Back to Home

Consumer Protection Standards Privacy Notice

Disclosure Notice regarding the Collection and Processing of Personal Data

I. Introduction

This Disclosure Notice is made available by the National Bank of Fujairah PJSC (“the Bank” or “We”) to its clients and prospective clients who are Consumers under the Consumer Protection Regulations and Standards issued by the Central Bank of the UAE (‘CPR’) (referred to as “the Customer” or ‘You’)

In the context of its activities as a financial institution and financial services provider, the    Bank collects, holds, discloses and/or otherwise processes personal data (meaning any type of information relating to identified or identifiable individuals). You have also been requested to provide certain personal data of yours to the Bank in connection with an application for financial services.

The Bank values the right to privacy and strives to protect the personal data it collects and uses in accordance with the CPR. In this Disclosure Notice, the Bank will set out the process for collection, processing, and usage of your personal data (collectively referred to as "processing"), the purposes for which these data are used, the parties having access to these data, the legal rights of the individuals concerned, and etc.

From time to time, the Bank will need to amend or update this document. In such case, you will be notified hereof in an appropriate manner. The most recent version of this Disclosure Notice is always available on the website.

II. Types of personal data processed and purposes of the processing

The Bank processes the following types of personal data for the following purposes:

Purpose Types of Personal Data Processed for this Purpose
(1) proper identification of authorised operators of Bank accounts and facilities
  • full name
  • address
  • personal characteristics such as birth date
  • contact details such as e-mail address or telephone number
  • copy of Emirates ID Card or Passport (or both)
(2) proper identification of significant beneficial owners or controllers of legal entities that are customers of the Bank
  • full name
  • address
  • personal characteristics such as birth date
  • copy of Emirates ID Card or Passport (or both)
  • contact details such as e-mail address or telephone number
(3) fulfilling the legal obligations of the Bank pursuant to Anti Money Laundering and Counter Terrorism Financing legislation applicable in the United Arab Emirates
  • full name
  • address
  • personal characteristics such as birth date
  • copy of Emirates ID Card or Passport (or both)
  • Political affiliation only in the event that you are identified as a ‘Politically Exposed Person’. We do not ask you for information regarding your political affiliation.
  • Criminal convictions only in the event that you are included on registers maintained for AML and CTF purposes as having relevant convictions. We do not ask you to disclose criminal convictions.
  • contact details such as e-mail address or telephone number
(4) assessment of credit worthiness
  • full name
  • address
  • personal characteristics such as birth date function/title and relationship with the customer of the Bank
  • copy of Emirates ID Card or Passport (or both)
  • details of financial position details of assets and their values
  • contact details such as e-mail address or telephone number
  • Report issued by the Al Etihad Credit Bureau
(5) contract administration, accounting and follow-up of payments
  • full name
  • address
  • contact details such as e-mail address or telephone number
(6) management of disputes, claims and legal proceedings
  • full name
  • address
  • contact details such as e-mail address or telephone number
(7) fulfilment of financial services such as statement printing and distribution and creating credit or debit cards and their distribution where your data will be shared with our service providers
  • full name
  • address
  • contact details such as e-mail address or telephone number
  • debit card or credit card number
(8) conducting analysis required to be conducted under the CPR
  • your date of birth
  • your marital status
  • your income
  • your nationality
  • your gender

These purposes are fundamental to the provision of financial services to you and you confirm and acknowledge that:

(a) You have requested financial services from the Bank,
(b) You are aware of the fact that this entails the collection of certain personal data (as  described above) by the Bank, and
(c) Failure to provide complete and accurate details will result in the request for financial services being refused.

III. Retention Periods

Your personal data will not be stored for longer than is necessary in relation to the purposes for which we process them (see above). The period for which your personal data has to be retained is defined by law (usually seven years after the end of a contract or execution of a transaction.).

This enables the Bank to comply with legal and regulatory requirements or use it where the Bank needs for legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise.

We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, such as to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, and so on.

If the Bank doesn’t need to retain information for this period of time, it may destroy, delete or anonymise it more promptly.

IV. Rights of the data subject

Under the CPR, you have the following rights:

1. Right to information and access

You may at any time request more information on our data processing activities and the personal data that we are keeping from you. You may also request access to, and a copy of such data. In certain cases, anti-money laundering legislation prohibits the Bank from giving you access to the personal data about you that the Bank processes. For example, the Bank cannot give you access to an anti-money laundering investigation. The law prohibits this because the release of such information could compromise the investigation.

2. Right to rectification

You have the right to obtain from the Bank without undue delay the rectification of inaccurate personal data concerning to you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to restriction of the processing

You may request us to (temporarily) restrict the processing of your personal data in   the following situations:

  • when you have contested the accuracy of your personal data, for a period enabling us to verify this accuracy;
  • when the processing appears to be unlawful and you request us to restrict the  use of your data instead of the deletion of this data;
  • when we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of   legal claims; or
  • Pending verification whether our legitimate grounds override yours in the framework of an objection.

4. Right to make an enquiry and lodge a complaint

You have the right to make an enquiry with the Bank regarding any of the matters set out in this document and to make a complaint.

Enquiries and Complaints can be made through all channels including:

If the matter has been dealt with by us, but remains unresolved, a complaint may be registered with the Consumer Protection Department at CBUAE through its website

We always aim to respond to your complaint or query as quickly as possible. We may also request proof of identity in advance in order to double-check your request.

V. Security

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).

More information on our IT security practices and policies is available upon request.

VI. Consent

The Bank will request your express consent for the purposes of providing the financial services that you have requested. That consent may be withdrawn by you at any time by providing notice to the Bank. Please click here to provide your consent.

This Disclosure Notice is provided to help you to understand the purpose of our request for data and how we collect, store and secure that data in order for you to make a clear decision to provide your consent.

We advise that if you do not give consent for the collection of your data, or you subsequently withdraw your consent that the Bank will not be able to provide or continue to provide financial services to you.


08 December 2021

Reminder: NBF Consent Survey for Consumer Protection Regulations and Standards ('CPR')

Dear Valued Customer, 

We are writing to you again with regard to an important issue regarding the Consumer Protection Regulations and Standards (‘CPR’) of the Central Bank of the UAE that comes into effect on 1st January 2022. The CPR requires that we obtain your expressed consent to capture, process, store and in some cases share your personal data.

We understand from feedback, that some customers were not comfortable to respond to previous emails because the email was requesting you to click on a link which is something we advise you not to do.

You are receiving this e-mail because you have not completed a response previously. 

NBF will be sending the survey via Survey Monkey, a cloud-based survey platform that is a world leader in this field and a trusted brand. Please rest assured all your information will be stored that adheres to security and technical best practices. 

The purpose of the email is to obtain your consent as is required by the CPR. 

We are using this method because there is no other efficient way to engage with you and to receive your expressed consent.

The survey email will be sent out tomorrow, Thursday - 9th December 2021 around 12:00 noon. Please be on the lookout and take note of the following details.  

Sender Name: National Bank of Fujairah 
Email ID: 
Subject: Important: Disclosure Notice regarding the Collection and Processing of Personal Data

If you have any concerns about this email, we advise that we will also publish this on our website.

A document that explains how we deal with your data is an important part of the communication and this can be read on our website. 

Thank you in advance for your cooperation. 

Should you have any queries, please call 8008NBF(623) or speak to your Relationship Manager. 

Your browser (Internet Explorer) is outdated

For more security, speed and best experience on this site, please upgrade to a different browser like Microsoft Edge, Chrome, FireFox or Safari.