration, assets, revenue, project budgets), uploaded documents (passport, utility bills, certificates, feasibility studies, photographs), and technical data (IP address, browser, device, login timestamps, activity logs).
How We Use Information. Data is used exclusively for loan application processing, identity and KYC verification, underwriting and risk assessment, communication regarding your application, fee and payment processing, regulatory compliance, fraud prevention, broker commission administration, and service improvement. We do not sell personal data to third parties for marketing purposes.
Data Sharing. Information may be shared with authorised Sha Tin Group staff, assigned legal counsel, government-accredited financial advisors, compliance auditors, and government authorities when required by law. All processors are bound by confidentiality and data protection agreements.
Data Security. We implement encryption at rest and in transit, secure server infrastructure, role-based access controls, multi-factor authentication options, and regular security audits. Passwords are hashed using bcrypt. Document uploads are stored in protected directories with access logging via our Edith audit system.
Data Retention. Application and transaction data is retained for seven years post-loan closure or rejection, in accordance with Hong Kong financial regulations. You may request deletion subject to legal retention requirements.
Your Rights. You have the right to access, correct, or request deletion of your personal data, withdraw consent where applicable, object to certain processing, and lodge complaints with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.
Cookies & Tracking. Our website uses essential cookies for session management, language preferences, and security. Analytics may be used to improve user experience. You may disable non-essential cookies in your browser settings.
Contact. For privacy inquiries: Data Protection Officer, Sha Tin Group, 39/F Wang Kwong Rd, Kowloon Bay, Hong Kong. Email: info@shatin-hk.com | Tel: +852 972 1318
