In this policy, “we”, or “The Nandura Urban Co. Operative Bank Ltd., Nandura” means The Nandura Urban Co. Operative Bank Ltd., Nandura and “you” means the persons to whom this policy applies.
As a part The Nandura Urban Co. Operative Bank Ltd., Nandura ongoing efforts to ensure the compliance of modern banking approach, customer trust/ satisfaction, security oriented service and banking services, bank has adopted the privacy policy aimed at protecting individual’s personal information entrusted and disclosed The Nandura Urban Co. Operative Bank Ltd., Nandura (the "Policy"). This Policy governs the way in which bank collects, uses, discloses, stores, secures and disposes of personal information.
The Policy is in compliance with the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules 2011 (the “IT Rules”) contained in the Information Technology Act 2000.
Applicability
This Policy is applicable to personal information and sensitive personal data or information collected by the Bank or its affiliates directly from the customer or through the mobile apps and electronic communications as also any information collected by the Bank’s server from the customer’s browser.
Purpose of Collection and Use of Personal Information
The Bank collects and uses the financial information and other personal information from its customers. This information is collected and used for specific business purposes or for other related purposes designated by the Bank or for a lawful purpose to comply with the applicable laws and regulations.
The authenticity of the personal information provided by the customer shall not be the responsibility of the Bank.
Disclosure of Personal Information
The Bank shall not divulge any personal information collected from the customer, for cross selling or any other purposes. The personal information collected by The Nandura Urban Co. Operative Bank Ltd., Nandura shall not be disclosed to any other organization except:
- Where the disclosure has been agreed in a written contract or otherwise between Bank and the customer;
- where The Nandura Urban Co. Operative Bank Ltd., Nandura is required to disclose the personal information to a third party on a need-to-know basis, provided that in such case bank shall inform such third party of the confidential nature of the personal information and shall keep the same standards of information/ data security as that of The Nandura Urban Co. Operative Bank Ltd., Nandura.
- Where request for disclosure is requested by local authority under applicable law or regulations.
Reasonable Security Practices and Procedures
The Nandura Urban Co. Operative Bank Ltd., Nandura is strongly committed to protecting the privacy of its customers and has taken all necessary and reasonable measures to protect the confidentiality of the customer information the security of personal information is a priority and is protected by maintaining physical, electronic, and procedural safeguards that meet applicable laws. The Bank maintains its security systems to ensure that the personal information of the customer is appropriately protected and follows the extant standard encryption norms followed for the transmission of information. The Bank ensures that its employees and affiliates respect the confidentiality of any personal information held by the Bank.
Cookie policy
A browser cookie is a small piece of data that is stored on your device to help websites and mobile apps remember things about you. Other technologies, including Web storage and identifiers associated with your device, may be used for similar purposes by using our website and apps you agree that these types of cookies can be placed on your device. You may change the setting of your browser to refuse some or all browser cookies. You may opt to remove cookies from your browser or disable the cookies. Bank is not responsible for cookies placed in the device of user/s by any other website and information collected thereto.
Security and confidentiality of Customer Data
As per Information Systems security policies and procedures implemented in the Bank, Bank has implemented administrative, physical and technical safeguards to protect electronic personal data from loss, misuse and unauthorized access. Customers’ personal data shall be stored on a secured database.
- Bank shall not sell personal data to any third party or anybody and shall remain fully compliant with confidentiality of the data as per law.
- Bank shall share customers’ personal data to third party if required for business purpose only after implementing adequate controls to ensure maintenance of confidentiality and security of the data by the concerned third party.
- Auto Read OTP functionality: It is recommended that each process of OTP validation shall have auto read facility of OTP in the Mobile application. Whenever the OTP send to the customer, mobile app shall auto populate the OTP in the required field instead of entering by keypad.
- SMS forwarding App / Remote access App: It is recommended that; the Mobile Application can have an ability to identify the “SMS forwarding Apps” as well as “Remote Access Apps” installed on the User’s handset. Based on the “AppID” of these kind of Apps, Mobile App shall restrict the users to access the login to the application if user have installed the listed apps.
- SMS Delivery status facility: SMS vendor should have Call back facility available to verify the status of SMS send from our end, also SMS vendor have “SMS Delivery receipt check” to know the delivery status of the SMS forwarded from our end.
- Mobile banking Application shall have ability to read/detect Installed Application on user’s device and upload it on bank’s secure server for keeping safe track of existing applications. App shall prohibit/restrict Mobile Banking Application usage in case of any listed application with likes of remote access applications and sms forwarder applications is detected.
- By agreeing to terms within Mobile banking application and written consent form undertaken from user during opting mobile banking feature it will be considered user have provided affirmative consent for all above mention disclosures.
Bank shall implement below features in mobile applications
- Auto Read OTP functionality: It is recommended that each process of OTP validation shall have auto read facility of OTP in the Mobile application. Whenever the OTP send to the customer, mobile app shall auto populate the OTP in the required field instead of entering by keypad.
- SMS forwarding App / Remote access App: It is recommended that; the Mobile Application can have an ability to identify the “SMS forwarding Apps” as well as “Remote Access Apps” installed on the User’s handset. Based on the “AppID” of these kind of Apps, Mobile App shall restrict the users to access the login to the application if user have installed the listed apps.
- SMS Delivery status facility: SMS vendor should have Call back facility available to verify the status of SMS send from our end, also SMS vendor have “SMS Delivery receipt check” to know the delivery status of the SMS forwarded from our end.
- Mobile banking Application shall have ability to read/detect Installed Application on user’s device and upload it on bank’s secure server for keeping safe track of existing applications. App shall prohibit/restrict Mobile Banking Application usage in case of any listed application with likes of remote access applications and SMS forwarder applications is detected.
- By agreeing to terms within Mobile banking application and written consent form undertaken from user during opting mobile banking feature it will be considered user have provided affirmative consent for all above mention disclosures.
Data Modification
Bank shall update the customer data only after ensuring the authenticity of the change request. Adequate access controls and authorizations controls shall be in place to monitor data modifications.
Data Quality
Bank shall continuously review and access the quality and completeness of the data
Notice of change
The Bank may, from time to time, change this Policy. The effective date of this Policy, as stated below, indicates the last time this Policy was revised or materially changed.