Back to Home

Consumer Protection Standards Privacy Notice

Disclosure Notice regarding the Collection and Processing of Personal Data

I. Introduction

This Disclosure Notice is made available by the National Bank of Fujairah PJSC (“the Bank” or “We”) to its clients and prospective clients who are Consumers under the Consumer Protection Regulations and Standards issued by the Central Bank of the UAE (‘CPR’) (referred to as “the Customer” or ‘You’)

In the context of its activities as a financial institution and financial services provider, the    Bank collects, holds, discloses and/or otherwise processes personal data (meaning any type of information relating to identified or identifiable individuals). You have also been requested to provide certain personal data of yours to the Bank in connection with an application for financial services.

The Bank values the right to privacy and strives to protect the personal data it collects and uses in accordance with the CPR. In this Disclosure Notice, the Bank will set out the process for collection, processing, and usage of your personal data (collectively referred to as "processing"), the purposes for which these data are used, the parties having access to these data, the legal rights of the individuals concerned, and etc.

From time to time, the Bank will need to amend or update this document. In such case, you will be notified hereof in an appropriate manner. The most recent version of this Disclosure Notice is always available on the website.

II. Types of personal data processed and purposes of the processing

The Bank processes the following types of personal data for the following purposes:

Purpose Types of Personal Data Processed for this Purpose
(1) proper identification of authorised operators of Bank accounts and facilities
  • full name
  • address
  • personal characteristics such as birth date
  • contact details such as e-mail address or telephone number
  • copy of Emirates ID Card or Passport (or both)
(2) proper identification of significant beneficial owners or controllers of legal entities that are customers of the Bank
  • full name
  • address
  • personal characteristics such as birth date
  • copy of Emirates ID Card or Passport (or both)
  • contact details such as e-mail address or telephone number
(3) fulfilling the legal obligations of the Bank pursuant to Anti Money Laundering and Counter Terrorism Financing legislation applicable in the United Arab Emirates
  • full name
  • address
  • personal characteristics such as birth date
  • copy of Emirates ID Card or Passport (or both)
  • Political affiliation only in the event that you are identified as a ‘Politically Exposed Person’. We do not ask you for information regarding your political affiliation.
  • Criminal convictions only in the event that you are included on registers maintained for AML and CTF purposes as having relevant convictions. We do not ask you to disclose criminal convictions.
  • contact details such as e-mail address or telephone number
(4) assessment of credit worthiness
  • full name
  • address
  • personal characteristics such as birth date function/title and relationship with the customer of the Bank
  • copy of Emirates ID Card or Passport (or both)
  • details of financial position details of assets and their values
  • contact details such as e-mail address or telephone number
  • Report issued by the Al Etihad Credit Bureau
(5) contract administration, accounting and follow-up of payments
  • full name
  • address
  • contact details such as e-mail address or telephone number
(6) management of disputes, claims and legal proceedings
  • full name
  • address
  • contact details such as e-mail address or telephone number
(7) fulfilment of financial services such as statement printing and distribution and creating credit or debit cards and their distribution where your data will be shared with our service providers
  • full name
  • address
  • contact details such as e-mail address or telephone number
  • debit card or credit card number
(8) conducting analysis required to be conducted under the CPR
  • your date of birth
  • your marital status
  • your income
  • your nationality
  • your gender

These purposes are fundamental to the provision of financial services to you and you confirm and acknowledge that:

(a) You have requested financial services from the Bank,
(b) You are aware of the fact that this entails the collection of certain personal data (as  described above) by the Bank, and
(c) Failure to provide complete and accurate details will result in the request for financial services being refused.

III. Retention Periods

Your personal data will not be stored for longer than is necessary in relation to the purposes for which we process them (see above). The period for which your personal data has to be retained is defined by law (usually seven years after the end of a contract or execution of a transaction.).

This enables the Bank to comply with legal and regulatory requirements or use it where the Bank needs for legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise.

We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, such as to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, and so on.

If the Bank doesn’t need to retain information for this period of time, it may destroy, delete or anonymise it more promptly.

IV. Rights of the data subject

Under the CPR, you have the following rights:

1. Right to information and access

You may at any time request more information on our data processing activities and the personal data that we are keeping from you. You may also request access to, and a copy of such data. In certain cases, anti-money laundering legislation prohibits the Bank from giving you access to the personal data about you that the Bank processes. For example, the Bank cannot give you access to an anti-money laundering investigation. The law prohibits this because the release of such information could compromise the investigation.

2. Right to rectification

You have the right to obtain from the Bank without undue delay the rectification of inaccurate personal data concerning to you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to restriction of the processing

You may request us to (temporarily) restrict the processing of your personal data in   the following situations:

  • when you have contested the accuracy of your personal data, for a period enabling us to verify this accuracy;
  • when the processing appears to be unlawful and you request us to restrict the  use of your data instead of the deletion of this data;
  • when we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of   legal claims; or
  • Pending verification whether our legitimate grounds override yours in the framework of an objection.

4. Right to make an enquiry and lodge a complaint

You have the right to make an enquiry with the Bank regarding any of the matters set out in this document and to make a complaint.

Enquiries and Complaints can be made through all channels including:

If the matter has been dealt with by us, but remains unresolved, a complaint may be registered with the Consumer Protection Department at CBUAE through its website https://centralbank.ae/en/consumer-protection

We always aim to respond to your complaint or query as quickly as possible. We may also request proof of identity in advance in order to double-check your request.

V. Security

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).

More information on our IT security practices and policies is available upon request.

VI. Consent

The Bank will request your express consent for the purposes of providing the financial services that you have requested. That consent may be withdrawn by you at any time by providing notice to the Bank. Please click here to provide your consent.

This Disclosure Notice is provided to help you to understand the purpose of our request for data and how we collect, store and secure that data in order for you to make a clear decision to provide your consent.

We advise that if you do not give consent for the collection of your data, or you subsequently withdraw your consent that the Bank will not be able to provide or continue to provide financial services to you.