“Personal information” (PI) means any information that relates to a natural person, which either directly or indirectly, in combination with other information available or likely to be available with the Bank, is capable of identifying such person.

“Sensitive personal data or information” (SPDI) of a person means such personal information, which consists of information relating to:

• Password
• Financial information such as Bank account or credit card or debit card or other payment instrument details
• Physical, physiological and mental health condition
• Sexual orientation
• Medical records & history
• Biometric information
• Any detail relating to the above clauses as provided to body corporate for providing service
• Any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract

Provided that, any information that is freely available or accessible in public domain or furnished under any law for the time being in force shall not be regarded as sensitive personal data or information for the purposes of this policy.

This policy covers all users who interact with the Bank and those whose personal information is collected, received, transmitted, processed, stored, dealt with, or handled by the Bank. This policy covers the “sensitive personal data or information” of the persons handled by the Bank in any form or mode.

Please note that this Privacy Policy does not extend to third-party websites linked to Bank websites, if any.

The Bank collects PI and SPDI from its customers and uses the same for specific business purposes or for other related purposes designated by the Bank or for a lawful purpose to comply with applicable laws and regulations. The Bank shall not divulge any personal information collected from the customer for cross-selling or any other purposes without the written consent of the customer.

The authenticity of the personal information provided by the customer shall not be the responsibility of the Bank. The Bank shall not be responsible for any information that is freely available or accessible in the public domain or furnished as per law for the time being in force.

The Bank may use Personal Information:

• To allow customers to apply for products or services and evaluate customer eligibility for such products or services.
• To verify customer identity and/or location in order to allow access to accounts, conduct online transactions, and maintain measures aimed at preventing fraud and protecting the security of account and personal information.
• For risk control, fraud detection and prevention, compliance with laws and regulations, and compliance with other legal processes and law enforcement requirements.
• To inform customers about important information regarding the site, products, or services for which they apply or may be interested in, or in which they are already enrolled, changes to terms, conditions, and policies, and/or other administrative information.
• For business purposes, including data analysis, audits, developing and improving products and services, enhancing the site, identifying usage trends, and determining the effectiveness of promotional campaigns.
• To allow customers to utilize features within our sites by granting Bank access to information from customer devices such as contact lists or Geo-location when customers request certain services.
• To respond to customer inquiries and fulfill customer requests.
• To deliver marketing communications that we believe may be of interest to customers, including ads or offers tailored to them.
• To personalize customer experience on the site.
• To allow customers to use some site financial planning tools; information entered into these tools may be stored for future access and use. Customers will have the option not to save the information.

The Bank will not be held responsible for content, information usage, and privacy policies of linked sites which will not be under the control of the Bank. The authenticity of the personal information provided by the customer will not be the responsibility of the Bank.

Information shall be shared with any external organization or persons to enable the Bank to provide services or to enable the completion or compilation of a transaction, credit reporting, or when necessary or required pursuant to applicable norms or pursuant to the terms and conditions applicable to such information as agreed to with the Bank or pursuant to any requirement of law or regulations or any government or court or other relevant authority’s directions.

Information may be disclosed without obtaining prior consent with government agencies mandated under the law where disclosure is necessary for compliance to legal obligations. Any information may be required to be disclosed to any third party by the Bank by an order under the law for the time being in force.

It may be necessary to disclose information to one or more agents and contractors of the Bank and their sub-contractors, but such agents, contractors, and sub-contractors will be required to agree to use the information obtained from the Bank only for specific assigned purposes and will be disposing of the information in a secured manner consistent with the Bank’s policies.

The persons authorize the Bank to exchange, share, or part with all information related to the details and transaction history of the covered persons to its affiliates, banks, financial institutions, credit bureaus, agencies, or participation in any telecommunication or electronic clearing network as maybe required by law, customary practice, credit reporting, statistical analysis, credit scoring, verification, or risk management, and shall indemnify the Bank for use or disclosure of this information.

Bank customers have access to a broad range of products and services such as basic Banking Products, ATM, Mobile Banking, UPI, etc. To deliver products and services effectively and conveniently, it is extremely important that the Bank uses technology to manage and maintain certain customer information while ensuring that customer information is kept confidential and protected.

The Bank is committed to ensuring that information is secure. In order to prevent unauthorized access or disclosure, the Bank has put in place reasonable physical, electronic, and managerial procedures to safeguard and secure the information that the Bank collects.

The Bank’s current policy is to retain information for so long as it is needed by the business. Since most information is in continuous use, much is retained on an indefinite basis or for such period to satisfy legal, regulatory, or accounting requirements.

When the Bank finds that information collected, stored, or transferred is no more in use and if there is no legal obligation to retain such information, the Bank will determine appropriate means to dispose of or to de-identify personally identifiable information in a secure manner in keeping with its legal obligations.