^{Privacy Policy} Al Hilal Bank PJSC Privacy Policy

IMPORTANT INFORMATION ABOUT WHO WE ARE

Personal Data processed: name, Emirates ID details, passport details, date of birth, nationality, employment details, transaction pattern (no of credits/no of debits), source of income, income, contact details and address.

Processing description: We process your Personal Data in order to consider and process your application for an account with us. This Processing is necessary in order for us to take regulatory steps at your request before we enter into an agreement with you and is also necessary for deciding whether or not we can offer you the product you have applied for. This type of Processing is required in order for you to enter into an agreement with us.

Personal Data is also required as part of regulatory financial crime protection, including Know Your Customer ("KYC") process mandated for account opening.

We use your Personal Data to prepare KYC forms, CRS forms, W-8 and W-9 forms, application forms, and to evaluate your Customer profile.

In respect of fraud searches and identity verification, this Processing is necessary for fraud prevention and to comply with our legal obligations.

If you do not provide this information, then we cannot proceed with your application.

Processing form: physical, digital platform, and AHB mobile applications.

Personal Data processed: name, Emirates ID details, passport details, date of birth, nationality, your mother's maiden name, banking details, home country address details, employment details, income details, name and contact of two friends.

Processing description: We process your Personal Data in order to consider and process your application for a credit card. Such Processing may include credit assessment, Profiling, and cross sales.

We will obtain Consent to check your credit score with Al Etihad Credit Bureau ("AECB").

We will obtain Consent to pull a statement from the Central Bank of the UAE.

Credit Assessment, profiling, cross sales, data may be shared to regulatory authorities, if requested. Consent for the same is recorded in the application form. Relevant Shariah set of contracts (Murabaha contract, Offer to sell & Service Contract) covering the principal amount, profit amount, tenor and instalment amounts payable is also accepted by the customer

Processing form: physical and digital platform.

Personal Data processed: name, Emirates ID details, passport details, date of birth, nationality, mother's maiden name, banking details, home country address details, employment details, income details, name and contact of two friends.

Processing description: We will obtain Consent for checking your credit score with AECB.

We will obtain Consent to pull a statement from the Central Bank of the UAE.

Relevant Shariah set of contracts (Murabaha contracts) as per Shariah principles covering the principal amount, profit amount, rate, tenor and instalment amounts payable is also accepted by the customer.

Processing form: physical and digital platform.

Personal Data processed: name, Emirates ID details, passport details, date of birth, nationality, mother's maiden name, banking details, home country address details, employment details, income details, name and contact details of two friends.

Processing description: We will obtain Consent for checking your credit score with AECB.

We will obtain Consent to pull a statement from the Central Bank of the UAE.

Relevant Shariah set of contracts (Ijarah documents) covering the principal amount, profit amount and/or rate, tenor and instalment amounts payable is also accepted by the customer.

Processing form: physical and digital platform.

Personal Data processed: name, information on your current investments at AHB, previous experience with investments, liquidity, return expectations, time horizon, subscription amount, account number, address, profession, country, nationality, DOB, source of funds, contact details, joint account holder info, redemption amount, units, and signature.

Processing description: The Personal Data is processed to assess your risk profile and tolerance towards investment, and ultimately your investment strategy, and give you access to our investment management.

Your Personal Data may be shared with Authorities upon request.

Processing form: digital platform, risk profile questionnaire, subscription form, redemption form.

Personal Data processed: name, information on your current investments at AHB, previous experience with investments, liquidity, return expectations, time horizon, and signature.

Processing description: The Personal Data is processed to assess your risk profile and tolerance towards investment, and ultimately your investment strategy, and to take instructions to execute on behalf of you.

Your Personal Data may be shared with Authorities upon request.

Processing form: digital platform, email attachments, Sukuk execution form.

Personal Data processed: Emirates ID, passport copy, income proof, address proof, Visa copy, and Email ID.

Processing description: The KYC process is mandatory for identification and verification of your identity when opening an account, and also periodically over time. The objective of the KYC is to prevent the Bank from being used by criminal elements for money laundering activities.

Your Personal Data may be shared with Authorities upon request.

Processing form: digital platform, email attachments, CIF update from branches, internet banking.

Personal Data processed: Name, bank account information, children’s names, CIF, company entity, contact details, credit card number, credit history, date of birth, debit card number, gender, home address, job title role, Emirates ID, nationality, parents names, passport details, reference or background checks, religious beliefs, signature, spouse’s name.

Processing description: Fraud investigation is a mandatory response plan to incidents of suspected and actual fraud and involves the processing of relevant Personal Data under standard protocols and a clear framework.

Your Personal Data may be shared with Law Enforcement if deemed necessary.

Processing form: digital platform, case report/investigation form.

Personal Data processed: Name, audio information, bank account details, CIF contact details, credit card number, debit card number, contact details.

Processing description: We may process your personal data to handle your queries and confirm transactions.

Processing form: physical and digital platform, transaction dispute form.

Personal Data processed: Name, account number, age, bank account information, bank statements, CIF, citizenship status, compensation data, contact details, credit card number, credit history, date of birth, debit card number, emergency contact details, gender, home address, marital status, Emirates ID details, passport details, signature.

Processing description: We process your Personal Data in order to consider and process requests for certificates related to customer’s relationship with AHB

Processing form: digital platform

Personal Data processed: Name, bank account information, bank statements, CIF, compensation data, contact details, credit card number, credit history, date of birth, debit card number, gender, home address, marital status, Emirates ID details, passport details, relatives information, signature.

Processing description: We may process your Personal Data in order to consider and process your feedback and complaints.

Processing form: physical and digital platform

We process and share your facial biometric data with a third party service provider and a UAE Government Authority for verification against UAE Government records, to confirm your identity.

The use of FacePass is optional. You may consent and opt-in to use FacePass by turning the feature on or off in the Mobile App or Internet Banking. Activation of FacePass will result in FacePass being the sole permitted means of authentication for certain transactions, to which the FacePass applies. Other means of authentication, such as by a One-Time-Password (OTP), may automatically be deactivated once FacePass has been activated.

When you activate FacePass, your photograph is collected, processed and stored by AHB for the purpose of identification and verification, in order to authenticate your financial and nonfinancial transactions.

We may process your Personal Data for marketing purposes to provide you with information about products and services that you may be interested in.

We will obtain Express Consent before using and sharing your Personal Data for direct marketing or transferring the Personal Data to any third parties for direct marketing.

You may place your request to stop receiving marketing messages at any time. In order to do so, follow guidance in section “Marketing From Us” of this Notice.

1. Right of access: you are entitled to request access to the information that we process about you.
2. Right to rectification: under certain circumstances, you have the right to have inaccurate Personal Data about yourself rectified or completed if it is incomplete.
3. Right to complain you have the right to contact us with any inquiries or complaints in respect of your Personal Data Processing.
4. Right to Withdraw Consentyou have the right to withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. Unless specified otherwise, the withdrawal will take effect within 30 complete days upon receiving your request.

1. Right of access: you are entitled to request access to the information that we process about you.
2. Right to request Personal Data portability: if you have provided information to us directly, the right to data portability allows you to obtain and easily reuse (move, copy or transfer) your Personal Data for your own purposes from one IT environment to another, securely and without affecting its usability.
3. Right to rectification: under certain circumstances, you have the right to have inaccurate Personal Data about yourself rectified or completed if it is incomplete.
4. Right to erasure: you have the right to ask to have your Personal Data erased. We may have the right to refuse a request for erasure in some circumstances, for example where the Personal Data is required for compliance with the law or in connection with legal claims.
5. Right to restrict Processing: under certain circumstances, you are entitled to ask us to restrict the processing of your Personal Data.
6. Right to stop Processing: under certain circumstances, you have the right to stop the processing of your Personal Data. For example if your Personal Data is being used for direct marketing, statistical surveys and/or in contravention with the Applicable Law.
7. Rights in relation to automated decision making and Profiling: you have the right not to be subject to a decision based solely on Automated Processing, including Profiling, which could produce legal effects, i.e. something which adversely affects your legal rights. You have the right to obtain an explanation of a decision made by automated means and to challenge it.

means a Customer for the purpose of Central Bank of the UAE Consumer Protection Regulation and the accompanying Consumer Protection Standards. A Customer is any natural person or sole proprietor who obtains or may prospectively obtain services and/or products from AHB, with or without charge, to satisfy their personal need or others’ needs.

means, as per the CPS, a natural or legal person, public authority, agency, or other body that has the authority over the Processing of Personal Data. This entity is the focus of most obligations under privacy and Applicable Law. It controls the use of Personal Data by determining the purposes for its use and the manner in which the data will be processed specific to their biological, physical, biometric, physiological, mental, economic, cultural or social identity.

Means, as per the UAE Data Protection Law, the establishment or the natural person who is in the possession of the Personal Data and who, by virtue of its activity, alone or jointly with other persons or establishments determines the means, methods, criteria and purposes of the Processing of such Personal Data.

means, as per the CPS, any unauthorised or accidental loss, misuse, modification, access, disclosure or Destruction of Personal Data.

Means, as per the UAE Data Protection Law a breach of information security and Personal Data through unauthorised or unlawful access thereto, including replication, transmission, distribution, exchange, transfer, communication or Processing in such a manner leading to the disclosure or divulgence to third parties, or otherwise the destruction or modification of such data while being stored, transferred and processed.

means, as per the CPS, any individual, who can be identified (either directly or indirectly) through one or more elements of Personal Data that are collected, used, shared, or otherwise processed as part of AHB’s operations.

Means, as per the UAE Data Protection Law, the natural person to whom Personal Data relates.

means that the Controller has lost control or access to the Personal Data.

means the entity to whom Personal Data is transferred.

Target sectors to which Personal Data is transferred include, but is not limited to:

1. Bank’s branches, subsidiaries, affiliates or other persons controlled by the Bank, or any person under common control with the Bank, in each case, whether directly or indirectly.
2. Anyone that AHB reasonably believes to be acting on your behalf with authority to do so, such as payment recipients, beneficiaries of your account, nominees, intermediaries, correspondent and agent banks, clearing houses, clearing or settlement systems, market counterparties, upstream withholding agents, swap or trade repositories, stock exchanges or companies in which you have an interest in securities (where such securities are held by AHB for you), a debt charity, power of attorney or your professional advisors.
3. Legal, supervisory, regulatory, governmental and quasi-governmental bodies such as the United Arab Emirates Central Bank of the UAE, the Securities and Commodities Authority (“SCA”), fraud prevention agencies, tax authorities, our professional advisors, tribunals and/or the courts.
4. Government-authorised credit reference/information agencies and bureaus including, but not limited to AECB, for the purposes of obtaining or providing credit references and other information to assess your ability to meet your commitments.
5. Any rating agency, insurer or insurance broker, or direct or indirect provider of credit protection to the Bank in connection with the products and services provided by the Bank.
6. Organisations that provide us with business support services. For example, account service and administration companies, back-up and server hosting, IT software and maintenance and platforms, document storage and management services. This processing is undertaken as it is necessary for the performance of our agreement with you.
7. Any party for the purpose of enforcing or preserving AHB’s rights against you when it is necessary for the establishment, exercise or defence of legal claims;
8. Third parties who have introduced you to us (e.g. an intermediary or broker) in order for them to manage their records about you, to ensure that the type of business that they refer to us is appropriate and to help us to resolve any complaint made by you and/or any dispute between you and us. This type of processing allows us to ensure that the intermediary or broker is fulfilling the terms of their contract with us and in order for us to fulfil our legal obligations (e.g. our complaint-handling obligations).
9. Market research organisations who we engage to assist us in developing and improving our products and services.
10. Any person or entity that provides services to you through AHB as an intermediary, including investment management or insurance services and in relation to additional products and services.
11. Any party to a transaction acquiring an interest in, or assuming risk in, or in connection with, your banking relationship with AHB.
12. Any person or entity that is to provide, or has provided, any security of guarantee (and their professional advisors) in respect of your agreement with us and their professional advisors. This type of processing is necessary for the fulfilment of our contract with you, for example to enable us to recover any sums we have advanced under our agreement with you.
13. Any entity (and their professional advisors) that provides funding to us or members of the Bank's group, any entity that provides us with debt or equity finance and any potential purchasers of any part of our business. This type of processing is necessary to enable us to fund our business.
14. Any entity used for recovery or collection of receivables to the bank from delinquent or defaulted Customers.
15. As required by any relevant legislation.