HP Mainland China Privacy Statement

HP recognizes that privacy is a fundamental human right and further recognizes the importance of privacy, security and data protection to our customers and partners worldwide. As used in this Statement, terms such as “we”, “us”, “our”, and “Company” refer to HP Inc. and current and future subsidiaries in mainland China (herein "HP"). Contact information for HP’s Data Protection Officer appears in the “Exercising Your Rights & Contacting Us” section below. 

 

This Privacy Statement (sometimes known as Privacy Policy as prescribed by local law) informs you of our privacy practices and of the choices you can make and rights you can exercise in relation to your personal data. This includes information that may be collected from your online activity, use of devices, and interactions you have with HP offline, such as with our customer support representatives, and information about our methods and types of processing, in accordance with the People’s Republic of China Personal Information Protection Law. This Privacy Statement is also intended to provide, as required by local law, the required information on the processing of personal data carried out by us, before obtaining your consent, and other relevant rules regarding the processing of your personal data.  This will enable you to make informed decisions, understand what you are agreeing to, and how you can exercise your rights, for example, your right to withdraw your consent at any time as described in this Statement.

 

This Privacy Statement applies to all of our services and is intended for individuals located in mainland China, as well as HP-owned websites, domains, services (including device management), applications, subscriptions (i.e., Instant Ink) and products, and those of our subsidiaries in mainland China (collectively “HP Services”) in the consumer context or while interacting with HP as a corporate customer. For certain HP Services, we may provide you with additional privacy information that supplements this Statement. Supplemental Statements for specific products and services can be found here. If you are not located in mainland China, HP provides the Service to you under the HP Global Privacy Statement.

 

This Privacy Statement does not apply to job candidates, HP employees or former employees as it does not cover employment related data, nor to any personal data we process on behalf of our business customers when we provide services. The contracts we have with our business customers control how we process your personal data in this context. If you are a customer, employee or contractor of one of HP’s business customers and have questions about your personal data we recommend that you contact them in the first instance and, if needed, we will provide assistance to its HP business customers in responding to your questions.

 

Throughout this document references to ‘’local law” or “applicable law’’ refer to the People’s Republic of China Personal Information Protection Law and supporting regulations

Our Privacy Principles 

We have an accountability-based program, and we are committed to the following principles, which are based on internationally recognized frameworks and principles of privacy and data protection. Additionally, it is HP’s responsibility, as described in this Privacy Statement, to develop internal practices and policies that aim to give effect to the principles and provisions of the People’s Republic of China Personal Information Protection Law.

LAWFULNESS, FAIRNESS & TRANSPARENCY

We process personal data in accordance with local law and with transparency and fairness to you. Our data processing activities are conducted: 1) with your consent; 2) in order to fulfill our obligations to you; 3) for the purposes of compliance with our legal responsibilities; or 4) otherwise in accordance with law.

NOTICE & CHOICE OF DATA USE

We are transparent and provide clear notice and choice to you about the types of personal data collected and the purposes for which it is collected and processed. We will not use personal data for purposes that are incompatible with these Principles, our Privacy Statement or specific notices associated with HP Services.

DATA ACCESS

We provide you with reasonable access along with the ability to review, receive copies of, correct, amend or delete the personal data you have shared with us.

DATA INTEGRITY & PURPOSE LIMITATION

We only process personal data for the purposes described at the time of collection or for additional compatible purposes in accordance with local law. We take reasonable steps to ensure that personal data is accurate, complete and current, and we only collect personal data which is relevant and limited to what is minimum necessary for the purposes for which it is collected. We will keep personal data for no longer than is necessary for the purposes for which it was collected and then, unless legally required to keep it longer, we will securely delete or destroy it.

DATA SECURITY

To protect personal data against unauthorized use or disclosure, we implement strong information security controls in our own operations and offer market-leading products and solutions with high levels of data security protection.

ACCOUNTABILITY

As an accountable organization, we have appropriate policies and procedures that promote good practices, which, taken as a whole, allow us to demonstrate our capacity to comply with applicable privacy laws. We will address any legal requirements to ensure that personal data transferred among HP entities or third parties remains protected and secure as in your home country.

Personal data will only be shared with third parties and processors with whom we have a business relationship or who manage or support certain aspects of our business operations on our behalf. All parties, including suppliers, are obligated by contract, as required by law or regulation, to provide equivalent levels of protection and follow HP’s privacy policies and practices for handling personal data.

RECOURSE, OVERSIGHT & ENFORCEMENT

We are committed to resolving any concerns regarding your personal data. We voluntarily participate in several international privacy programs that provide recourse to individuals if you feel HP has not adequately respected your rights. Please don’t hesitate to contact us with any questions or concerns.

Legal Basis for Processing Data

We collect, use, disclose, and otherwise process as defined by applicable law your personal data where:

  •  The use is necessary for the performance of the contract that has been entered into by you;
  •  It is necessary for compliance with our legal responsibilities and obligations, such as complying with commercial, corporate and taxation matters;
  •  Where we have obtained consent from you;
  •  Where you have already disclosed your personal data, or otherwise lawfully disclosed, and as permitted by the People’s Republic of China Personal Information Protection Law; and
  • With other legal basis or circumstance as defined by law or regulations from time to time. 

International Data Transfers

Your personal information may be transferred or accessed in countries outside of mainland China to be able HP’s operations, to provide you with our products or services, to support your needs, to perform our agreements with you, or for other purposes based on your consent (as further described in this Privacy Statement). We may also employ third parties to serve as our service providers and perform certain tasks on our behalf (as further described in this Privacy Statement). For more information about our international data transfers outside of mainland China please click here or contact us by using our HP’s Privacy Office and Data Protection Officer form.  

 

We will address any applicable legal requirements to ensure that any transferred personal data remains protected and secure, as permitted by local laws, including the People’s Republic of China Personal Information Protection Law, and as permitted with your consent to the transfer of your personal data (if applicable). We have implemented appropriate contractual measures to ensure that HP companies and third parties provide the same level of data protection as Mainland China, so as to meet the legal conditions for providing your personal information overseas. 

 

When you interact and directly provide your information to companies located outside of mainland China (foreign receiving parties), China CBDT supplementary rules/disclosures on data transfers may not apply to that disclosure.

 

For more information on your privacy rights pursuant to the transfer of your personal data, we recommend that you refer to the “Exercising Your Rights & Contacting Us” section of this privacy statement.

How We Use Data

We collect, use, disclose, and otherwise process personal data as defined by applicable law to manage your relationship with HP and HP Services and to better serve you when you are using HP Services by personalizing and improving your experience. We use and otherwise process your data for the following business purposes:

CUSTOMER EXPERIENCE

Providing you with a seamless customer experience by maintaining accurate contact and registration data, delivering comprehensive customer support through a number of mediums, such as online messaging and chat centers such as chatbots, communicating with you about offering products, services, subscriptions and features that may interest you and enabling you to participate in contests, outbound satisfaction calls and surveys, customer incentives, benefits, and loyalty rewards. We also use your data to deliver a tailored experience, to personalize the HP Services and communications you receive, and to create recommendations based on your use of HP Services.

TRANSACTION SUPPORT

Assisting you in completing transactions and orders of our products or services, administering your account, processing payments, arranging shipments and deliveries, and facilitating repairs and returns.

PRODUCT SUPPORT & IMPROVEMENT

Contacting you to inform you or make you aware of non-transactional product features not addressed through Customer Service or Administrative Communications. These include features to improve the performance and operation of our products, solutions, services, and support, including warranty support and timely firmware and software updates and alerts to ensure the continued operation of the device or service. For more information, please see the section on Information Automatically Collected. 

ADMINISTRATIVE COMMUNICATIONS

Contacting you about HP Services. Examples of administrative communications may include responses to your inquiries or requests, service completion or warranty-related communications, safety recall notifications, communications required by law or applicable corporate updates related to mergers, acquisitions, or divestitures.

SECURITY

Maintaining the integrity and security of our websites, products, features, and services by preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your information. When you interact with us, we will also take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your personal data. We may also maintain additional security measures, such as CCTV, to safeguard our physical locations.

BUSINESS OPERATIONS

Conducting ordinary business operations, verifying your identity, making credit decisions if you apply for credit, conducting business research, analytics, planning and strategy, corporate reporting and management, sales related activities, staff training and quality assurance purposes (which may include monitoring or recording calls, if applicable, where you have given us prior consent to do so), and external communications.

RESEARCH & INNOVATION

Innovating new and existing products, features and services using research and development tools and incorporating data analysis activities.

MARKETING AND ADVERTISING

Providing HP and selected third-party personalized offers, advertising, products, and services  (in accordance with your Privacy Settings and Privacy Preferences) based on your activity on HP devices and services through e-mail, SMS/text-messages, device displays, in application marketing, third party platforms and other selected partner websites (for example, you might see an advertisement for an HP or third-party product on a partner site that you have recently viewed).  

In accordance with your stated privacy settings and communication privacy preferences, we may also share some of your information with some partners, marketing service providers and digital marketing networks to present HP and selected third-party advertisements that might interest you in other sites or applications. HP may process your personal data to manage personalized offers and other marketing communications, including subscriptions and surveys.

COMPLIANCE WITH LAW

Compliance with applicable laws, regulations, court orders, government, and law enforcement requests, to operate our services and products properly, to protect ourselves, our users, and our customers and to solve any customer disputes. The information collected may also be used to investigate security incidents and potential breaches of personal data, notify individuals and third parties of the breach, and to prepare to defend lawsuits.

ARTIFICIAL INTELLIGENCE / MACHINE LEARNING

For AI features and tasks, HP may use your personal data to allow your devices to tailor the way that information or tasks are presented. Our aim is to provide useful experiences in an accessible way, enhancing and optimizing the use of our tools and services (for example: to search and obtain information; to explore personal files to get actionable insights; and maintain and optimize performance and settings for your HP devices). You can update your permissions in the settings menu of your device and applications.

SERVICE DELIVERY

Where automatic data collection is strictly necessary for providing HP Services or delivering a product that you have requested. Without the collection of telemetry (such as Printer Usage Data) and personal data we cannot provide certain services of functionality we have agreed to provide to the customer. In addition, we may use automatic data collection to support and improve HP Services and support business operations relating to HP Services.

ACCOUNT MANAGEMENT

When using our products and services, including our online stores, you may create sign in credentials or an account with HP. When you create these credentials with your e-mail address and password, a unique identifier is created that allows you to use the same credentials for all our services. Depending on the services you are engaged with, the information associated with your credentials or account may also include delivery address, payment card information and history, details of purchased and connected devices, device and connection settings, device service usage data, as well as your preferences for recommendations and offers from HP. 

Examples of categories of personal data will be found and described in the next section, but see our Data Collection and Use Matrix to find a quick-reference guide to know how we use this data in relation to our purposes and with whom we share your data.

What Data We Collect

Personal data is any information that personally identifies you or from which you could be identified either directly or indirectly. We may collect your personal data when you use HP services and products, interact with HP, or contact our HP representatives. This includes information you provide through emails, phone, forms, surveys, or any other channels,  such as your questions, answers, feedback, responses, and messages. 

The categories of personal data we collect from you depend on the nature of your interaction with us or on the HP Services you use, but may include the following:  

INFORMATION COLLECTED ABOUT YOU

  • Contact Data –  We collect personal and/or business contact information including your first name, last name, mailing address, telephone number, fax number, email address and other similar data and identifiers. 
  • Payment Data – We collect information necessary for processing payments and preventing fraud, including credit/debit card information, ID card numbers, and other related billing information. 
  • Account Data –  We collect information such as how you purchased or signed up for HP Services, your transaction, billing and support history, the HP Services you use and anything else relating to the account you create. 
  • Location Data –  We collect geolocation data when you enable location-based services or when you choose to provide location-related information during product registration or when interacting with our website. Location data might be used when the consumer is in need for technical support of services or products.
  • Security Credentials Data – We collect user IDs, passwords, password hints, and similar security information required for authentication and access to HP accounts. 
  • Demographic Data – We collect, or obtain from third parties, certain demographic data including, for example, country, gender, age, preferred language, and general interest data. 
  • Preferences – We collect information about your preferences and interests as they relate to HP Services (both when you tell us what they are or when we deduce them from what we know about you) and how you prefer to receive communications from us. 
  • Social Media Data – We may provide social media features that enable you to share information with your social networks and to interact with us on various social media platforms. Your use of these features may result in the collection or sharing of information about you, depending on the feature. We encourage you to review the privacy policies and settings on the social media platforms you use to make sure you understand the information that is collected, used, and shared by those platforms. 
  • Body and Biometric Data – HP uses biometric data with our 3D printer to provide custom 3D parts requiring such data. With your permission, some of our products may collect biometric information (such as a fingerprint) to perform functions on the device or for secure authentication and device access.
  • Anonymous or Aggregated Data – We collect anonymous answers to surveys and aggregated information about the response rate to these surveys. 
  • Other Unique Identifying Information – Examples of other unique information that we collect from you include product serial numbers, information you provide when you interact in-person, online or by phone or mail with our services centers, help desks or other customer support channels, your written, voice or video responses to customer surveys or contests or additional information you have provided to us to facilitate delivery of HP Services and to respond to your inquiries. We may also record information about you that you provide to us by phone, online, online/offline forms, email or any other channel. We record telephone communications in accordance with applicable laws, and when required, when you have given us prior consent. If you apply for instant credit, we may ask you to provide additional personal data such as salary, government-issued identification number, banking/financial account information, and other information (for example from credit reporting agencies) for authentication purposes and to verify credit worthiness.  
  • Specific HP-Service Data Collection – Select HP Services, such as HP Gaming and Immersive Applications may collect additional types of data to enable functionality and specialized features. To learn more about a specific HP Service, please click here.

INFORMATION AUTOMATICALLY COLLECTED  

  • Printer Usage Data – We collect printer usage data such as pages printed, print mode, media used, ink or toner cartridge type (in particular, whether non-original cartridges, or cartridges with a non-HP chip or electronic circuitry are used), file type printed (.pdf, .jpg, etc.), application used for printing (Word, Excel, Adobe Photoshop, etc.), file size, time stamp, and usage and status of other printer supplies. We do not scan or collect the content of any file or information that might be displayed by an application. 
  • Device Data – We collect information about your computer, printer and/or device such as operating system, firmware, amount of memory, region, language, time zone, model number, first start date, age of device, device manufacture date, browser version, device manufacturer, connection port, warranty status, unique device identifiers, advertising identifiers and additional technical information that varies by product. 
  • Application Data – We collect information related to HP applications such as app and feature usage, location, language, software versions, data sharing choices and update details. In cases where we incorporate technologies from third parties, data may be shared between the third party and HP, and appropriate notice will be provided at the application level.  
  • Performance Data – We collect information regarding the performance of individual device hardware components, firmware, software and applications. Examples of the data we collect include information relating to memory and processor performance, environmental conditions and systems failures, printing events, features, and alerts used such as “Low on Ink” warnings, use of photo cards, fax, scan, embedded web server, and additional technical information that varies by device. 
  • Website Browsing Data – We collect information about your visits and your activity on our HP websites, applications or websites “powered by” another company on our behalf including the content (and any ads) that you view and interact with, the address of the website from which you arrived and other clickstream behavior (such as the pages you view, the links you click or which items you've added to your shopping basket). Some of this information is collected using cookies, web beacons, embedded web links and similar technologies. To learn more, please read our Use of Cookies and other Technologies Statement. 
  • Pseudonymized or Aggregated Data – We collect anonymous and aggregated information about how our HP Services are used. In certain cases, for identified data, we apply a process of de-identification or pseudonymization to your data to make it reasonably unlikely to identify you through the use of that data with available technology.  
  • Anonymized Data – In some cases, for example at the end of the retention period, we will anonymize your data to make it reasonably unlikely to identify you.

INFORMATION FROM THIRD-PARTY SOURCES 

We collect data from the following third parties: 

  • Data brokers, social media networks and advertising networks –Commercially available data such as name, address, email address, browsing information, preferences, interests, and certain demographic data. For example, personal data may be collected when you access our applications through social media logins (i.e., logging in to our applications using your social media credentials) or third-party platform credentials. The basic details we receive may depend on your social network account or third-party platform privacy settings. 
  • HP Partners – If you purchase HP Services or software and services from an HP partner, we may receive certain information about your purchase from that partner. We may also receive cookies, insights, or subscription and usage data. 
  • Fraud prevention or credit reporting agencies – Data collected to prevent fraud and in connection with credit determinations. 
  • HP Enterprise Customers – In order to provide certain HP Services at an enterprise level, your business contact data may be provided to HP by a designated entity within your business or enterprise (such as a member of your IT department). 
  • Analytics Providers – We also receive non-personal data, such as anonymous, aggregated or de-identified, as defined by local law, demographic/profile data, from third-party sources including selected partners and companies that specialize in providing enterprise data, analytics and software as a service. 

In some cases, we link or combine the information that we collect or infer from the different sources outlined above with the information we collect directly from you in order to ensure data accuracy and offer a superior customer experience when providing you with better personalized services, content, marketing and ads. For example, we compare the geographic information acquired from commercial sources with the IP address to derive your general geographic area. Information may also be linked via a unique identifier such as a cookie or account number. 

Where necessary, we obtain information to conduct due diligence checks on business contacts as part of our anti-corruption compliance program and in accordance with our legal obligations.

 

IF YOU CHOOSE NOT TO PROVIDE DATA

You are not required to share the personal data that we request, however, if you choose not to share the information, as permitted by local law, in some cases we will not be able to provide you with some HP Services, certain specialized features or be able to effectively respond to any queries you may have.

Sensitive Data

In certain situations, some personal data we collect may be considered sensitive as defined by local law. We will always ensure that such processing is lawful as outlined in this Privacy Statement and as otherwise permitted by law or with your consent, and we will implement robust measures to protect such information.

 

We also take reasonable steps to ensure that the information is adequate, necessary, and limited to its intended purpose in accordance with this Privacy Statement and as required by applicable law.For example, we collect Payment Data to process payments and prevent fraud, including credit/debit card numbers, ID card numbers, and other related billing information. In addition, as required by local law, we will analyze, identify, and minimize any privacy risks related to processing sensitive personal data that may affect your rights and interests.In some cases, you will not be required to provide consent to the processing of sensitive personal data, and such processing will occur as required or permitted by applicable local law.

 

When contacting HP or using its channels, including chatbot interactions, please refrain from providing sensitive personal data or any other personal data that is not necessary.

Children’s Privacy 

Unless otherwise stated for a specific product or service, HP Services are made for the general public and are not directed at children (under the age of 14 or the minimum age as required by law). If we do so, HP will collect personal data from children with the previous consent of their parents or legal guardians or as otherwise permitted by applicable law. If HP becomes aware of data belonging to a child, HP will process children's personal data as sensitive personal data and comply with appropriate rules regarding sensitive personal data in accordance with applicable law. If you are a parent or guardian and you believe we have inadvertently collected information from your child or used/shared information from your child through our products and services without your consent, please contact us at HP’s Privacy Office and Data Protection Officer and we will remove the data to the extent required by applicable law. 

How We Retain and Keep Your Data Secure

To prevent loss, unauthorized access, use or disclosure, and to ensure the appropriate use of your information, we utilize reasonable and appropriate physical, technical, and administrative procedures to safeguard the information we collect and process. HP retains data as required or permitted by law and while the data continues to have a legitimate business purpose. 

 

When collecting, transferring, or storing sensitive information such as financial information, we use a variety of additional security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. When we transmit highly confidential information (such as credit card number or password) over the internet, we protect it through the use of encryption, such as the latest versions of the Transport Layer Security (“TLS”) protocol. 

 

As part of real-time payment processing, we also subscribe to fraud management services. This service provides us with an extra level of security to guard against credit card fraud and to protect your financial data in accordance with industry standards. 

We keep your personal data for as long as necessary to provide you with HP Services, for legitimate and essential business purposes (such as making data-driven business decisions), complying with our legal obligations, and resolving disputes. HP is committed to protecting the privacy of all personal data processed and aims to ensure that personal data is not kept for longer than is necessary for the purpose for which it was collected, held, and processed. The retention periods for HP holding personal data vary depending on whether or not that data is held as part of a legally required business record. 

 

DETERMINING RETENTION PERIODS 

When assessing retention periods, we carefully examine whether it is necessary to retain the personal data collected, the purposes for which each type of personal data is collected and used, the products and services you have requested, and whether that data is maintained as part of HP’s legal obligations. Further, retention periods can vary significantly for different data types, the context of our interactions with you or your use of our products and services, and the jurisdiction where you are located. Examples are described below in further detail.  

Nature of the personal data and the purpose for which HP is processing it. These may include, but are not limited to:

  • Responding to consumer rights to repair, replacement, refund, or cancellation when there's a problem with a product or service, or to honor any warranties when defects or hardware problems occur.  
  • Ensuring the availability, operation and security of technical systems as well as technical data management of our products and services.  
  • Providing you with services or support that you may have requested or to interact with you, such as customer/client support, service, delivery and receipt of products.   

Legal reasons or legal obligations. These may include, but are not limited to: 

  • Responding to a legal request or to comply with applicable law when HP has a legal obligation to retain information, including for tax purposes.   
  • Responding to a legal claim, lawsuit, or complaint, such as where HP is subject to a regulatory investigation, or we need to defend ourselves in consumer disputes and resolutions, about a claim related to a product or service or to respond to a regulator in relation to a complaint made by you or someone else, including debt collection.   
  • Meeting and demonstrating compliance with our obligations and rights under contracts, leases, and other agreements.  

Personal Data contained in records, including records relating to customer and vendor transactions, are maintained while active and as required by local law. For example, where you make a purchase such as a product or subscription, we retain personal data associated with your purchase for the periods specified by applicable laws relating to commercial, financial and tax, anti-money laundering, and other financial regulations, which vary by region. Personal data contained in non-records is managed in accordance with the Personal Data Retention Policy, which sets retention limits. Following the expiration of the relevant retention period, information is permanently erased and destroyed in a manner where it cannot be reproduced. 

 

At your request, we will delete or anonymize your personal data so that it no longer identifies you, unless we are legally allowed or required to maintain certain personal data. Because of the complexity of deleting data from inactive long-term backups, we cannot delete personal data that is inactive. If for any reason the data from backups is restored, we will de-identify or anonymize, as defined by local law, or delete the data from active systems. 

How We Share Data

We will only share your personal data as follows and, when applicable, only with the appropriate contractual obligations in place: 

 

 

SHARING WITH HP CONTROLLED COMPANIES/SUBSIDIARIES 

We may transfer your personal data to other HP entities within or outside of Mainland China, as outlined in this Privacy Statement and as otherwise permitted by law or as permitted with your consent for the purposes. A list of HP companies is available here.  

Furthermore, our privacy guidelines are communicated to our HP employees on an annual basis as part of our mandatory training. 

 

SHARING WITH ENTRUSTED PARTIES 

We engage entrusted service providers or partners to manage or support certain aspects of our business operations on our behalf.  These include our cloud service providers, content delivery networks, telecommunications providers, maintenance providers, market researchers, marketing and analytics providers, consultancy and professional services firms, such as legal and tax advisors. These entrusted parties (service providers or partners) may be located in Mainland China  or in other global locations and may provide services such as credit card processing and fraud management services, customer support, sales pursuits on our behalf, order fulfillment, product delivery, content personalization, advertising and marketing activities (including digital and personalized advertising), IT services, email service providers, data hosting, live-help, debt collection and management, customer satisfaction surveys or support of HP websites. Our service providers and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the Services as instructed by HP. In some cases, HP might contact you to measure your satisfaction with the delivery of our products and services provided by those service providers and partners. For more information about our service providers or partners outside of Mainland China, please see the International Data Transfers section. 

 

SHARING OTHER INFORMATION WITH ADVERTISERS 

We may also share  information about you with advertising partners (including the ad networks, ad-serving companies, marketing networks, and other service providers they may use) so that they may recognize your devices and deliver interest-based content and advertisements to you. The information may include your name, postal address, email, device ID, or other identifier in encrypted form. The providers may process the information in hashed or de-identified form. These providers may collect additional information from you, such as your IP address and information about your browser or operating system and may combine information about you with information from other companies in data sharing cooperatives in which we participate. For more information, please read the “HP Communications section”. 

 

SHARING WITH OTHER THIRD PARTIES (PROCESSING ENTITIES) 

We may also share your personal data with: (i) credit reference and fraud prevention agencies; (ii) debt collection agencies (for outstanding debts with us); or (iii) insurance providers if you have purchased an insurance policy through us (e.g., Care Packs). If you choose to provide personal data to other companies, that personal data will be handled according to the privacy policy of those companies, which may differ from HP’s policies and practices. You can find more information on third parties we work with as required by local law, along with the names and contacts of these third parties, by clicking here or contacting us by using our HP’s Privacy Office and Data Protection Officer form. Please see the International Data Transfers section for those third parties outside of Mainland China. 

 

CORPORATE TRANSACTIONS 

Circumstances may arise where, whether for strategic or other business reasons, HP decides to sell, buy, merge or otherwise reorganize businesses. In such transactions, we may disclose or transfer your personal data to prospective or actual purchasers or receive personal data from sellers. Our practice is to seek appropriate protection for your personal data in these types of transactions. If we do so, you will be notified as appropriate and as required by local law. 

 

COMPLIANCE WITH LAW 

We may also share your personal data when we believe, in good faith, that we have an obligation to: (i) respond to duly authorized information requests of law enforcement agencies, regulators, courts and other public authorities, including to meet national security or other law enforcement requirements; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and help prevent security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of HP or its subsidiaries; or (v) protect the rights or personal safety of HP, our employees, and third parties on or using HP property when allowed and in line with the requirements of applicable law.  

 

OTHER DATA PRACTICES 

We do not, and will not, sell personal data to third parties for HP Services within Mainland China. We do permit entrusted parties to collect the personal data described above through our Services and share personal data with entrusted parties and/or processing entities for business purposes as described in this Privacy Statement. For example, this includes providing advertising on our Services and elsewhere based on users’ online activities over time and across different sites, services, and devices (so-called “interest-based advertising”). The information practices of these third parties are not covered by this Privacy Statement. 

HP Communications

You can make or change your choices regarding subscription or general communications from HP at the data collection point or by using other methods, which are described in this section. These options do not apply to communications primarily for the purpose of administering order completion, contracts, support, product safety warnings, driver updates, or other administrative and transactional notices where the primary purpose of these communications is not promotional in nature. 

 

MARKETING & SUBSCRIPTION COMMUNICATIONS 

HP marketing communications provide information about products, services, and/or support, and you can select how these communications are delivered – e.g., via postal mail, email, fax, telephone, mobile, or social media platform. Marketing communications may include new product or services information, special offers, personalized content, targeted advertising, or invitations to participate in market research or compliance reviews. Subscription communications include email newsletters, software updates, etc. that may be expressly requested by you, or which you consented to receive. 

You may also opt-out of receiving these general communications by using one of the following methods: 

  • Select the email’s “Opt-out” or “Unsubscribe” link, or follow the instructions included in each email communication. 
  • Submit a request to the HP’s Privacy Office and Data Protection Officer form. 
  • To unsubscribe from messages delivered to mobile phones via SMS, reply to the message with the words “STOP” or “END.” 

You can also disable automatic data collection tools, such as web beacons, in email messages by not downloading images contained in messages you receive from HP (this feature varies depending on the email software used on your personal computer). However, doing this may not always disable data collection in the email message due to specific email software capabilities. For more information about this, please refer to the information provided by your email software or service provider. 

 

COOKIES AND CHOICES 

HP provides you with choices about the setting of cookies and other automatic data collection tools through our Cookie Preferences Center. You can learn more about our use of these tools in our Use of Cookies and other Technologies Statement. You can adjust your preferences by visiting our Cookie Preferences Center.  

 

Exercising Your Rights & Contacting Us

Worldwide privacy and data protection laws give you certain rights, which can be exercised before a data controller. HP, as the processing entity, has committed to provide you with means to exercise the following rights: 

  • Right to Access – You have the right to ask us for a copy of any personal data that you have provided to us or that we maintain about you.  
  • Right to Be Informed – You have the right to request an explanation about the processing, which will detail the categories of personal data, the categories of sources from which the personal data is collected, the purposes for collecting or sharing personal data, the categories of third parties to whom HP discloses personal data, and the specific pieces of personal data HP has collected about you.  
  • Right to Portability – You have the right to obtain the personal data you provide with your consent or in connection with a contract in a structured, machine-readable format and ask us to transfer it to another data controller.  
  • Right to Rectification – You have the right to request from us to update, amend, correct, or rectify your personal data.  
  • Right to Erasure – Under certain limited circumstances, Data Subjects have the right to request deletion or destruction of their personal data (for example, the personal data is no longer needed in relation to the purposes for which they were originally collected). 
  • Right to Restriction of Processing – Under certain limited circumstances when legally provided, you have the right to restrict the processing of your data. This means that the data will not be actively used for the original purpose, but will be maintained to exercise our legitimate rights. 
  • Right to Withdrawal of Consent – You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.  
  • Right to Object – You have the right to object to the processing of your personal data in some circumstances, including when we are using your data for direct marketing or to create a marketing profile. Please see the “HP Communications” section for guidance on how to exercise your rights and to manage your preferences for marketing and subscription communications. In some cases, you may also have the right to object at any time to the processing of personal data on the grounds of legitimate interests.  
  • Right to Object Automated Decision-Making and Profiling – In case automated decision-making occurs, HP will take the appropriate steps to ensure it takes place as required by applicable law. Where it occurs, HP will ensure the transparency of such decisions, the fairness, and impartiality of the results, and not implementing any unreasonable measures to discriminate against you in relation to pricing or other transactional terms. 
  • Lodge a lawsuit before a court– You can contact the court of your usual place of residence. 

We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on HP Services may change or no longer be available to you. Any difference in the Services is related to the value provided. 

In certain cases, these rights may be limited, for example if fulfilling your request would reveal personal data about another person or if you ask us to delete information which we are required by law to keep it. 

 

CONTROL OF AUTOMATIC DATA COLLECTED IN HP PRODUCTS 

In addition to the privacy controls available to you via this Privacy Statement, you can control your devices data collection. In some instances, product usage data (not content of files) is collected and processed in order to deliver you the essential functionality of an HP Service, such as remote printing, Instant Ink or other web-enabled service. You can control device data collection yourself through your device settings and preferences. HP is not in a position to adjust your data collection settings without your active participation. Disabling data collection may affect the availability or functionality of such services. Data collected for the fulfilment of such essential functionality will not be processed for direct marketing purposes. If you need assistance in adjusting your data collection settings, please contact HP Customer Support with your device details. 

 

HOW TO EXERCISE YOUR PRIVACY RIGHTS AND MAKE YOUR PRIVACY REQUESTS 

To exercise your rights, or if you have any questions or concerns about this Privacy Statement and privacy practices, our collection and use of your data or a possible breach of local laws, or if you want to contact our Data Protection Officer, you can, or by entrusting an authorized agent, submit your privacy requests by clicking on the HP’s Privacy Office and Data Protection Officer form or write to us at the appropriate address below:

 

Peoples Republic of China 

HP Inc. 

Legal  

ATTN: Privacy Office  

 

No.8 Guang Shun Avenue South, Bldg 1, 5th floor 

Lei Shing Hong center, 

ChaoYang District, P.C. 100102 

Beijing, China 

 

HOW WE MANAGE YOUR PRIVACY REQUESTS

All communications will be treated confidentially. Upon receipt of your communication, our DPO representative will contact you within a reasonable time to respond to your questions or concerns. In some cases, we may request further information to verify your identity, complete your request, identify the service your request refers to, clarify the nature of your request, remedy any deficiencies with your request, or let you know if we need more time, as permitted in applicable law. Please, refrain from sending us sensitive personal data. 

You can designate someone else to make a request on your behalf. To protect your data, we will ask for legal proof of this, authorizing the other person to submit a request on your behalf. If applicable, we will contact you to confirm that you have provided the authorized agent with permission to submit the request before we respond to your authorized agent’s request.

 

TIMING 

We aim to ensure that your concerns are resolved in a timely and appropriate manner. If we fail to take any action regarding your request to exercise rights or decline to respond, you have the right to bring a lawsuit before the corresponding court, or where you consider that the data protection rules have been breached or seek a remedy through the courts, as prescribed by applicable law.  

 

Access requests for the account of a deceased customer or partner

In cases where our customer or partners unfortunate death, their close relatives have the right to access, correct or delete the personal data of the deceased in accordance with the law and to ask us for a copy of such information, except where the deceased has arranged otherwise before their death. They can exercise this right at HP’s Privacy Office and Data Protection Officer or write to us at the appropriate address above

Changes to Our Privacy Statement

If we modify our Privacy Statement, we will post the revised statement here, with an updated revision date. If we make significant changes to our Privacy Statement that materially alter our privacy practices, or as otherwise required by local law, we may also notify you by other means, such as sending an email or posting a notice on our corporate website and/or social media pages prior to the changes taking effect.

 

Date Posted: April 2026

 

Download HP Privacy Statement

Archive of previous privacy notices  

Related privacy links:

Snow
Forest
Mountains

Privacy statements for
other countries/regions


HP’s Contractual Commitment
to Data Protection


HP Personal data rights