UncleSim - Number Port-In (MNP) Secure Intake

Port your number in - delivered as an eSIM - real-name registration - encrypted in transit and at rest
UncleSim 攜號轉台（MNP）安全收料 - eSIM 交付 - 電話卡實名登記 - 傳送及存放均加密

Before you start - 4 steps, and the HK$50 service fee

  1. Step 1 - you fill this form (about 5 minutes) and attach two photos. 第一步：填寫本表格（約 5 分鐘）並附上兩張相片。
  2. Step 2 - we check it and email you the carrier form to sign. 第二步：我們核對後，電郵承辦商表格給你簽署。
  3. Step 3 - the carrier switches your number, usually in 3-5 working days; we confirm the date with you first. 第三步：承辦商轉台，通常 3-5 個工作天；日期會事先與你確認。
  4. Step 4 - your photos are deleted once the port-in completes. 第四步：轉台完成後，我們會刪除你的相片。

What we will ask you for: your name in English and Chinese, contact phone, email, identity document number (HKID or passport), current carrier, the number you are porting, the ICCID of your current SIM, whether it is prepaid or a contract, the date you want the switch - and a photo of your identity document and a photo of your SIM card, plus your signature. 我們會向你索取：中英文姓名、聯絡電話、電郵、身份證明文件號碼、現有電訊商、轉台號碼、現有 SIM 的 ICCID、儲值卡或上台、希望轉台日，以及身份證明文件及 SIM 卡相片各一張，並需要你的簽名。

How we look after it: encrypted connection, encrypted the moment it reaches our server (only ciphertext is stored, never the original file), location data removed from your photos, used only for this port-in, and deleted on completion. 保管方式：以加密連線傳送，到達我們伺服器即時加密（只存密文、不留原檔），相片的位置資料會被移除，只用於此次轉台，完成後即刪除。

The HK$50 port-in service fee. UncleSim charges HK$50 for the port-in work itself - checking your details, preparing the carrier application and seeing it through. It is not a carrier charge and not a deposit; the plan you choose at the end of this form is priced separately, and the bundles that include the port-in show the HK$50 inside their price. Refunds: ask in writing within 24 hours; a handling fee of 15% of the order value, or HK$25, whichever is greater, applies; the refund takes effect when we confirm it in writing. Once the application has gone to the carrier the fee is no longer refundable, and where the failure is ours we refund in full. UncleSim 收取 HK$50 轉台服務費，用於核對資料、準備申請及跟進全程；不是電訊商收費、也不是按金。你會在表格最後選擇計劃，計劃費用另計；包含轉台的組合已內含此 HK$50。退款：24 小時內書面申請，手續費為訂單金額 15% 或 HK$25 較高者，以我們書面確認為準；申請送交承辦商後不再退還，若失敗由我方造成則全額退款。

1. Personal Information Collection Statement

Number port-in / eSIM real-name registration 收集個人資料聲明（攜號轉台 / eSIM 電話卡實名登記）

Data user: UncleSim, the operator of unclesim.net. Please read this statement, then tick your consent. We collect nothing until you tick. 資料使用者：UncleSim（unclesim.net 的營運者）。請先閱讀，然後剔選同意。剔選前我們不會收集任何資料。

  1. Purpose of collection. We collect your personal data only to:
    (a) apply to LuckySIM (the "Carrier") to port your number and provide the related mobile service;
    (b) complete the real-name registration required by Hong Kong law for the eSIM phone card (Telecommunications (Registration of SIM Cards) Regulation, Cap. 106AI);
    (c) verify your identity, process and confirm the application, and contact you if needed.
    Your personal data is not used for direct marketing and not used for anything else. 收集目的：只用於 (a) 向 LuckySIM（網絡商）申請攜號轉台及提供相關流動服務； (b) 按香港法例《電訊（登記用戶識別卡）規例》（Cap. 106AI）完成 eSIM 電話卡實名登記； (c) 核實身份、處理及確認申請，以及有需要時聯絡你。不會用於直接促銷，亦不會作其他用途。
  2. Mandatory or voluntary. Fields marked (*) are required. Your Hong Kong Identity Card (or passport, if you have no HKID) and an image of that identity document are a statutory and essential requirement for real-name registration and the port-in application.
    If you cannot provide them, we cannot complete the real-name registration and your port-in application cannot proceed. 如未能提供，我們無法完成實名登記，轉台申請將不能繼續。
    必須／自願：註明（*）為必須提供。香港身份證（如無則為護照）及身份證明文件影像為實名登記及轉台申請的法定必要要求。
  3. Classes of transferees. Your data (including the identity document image) may be transferred to:
    (a) LuckySIM and its operator / network;
    (b) service providers we engage (cloud hosting and transactional email) strictly to process the purposes above.
    We disclose to no one else unless required by law or with your prior consent. 可能轉移的資料類別：你的個人資料（包括身份證明文件影像）可能轉移予 (a) LuckySIM 及其營運商／網絡； (b) 我們委託的服務提供者（雲端寄存及交易電郵），僅限於處理上述目的。除法律要求或你事先同意外，不會向其他人士披露。
  4. Security measures. Data is sent over an encrypted connection (TLS). Your details and both photographs are encrypted the moment they reach our server, with our public key, before anything is written to storage: in transit and while stored we and our cloud providers hold only unreadable ciphertext, and we do not keep the original files you selected. We never ask for the photographs through a messaging app such as WhatsApp. When we submit your application to the Carrier it is sent to the Carrier's designated confidential mailbox for real-name registration, together with the identity document image the Carrier requires. Your application is prepared from that ciphertext by our own processing equipment and by our cloud infrastructure, using a decryption key held in encrypted storage on equipment we control in Hong Kong - and used solely to prepare and submit your port-in application and to complete your real-name registration. The key is never stored with your application data and never appears in this page, in an email or in any document we keep, and only our designated staff can reach it. 保安措施：資料以加密連線（TLS）傳送。你的資料及兩張相片到達我們伺服器時，會即時以我們的公開金鑰加密，之後才會寫入儲存； 傳送及存放期間我們及雲端服務商只見到無法解讀的密文，我們亦不會保留你選擇的原檔。 我們任何時候都不會要求你透過 WhatsApp 等即時通訊軟件傳送。我們提交申請時，會把申請表及網絡商要求的身份證明文件影像送交網絡商指定作實名登記的保密郵箱。申請表由我們的處理設備及雲端基建以解密金鑰從該密文產生；金鑰存放於加密儲存內、在我們香港控制的設備上，只用於準備及提交你的轉台申請及完成實名登記。金鑰不會與你的申請資料一同存放，亦不會出現在本頁、電郵或我們保留的任何文件中，只有我們指定的人員可取用。
  5. Retention. The images you send us (identity document and SIM card) are deleted once your real-name registration and port-in are confirmed; if the application is not completed, at the latest within 30 days. We keep the completed application form itself (your details, the plan, your consent record and the signed-form fingerprint) as the record of the port-in we carried out on your behalf, together with accounting records as required by tax law. The photographs are never written to disk on our own equipment - they are unsealed in memory only for as long as it takes to prepare and send your application, and the copy we send ourselves for the hand-over to the Carrier is deleted from our own mailbox once your port-in is confirmed. 保留：你發給我們的影像（身份證明文件及 SIM 卡）會刪除，於實名登記及轉台確認完成後刪除；如未能完成，最遲 30 日內刪除。 我們會保留已完成的申請表本身（你的資料、計劃、同意紀錄及已簽署表格指紋），作為我們代你辦理轉台的紀錄，並按稅務法例保留會計紀錄。相片不會寫入我們自己設備的磁碟：我們只在記憶體內解密，時間僅限於準備及寄出你的申請所需；我們為交給網絡商而發給自己的副本，會於你的轉台確認後從我們自己的郵箱內刪除。
  6. Access and correction. You have the right to request access to and correction of the personal data we hold about you, using the PCPD form OPS003 or in writing to our Data Protection Officer at unclesim@unclesim.net. We reply within 40 days. 查閱及改正：你有權以個人資料私隱專員公署表格 OPS003 或書面方式向我們的保障資料主任（unclesim@unclesim.net）提出，我們會於 40 日內回覆。
  7. Where your data is held. Our cloud infrastructure is provided by an international provider (Cloudflare, Inc.), whose network may store and process data in data centres outside Hong Kong. We apply the same security measures wherever your data is held. Your application data is held as ciphertext, and the decryption key is held in encrypted storage on equipment we control in Hong Kong - never alongside your application data, and used only to prepare and submit your application. 資料存放地點：我們的雲端基建由國際服務商（Cloudflare, Inc.）提供，其網絡可能在香港以外的數據中心儲存及處理資料。 無論資料存放在哪裡，我們都採用相同的保安措施。你的申請資料以密文存放；解密金鑰存放於加密儲存內、在我們香港控制的設備上，不會與你的申請資料一同存放，只有我們指定的人員可取用。
  8. Records we keep about your submission. Together with your application we record the submission time and a hash (fingerprint) of the signed form. We use these only to prove what was submitted and when, to protect both you and us if a dispute arises. They contain no document image and are deleted on the same schedule as the rest of your application data. 遞交紀錄：我們會記錄遞交時間及已簽署表格的雜湊值（指紋）。 這些紀錄只用於證明遞交了什麼及何時遞交，以在你我雙方發生爭議時作為保障；紀錄不包含任何文件影像，並與其餘申請資料一併按同一時間表刪除。
  9. Your responsibilities and eligibility. You must complete real-name registration with your own original identity document - a third party's document cannot be used, and we cannot help anyone register with another person's document. If you are under 16, registration requires an adult guardian to register as well, so please contact us first at unclesim@unclesim.net. If you are not the registered user of the number, you confirm that the registered user has authorised you to port it in. 你的責任及申請資格：你必須使用本人的身份證明文件正本完成實名登記，不可使用第三者的證件，我們亦不會協助任何人以他人證件登記。 如你未滿 16 歲，須由成年監護人一併登記，請先聯絡 unclesim@unclesim.net。如你並非該號碼的登記人，你確認已獲登記人授權辦理轉台。
  10. Withdrawing consent. This information is required by law and by the carrier, so we cannot proceed with the port-in if you do not agree, or if you later withdraw your consent; you may still ask us for access to or correction of your data at any time. 撤回同意：由於這些資料屬法例及網絡商的要求，如你不同意或日後撤回同意，我們無法繼續辦理轉台申請；你仍可隨時要求查閱或改正你的資料。
  11. Full policy. Our Privacy Policy is published at unclesim.net/pages/privacy-policy. What we do with your identity document and SIM card photographs for the port-in and the real-name registration is set out in the service notice at unclesim.net/pages/privacy-mnp. You may print or save this page to keep a copy of this statement. 詳細政策：unclesim.net/pages/privacy-policy。關於攜號轉台及實名登記時我們如何處理你的身份證明文件及 SIM 卡相片，詳見服務須知 unclesim.net/pages/privacy-mnp。你可以列印或儲存本頁以保留本聲明的副本。
Frequently asked - why do you need my ID image, and is it safe?

1. Why is it compulsory? Hong Kong law (real-name registration for telephone SIM cards) requires us to verify your identity, and the Carrier requires an image of the identity document before it can port your number. It is a statutory and essential step; we cannot waive it.

2. How safe is it? Three layers: (a) your details and both photographs travel from your phone over an encrypted connection (HTTPS); (b) they are encrypted the moment they reach our server, so in transit and at rest we and our cloud providers only ever hold ciphertext - the original files are not kept, and only our designated staff can reach the decryption key; (c) the identity document photo and the SIM card photo are used only for your port-in application and deleted on completion, at the latest within 30 days.

3. Will it be used for anything else? No. Not for marketing, and not given to any third party except LuckySIM (the Carrier) and the necessary service providers, unless required by law or agreed by you.

4. What encryption do you use? Open, standard technology: AES-256-GCM encrypts the data, and RSA-2048 protects the key that encrypts it (the same method browsers implement as WebCrypto). The method is not a secret - we are happy to publish it. The only secret is our decryption key, which is held encrypted and is never stored with your application.

5. What are my rights? You may request access to, or correction of, the personal data we hold about you (see item 6 above).

中文：點解一定要交（法例要求）、有幾安全（三層保護：加密連線傳送、到達我們伺服器即時加密並只存密文、相片只用於轉台並於完成後刪除）、 會唔會作其他用途（唔會）、用咩加密（AES-256-GCM 加密資料，RSA-2048 保護加密金鑰；方法唔係秘密，只有解密金鑰保密）、你有咩權利（查閱及改正）。