This notice supplements the UncleSim Privacy Policy (unclesim.net/pages/privacy-policy). It explains what happens to the photographs of your identity document and your SIM card that you send us for a number port-in and for the real-name registration Hong Kong law requires. Last updated 1 October 2026.
本頁是 UncleSim 私隱政策的補充說明，說明你為辦理攜號轉台及香港法例要求的實名登記而提交的身份證明文件相片及 SIM 卡相片，我們會如何處理。最後更新：2026 年 10 月 1 日。
What we collect / 我們收集什麼
What we collect. Your name; your Hong Kong Identity Card number (or passport details, if you have no HKID); an image of that identity document; your mobile number and your current carrier; the ICCID of your SIM card and a photograph of that SIM card; your contact email address; and your typed signature with its date. Together with your submission we record the time and a fingerprint (hash) of the signed form.
我們收集什麼。你的姓名；香港身份證號碼（如無身份證則為護照資料）；該身份證明文件的影像；你的流動電話號碼及現時電訊商；你 SIM 卡的 ICCID 及該 SIM 卡的相片；你的聯絡電郵；以及你輸入的簽名及日期。我們亦會記錄遞交時間及已簽署表格的雜湊值（指紋）。
Why we collect it / 為何收集
Purpose of collection. Only to apply to LuckySIM (the Carrier) to port your number and provide the related mobile service; to complete the real-name registration required by Hong Kong law for the SIM card (Telecommunications (Registration of SIM Cards) Regulation, Cap. 106AI); to verify your identity; and to process and confirm your application. It is never used for direct marketing and never used for anything else.
收集目的。只用於向 LuckySIM（網絡商）申請攜號轉台及提供相關流動服務；按香港法例《電訊（登記用戶識別卡）規例》（Cap. 106AI）完成電話卡實名登記；核實你的身份；以及處理及確認你的申請。不會用於直接促銷，亦不會作其他用途。
How it is protected / 如何保護
How it is protected. Everything you type on the intake page, and both photographs, are encrypted on your own device with our public key before they are sent, so our cloud infrastructure holds only unreadable ciphertext. Your application form is prepared from that ciphertext using a decryption key held in encrypted storage on equipment we control in Hong Kong - never stored with your application data, and used only to prepare and submit your application. When the completed application is submitted it goes to the Carrier's designated confidential mailbox for real-name registration. We never ask you to send identity documents through a messaging app such as WhatsApp.
如何保護。你在收料頁輸入的所有資料及兩張相片，會先在你的裝置內以我們的公開金鑰加密才送出，雲端只存放無法解讀的密文。申請表由該密文以解密金鑰填寫；金鑰存放於加密儲存內、在我們香港控制的設備上，不會與你的申請資料一同存放，只用於準備及提交你的申請。完成的申請會送往網絡商指定作實名登記的保密郵箱。我們任何時候都不會要求你透過 WhatsApp 等即時通訊軟件傳送身份證明文件。
How long we keep it / 保留多久
Retention. The identity document image and the SIM card photograph are deleted once your real-name registration and port-in are confirmed, and in any event within 30 days if the application is not completed. We keep the completed application form itself (your details, the plan, your consent record and the signed-form fingerprint) as the record of the port-in we carried out on your behalf, together with accounting records as required by tax law. The photographs are never written to disk on our own equipment: they are unsealed in memory only for as long as it takes to prepare and send your application, and the copy we send ourselves for the hand-over to the Carrier is deleted from our own mailbox once your port-in is confirmed. Our database provider keeps a point-in-time recovery window of up to seven days, after which a deleted record cannot be restored.
保留多久。身份證明文件影像及 SIM 卡相片會於你的實名登記及轉台確認後刪除；如申請最終未能完成，最遲 30 日內刪除。我們會保留已完成的申請表本身（你的資料、計劃、同意紀錄及已簽署表格指紋）作為代辦紀錄，並按稅務法例保留會計紀錄。相片不會寫入我們自己設備的磁碟：我們只在記憶體內解密，時間僅限於準備及寄出你的申請所需；我們為交給網絡商而發給自己的副本，會於你的轉台確認後從我們自己的郵箱內刪除。我們的資料庫供應商提供最多七日的時點還原窗，七日後已刪除的紀錄無法復原。
Who receives it / 誰會收到
Classes of transferees. LuckySIM and its operator / network; and the service providers we engage (cloud hosting and transactional email) strictly to process the purposes above. We disclose to no one else unless the law requires it or you have given your prior consent.
誰會收到。LuckySIM 及其營運商／網絡；以及我們委託的服務提供者（雲端寄存及交易電郵），僅限於處理上述目的。除法律要求或你事先同意外，不會向其他人士披露。
Where it is held / 存放地點
Where it is held. Our cloud infrastructure is provided by an international provider (Cloudflare, Inc.), whose network may store and process data in data centres outside Hong Kong. We apply the same security measures wherever your data is held.
存放地點。我們的雲端基建由國際服務商（Cloudflare, Inc.）提供，其網絡可能在香港以外的數據中心儲存及處理資料。無論資料存放在哪裡，我們都採用相同的保安措施。
Your rights, and what happens if you do not provide it / 你的權利
Access and correction. You may request access to or correction of the personal data we hold about you, using the PCPD form OPS003 or in writing to our Data Protection Officer at unclesim@unclesim.net; we reply within 40 days. Your identity document and its image are a statutory and essential requirement: if you cannot provide them, we cannot complete the real-name registration and your port-in application cannot proceed.
你的權利。你可以個人資料私隱專員公署表格 OPS003 或書面方式，向我們的保障資料主任（unclesim@unclesim.net）要求查閱或改正你的個人資料，我們會於 40 日內回覆。身份證明文件及其影像屬法定必要要求：如你未能提供，我們無法完成實名登記，轉台申請亦不能繼續。
Questions / 查詢
Email unclesim@unclesim.net. The full policy is published at unclesim.net/pages/privacy-policy, and the collection statement you agree to is on the intake page you were sent.
如有查詢，請電郵 unclesim@unclesim.net。完整私隱政策載於 unclesim.net/pages/privacy-policy；你同意過的收集個人資料聲明則在你收到的收料頁上。