Partner Privacy Notice (PICS)
Last updated: 2026-09-29
How SlashHub collects and uses a partner’s personal data to run the TimePlate Partner Programme, and the partner’s rights under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
1. Who we are
This notice is issued by SlashHub Limited ("SlashHub", "we", "us"), the operator of TimePlate, for the TimePlate Partner Programme (合作者系統). It applies when you apply to, or participate in, the Programme.
It should be read with the TimePlate Privacy Policy and the TimePlate Partner Programme Agreement.
2. What we collect (the minimum)
Contact and profile data: name, email address, phone number, language preference and company (if any).
Payout data: the details needed to pay you (an FPS identifier, or bank name/code and account number). These are provided to our payment provider to set up the payee; the full account number is not stored on our systems.
Programme activity: your invite code, attribution records, commission records and payout history.
A self-declaration that you are not subject to sanctions and that the details you give are accurate.
Technical data: limited security logs generated when you use the partner portal.
We do NOT collect identity documents such as an HKID, passport or Business Registration number. Payee identity verification is carried out by our licensed payment provider when the payee is set up.
3. Why we use it
To assess your application and operate the Partner Programme.
To attribute customers to you and to calculate, approve and pay commission.
To prevent, detect and investigate fraud, misuse, self-referral and breaches of the Partner Agreement.
To comply with our legal and regulatory obligations (including applicable sanctions requirements).
To communicate with you about the Programme, your account, your commission and your payouts.
To keep accounting and business records relating to our relationship.
4. Lawful basis
We rely on: (a) performance of our contract with you (the Partner Agreement); (b) our legitimate interests in operating and protecting the Programme and in preventing fraud; (c) compliance with legal obligations; and (d) your consent where required.
5. Use limitation
Your data is used only for the purposes above. We do not sell your personal data, and we do not use it for direct marketing without your consent.
6. Transfers and service providers
We share the minimum necessary with service providers who help us run the Programme, including our licensed payment provider for payouts, and our cloud hosting and email providers. They may process data outside Hong Kong; where they do, we take reasonable steps to ensure comparable protection. A list of our service providers is available on request.
7. Security
We use access controls and masking in user interfaces. Payment account numbers are held by our payment provider, not stored on our systems. If we become aware of a breach affecting your personal data, we will contain it and notify you and any regulator as required by law.
8. Retention
We keep commission and payout records for as long as needed for accounting, dispute-resolution and legal-defence purposes (currently 7 years), after which they are deleted or anonymised.
9. Your rights
Under the Personal Data (Privacy) Ordinance (Cap. 486) you may request access to, and correction of, your personal data. You can update most data in the partner portal (Profile). Requests: privacy@slashhub.hk. We may charge a reasonable fee for an access request and will reply within the period required by law.
If you believe your privacy has been infringed, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).
10. Tax
Commission is your income. You are solely responsible for your own tax registration and filings. SlashHub does not file tax returns on your behalf.
11. Enquiries
Privacy enquiries: privacy@slashhub.hk. Programme enquiries: partners@slashhub.hk. We may update this notice; the current version is shown above.