Consumer Protection Standards Privacy Notice
Disclosure Notice regarding the Collection and Processing of Personal Data
This Disclosure Notice is made available by the National Bank of Fujairah PJSC (“the Bank” or “We”) to its clients and prospective clients who are Consumers under the Consumer Protection Regulations and Standards issued by the Central Bank of the UAE (‘CPR’) (referred to as “the Customer” or ‘You’)
In the context of its activities as a financial institution and financial services provider, the Bank collects, holds, discloses and/or otherwise processes personal data (meaning any type of information relating to identified or identifiable individuals). You have also been requested to provide certain personal data of yours to the Bank in connection with an application for financial services.
The Bank values the right to privacy and strives to protect the personal data it collects and uses in accordance with the CPR. In this Disclosure Notice, the Bank will set out the process for collection, processing, and usage of your personal data (collectively referred to as "processing"), the purposes for which these data are used, the parties having access to these data, the legal rights of the individuals concerned, and etc.
From time to time, the Bank will need to amend or update this document. In such case, you will be notified hereof in an appropriate manner. The most recent version of this Disclosure Notice is always available on the website.
II. Types of personal data processed and purposes of the processing
The Bank processes the following types of personal data for the following purposes:
|Purpose||Types of Personal Data Processed for this Purpose|
|(1) proper identification of authorised operators of Bank accounts and facilities||
|(2) proper identification of significant beneficial owners or controllers of legal entities that are customers of the Bank||
|(3) fulfilling the legal obligations of the Bank pursuant to Anti Money Laundering and Counter Terrorism Financing legislation applicable in the United Arab Emirates||
|(4) assessment of credit worthiness||
|(5) contract administration, accounting and follow-up of payments||
|(6) management of disputes, claims and legal proceedings||
|(7) fulfilment of financial services such as statement printing and distribution and creating credit or debit cards and their distribution where your data will be shared with our service providers||
|(8) conducting analysis required to be conducted under the CPR||
These purposes are fundamental to the provision of financial services to you and you confirm and acknowledge that:
(a) You have requested financial services from the Bank,
(b) You are aware of the fact that this entails the collection of certain personal data (as described above) by the Bank, and
(c) Failure to provide complete and accurate details will result in the request for financial services being refused.
III. Retention Periods
Your personal data will not be stored for longer than is necessary in relation to the purposes for which we process them (see above). The period for which your personal data has to be retained is defined by law (usually seven years after the end of a contract or execution of a transaction.).
This enables the Bank to comply with legal and regulatory requirements or use it where the Bank needs for legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise.
We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, such as to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, and so on.
If the Bank doesn’t need to retain information for this period of time, it may destroy, delete or anonymise it more promptly.
IV. Rights of the data subject
Under the CPR, you have the following rights:
1. Right to information and access
You may at any time request more information on our data processing activities and the personal data that we are keeping from you. You may also request access to, and a copy of such data. In certain cases, anti-money laundering legislation prohibits the Bank from giving you access to the personal data about you that the Bank processes. For example, the Bank cannot give you access to an anti-money laundering investigation. The law prohibits this because the release of such information could compromise the investigation.
2. Right to rectification
You have the right to obtain from the Bank without undue delay the rectification of inaccurate personal data concerning to you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Right to restriction of the processing
You may request us to (temporarily) restrict the processing of your personal data in the following situations:
- when you have contested the accuracy of your personal data, for a period enabling us to verify this accuracy;
- when the processing appears to be unlawful and you request us to restrict the use of your data instead of the deletion of this data;
- when we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims; or
- Pending verification whether our legitimate grounds override yours in the framework of an objection.
4. Right to make an enquiry and lodge a complaint
You have the right to make an enquiry with the Bank regarding any of the matters set out in this document and to make a complaint.
Enquiries and Complaints can be made through all channels including:
- Face to Face
- In Branch
- Through our Call Centre on 8008NBF(623), and
- Using the Feedback Forms available at https://smartform.nbf.ae:8082/ccweb/complaints/new
If the matter has been dealt with by us, but remains unresolved, a complaint may be registered with the Consumer Protection Department at CBUAE through its website https://centralbank.ae/en/consumer-protection
We always aim to respond to your complaint or query as quickly as possible. We may also request proof of identity in advance in order to double-check your request.
We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.
Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).
More information on our IT security practices and policies is available upon request.
The Bank will request your express consent for the purposes of providing the financial services that you have requested. That consent may be withdrawn by you at any time by providing notice to the Bank. Please click here to provide your consent.
This Disclosure Notice is provided to help you to understand the purpose of our request for data and how we collect, store and secure that data in order for you to make a clear decision to provide your consent.
We advise that if you do not give consent for the collection of your data, or you subsequently withdraw your consent that the Bank will not be able to provide or continue to provide financial services to you.