YES Group Privacy Statement

The Yes Group of Companies ("YES") is committed to protecting your privacy when you visit and use our web sites. This Privacy Statement helps you understand how YES collects, uses and safeguards the personal information you provide to us while using our web sites. If you have any questions or require clarification of any part of this Privacy Statement, please do not hesitate to Contact us.

How information may be collected
1. Browsing our web sites. Personal information is not collected by YES when you simply browse any of our web sites. However, similar to most other commercial web sites, YES utilizes a standard technology called a "cookie" to collect information, which we use to make your visit to our web sites as smooth and seamless as possible.
2. Completing an online form. While browsing our web sites you may choose to fill in one of YES’ online inquiry forms, in order to obtain further information or provide comments on our services. You will know that we are collecting this data because you enter it voluntarily onto our forms.
3. Web hosting. Once you have become a YES customer, your contract will allow you access to the portion of our database containing your organization’s personal information and you will be able to update it as appropriate.
4. Credit card payments and remittances. Where a merchant uses the YESpayments™ credit card payments facility, you will provide YES with information about yourself, your credit card and/or bank for onward processing of a transaction to your card. If you chose to send or receive one or more high-value transactions, we may require additional information from you to comply with international money laundering requirements.
5. Joining one of the Yes communities, such as Yes Pinoy’s My YES Pinoy. Once you have become a registered as a customer, you can input your personal details into the database to allow you communicate or contact others. You can update this, at any time.
6. General. If you correspond with us, such as by e-mail or fax, we will retain such information on our files. We may, from time to time, delete such records as permitted by law.

Information Use
1. Online forms. The personal information voluntarily submitted by you via one of YES’ online forms is used to process your request for information or comments on our services, for purposes such as correspondence and for use in processing your enquiry.
2. Web hosting. If you subscribe to our web hosting service, YES may need to access your organization’s records in the performance of our contract with you. These records may contain personal information. We will not use any such information, except as first agreed by you or for the sole purpose of assisting us in the administration of your account.
3. Credit Card payments and remittances. This information will only be provided to the financial institutions involved in the transaction, to the credit card owner or to the merchant whose web site the transaction was processed from. Where you load a Smart money card of another person, we will provide information to that person informing them accordingly. No information will be passed on to any other party without your consent, except if required to do so by legal process.
4. Joining a Community. No information will be provided to parties outside of YES, except in so much as you agree for that information can be passed on (for example, to display your details for the school you attended).
5. General. On occasions YES may send you notices concerning your account to inform you of new features, changes in our services, upcoming events or promotional offers. In addition, if you make enquiries of us, by e-mail, fax, etc., we will use information you provide to deal such enquiries.
Information provided by you may be shared with YES’ subsidiaries and affiliates. If you sign up for YESpayments™ or to load a Smart money card with Yes Pinoy, this information will also be shared with our payment gateway providers and banks. Some of these companies may be located outside your country of origin, and by submitting information to this web site you are consenting to such disclosure outside your country of origin.

Other than as described above, YES will not disclose personal information to third parties without first obtaining your express consent, unless such disclosure is required in order to (a) comply with the law or with legal process served upon YES; or (b) protect and defend the rights or property of YES, its affiliates or customers.
YES’ web sites may contain links to advertisers' or other merchants' web sites. YES cannot be held responsible for the privacy policies utilized by these organizations.
The web site may place a "cookie" on your machine; for example to provide personalized services and/or maintain your identity across multiple pages within or across one or more sessions. This information may include, but is not limited to, relevant login and authentication details as well as information relating to your activities and preferences across our Websites.
In some cases, as per the requirements of the Ordinance, the Company is required to see original documentation before we may use the personal data such as with Personal Identifiers and/or proof of address.

Corporate Policy
YES’ officers, management, and members of staff shall, at all times, respect the confidentiality of and endeavor to keep safe any and all personal data collected and/or stored and/or transmitted and/or used for, or on behalf of, YES.
YES shall endeavor to follow the following six principle: to ensure that personal data is only collected for a lawful purpose; that it is accurate; that it is not used for purposes other than the purpose for which it was provided without the permission of the person it relates to; that it is kept secure; that the type of data held by a particular organization should be publicly known; and that people about whom data is held should be able to have access to it. All collection and/or storage and/or transmission and/or usage of personal data by YES shall be done in accordance with these principles.
Where an individual legitimately requests access to and/or correction of personal data relating to the individual and held by YES, then YES shall provide and/or correct that data not later than 40 days after receiving the request.

Disclosure of Personal Data
All personal data held by the Company will be kept confidential but the Company may, where such disclosure is necessary to satisfy the purpose, or a directly related purpose, for which the data was collected provide such information to the following parties:
a) Any subsidiaries, holding companies, associated companies, or affiliates of, or companies controlled by, or under common control with the Company;
b) Any person or company who is acting for or on behalf of the Company, or jointly with the Company, in respect of the purpose or a directly related purpose for which the data was provided;
c) Any other person or company who is under a duty of confidentiality to the Company and has undertaken to keep such information confidential, provided such person or company has a legitimate right to such information; and
d) Any financial institutions, charge or credit card issuing companies, credit information or reference bureau, or collection agencies necessary to establish and support the payment of any services being requested.
Personal data may also be disclosed to any person or persons that have a right under Hong Kong law to gain access to such information provided they are able to prove their authority to access such information. For example, if the Company were served with a court order demanding certain customer information then the Company would disclose the information to the duly appointed officer of the court or such other persons as the court orders.

Security
When you complete any of YES’ online inquiry forms or use our web hosting service, the information you exchange is collected on our secure server, which utilizes the Secure Socket Layer (SSL) protocol. When you use any other electronic means to send confidential information to YES, such as e-mail, we suggest that you first establish a secure session using SSL, if available. SSL encrypts the information you enter to make it less vulnerable to hackers. YES uses these and other reasonable precautions to keep information disclosed to us secure. However, YES is not responsible for any breach of security or for any actions of third parties that receive the information.
Physical records containing personal data are securely stored in locked areas and/or containers when not in use.
Computer data are stored on computer systems and storage media to which access is strictly controlled and/or are located within restricted areas.
Access to records and data without appropriate management authorization are strictly prohibited. Authorizations are granted only on a "need to know" basis that is commensurate with an individual's responsibilities and their training.

Commitment to Privacy
YES is committed to preserving individual privacy rights on the Internet and in all aspects of commerce. For additional information about our commitment to protecting the privacy of users or for further clarification of any part of this Privacy Statement, please do not hesitate to contact us.