Privacy Policy

Statement of Policy

China Resources Enterprise Property Investment Company, Limited (“CREP”) respects the personal data privacy of all individuals and pledges to be in compliance with the requirements of the Personal Data (Privacy) Ordinance of Hong Kong (“PDPO”) so that the privacy of your personal data is protected in accordance with the standard required by law. In doing so, we require all our staff and agents to comply with the PDPO in the same manner as the PDPO applies to CREP as a whole and adhere to the strictest standards of security and confidentiality.

Statement of Practice

1.Kinds of personal data held

The following explains the types of records / personal data held by CREP.

(a) Personnel records, which include but are not limited to job applications, staff files (containing personal details, job particulars, details of salary, payments, benefits etc), leave and training records, group medical and dental insurance records, mandatory provident fund schemes participation records, performance appraisals, disciplinary records, records of termination of personnel;

(b) Records of customers, suppliers / wholesalers, contractors and service providers, which include but are not limited to records (containing personal details, billing information / payment details such as credit card / bank account details, etc.), contracts / transaction records, information collected and / or used in marketing activities and surveys, records of enquiries, correspondence and other records of communications;

(c) Records of investors and business partners, which include but are not limited to records (containing personal details, financial data, preferences, etc.), contracts / transaction records, records of enquiries, correspondence and other records of communications;

(d) Records collected from CREP’s external / internal websites, which include but are not limited to records containing email addresses and personal details, preferences of web-users, location information (including IP addresses), time, duration of website visits, the pages visited and browsing history; and

(e) Other records, which include but are not limited to administration and operational files, records holding personal data provided to CREP from individuals participating in activities organized or run by CREP (including activities for business and non-business purposes), records of requests to access / correct personal data and enquiries from the public, reports, research and publications.

2.Main purposes of collecting and keeping personal data

Personal data will only be used for the purposes stated at the time the data is collected, which broadly speaking, covers business or commercial, administrative, marketing and related activities that are consistent with CREP’s objectives in conducting business as a HKEx listed company and market leader with outstanding brands, operational excellence and synergies among its businesses that focuses on retail, beer, food and beverage businesses in China, with a vision to become a world renowned retail and consumer goods company (“Business Objectives”). However, specific purposes will vary depending on the nature of the personal data held. Examples of specific purposes are explained further below.

Personal data held in:

(a) Personnel records are collected and kept for recruitment and human resources management purposes including but are not limited to hiring, obtaining reference checks, maintaining staff records and assessing work performance, consideration for eligibility for staff benefits, training and development, and for emergency purposes;

(b) Records of customers, suppliers / wholesalers, contractors and service providers are collected and kept for purposes including but are not limited to providing services, evaluating and maintaining business relationships, managing transactions, monitoring and improving the quality of performance, keeping credit records, responding to enquiries, resolving problems, researching and developing products, marketing and promotion;

(c) Records of investors and business partners are collected and kept for purposes including but are not limited to providing services, responding to enquiries, understanding investors’ and business partners’ needs, compiling statistical data, facilitating access to information, evaluating and maintaining business relationships, business planning, monitoring and improving the quality of performance, marketing and promotion;

(d) Records collected from CREP’s external / internal websites are collected and kept for purposes including but are not limited to handling various applications or enquiries submitted through CREP’s external / internal websites, sending newsletters to subscribers registered through CREP’s external website, responding to requests submitted through CREP’s external / internal websites, facilitating website access and compiling statistics on website usage; and

(e) Other records are collected and kept for purposes which vary according to the nature of the record, including purposes such as facilitating administration or office functions, organizing and delivering activities, compiling, summarizing, aggregating and/or de-personalizing personal data in connection with research or statistical/analytical activities carried on by CREP in furtherance of CREP’s Business Objectives.

3.Collection of personal data

(a) General: When CREP collects personal data from individuals, CREP will provide them with a Personal Information Collection Statement ("PICS") on or before the collection in an appropriate format and manner in compliance with the PDPO;

(b) Personal data of minors: When CREP needs to collect personal data from minors, CREP will seek the express consent from the parent or guardian of the minor before collecting the personal data; and

(c) Personal data from CREP’s external / internal websites: In order to provide web-users with a smooth browsing experience, we may need to use technical means (such as cookies) to collect information from web-users when they visit CREP’s external / internal websites. If you are given the option whether or not to accept cookies and you do not accept, you may not be able to take full advantage of our external / internal websites.

4.Duration of retention of personal data

CREP will only hold personal data for as long as it is necessary to fulfill the purpose or a directly related purpose for which they are collected.

5.Disclosure of personal data

CREP will take all practicable steps to keep the personal data you have provided confidential. However, CREP may need to disclose personal data collected by it to such third-parties to facilitate the purpose for which the personal data was collected. In general, the parties to which we may transfer / assign personal data include medical practitioners providing medical services to CREP’s staff, if applicable, any agent, contractor or third-party service provider engaged by CREP to provide services to or on behalf of CREP (e.g. bankers, insurance providers and payroll service providers) and any person to whom CREP is under an obligation to make disclosure under any requirements of any law or for the purposes of any guidelines or codes of practice with which CREP is expected to comply. We may also transfer personal data internally within CREP or to such parent or subsidiary companies of CREP or their respective associates or subsidiaries (on a need-to-know basis) to facilitate the purpose for which the personal data was collected or a directly related purpose.

6.Security of personal data

CREP will take appropriate steps to protect the personal data held by it against unauthorized or accidental access use, loss, processing, erasure, transmission, modification or disclosure. When CREP needs to disclose personal data to outside third-parties, CREP will take appropriate steps to protect the privacy of the personal data to be disclosed (for example, requiring our service providers to keep confidential any personal data with which it comes into contact).

7.Personal data access and correction

Individuals have the right to request access to and to correct their personal data held by CREP. Individuals who wish to access their personal data should make their request by completing the prescribed Data Access Request Form ( https://www.pcpd.org.hk/english/publications/files/Dforme.pdf ) and send the completed form by post to following address or email to

Data Protection Officer

39/F China Resources Building, 26 Harbour Road, Wanchai, Hong Kong

Depending on the nature and extent, a reasonable fee may be charged for requests for data access. There is no prescribed form for making a request to correct personal data held by CREP, individuals may submit their requests in the above manner.

8.Enquiries

Any enquiries regarding personal data privacy policy and practice may be write to the following address:

China Resources Enterprise Property Investment Company, Limited

Data Protection Officer

39/F China Resources Building, 26 Harbour Road, Wanchai, Hong Kong

This PPS has been translated into Chinese. If there is any inconsistency or ambiguity between the English version and the Chinese version, the English version shall prevail.

We may change this Privacy Policy Statement from time to time. We encourage you to check this Privacy Policy Statement occasionally to ensure that you are aware of the most recent version.