Client Icon

Privacy Policy

Wilby Securities Privacy Policy

Last Updated: November 11, 2022

Wilby Securities and all related affiliates and subsidiaries (collectively "WS," "we," or "us") respect your privacy and are dedicated to safeguarding it.

Websites and Services Covered by This Privacy Policy

This privacy policy applies to our privacy practices concerning information related to your use of and other websites operated by us, from which you access this privacy policy (collectively referred to as the "Sites"), as well as our online services on the Sites and services related to our business products (the "Services"). We also explain your rights and how you can contact us about our privacy practices.

This privacy policy does not apply to websites or communications with their own privacy policies or to websites of other companies or entities linked to this website. To learn about the privacy policy of a linked site, please refer to the privacy policy for that site.

WS acts as the data controller for personal information collected through the Sites. We are also the controller for personal data collected for our key business contacts. At times, we act as a controller for personal data provided in relation to our business products. If you have questions about when we act as a controller or about the processing of your personal data (or any content in this policy), please find our contact details, including those of our Data Protection Officers, in the How to Contact Us section at the end of this policy.

Please carefully read this policy. Your use of the Sites and/or the Services, including your disclosure of any personal information into the Sites and/or Services, is subject to and governed by this policy.

What This Privacy Policy Covers

This Privacy Policy covers:

  • Personal information we collect about you;
  • Sensitive data;
  • How we use and share personal information;
  • How we transfer and store personal information;
  • How long we keep personal information;
  • Your rights;
  • Children’s privacy:
  • Effective date and policy changes; and
  • How to contact us.

Personal information we collect about you

We collect and store information that you voluntarily provide to us, information related to your visit and usage of our Sites, as well as information provided by or through our clients in connection with our Services. We also collect certain information when you:

  • Submit inquiries via an online form;
  • Sign up for Services offered by WS;
  • Apply for jobs with WS via our online portal;
  • Browse our Sites; or
  • Engage with our electronic marketing communications (also referred to below as emails).

Information that you provide us

Personal information that you provide directly to us will be apparent from the context in which you provide it, for example:

  • If you fill out a form on our Sites, you will generally provide your name, contact details, and any other information required by the form, such as the content of your inquiry;
  • If you sign up to receive electronic marketing communications from us, you will generally provide your name, email address, and other contact information, along with your product or topic preferences;
  • If you sign up for any of the online Services we provide, you will generally provide your name, contact information, and any other information necessary to access the feature;
  • If you apply for a role with WS via our online application facility, you will generally provide your name, contact details, and a copy of your CV or resume. If you apply using your LinkedIn profile, you will generally provide information about your LinkedIn account.
  • If you are a key contact in a business that has a business account with WS, we generally have your name, email address, phone number, title, and other information relevant to your interaction with WS on behalf of your employer.
  • If you are a person that we hold information on in relation to Services provided by us, we generally have information you have provided to us in order to open and administer your account and/or the register of the Fund(s) you own shares of, which could include data to detect and prevent fraud, anti-money laundering, and terrorism financing, as well as to perform negative news and sanctions screening.

Information that is collected automatically

Our web servers may automatically log certain information, including your device type, operating system type, browser type, domain, the website from which you were referred to our Sites (if any), and other system settings, as well as the language your system uses and the country, city, and time zone where your device is located. The web server logs may also record the address of the web page that referred you to our Sites and the IP address of the device you use to connect to the Internet. Additionally, they may log details about your interaction with the Sites, such as the pages you visit. To control which web servers collect information automatically, we may use tags called "web beacons" – small files that link web pages to specific web servers and their cookies. We may also gather information from your browser, such as your browsing history on the Sites, and combine it with data obtained from forms and emails to better understand and respond to your needs. For more details, please refer to our Cookie Policy.

“Do Not Track” Signals

Your browser settings may have the option to send a "Do Not Track" signal to websites and online services you visit. However, like many other websites and online services, we currently do not process or respond to "Do Not Track" signals from your browser or other mechanisms that provide choice.

We and our service providers, who offer the technology platforms supporting certain aspects of the Services (e.g., video clips), may collect personal information about how our visitors use the Services online. Except as described in this Privacy Policy, we will not collect personal information about you when you use the Sites or the Services unless you voluntarily provide such information to us via email or other means. We will use your personal information to process your request and respond to you, if applicable.

If you are a client of WS

In addition to collecting information directly from you, we may gather information from third-party sources to fulfill our due diligence obligations related to your new account opening. This third-party data enables us to verify the information you provided, ensuring compliance with legal requirements such as "know your customer" laws.

Sensitive data

We understand that certain jurisdictions require heightened protection for specific sensitive personally identifiable information, such as state or national ID numbers, or other details concerning racial or ethnic origin, health, or medical records ("Sensitive Data"). Generally, we do not collect Sensitive Data from you.

In the limited cases where we do seek to collect such information, we will do so in accordance with applicable data privacy law requirements.

How we use and share personal information

Information that we collect from you

We may use the personal information you provide for various purposes, including, but not limited to:

  • To respond to inquiries or service requests and monitor the responses;
  • To provide information about and market our products or Services that we believe may be of interest to you. This includes personalized product, thought leadership, and event communications;
  • To manage and enhance the Sites and assess their usage and effectiveness;
  • To develop our business and inform our marketing strategy, including monitoring marketing campaign effectiveness;
  • To assess the usage of the Services we provide;
  • To operate our business in line with industry standards and applicable law, which may involve supporting the Services, addressing inquiries and requests, preventing fraud, and monitoring and archiving communications;
  • To administer client accounts, including anti-money laundering, sanctions, and anti-fraud checks.

We use the personal information for the purposes mentioned above because we have a legitimate interest in operating and improving our business that is not overridden by your interests, rights, and freedoms to protect personal information about you. We will only send you direct marketing materials if you have given consent for us to do so, unless such consent is not required, in which case you will be provided the opportunity to opt-out of receiving direct marketing materials.

Information that we collect automatically

We utilize specific limited personal information collected automatically through cookies, non-cookie-based tokens, web beacons, and other automated means to achieve various purposes. These purposes include enhancing the visitor experience on the Sites, facilitating site usage, gathering statistics about site visits, and understanding visitor browsing behavior. Additionally, the information helps in diagnosing technical and service issues, administering the Sites, and identifying visitors subscribed to receive communications from us. We analyze clickstream data to determine how much time visitors spend on web pages, their navigation patterns, and how we can improve the Sites to better serve our visitors' needs. Our use of personal information for these purposes is driven by a legitimate interest in operating and enhancing our Sites, which does not override your interests, rights, and freedoms to protect personal information about you. For more information, please refer to our Cookie Policy.

We also collect personal information when you interact with our email communications. This includes data about email opens, clicks, and responses to our event communications. Our use of personal information for these purposes is based on a legitimate interest in expanding our business and developing our marketing strategy. For more information, please refer to our Cookie Policy.

Other uses of your personal information

We may also utilize the personal information we collect to safeguard against and prevent fraud, claims, and other liabilities, as well as to comply with applicable legal requirements, industry standards, and our policies and terms. When necessary to protect, exercise, or defend our legal rights, or when required by relevant laws, we use personal information for these purposes.

Mobile Phone Information

For certain products and services, we may authenticate instructions purportedly from you by calling back a telephone number you provided earlier. By giving us a mobile phone number for call back purposes or submitting an instruction, you authorize (on behalf of yourself and any Authorized Person) the carrier (AT&T, Sprint, T-Mobile, U.S. Cellular, Verizon, or any other branded operator) to disclose to us and our third-party service providers the mobile number, network status, customer type, customer’s role, billing type, mobile device identifiers (IMSI [International Mobile Subscriber Identity] and IMEI [International Mobile Equipment Identifier]), and other subscriber status and device details, if available. This is solely to verify the caller's identity and prevent fraud during the relationship. Please note that this information is used only for call back verification and is not retained after the verification is completed.

In addition to the described uses above, we may use the personal information you provide or we collect for other purposes. In such cases, we will provide you with an additional privacy notice explaining the purposes and our legal basis for using the personal information.

Sharing your personal information

We do not sell any personal information collected about you. We do not disclose any personal information about our current or former clients to anyone, except as described in this policy, as permitted by contract or law, and subject to confidentiality obligations in certain jurisdictions.

We may disclose or share personal information about our customers with our affiliates, as permitted by law, for them to provide services. Additionally, we may share your personal information with service providers who perform services on our behalf, such as hosting providers and advisers. All service providers are bound by legally binding agreements to use or disclose personal information solely for performing services on our behalf or complying with applicable legal requirements. We may share personal information with our affiliates and service providers for reasons such as providing information about our affiliates' products and services or relying on their services to meet your requirements.

In addition, we may disclose your personal information in various circumstances: (i) at the request of a bank or regulatory agency, or during an examination of our organization by bank or examiners; (ii) to our internal or external auditors or attorneys; (iii) when necessary to prevent physical harm or financial loss; (iv) if required or permitted by law, such as in response to a court order or law enforcement agency request; (v) to protect vital interests of a person; or (vi) in the event of selling or transferring all or a portion of our business or assets (e.g., reorganization, dissolution, or liquidation).

Transferring and Storing Personal Information

As a global organization, we may transfer personal information internationally to countries where we conduct business, which may have different data protection laws from your country. We maintain internal policies and procedures to ensure equivalent levels of protection across our organization. Personal information may be accessed under lawful orders made in foreign jurisdictions where it is stored or processed. If you are in the EEA, the United Kingdom, or Switzerland, we comply with applicable legal requirements for the transfer of personal information to recipients outside these regions. Such transfers will occur if:

  • The recipient country has been granted a European Commission adequacy decision;
  • The recipient in the U.S. has certified to the EU-U.S. Privacy Shield Framework;
  • We have implemented appropriate safeguards, such as EU Model Clauses;
  • The recipient has adopted Binding Corporate Rules regarding the personal information transferred; or
  • The transfer is authorized by applicable legal requirements.

You may request details of the safeguards we have put in place for personal information transfers by contacting us as described in the "How to Contact Us" section below.

Retention of Personal Information

The duration of personal information retention depends on the purpose for its collection. Generally, we keep personal information for as long as needed to fulfill the original purposes, and then we delete or anonymize it. However, we may retain it longer if legally required or to comply with obligations like tax and accounting.

Typically, we retain personal information as follows:

  • Personal information you provide through our Sites: kept until we respond to your request and for a short period thereafter;
  • Personal information provided for direct marketing communications: kept during our relationship until you opt out or we have no contact for a significant time;
  • Personal information used for analytics: retained for the duration necessary for analytics, then anonymized or aggregated;
  • Website logs (e.g., access, error, and security logs): kept for several months to monitor and maintain Site security.

Your Rights

If you provide us with personal information, you have the right to inquire about the nature of the information stored and processed by us. We will provide reasonable access to your personal information and, if necessary, allow you to review and correct inaccuracies. Requests for access can be made in writing to:

If you are in the EEA or Switzerland, you have additional rights related to your personal information we hold:

  • To request confirmation of whether we process your personal information and obtain a copy of it;
  • To request rectification or updating of inaccurate, incomplete, or outdated personal information;
  • To request erasure of your personal information in certain circumstances, such as withdrawing your consent;
  • To request restriction of your personal information use in certain circumstances;
  • To withdraw your consent for processing personal information;
  • To request a copy of your personal information in a structured, machine-readable format in certain circumstances.

We may take reasonable steps to verify your identity before fulfilling your request. We will respond to your request within the required time under applicable law after confirming your identity.

You also have the right to lodge a complaint with your country's data protection supervisory authority.

Children’s Privacy

We acknowledge the need to protect the privacy of personal information collected from children. Our Sites and Services are not intended for children.

Effective Date and Policy Changes

Each time you use our Sites, the current version of the Privacy Policy will apply. The policy is subject to change from time to time, and the "Last Updated" section indicates the last update date. We will post the current privacy statement on this page and any changes will be effective on the day they are posted. By using the Sites after changes, you accept the revised Privacy Policy.

Unless stated otherwise, our current Privacy Policy applies to all information we have about you. We will not materially change our policies and practices to reduce privacy protection without your consent.

How to Contact Us

If you have questions or comments about this Privacy Policy or how your personal information is processed, you may contact us:

By email at:

In writing at:

Attention: Privacy Officer

14/F, OTB Building, 259-265 Des Voeux Road Central, Hong Kong

You may also contact our Data Protection Officers:

By email at:

In writing at:

Attention: Data Protection Officer

Wilby Securities

14/F, OTB Building, 259-265 Des Voeux Road Central, Hong Kong

California Consumer Privacy Act Disclosures 

Last Updated: 21 May 2020

The California Consumer Privacy Act ("CCPA") requires us to disclose specific information about our collection, use, and disclosure of personal information for California residents. These California Consumer Privacy Disclosures ("Disclosures") are meant for California consumers and are supplementary to the Wilby Securities Privacy Policy mentioned above. Please note that these Disclosures do not apply to Wilby Securities personnel, and sections 2-4 are not applicable to job applicants at Wilby Securities.

1. Notice of Collection and Use of Personal Information

Based on your relationship with us, we may collect (and may have collected in the past 12 months prior to the effective date of these Disclosures) personal information falling into the following categories:

  • Identifiers: includes real names, aliases, postal addresses, unique personal identifiers (e.g., device identifiers, cookies, beacons, pixel tags, mobile ad identifiers), online identifiers, IP addresses, email addresses, Social Security numbers, driver's license numbers, passport numbers, etc.
  • Additional Data Subject to Cal. Civ. Code § 1798.80: includes signatures, state identification card numbers, insurance policy numbers, education details, bank account and credit/debit card numbers, and other financial and medical information.
  • Protected Classifications: covers characteristics protected by California or federal law, like national origin, age, gender, sexual orientation, marital status, medical conditions, etc.
  • Commercial Information: includes records of purchased products/services and other purchasing or consuming histories.
  • Online Activity: pertains to internet and electronic network activity information, such as browsing and search history.
  • Geolocation Data
  • Sensory Information: includes audio.
  • Employment Information: covers professional and employment-related data.
  • Education Information: includes non-public education data as defined in the Family Educational Rights and Privacy Act.
  • Inferences: refers to inferences drawn from the above information to create a profile reflecting your preferences, behavior, attitudes, etc.

We may use (and may have used in the past 12 months prior to the effective date of these Disclosures) your personal information for the purposes described in our Privacy Policy and for the following CCPA business purposes:

  • Performing services, such as maintaining accounts, customer service, processing orders, advertising, analytics, etc.
  • Auditing related to interactions, ad impressions, and compliance.
  • Detecting and preventing security incidents and fraudulent activities.
  • Debugging to identify and fix errors.
  • Internal research and technological development.
  • Verifying and maintaining service/device quality or safety.
  • Managing career opportunities with Wilby Securities.

2. Sources of Personal Information

Depending on your relationship with us, in the 12-month period prior to the effective date of these Disclosures, we may have acquired personal information about you from the following categories of sources:

  • Directly from you, such as when you enter your personal information on our Site or contact us.
  • Your devices, including your online activity when visiting our Site and how you interact with it.
  • Our affiliates.
  • Vendors providing services on our behalf.
  • Our joint marketing partners.
  • Online advertising services and advertising networks.
  • Data analytics providers.
  • Government entities.
  • Operating systems and platforms.
  • Social networks.
  • Data brokers.

3. Sharing of Personal Information

Based on your relationship with us, in the 12-month period prior to the effective date of these Disclosures, we may have disclosed the following categories of personal information about you to third parties for business purposes as indicated below:

Category of Personal Information

Category of Third Party


Data analytics providers, government entities, operating systems and platforms

Additional Data Subject to Cal. Civ. Code § 1798.80 Law

Government entities

Protected Classifications

Government entities

Commercial Information

Government entities

Online Activity

Data analytics providers, operating systems and platforms

Sensory Information

Government entities

Employment Information

Government entities

Education Information

Government entities


Government entities

As stated in our main Privacy Policy, we do not sell any personal information, including information of minors under sixteen (16) years of age.

4. Your Specific Rights under the CCPA

California residents have certain specific rights concerning their personal information under the CCPA. The following outlines these rights:

Right to Request Information

You can request, twice within a 12-month period, that we disclose to you the personal information collected, used, disclosed, and sold about you during the past 12 months.

Right to Request Deletion of Personal Information

You have the right to ask us to delete certain personal information that we have collected from you.

Opt-Out of Sale

You can opt-out of the sale of your personal information. We do not sell any personal information, including minors' information under sixteen (16) years of age, as stated in our main Privacy Policy.

How to Exercise Your Rights

We provide three methods to submit a request for information or deletion of your personal information:

  1. You may use the dedicated request form on our website: (;
  2. You may submit a request via email to;
  3. You may call us toll-free at +852 5808 2955 and ask to speak to the WS Privacy Officer.

Please note that we must verify your identity before acting on your request, which may involve providing us with identifying information already in our records. If you request specific pieces of personal information, we may require you to sign a declaration under penalty of perjury to verify your identity. We'll inform you if we're unable to verify your request as required by the CCPA.

If you're an authorized agent making a request on behalf of someone else, you must provide written and signed permission from the individual along with other necessary information.

Right of Non-Discrimination

We won't discriminate against you for exercising your CCPA rights. This means we won't deny goods or services, charge different prices, or provide different levels of goods or services because you've exercised your rights under the CCPA.

5. Contact Information

If you have questions or concerns about our privacy policies and practices, please contact us as described in the "How to contact us" section of our main Privacy Policy.