Working with suppliers

HSBC is fully committed to the effective management and control of our supply chain and how we conduct business with our third party suppliers – whether we are meeting our legal and commercial obligations responsibly in our supplier dealings, as well as treating our suppliers fairly in our behaviours and actions.

The following five principles set out HSBC’s commitments to how our employees should act when managing supplier relationships, aligning to our values that define who we are as an organisation and what makes us distinctive. These principles are shared with all new sourcing engagements through surveys and our performance against these principles is assessed regularly through direct feedback from the supplier relationships that we manage, to ensure we deliver on this commitment.

Supplier management conduct principles

1. HSBC will treat suppliers in a fair and consistent way
2. HSBC will communicate to suppliers in a knowledgeable, clear and transparent way
3. HSBC will always behave in a professional way when dealing with our suppliers
4. HSBC will listen and act quickly on incidents of poor conduct by HSBC employees when interacting with suppliers
5. HSBC will hold our supply chain to the same high standards that it demonstrates

In addition to the above principles HSBC also asks our employees to act in line with internal Group conduct, value and behaviour standards as detailed in HSBC’s statement of business principles and code of conduct.

We also expect businesses who supply goods and services to HSBC to operate responsibly and our supplier code sets out the standards we require.

HSBC takes seriously all matters relating to the ethical conduct and behaviours between HSBC and its suppliers. In the event of encountering, or having concerns about, the ethical conduct of business for its supply engagement with HSBC, including relating to bribery and corruption, suppliers should immediately report through our vendor disclosure email hsbc.vendor.concerns@hsbc.com.

Supplier due diligence

As part of the HSBC sourcing process, all potential suppliers will be subject to due diligence and in order to comply with data protection laws we are required to notify our intentions regarding the use of your data. The Data Privacy Notice further down this page sets out how we will use the information you provide, or which we collect, in connection with any sourcing activity and any subsequent agreement(s) with us.

HSBC has a Supplier Code of Conduct that all the bank’s suppliers must comply with. The code is available to download in different languages below. These versions have been virtually translated, and so if there are any discrepancies in the language, the English version will take precedent.

Code of conduct – English (PDF 3MB)

Code of conduct – French (PDF 3MB)

Code of conduct – Korean (PDF 962KB)

Code of conduct – Portuguese (PDF 870KB)

Code of conduct – Simplified Chinese (PDF 1MB)

Code of conduct – Spanish (PDF 3MB)

Code of conduct – Traditional Chinese (PDF 2MB)

Code of conduct – Turkish (PDF 3MB)

HSBC is committed to having an inclusive supply chain, that represents the diversity of our employees, customers, and the communities we serve. To help with this goal, we have created a Supplier Inclusion Portal. This allows small-to-medium size enterprises (SMEs) or businesses that are majority-owned, managed and controlled by an individual or group that is part of an underrepresented or underserved group (which can vary by geographic location) to express interest in becoming a supplier to the bank. Companies can share some basic information via the portal about their business, capabilities, and diversity qualifications so we can better connect them with procurement opportunities. There is no cost to register for the portal.

HSBC supplier inclusion portal (opens in new window)

HSBC supplier inclusion portal - privacy notice (PDF 269KB)

HSBC aims to achieve net zero in our own operations, travel and supply chain by 2050, in line with our overarching net zero ambition.

We’re committed to working alongside and supporting suppliers in their own transition to net zero, so that we can collectively reduce emissions from our supply chain, the following guide is intended to further explain the expectations set out in the Supplier Code of Conduct as relate to net zero emissions reduction targets and disclosures, and to provide guidance on meeting those requirements.

Net zero supplier guide 2026 (PDF 1.2MB)

Collection, processing and sharing of your information

This privacy notice explains how we (‘we’ or ‘us’ is the HSBC Group of companies) will use the information you provide, or which we collect, in connection with any sourcing activity and any subsequent agreement(s) with us. Failure by you to supply such information may result in us being unable to enter into a commercial relationship and/or agreement(s) with you.

By participating in any sourcing activities or entering into any agreements with us, you agree that we may use your information in accordance with this notice. The data user in relation to your information is the HSBC Group Member who may enter into a services agreement with you.

The information that we collect from you may include information relating to an employee, director or any other person who exercises control over an entity (“Controlling Person”) who enters into a services agreement with us. For a trust, a Controlling Person may include a settlor, a trustee, a protector, beneficiaries and classes of beneficiaries. We may also collect information relating to individuals connected with a director, an entity or a Controlling Person, such as any guarantor, a director or officer of a company, partners or members of a partnership, or beneficial owner, trustee, settlor or protector of a trust, account holder of a designated account, payee of a designated payment, your representative, agent or nominee, or any other persons or entities with whom you have a relationship that is relevant to your relationship with the HSBC Group (“Connected Person”). Prior to providing information to us relating to a Controlling Person, a Connected Person or any other person, you shall ensure that they have consented to us processing their information as set out in this notice.

We may collect, use and share the information you provide to us, subject to local data privacy laws, for reasons connected to our business and relationship with you, including to:

1. approve, manage, administer or effect the services agreement between us
2. meet the compliance obligations of the HSBC Group
3. conduct financial crime (which includes money laundering, terrorist financing, bribery, corruption, tax evasion, fraud, evasion of economic or trade sanctions, and any act or attempt to circumvent or violate any law relating to these matters) risk management activity (which will include making further enquiries as to the status of a person or entity, whether they are subject to a sanctions regime, or confirming their identity and status)
4. if applicable, collect any amounts due and outstanding from you
5. conduct credit or other financial checks and obtaining or providing credit references (where you are a potential tenant of the HSBC Group)
6. enforce or defend our rights
7. verify your identity
8. understand how diverse and inclusive our suppliers are
9. undertake Environmental, Social and Governance (ESG) supplier audits.

In carrying out these purposes we may transfer and disclose your (or any Controlling Party (’s) or Connected Person (’s)) information to:

1. any member of the HSBC Group
2. any sub-contractors, agents, advisers or service providers of the HSBC Group (including their employees, directors and officers)
3. any regulatory authorities of the HSBC Group
4. credit reference agencies and other companies for use in credit decisions, fraud prevention and to pursue debtors
5. any third party in connection with a transfer, disposal, merger or acquisition of business by us or any member of the HSBC Group wherever located, including in jurisdictions which do not have data protection laws providing the same level of protection as the jurisdiction in which you are based. Your information will be protected by appropriate security and technical measures to keep your information secure. Such information may be transferred to a place outside the country of your residence.

Accessing your information

In certain jurisdictions, data privacy laws may allow you to make a written request for a copy of the personal data we hold about you and to ask us to rectify, erase or block any inaccurate data. You should make a request to your usual HSBC contact who will be able to direct your query. Depending on your jurisdiction there may be a small fee charged for providing this information to you.

Variations

Australia Privacy Notice (88KB) / Bermuda Privacy Notice (145KB) / China Privacy Notice – English(419KB) / China Privacy Notice – Chinese (726KB) / Germany Privacy Notice (117KB) / Indonesia Privacy Notice (111KB) / Turkiye Privacy Notice (68KB)