How Hangzhou Hikvision Digital Technology Co., Ltd collects, stores, and discloses personal information regarding HIK-CONNECT services and connected products
2025/11/17
Hangzhou Hikvision Digital Technology Co., Ltd and its affiliates ("HIKVISION") offer services including: (1) user website at www.hik-connect.com ("Website"); (2) downloadable Mobile Apps including Hik-Connect; and (3) Available Services. The "4G IoT Data Service is provided by Hikvision Europe B.V."
This policy explains how HIKVISION collects, stores, and discloses personal information regarding these services and connected Products.
Users must register via Website or Mobile Apps to access HIKVISION Services. The company may migrate personal information across services where available. HIKVISION reserves the right to modify this policy with reasonable notice via email or website notification.
By using HIKVISION Services, you acknowledge acceptance of this policy, including compliance with applicable data protection legislation like GDPR.
Personal Information: Has the same meaning as "personal data" — any information relating to an identified or identifiable natural person. Includes: name, telephone number, email address, physical address, payment information, product serial numbers, log data (browser type, domains, page views, IP address), unique device ID, device information, geo-location, mobile carrier identification, and device software/firmware data.
Hik-Connect Team Services: Value-added services including cloud VMS services, cloud vehicle monitoring function, cloud-based Access Control, Attendance and Video Intercom services, exclusively for Super Users and Normal Users.
Super User: Organizational users (companies, government agencies, unincorporated organizations) who register accounts, set up organizational structures, invite Normal Users, and manage services with administrative privileges.
Normal User: Individual persons invited by Super Users to use Hik-Connect Team Services under organizational management.
Organization/Enterprise/Team: Organizational structures with Normal Users as members, created by Super Users for using specific services.
Individual User: Natural individual data subjects using HIKVISION Services (excluding Hik-Connect Team Services) who register in their own name and are not organizational structure members.
Alarm Receiving Center: Operation centers providing alarm services for abnormal equipment events.
Third Party Services: Services provided by third-party providers (including Alarm Receiving Centers) for remote monitoring, alarming, device management, video functions, and PTZ operations.
HIKVISION collects and processes personal information as a controller or processor. Necessary information is requested to provide services; if not provided, services cannot be offered. Information may be collected from publicly or non-publicly accessible sources like Google.
Users must provide name, phone number, and email address to create accounts. Super Users may authorize installers to provide this information. Normal Users have accounts created by their managing Super User. Account information will be stored until your Account deletion. Super Users delete accounts via Home > General > Security > Users; Normal Users contact their Super User. Logging in acknowledges consent for collection, processing, and storage.
When adding, installing, activating, and managing Products, HIKVISION collects product name, verification code, serial number, IP addresses, and associated account information.
When sharing Products and permissions to other Hik-Connect users, email addresses of selected users are collected to facilitate access and management.
When inviting others to use HIKVISION Services, their email addresses are collected to send invitations, register them if accepted, and track invitation success. Users must obtain prior consent from invitees.
When responding to emails, contacting customer service, or using support tools, information is collected for support provision, identity verification, and product confirmation.
HIKVISION collects information about how users interact with Services — the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency and duration of your activities — to improve experience, prevent misuse, and ensure proper functioning. Adjustments made to Products through HIKVISION Services are recorded.
Information about devices used to access HIKVISION Services is collected, including browser type, device name, network type, operator, device model, system version, language, and time zone.
Video previews are transmitted but not stored. Pictures or videos received as alert information are processed for seven (7) days to enable notification functions.
Call records (call time and captured images of callers) are stored for ninety (90) days with restricted access and strict control mechanisms against unauthorized access.
When using playback functions for videos on personal devices, information is transmitted rather than stored.
Search queries, feedback on search results, and search instruction records are collected. Search queries are converted into a language that can be recognized by your device for quick footage retrieval.
Users should refer to the corresponding Privacy Notice at: https://www.hik-connect.com/views/terms/hct/hctPrivacy.html
Third-party service providers collect and process personal information after obtaining authorization or offline consent. Certain permissions managed through HIKVISION Services may be reserved to providers by default. Users are advised to review the Permission Statement and agree separately with providers regarding data protection obligations.
When engaging third-party Alarm Receiving Centers for alarm services, video clips captured by HIKVISION alarm devices will be uploaded to the HIKVISION cloud server for AI-based analysis to improve alarm accuracy and service quality. Analyzed results are shared securely with designated ARCs. All video clips are stored by default for seven (7) days in the cloud with restricted access, protected by strict security controls to prevent unauthorized access.
Users should refer to: https://www.hik-connect.com/views/terms/termsOfHik-ConnectCloudStorageService.html
Paid Package information and expiration status are collected.
Any other personal information users voluntarily provide.
HIKVISION processes personal information as a controller: (1) to provide services described in Terms of Services; (2) in furtherance of legitimate business interests; and (3) with user consent. Processing may occur to comply with applicable law, legal processes, court orders, official requests, or binding decisions; protect persons from death or serious bodily injury; or carry out public interest tasks.
HIKVISION uses cookies, web beacons, and other technologies to maintain records, store preferences, improve advertising, and collect information such as log data and device data. This enables better understanding of service usage, diagnosis and troubleshooting, administration, and service improvement.
For detailed cookie information, see: https://www.hik-connect.com/views/terms/useofcookies.html
HIKVISION engages third-party service providers to serve online advertisements. They may use a pixel tag or other similar technology to collect information about your visits to sites, and they may use that information to target advertisements for our Products and HIKVISION Services.
When third-party individuals' personal information ("Third Party Data") is collected and processed via user-purchased or used Products, HIKVISION processes such data as a processor on the user's behalf.
When using Product recording or streaming features, video and/or audio content is recorded and processed, including Third Party Data. This includes capturing and emailing portions of Third Party Data as notifications or analyzing data to identify motion or other events. Third Party Data is processed to send alerts and provide calling or video intercom services. If recording features are enabled, video and audio recordings are captured, processed, and retained for the recording subscription period duration.
We do not sell any Personal Information to third parties. HIKVISION may share personal information with third parties on non-disclosure agreement bases. Users consent to disclosure to:
Personal information is shared with HIKVISION affiliates required to use information per this policy. Service providers, vendors, technicians, and other third parties assist with processing, storage, data protection, and service administration. These parties are forbidden from using information for non-HIKVISION purposes and must protect information per this policy and applicable laws.
Information may be provided to third parties if HIKVISION believes in good faith that mandatory law requires disclosure — to comply with legal orders and government requests, subpoenas, or similar legal processes including law enforcement, regulators, and courts; protect customer and user interests; respond to claims that posted content violates third-party rights; protect user health and safety in emergencies; or enforce Terms of Service compliance.
If HIKVISION and/or its assets are sold or transferred, personal information may be among transferred items. Under such circumstance, we will notify you by the email address specified in your Account or by means of notice on website of (i) the identity and contact information of the purchaser or transferee, (ii) your right to revoke your consent to the provision of personal information, and (iii) the means by which you may revoke such consent.
Information is shared to support auditing, compliance, and corporate governance; combat fraud or criminal activity; protect HIKVISION rights or those of affiliates and users; or support legal proceedings.
Aggregated or anonymized data rendered such that subjects are no longer identifiable may be disclosed publicly or to third parties for the same reasons personal information might be shared, to better understand customer interactions, for research and data analytics, or for vendor analysis and research.
HIKVISION has implemented commercially reasonable administrative, technical, and physical security controls designed to safeguard personal information. Periodic reviews and assessments of security control effectiveness are conducted.
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, HIKVISION cannot guarantee that your personal information is under absolute security with the existing security technology. HIKVISION will handle personal data breaches as required by applicable data protection law, including notifying relevant supervisory authorities and data subjects where required.
Contact for Security Questions:
HIKVISION stores personal information on its servers established on third-party servers, including Amazon Server, until deleted or edited, or as long as users remain HIKVISION users to provide relevant offers. Contact HIKVISION for retention policy details.
Users can access, update, or delete personal information via Account profile by selecting the "Person" button. HIKVISION assists with subscription management, Account deactivation, and profile and data removal.
Except for certain information (event alarm information, attendance records under Hik-Connect Team Services) retained per specific rules in this policy and information required for legal compliance, personal information is immediately deleted upon Account deactivation. Due to service maintenance methods, backup copies may be temporarily retained before permanent deletion.
Personal information is retained for necessary periods to fulfill outlined purposes unless longer retention is required or permitted by applicable law.
HIKVISION Services may allow public posting, sharing, communication, or making information accessible to others. Users should read Terms of Service carefully. All the information you post, share, or communicate may be accessible to anyone with Internet access, and any personal information you include may be read, collected, and used by others.
HIKVISION permits others to link to HIKVISION Services or post links to their websites. HIKVISION does not endorse these websites and is not responsible for their practices. Users should read their privacy policies before submitting information.
Users benefit from personalized experiences when HIKVISION knows more about them and their preferences. However, users can limit information provided and communications received through Account preferences.
Users will receive commercial emails or SMS only with prior express consent or when otherwise permitted per applicable laws.
Users may choose not to receive commercial emails or SMS by following instructions in commercial messages or adjusting Account preferences after logging in. Even if unsubscribing from commercial messages, HIKVISION may send non-commercial messages related to accounts and transactions.
Users may manage how mobile devices and mobile browsers share device data with HIKVISION by adjusting privacy and security settings. Users should refer to instructions from their mobile service provider or device manufacturer.
HIKVISION does not intend for children under 18 (or equivalent minimum age in relevant jurisdictions) to access or use HIKVISION Services; such use is prohibited. HIKVISION Services are designed for adults.
By using HIKVISION Services, users represent they are at least 18 years old (or above equivalent minimum age) and understand this requirement for account creation and purchase.
If HIKVISION obtains actual knowledge that an Account is associated with a user under 18 (or equivalent age), information will be promptly deleted. Parents or guardians of children under 18 may contact HIKVISION to review, request deletion of, or prohibit use of the child's personal information.
Contact Details:
HIKVISION transfers and processes information globally in own facilities and with service providers/partners regardless of service use location. As a global operator, HIKVISION may transfer personal information to worldwide affiliates for described purposes. Certain Hikvision employees located in mainland China are given limited remote access to this information so certain functions, such as customer and technical supports can be realized. This access is limited, secure and only granted where necessary under strict security controls and authorization approval protocols.
All global data transfers comply with applicable laws. Appropriate safeguards ensure compliance with local data protection laws. Users agree to data transfer and have the right to be informed of safeguards taken.
Current Data Centers: U.S., Singapore, Brazil, and Ireland. Laws, regulations, and standards may differ from users' countries. You have understood that the risks under applicable data protection laws are different and we may transfer to and store your personal information at our facilities worldwide. However, this does not change any of our commitments to safeguard your personal information in accordance with this Privacy Policy.
Users with questions or comments about privacy practices or this policy may contact HIKVISION:
Please provide: (i) Your name (or account user name) and preferred contact method; and (ii) Request or comment details with corresponding website links.
Data Controller: For EU data protection purposes, Hangzhou Hikvision Digital Technology Co., Ltd., located at No. 555 Qianmo Road, Binjiang District, Hangzhou 310052, China, is the data controller. Hikvision Europe B.V., located at Dirk Storklaan 3, 2132 PX Hoofddorp, Netherlands ("HIKVISION Europe"), acts as EU representative.
User Rights: Users have rights to object to processing for legitimate interests. Subject to applicable data protection law limitations, users have rights including access, rectification, erasure, restriction, objection, portability, and not being subject to solely automated processing decisions/profiling. To exercise rights, users contact HIKVISION. Users may withdraw consent anytime, free of charge. Withdrawal does not affect lawfulness of prior consent-based processing but may affect continued service use. Users concerned about information handling may lodge complaints with data protection authorities.
Corporate Customers: Corporate customer personal information and Third Party Data transfers to HIKVISION rely on approved data transfer agreements (Standard Contractual Clauses or SCCs).
Data Transfers Outside EEA/UK: When HIKVISION transfers personal information outside the EEA/UK, where required or appropriate, HIKVISION will put in place SCCs, to secure your Personal Information (and Third Party Data).
For affiliate Hangzhou EZVIZ Software Co. Ltd ("HES") transfers, personal information categories processed are as outlined in this policy. HES may transfer personal information to third-party recipients outside EEA/UK for described purposes. HES only makes onward transfers to recipients with appropriate safeguards, potentially including additional SCCs.
SCC copies are available by contacting HIKVISION per Contact Us details.
Certain U.S. state residents may have additional privacy rights under state privacy laws. Details appear in the Additional State-Specific Privacy Notice: https://www.hik-connect.com/views/terms/additionalStateSpecificPrivacyDisclosure.html
HIKVISION has deployed local Russian servers. Users located in Russia have personal information stored in local servers instead of overseas data centers.
HIKVISION has deployed local Indian servers. Users selecting "India" as located country during Account registration have personal information stored in local servers instead of overseas data centers.