PRIVACY POLICY

PRIVACY POLICY & INFORMATION SHARING

PRIVACY POLICY

  • Statements of Practices and policies: Customer privacy is important to United Commercial Bank PLC (UCB). The term “UCB”, “Bank” or “we”, “us” or “our(s)” in the mobile/online banking application we own and control and, in this Policy, refers to UCB. The Bank conducts regular assessment reviews and abides by rigorous privacy standards to ensure that the personal information the Bank collect, uses and shares is protected. The bank recognizes that one of its fundamental responsibilities is to ensure that the Bank protects personal information entrusted to the Bank by its customers. This is critical for the maintenance of the Bank's reputation and for complying with its legal and regulatory obligations to protect the Bank's customer information.
  • The Policy is following the Bangladesh Bank ICT Security guideline, Version-4 (may be updated from time to time), Bankers' Books Evidence Act, 2021 and Bank Company Act, 1991 and any other law/rules that may be enacted from time to time.
  • Applicability: This Policy is applicable to personal information collected by the Bank directly from the customer or through the Bank's online portals and electronic communications as also any information collected by the Bank's server from the customer's browser.

Types of personal information Bank may collect online:

  • Contact information such as name, mailing address, email address, telephone and mobile number(s).
  • Account Application information such as credit and income information.
  • Identifiers such as National Identity Card (NID), account number(s), driver's license number (or comparable) or other information that identifies you for ordinary business purposes.
  • Access authorization such as user ID, alias, PIN and password, OTP and security questions and answers.
  • Documents or images submitted via our website or Mobile Apps to support account opening, such as statements and voided checks, QR for QR payments/transactions, and any similar documents or images.
  • Card Information such as card number, client ID, expiration date, and billing address.
  • Log Data: As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information to maintain and improve the performance of the Services.
  • Permission: For a better experience, UCB banking apps or digital platforms may require access to some information such as Location, Camera, etc., and we will be taking permission from you while you use the app or digital platform service.
  • Cookies: If you decide at any time that you no longer wish to accept cookies from our services for any of the purposes described above, then you can instruct your browser, by changing its settings, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. Consult your browser's technical information. If you do not accept cookies, however, you may not be able to use all portions of the Services or all functionality of the Services.
  • Social Media: Social media applications/sites that are owned by third parties unaffiliated with UCB, customers shall independently be guided by their privacy policies and Bank has no control over them. UCB is not responsible for the privacy or security of these applications/ sites or other third-party sites that may be linked to/ from within our social media channels. UCB does not endorse and is not responsible for any content, products, ads, advice, recommendations, opinions or other material of third-party sites that may be promoted via advertising within any social media properties.
  • Accuracy: The Bank shall have processes in place to ensure that the personal information residing with it is complete, accurate, and current. If at any point there is a reason to believe that the personal information residing with the Bank is incorrect, the customer should inform the Bank. The Bank shall correct the erroneous information as quickly as possible.
  • Purpose of Collection & Usage of Personal Information: The Bank shall use the information collected to manage its business and offer an enhanced, personalized online experience on its website. Further, it shall enable the Bank to:
    • Process applications, requests and transactions
    • Maintain internal records as per regulatory guidelines
    • Provide services to customers, including responding to customer requests
    • Comply with all applicable laws and regulations
    • Recognize the customer when he conducts online banking
    • Understand the needs and provide relevant product and service offers
  • Disclosure / Sharing of Information :The personal information collected by the Bank shall not be disclosed to any other organization except:
    • Where the disclosure has been agreed in a written contract or otherwise between the Bank and the customer;
    • Where the Bank is required to disclose the personal information to an affiliate/ third party/service provider on a need-to-know basis for providing services/ related activities, provided that in such case, the Bank shall inform such affiliate/ third party /service provider of the confidential nature of the personal information and shall keep the same standards of information/ data security as that of the Bank.
    • To statutory and regulatory authorities on their specific request as per law/rules in force.
  • Security Practices :
    • Protecting the confidentiality of customer information is very important to us. The Bank has established appropriate physical, electronic, and procedural safeguards to protect the information we collect from or about our users. These safeguards are regularly reviewed to protect against unauthorized access, disclosure, and improper use of your information and to maintain its accuracy and integrity.
    • User IDs and passwords are used to help safeguard against unauthorized access to your information through the Banking Application or Web. As always, we strongly encourage you to assist us in that effort by not sharing your UCB Online Banking User ID and Passcodes with anyone.
    • The bank takes reasonable security measures to help protect your information, both during transmission and once we receive it. The bank continuously reviews and enhances its security policies and security measures to consistently maintain a high level of security.
    • Your account‘s password serves as its key Utilize distinct digits, letters, and special characters as the platform was intended, and keep your account password private. If you do divulge your password or personal details to third parties, keep in mind that you are in charge of any activities made under your account‘s name. You can lose a lot of control over your account and personal information if you forget your password, and you might also be vulnerable to legally binding acts being performed on your behalf.
    • Amendments: The Bank shall reserve the right to change or update this Policy or practice, at any time with reasonable notice to customers on the Bank's website so that customers are always aware of the information which is collected, for what purpose Bank uses it, and under what circumstances, if any, Bank may disclose it. By virtue of this privacy policy, the customer assents to the collection, use, transfer, disclosure, retention and other processing of her/his personal information, including sensitive personal information, as described in this Policy.

DATA PRIVACY & PROTECTION

  • All collected data is protected under the respective law of the land.
  • The customer acknowledges that UCB may use personal information for identification, including but not limited to photo, NID number, copy, address, gender, date of birth, email address, and any provided details.
  • UCB will maintain strict confidentiality and shall not share or sell customer data or transaction reports to third parties except as permitted by the stated grounds.

DATA SECURITY & PROTECTION

  • UCB will take reasonable measures to protect customer data from unauthorized access, loss, or misuse.
  • UCB will not be liable for any loss or damage resulting from unauthorized access to the customer's account due to the customer's negligence or failure to comply with security measures.

DATA SUBJECT RIGHT & PERMISSION TO ACCESS

  • Customers have the right to access and modify their personal data under applicable data protection laws. Requests for corrections or deletions will be processed per UCB‘s internal data management policy while ensuring compliance with Bangladeshi laws.
  • UCB does not require additional permission to access the device's camera, photos, or GPS location for services/features once the customer accepts the feature by agreeing to the terms & conditions.

INFORMATION SHARING WITH REGULATORY AUTHORITIES

  • Customers acknowledge that UCB has the right to monitor account usage and disclose user information to:
    • Bangladesh Bank or other regulators
    • Government agencies for legal compliance
    • Financial institutions for verification purposes
    • Affiliated institute
    • Any person authorised by law or a court of law
    to enhance banking services, process payments, or conduct risk analysis; such disclosures will comply with applicable laws.
  • All users, including individuals and non-individuals, agree that transaction history, fund transfers, and API-based financial interactions may be subject to regulatory audits. UCB reserves the right to share banking transaction data with Bangladesh Bank or other regulatory authorities for financial reporting and AML/CFT compliance.

DATA RETENTION POLICY

  • Retention Period: UCB PLC will retain your data and information collected through the Digital Banking Platform for as long as necessary to fulfil the purposes outlined in these Terms & Conditions and the Privacy Policy. The data retention period will be in accordance with the requirements set by applicable regulatory authorities, legal obligations, and internal policies of the Bank.
  • Retention Criteria: Personal data will be retained for the minimum period required by law, for as long as the user maintains an account with UCB PLC, or for as long as needed to resolve disputes, comply with regulatory requirements, and fulfil other business purposes, such as auditing and reporting.
  • Data Deletion: Once the data retention period has expired or when the personal data is no longer required for the purposes for which it was collected, UCB PLC will delete or anonymizes the personal data in a secure manner unless retention is necessary for compliance with legal obligations or for business or contractual purposes.
  • Retention of Transaction Data: Transaction-related data, including details of financial transactions, will be retained for a duration as per Bangladesh Bank policy to comply with financial regulations and for audit purposes. Such data will be retained securely and not used for marketing or other purposes unless permitted by law or with the user's explicit consent.
  • Access and Requests: Users have the right to request their own information regarding the data retention period upon proper customer verification. For such requests, users should contact UCB PLC.