Data Privacy Notice

WHAT PERSONAL DATA DO WE COLLECT?

Personal data includes information that we collect and process about you depending on the products or services you obtain or receive. Typically, we process the following information:

You provide us with the following categories of information about yourself:

Personal details: title, name, previous names, nationality, photograph, gender, date and place of birth.
Contact: email address, residential or business address and contact telephone number.
Identity: Emirates ID number, passport and similar documentation.
Identity verification data: for our electronic services we require at least two forms of evidence to verify your identity which may include: your registered mobile number, registered email address, facial recognition, fingerprint, recording of your voice and a video call.
Financial information: your bank account number, statement of account, credit or debit card numbers, financial history, credit score and authentication-related information.
Economic, financial and residency information: income and other revenues, the value of your assets and your country of residence.
Education and Employment related data: level of education, employment, employer’s name and remuneration.
Transactions: details about payments to and from your accounts including payments of any financing or credit facilities, beneficiary names, account numbers, addresses and transaction details.
Log-in: information in connection with our account sign-in facilities, including your log-in, username and encrypted password details.
Correspondence: information you give to us by filling in any of our forms or by communicating with us, whether face-to-face, by phone, email, online or otherwise.
Marketing: details of any marketing preferences we receive from you.
Video protection (including CCTV): surveillance of our premises and ATMs for security reasons.
Sensitive information: for certain products and services, we may collect your racial/ethnic origin, religious beliefs, biometric data, health data and information about criminal convictions and offences.
- Biometric data may include: fingerprints, voice patterns or facial recognition which can be used for identification and security purposes.
- Health data may be required and held by us in relation to some insurance contracts.

You must keep your personal data up-to-date – please tell us promptly about any changes, for example, if you have a new address.

We automatically collect the following when you use our website or apps:

Technical information, such as your IP address and device ID.
Information about your visit, such as your URL and website interaction.
Location data, with your approval, used to show you the location of the nearest branch or ATM based on your IP address, coordinates or a unique device code.
Networks and connections, when you interact with us and the people and groups that you are connected to (for example, through social media).

Legal basis of data processing

Technical information may include:
- mobile number;
- Internet protocol address;
- login information;
- browser type and version;
- browser plug-in types and versions;
- Device IDs;
- Google ID;
- time zone setting;
- operating system and platform;
- hardware version;
- device settings (like language and time zone);
- file & software names and types;
- battery & signal strength; and
- your mobile operator or ISP.

Information about your visit may include
- full Uniform Resource Locators;
- clickstream to, through and from our site (including date and time);
- page response times & download errors;
- page interaction information (such as scrolling, clicks, frequency and length of visits, types of content viewed or engaged with, and mouse-overs); and
- methods used to browse away from the page.

We may also collect any phone number you use to call our customer service team (including call metadata such as the date, time and length of a call) or the social media handle you use to connect with our customer service team. We may record calls for training and performance purposes to establish clear records and for legal reasons.

Location data will include specific geographic locations (such as GPS, Bluetooth and WiFi signals) which we use to provide location services (if you ask or permit us to) so that we can deliver content, advertising and other services that are dependent on knowing where you are. Location data may be collected in combination with your device ID so that we can recognise your mobile browser or device.

We also collect information about you from the following sources:

Other ENBD Group entities;
Credit Information Agencies and fraud prevention agencies;
People appointed to act on your behalf;
Third party providers and partners to help us improve the personal data we hold and to provide more relevant and interesting products and services to you;
Joint account holders;
Our co-branded financial services product partners for example, if you are an existing member of a rewards or loyalty program of one of our partners;
Criminal record checks from organisations authorised to provide this data;
Debt recovery agents;
Advertisers and social media partners may share technical information and information about your visits with them including your experiences or interactions with them;
Databases made available by official authorities and government authorised sources to update/verify your documents; and
Publicly available sources

HOW DO WE USE YOUR PERSONAL DATA?

We may use the categories of personal data explained in the previous section as follows:

How we use your personal data	Our legal basis for processing
To create your Emirates Islamic bank account. To identify you when you sign-in to your account. To provide you with our services, and to fulfil your requests for certain products and services.	Contract
To tell you about important updates and changes to our Channels, including to our Privacy Notice and other policies and terms.	Contract Legitimate interests
We use your biometric data for online identity verification.	Consent
To understand how you use and interact with our services and the people or things you're connected to and interested in. To administer and improve the design and functionality of our Channels for a better customer experience. To conduct profiling and automated decision-making to help us provide you with relevant information, suggestions and recommendations for products.	Consent Legitimate interests
To contact you if you have asked us to do so including to resolve troubleshooting problems and helping with any issues concerning our website or apps.	Contract Legitimate interests
To contact you for your opinions about our services including through surveys and other market research.	Consent Legitimate interests
To prevent and detect fraud, money laundering and other crimes (such as identity theft).	Legitimate interests Legal obligation
To recover debt and exercise other rights we have under any agreement with you as well as to protect ourselves against harm to our rights and interests in property.	Contract Legitimate interests Legal obligation
To help you to check-in and find local events or offers in your area.	Consent Legitimate interests
To comply with laws and regulations that apply to us and to co-operate with regulators and law enforcement organisations.	Legal obligation Legitimate interests
To personalise the marketing messages we send to you so that they are more relevant and interesting. When we advertise our products and services on the internet, we may share your information with our advertising partners where we think you may be interested in our offers. When we use social media for marketing purposes your information will be shared with any such platforms so that they can check if you hold an account with them. They may use your information to send our advertisements to you.	Consent Legitimate interests
To enhance your consumer experience, we may share your personal data for direct marketing purposes.	Consent
To establish, exercise or defend our legal rights or those of any other member of our Group.	Legitimate interest

IS IT OBLIGATORY OR VOLUNTARY FOR ME TO PROVIDE MY PERSONAL DATA?

We need your personal data to provide you with the services or products requested by you.

After you submit an application form with us or become our customer, we have certain legal obligations to process your data. If you do not provide us with the requested personal data, we will be unable to comply with the legal or regulatory obligations and will not be able to offer our services to you.

It is voluntary for you to provide us your data or consent for sales or marketing purposes.

We make it clear on our application forms what data is required to be provided by you by marking the mandatory fields with the asterisk symbol (*).

You can object to further marketing at any time by:

selecting the "unsubscribe" link at the end of all our emails, calling our customer call centre on 600 599995 or texting STOP : 4451
changing your marketing preferences in your account; or
sending us an email at [email protected]

Further details of how we will use your information can be found below.

Automated processing

The way we analyse personal data relating to our services may involve profiling or other automated methods to make decisions about you that relate to the following:

Credit and affordability checks (including credit limits) – we will consider a number of factors including information about your income, expenses and how well you have kept up on payments in the past.
Anti-money laundering, sanctions checks and screening 'politically exposed' people.
Monitoring your account for fraud and other financial crime – we will assess your transactions to identify any that are unusual.
Assessments required by regulators and appropriate authorities – certain details in your information may suggest that you are likely to become financially vulnerable and we may need to help you.

You may have a right to certain information about how we make these decisions. You may also have a right to request human intervention and to challenge the decision.

Legal basis of data processing

What is our lawful basis for processing your personal data?
Consent: We will use your personal data to send you promotional or marketing materials if you have given consent to us doing so where required by law. You can opt-out of further marketing at any time by changing your marketing preferences in your account or by texting STOP to 4451 or by sending us an email at [email protected].
Contract: We collect, store and process your personal data if it is necessary for performing a contract you have with us or where you have asked us to take specific steps before entering into that contract.
Legal Obligation: We may need to process your personal data to comply with our legal obligations, including under applicable UAE, EU and local law (including data protection law), and/or any court orders.
Legitimate interests: processing your personal data is sometimes necessary for us to undertake the activities detailed below, in our own interest or sometimes in the interests of a third party (like our rewards programme partners). Our legitimate interests are: Making sure our customer accounts are well-managed. Delivering, developing and improving our products and services. Growing our business and informing our marketing strategy. Preventing and investigating fraud, money laundering and other crimes. Keeping our records updated. Improving our website and apps from a security perspective. Enforcing or applying our terms or other agreements with you, including recovering fees or other debts due to us. Giving you information about our products and services that you may be interested in and, in the case of electronic marketing, where we have your permission to do so. In each case we balance our legitimate interests with your rights and interests. If you would like further information about how we assess our legitimate interests, please contact us at [email protected].

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We may share your personal data with:

companies within the Emirates NBD Group who may support us in any of the purposes set out in this Privacy Notice;
any joint account holders, guarantors, trustees or beneficiaries;
anyone who provides instructions or operates any of your accounts on your behalf including advisers (such as solicitors and accountants), intermediaries and those under power of attorney;
people you make payments to and receive payments from;
providers of payment-processing services and other businesses that help us process your payments;
government-authorised Credit Information Agencies and fraud prevention agencies to comply with our legal and regulatory obligations;

Please be advised about the possible limitations of accessing future financial products and/or services based on your records provided to these agencies.

any fund managers who provide asset management services to you and any brokers who introduce you to us or deal with us for you;
independent third-party service providers and agents (including their sub-contractors) such as collection agents or providers who may deliver a gift or provide a gesture of goodwill;
our business partners, together with whom we provide services such as hotels, restaurants, airline partners (whose logo may appear on a credit card we provide) and service providers or agents who provide services on their behalf;
insurance providers, including underwriters, brokers and associated parties;
analytics providers that assist us in the optimisation of our website and apps including by measuring the performance of our online campaigns and analysing visitor activity;
social media companies so they can display messages to you about our products and services or make sure you do not get irrelevant messages;
any people or companies where required in connection with potential or actual corporate restructuring, merger, acquisition or takeover including the transfer of any of our rights or duties under our agreement with you;
law enforcement authorities, government bodies (including Al Etihad Credit Bureau), courts, dispute resolution bodies, regulators, auditors and any party appointed by our regulators to carry out investigations or audits of our activities; and
where required to do so by court order or where we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation.

The disclosure of personal data to these parties is done with the utmost care and due diligence to ensure that the protection and privacy of your data is maintained.

WHERE DO WE STORE YOUR PERSONAL DATA?

We are headquartered in Dubai in the United Arab Emirates (UAE). We may transfer your personal data to other countries where we (or other companies within the Emirates NBD Group) or our service providers maintain operations.

When we do this, we'll ensure it has an appropriate level of protection and that the transfer is lawful. This includes relying on adequacy decisions issued by the relevant data protection authority and using standard contractual clauses for transfers of personal data. You can obtain more details of the protection given to your information when it is transferred by contacting us using the details below

HOW DO WE PROTECT YOUR PERSONAL DATA?

The security and confidentiality of your personal data is important to us!

We use a range of measures to keep your personal data secure and protected against unlawful processing, accidental loss, destruction and damage.

When we use external service providers, we require them to provide the same standards of data protection as we do.

Please contact our Customer Service Helpdesk on +971 600 599995 in case you receive fraudulent emails or require any assistance using our online banking services.

Children's data

Protecting the safety of children when they use the Internet is important to us. Our websites and apps are intended for use only by persons who are at least 18 years of age. If you are under the age of 18, your parent or guardian must consent on your behalf where we ask for consent in relation to the use of your information.

External Links

Our website and apps may, from time to time, contain links to external sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies. Please check these policies before you submit any personal data to these websites. We are not responsible for the privacy policies or the content of such sites.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We do not keep your personal data for any period longer than is necessary for the purpose for which your personal data was collected, processed, required by law or where we may need it for our legitimate purposes such as maintaining records for analysis or audit purposes, responding to queries or complaints, monitoring fraud, defending or taking legal action and responding to requests from regulators.

We use a range of measures to keep your personal data secure and protected against unlawful processing, accidental loss, destruction and damage.

YOUR RIGHTS

Your choices and rights

In certain circumstances, you have the right to:

ask for a copy of the personal data we hold about you and obtain information about how we process it;
ask us to give you (or a third party chosen by you) an electronic copy of the personal data you have given us;
ask us to correct personal data we hold;
ask us to restrict how we use your personal data;
ask us to delete your personal data;
object to particular ways we are using your personal data, including objections to marketing;
contact us with any enquiries or complaints in respect of your personal data; and
withdraw consent to the following at any time:

the processing of your personal data by us except where your personal data is required for business operation in relation to the product or service you obtain from us; and
sharing your personal data with third parties for purposes such as but not limited to marketing or sales.

Please note that a withdrawal of consent by you will not affect the lawfulness of data processing based on the prior consent. Your withdrawal of consent will take effect within 30 calendar days from the day you request us to do so.

If you wish to exercise any of these rights in relation to the personal data we hold about you or wish to change your preferences at any time, please contact us, using the details below.

We will ask you to verify your identity before allowing you to access your personal data.

Your data privacy journey with us

CONFIDENTIALITY OF PERSONAL DATA

COLLECTING PERSONAL DATA