COLLECTION OF PERSONAL AND ANONYMOUS DATA

HBL Pay Business Banking collects user data as outlined hereinbelow and shall collectively be referred to as “User Data”.

Personally Identifiable Information: Information that you provide the bank at the time of opening an account or obtaining a product, and / or update of records thereafter, and includes:

• Login credentials and authentication data
• Contact information for customer support

Information that is collected by default from the device, and includes:

• Device information (model, operating system, unique device identifiers)
• IP address and network information
• Location data (with your consent, for location-based services)

Permissions and information provided by you during app usage, either at the time of first use or when required services are being invoked, and includes:

• Account balances and transaction history
• Payment approvals
• Bill payment approvals
  
  Anonymous Information:We may also collect information regarding device type, operating system version, and mobile network information. We use this information to provide and improve the App’s features and services, as well as to personalize your experience.
  

USE OF PERSONAL AND ANONYMOUS DATA

User Data is collected and used by the Bank for provision of banking services as requested by users on HBL Pay Business Banking.

User Experience: HBL collects, analyzes and uses your User Data to operate the HBL Pay Business Banking App and deliver the services you have requested. The abovementioned information may be used to contact you with information about HBL Pay Business Banking App, or to respond to your requests for customer support. This information is also used by HBL for the operation of and to maintain the quality of service, and to provide general statistics regarding use of the HBL Pay Business Banking App.

User Data is collected for the specific and legitimate purpose, and not further processed in a manner that is incompatible with the original purpose(s) for which it was collected. Processing for archiving purposes, research and statistical purpose is not considered incompatible with the original purpose provided that confidentiality is maintained.

User Data is also used to verify your identity for prevention of fraud, and to protect against unauthorized access.

User Data is recorded as accurately as possible, and where necessary, updated to ensure it fulfils the legitimate purpose(s) for which it is collected and/or processed

SECURITY

We take great care to ensure the security of your User Data. We use industry standard security measures, such as encryption, to protect User Data both in transit and at rest.​ We are committed to ensuring the security of your User Data with us at all times. HBL implements adequate technical and organizational safeguards as per the bank’s Information Security Policy, in line with industry standard security measures and applicable regulatory requirements to ensure the security of your User Data, 

Authentication and Encryption: We also employ a variety of security measures to protect your account information,multi-factor authentication and secure login processes, regular security assessments, encryption of User Data, both in transit and at rest, secure coding practices, Access controls, authentication protocols, monitoring for suspicious activities, etc Security of your personal and sensitive User Data is important to the Bank and we strive to use commercially acceptable means to protect User Data. No method of transmission over the internet, or method of electronic storage is secure and reliable, and we cannot guarantee its absolute security. However, we do exercise utmost care to secure User Data from unauthorized access, use or disclosure.

SHARING OF INFORMATION

The Bank preserves the secrecy of User Data. Notwithstanding the obligation to preserve the secrecy of User Data, the Bank is authorized to disclose, as and when the Bank is required to do so in order to comply with the applicable laws any information relating to the User, their account(s), payments or other assets or credit facilities whatsoever held on the User’s behalf, including but not limited to:​

• The head office, affiliates or any other branches or subsidiaries of the Bank, its head office or any other branch of the Bank or over any other person(s) under a duty of confidentiality to the Bank;
• Any authority or regulatory body having jurisdiction over the Bank, its head office or any other branch of the Bank or over any transactions affected the User
• Any person with whom the Bank contracts or proposed to contract with regard to the sale or transfer or sharing of any of its rights, obligations or risks
• Any person (including any agent, contractor or third-party service provider) with whom the Bank contracts or proposes to contract with regard to the provision of services in respect of the account(s) or in connection with the operation of the Bank’s business

• Any government/regulatory/judicial authority/agency in case of default.

Selling of Information: HBL does not sell, rent or lease its customer lists to third parties.

DATA RETENTION AND DELETION

User Data is kept in a form which permits identification of individuals only so long as necessary for fulfillment of the purposes for which it was collected in accordance with the bank’s privacy policy; and it is retained in accordance with the Record Retention Policy of the bank, and applicable legal and regulatory requirements.​

COMPLIANCE WITH DATA PROTECTION LAWS

We are committed to complying with the laws of Pakistan.​

CHANGES TO THIS PRIVACY PROTOCOL

We may update this Privacy Policy from time to time, to reflect company and customer feedback. HBL encourages you to periodically review this Statement to be informed of how HBL is protecting your information.

CONTACT US

If you have any questions or concerns about this Privacy Policy, please contact us at 111-111-425. You can also lock your comments, complaints and questions through the HBL Pay Business Banking app