Privacy Statement
Latest revised: April 28, 2025
Privacy Statement Summary
This privacy statement explains what information we gather about you, what we use that information for and who we give that information to. It also sets out your rights in relation to your information and who you can contact for more information or queries. Includes the following:
Who this privacy statement applies to and what it covers?
This privacy statement applies to Deloitte Qinyue Digital Technology (Shanghai) Co., Ltd. located in Mainland China (registered address: Room 601, No. 117 Yincheng Road, China (Shanghai) Pilot Free Trade Zone, Zip Code 200002), and also applies to its affiliated entities in Mainland China，Hong Kong, and Macao. (hereinafter referred to as “Deloitte,” “us,” or “the firm”).
We are committed to protecting your privacy and handling your information in an open and transparent manner.
This privacy statement sets out how we will collect, handle, store and protect information about you when you use "BDH".
When we refer to “BDH” or “this website” in this policy we mean the specific website deployed on Ali Cloud server, and with deloitte.com designated as Deloitte China in the left upper hand corner, and to specific webpages with a URL commencing bdh.tax.deloitte.com.cn
In this privacy statement, your information is sometimes called “personal data” or “personal information”. We may also sometimes collectively refer to handling, collecting, protecting and storing your personal information as “processing” such personal information.
What information we collect?
We may collect personal information when you interact with this website, such as if you choose to register or create a user profile on this website (e.g., to gain access to specific content, respond to a survey or request communications about specific areas of interest), or otherwise provide it to us. Depending on the specific Communication you are receiving, or the Web page of this website you are using, such information may consist of Company Name, Organizational, Position, Employee No, Name, Gender, Work or Home Address, Email, Phone Number, Birthday, Country of Birth, Nationality, Native Place, ID Type, ID Number, Passport , Marital Status, Entry Time, Financial Information, Public Holiday Time and other information you provide to us.
When using a Mobile App, we collect your personal information such as Company Name, Organizational, Position, Employee No, Name, Gender, Work or Home Address, Email, Phone Number, Birthday, Country of Birth, Nationality, Native Place, ID Type, ID Number, Passport , Marital Status, Entry Time, Financial Information, Public Holiday Time. We may also collect information relating to your device, including your operating system. The information collected will depend on the functionality of the specific Mobile App you are using. If any other information is collected relating to your use of a Mobile App, such information will be specified in the Mobile App.
Additionally, we may collect or obtain such data when you use this website because you give it to us (for example in a form on this website), because other people give that data to us or because it is publicly available.
The types of personal data that we collect may vary depending on how you use this website. In some rare circumstances, we might also gather special categories of personal data about you because you volunteer that data to us or we are required to gather that data as a result of legal requirements imposed on us.
We understand the importance of protecting children's privacy. This website and services are not designed for, or intentionally targeted at, children. It is not our policy to intentionally collect or store information about children.
How we use information about you?
Use of personal information collected via this website
We may use your personal data collected via this website:
We may also use your personal information for the purposes of, or in connection with:
Your personal data may also be used to protect our rights or property and that of our users and, where appropriate, to comply with legal or regulatory process.
The legal grounds we use for processing personal information
Based on our legitimate rights to allow visitors effective use of this website or your explicit consent for us to process such information, and in relevant circumstances, where we have entered into a service contract with the company you are affiliated with, processing your personal information is necessary for the fulfillment of that contract; we use your personal data for the purposes mentioned above.
We do not usually seek sensitive information (e.g., data relating to race or ethnic origin, religious beliefs, criminal record, physical or mental health, or sexual orientation) from visitors. We will, where necessary, obtain your explicit consent to collect and use such information. We will only provide you with certain marketing materials where we have obtained your explicit consent to provide you with such marketing materials.
Who we disclose your information to?
In connection with one or more of the purposes outlined in the “How we use information about you?” section above, we may disclose details about you to: competent authorities (including courts and authorities regulating us); Other members of Deloitte's network that need to be disclosed to, and third parties that provide services to us and/or Deloitte's network (whether they are located in or outside our jurisdiction); our agents or subcontractors (whether located within or outside our jurisdiction) for the purpose of providing administrative, telecommunications, computer, infrastructure or other support services to us in connection with the operation of our business (as the case may be).
Where the recipient is not a member of the Deloitte Network, the adequate safeguard might be a data transfer agreement with the recipient based on standard contractual clauses (if applicable) for transfers of personal data to such receiving party.
We may also need to disclose your personal data if required to do so by law, a regulator or during legal proceedings.
We may share non-personal, de-identified and aggregated information with third parties for several purposes, including data analytics, research, submissions, thought leadership and promotional purposes.
By providing personal information through this website, you are consenting to the disclosures described above.
Protection of your personal information
We use a range of physical, electronic and managerial measures to ensure that we keep your personal data secure, accurate and up to date. These measures include:
Although we use appropriate security measures once we have received your personal data, the transmission of data over the internet (including by e-mail) is never completely secure. We endeavor to protect personal data, but we cannot guarantee the security of data transmitted to us or by us.
In case of any information security incident, usually defined as the situation which as reasonably suspected may lead to unauthorized or improper collection, use, access, disclosure, modification and/or exposure of personal information, including but not limited to malicious attack, accidental data leakage, password theft, etc. You can contact us through https://www2.deloitte.com/cn/en/footerlinks/contact-us.html or CNPrivacy@deloitte.com.hk . When we know that there is an information security incident at the platform, “BDH”will promptly publicize it on the website or inform you separately according to the law, and take a series of necessary control measures to reduce or prevent the loss of personal information and reduce the impact of information security incident.
How long we keep your information for?
We will hold your personal data on our systems for the longest of the following periods: (i) as long as is necessary for the relevant activity; or (ii) any retention period that is required by law.
Your rights
You may have various rights in relation to your personal data. In particular, you may have a right to:
To exercise any of your rights (including making complaints and reports), or if you have any other questions about our use of your personal data, please click the "Contact us" button on the PC homepage or "My" –"About us" -"Feedback" on the app to contact us.
You may also use these contact details if you wish to make a complaint to us relating to your privacy.
In all cases we will treat your requests in accordance with applicable legal requirements.
Right to complain
If you have any questions regarding this Privacy Statement or you are unhappy with the way we have handled your personal data or any privacy query or request that you have raised with us, please click the "Contact us" button on the PC homepage or "My" –"About us" -"Feedback" on the app to contact the software administrator service.
Changes to this privacy statement
We may modify or amend this privacy statement from time to time.
To let you know when we make changes to this privacy statement, we will amend the revision date at the top of this page. The new modified or amended privacy statement will apply from that revision date. Therefore, we encourage you to periodically review this statement to be informed about how we are protecting your information.