PRIVACY STATEMENT

Brandpulse (referred to as ‘we’, ‘us’, ‘our’, ‘brand’, ‘brandpulse’ or the ‘pulse’) is committed to protecting the privacy and security of personal information. This Privacy Statement explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. By accessing or using our services, you consent to the practices described in this Privacy Statement. Throughout this statement, "personal data" or "personal information" refers to any information that identifies or can identify you, including but not limited to your name, address, and identification number. Actions involving your personal data, such as handling, collecting, protecting, and storing, are collectively referred to as "processing."

This privacy statement provides

1. An overview of data collection and processing according to the Data Protection Act No. 9 of 2022

This Privacy Statement is designed in relation to the collection, use and disclosure of any personal data, including special or sensitive personal data. It also applies to individuals who have had a previous business relationship with the Bank.

2. Information we hold, collect and process

We hold, collect and process personal data that you provide to us directly or indirectly, such as your name, contact details, identification information, date of birth, financial information, transaction data, payment card information, gender, nationality, information received from third parties, the public domain, collected through use of our website, cookies, and our electronic banking services which we believe it is reasonably required for ordinary business purposes. This data is essential for offering you our services and ensuring a seamless banking experience.

3. How we use your personal data

We use and process your personal data to manage your accounts; to deliver banking services; to process transactions; to administer, evaluate and improve our products and services; to market our products and services; to manage our risks; to perform accounting, auditing and other internal functions and to fulfill and comply with legal and regulatory requirements, relevant industry standards, contractual obligations. We may also use your personal data for communication purposes, such as sending you account updates, relevant promotions, and other service-related notifications.

Purposes for which we may process your Personal Data

At Bank of Ceylon, we are dedicated to provide you with the products and services you request. To ensure the fulfillment of our contractual obligations and to provide you with the best possible service, we process your personal data for various essential purposes as follow but not limited.

1. Processing Your Requests

We process your data to handle applications for products and services, process payments, conduct transactions, and fulfill your instructions or requests promptly and accurately. This includes every channel we use including providing electronic banking services to enhance your banking experience.

2. Assessing Suitability

We evaluate your suitability for our products and services to tailor our offerings to your specific needs and requirements.

3. Credit Assessment

We conduct credit assessments, including credit checks and setting credit limits, to ensure responsible lending practices and financial stability.

4. Operational and Statistical Purposes

Your data is used for operational and statistical purposes, enabling us to improve our services and meet regulatory requirements effectively.

5. Banking Relationships and Security

We establish, continue, and manage banking relationships and accounts, and monitor our premises and ATMs to ensure your safety and security.