Privacy Notice

Contact us

Call us on: +356 2380 8000 Find a branch

Request a callback

Every customer enquiry is important to us. By providing details about your business interests we can direct your enquiry to our most relevant team member.

Please don’t enter confidential information such as your bank account details here.
All fields are mandatory unless otherwise indicated as optional.

  1. Current: Step 1 of 2 01
  2. 02 Step 02

Reason for contacting us

Enter a topic
Enter a topic

Contact details

Please enter your name
Please enter your telephone number

When may we call you?

Preferred time of day

We will call you within the next 3 business days


Request a call-back - Your business interests (optional)

Every customer enquiry is important to us. By providing details about your business interests we can direct your enquiry to our most relevant team member.

Please don’t enter confidential information such as your bank account details here.
All fields are mandatory unless otherwise indicated as optional.

  1. 01 Completed Step 01
  2. 02 Current Step 02

Business size (optional)

Your business turnover

Your industry sector (optional)

Your market interest (optional)

Which international markets interest you?

Add your business interests

Please don’t enter confidential information such as your bank account details here.
All fields are mandatory unless otherwise indicated as optional.

Business size

Your business turnover

Your industry sector

Your market interest

Which international markets interest you?

Request a callback

  • Sorry

We’ve encountered a problem

We couldn’t send your message. Please try again, return later or call us on

+356 2380 8000

Request a callback

  • Thank you

We’ll be in touch

A Relationship Manager from HSBC Malta will give you a call within three business days.

Your interests

  • Business name:
  • Turnover:
  • Sector:
  • Location:
  • International markets:

Add your business interests

We won’t sell your data or misuse it. Read how we handle your details in our cookie policy.

Your privacy

Your privacy is important to us. This notice (Privacy Notice) applies to personal information we collect from you when you use this site. If you’re an HSBC customer, or otherwise have a relationship with us, we may also have provided you with a separate privacy notice setting out how we use your personal information, which will also apply. You can also find that privacy notice by visiting the website for the product or services we provide you at or by contacting your customer service team.

Some of the links on this website may lead to HSBC or non-HSBC websites with their own privacy notices, which may be different to this notice, and you should read those notices carefully.

For the purposes of this Privacy Notice the data Controller is HSBC Bank Malta p.l.c. having registration number C 3177 and its registered office at 116, Archbishop Street, Valletta, VLT 1444, Malta. We’ve also set out contact details towards the end of this notice.

Our new Privacy Notice

In March 2021 we updated our Privacy Notice to add clarity to how your data is shared with social media platforms for marketing purposes, and how you opt out.

We want to make it easier for you to find out how we collect, use and protect your information, so we regularly update our Privacy Notices.

For new and existing customers, the full versions of our Commercial Banking Privacy policy is available for download and review.

HSBC CMB Privacy Notice (PDF, 87Kb)

If you are browsing our website and social media page, you can view our Website and Social Media Privacy Notice.

Information we may collect from you

We may collect and process the following information about you:

  • Information that you provide to us, for example when you fill out a contact or web form, or if you register to receive alerts or updates
  • Information that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data

We may also ask you for information if you experience problems when using this site. We may also ask you to complete surveys for research purposes, although you don’t have to respond to these.

If we have an existing relationship with you, and we are able to identify you from information obtained or provided by your use of the site, we may associate those sets of information, for example to enable us to respond to a query you have submitted.

How we use your information

We’ll only use your information where we have your consent or we have another lawful reason for using it. Unless we say otherwise below, we’ll use your personal information on the basis that it’s within our legitimate interests in operating and maintaining the site, and providing you with site functionality and related services. We may use information provided or obtained via this site to:

  • Respond to your queries and feedback (for example, if you’ve asked a question or submitted feedback via the site)
  • Provide you with information, products or services you have requested or which we feel may interest you, unless you tell us otherwise
  • Carry out our obligations from any contracts entered into between you and us
  • Allow you to participate in any interactive features of the site
  • Notify you about changes to the site
  • Provide you with alerts or updates where you’ve consented to receive these by registering on the site
  • Ensure site content is presented in the most effective manner for the device you’re accessing it from
  • Undertake data analytics to learn more about how you and others interact with this site and with our advertising
  • Detect and prevent misuse or abuse of this site or our services

We also use information to meet our compliance obligations, to comply with other laws and regulations and to share with regulators and other authorities that HSBC Group companies are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes). We’ll only do this on the basis that it’s needed to comply with a legal obligation, it’s in our legitimate interests and that of others or to prevent or detect unlawful acts.

Who we’ll share your information with

We may share your information in order to provide you with products or services you’ve requested (for example, if they’re not provided by the HSBC entity operating this site), if we have a legitimate interest in doing so (for example, to manage risk, verify your identity, to combat fraud, abuse of our site or services), or where you’ve agreed to us doing so.

We may share your information with others including: other HSBC Group companies and any of our service providers; anyone else whose products and services you’ve requested; anyone who we’re under an obligation to disclose information to or where it’s in the public interest (for example to prevent or detect fraud, abuse of our site or services).

IP addresses

We may collect information about your computer (or mobile device), including where available your IP address, operating system and browser type, for system administration or for our own commercial purposes. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.


We use cookies and similar technologies to distinguish you from other users of this site, to improve your experience when accessing this site, and to improve the site. Detailed information on the cookies we use and the purposes for which we use them are set out in our Cookie policy.

How long we’ll keep your information

We keep information in line with our data retention policy. For example, if you’re a customer, we’ll normally keep your bank transaction information for a period of six years from the date of transaction. We retain information to comply with legal or regulatory requirements or for our legitimate purposes, such as responding to enquiries, and may sometimes need to keep it for a longer period; if we don’t need to retain it for as long, we may delete, destroy or anonymise it sooner. This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as dealing with any enquiries.

We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, e.g. to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc. If we don’t need to retain information for this period of time, we may destroy, delete or anonymise it more promptly.

Transferring your information overseas

Your information may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful.

You can obtain more details of the protection given to your information when it’s transferred outside the EEA by contacting us using the details in the ‘More details about your information’ section below.

Your rights

You have a number of rights in relation to the information that HSBC holds about you including the right of access to your data. Please download and fill out the Privacy Notice Intake form in order to exercise any of your rights as set out in our Privacy Notice. Please note that whilst HSBC aims to safeguard your rights to the fullest extent, HSBC retains the right to not entertain requests that are deemed to be manifestly unfounded or excessive in nature such as where the same request is made more than once within a short span of time. Finally, before your request is processed, HSBC shall have the right to ask you to specify the information or processing activities to which the request relates. These rights include:

  • The right to access information we hold about you and to obtain information about how we process it;
  • In some circumstances, the right to withdraw your consent to our processing of your information, which you can do at any time. We may continue to process your information if we have another legitimate reason for doing so;
  • In some circumstances, the right to receive certain information you have provided to us in an electronic format and/or request that we transmit it to a third party;
  • The right to request that we rectify your information if it’s inaccurate or incomplete;
  • In some circumstances, the right to request that we erase your information. We may continue to retain your information if we’re entitled or required to retain it; and,
  • The right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we’re entitled to continue processing your information and/or to refuse that request

You can exercise your rights by contacting us using the details set out in the ‘More details about your information’ section below. You also have a right to complain to the Malta Information and Data Protection Commissioner’s Office by visiting, or to the data protection regulator in the country where you live or work.

How we keep your information secure

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

More details about your information

If you’d like further information on anything we’ve said in this Privacy Notice, or to contact our Data Protection Officer, contact us at Legal Office, 32, Merchant Street,  Valletta VLT 1173 ‘for the attention of the DPO’.

This Privacy Notice may be updated from time to time, and you’ll always be able to find the most recent version on this site.

What is GDPR?

The General Data Protection Regulation (GDPR) is a new law coming into force across the European Union (EU). It builds upon existing data protection laws in place in the EU, and is designed to give individuals, such as customers and employees, increased rights and transparency over their personal information by helping them understand how companies, such as the HSBC Group, use their data, for example, for lawful purposes in the provision of banking services. The law also gives individuals the ability to exercise their rights such as correcting or accessing their data.

When does the GDPR come into effect?

The GDPR comes into effect on 25 May 2018 in Malta and across the EU and builds upon the existing Data Protection Act.

Who is affected by the GDPR?

The GDPR applies to organisations located within Malta and EU which process personal data about individuals. It may also apply to organisations located outside of the EU that process the personal data of EU residents in some instances.

Why is the GDPR being introduced?

With more digital advances and fundamental changes to the ways in which data can be used and shared, the GDPR attempts to modernise the law to cope with developments in information technology. It is intended to bring about openness and transparency between individuals and the organisations that use their data, and to ensure organisations act in an accountable and compliant manner where they process individuals' data.

Why is an updated Privacy Notice being introduced?

HSBC Group is providing updated Privacy Notices to provide more specific information to individuals about how we use their data, and their rights in respect of their data. We are issuing standalone Privacy Notices for customers which explain how we collect information about customers, how we use their information and who we can share their information with. Many other organisations will similarly be issuing new and updated privacy notices to their customers.

How will the new Privacy Notice affect customers?

The Privacy Notice will be effective as from 25 May 2018. No action is required from customers. The Privacy Notice provides customers with more information about the use of their information and their rights.

What is personal data?

Personal data is any information related to a living person (known as a data subject) that can be used directly or indirectly (when combined with other information), to identify the person. It doesn't apply to non-living persons, for example most corporate entities, but may apply to data we process about individuals connected with that corporate.

You are leaving the HSBC Commercial Banking website.

Please be aware that the external site policies will differ from our website terms and conditions and privacy policy. The next site will open in a new browser window or tab.

You are leaving the HSBC Commercial Banking website.

Please be aware that the external site policies will differ from our website terms and conditions and privacy policy. The next site will open in a new browser window or tab.