Privacy Policy

Bankmed ("Bankmed", "we", "us" or "our") is committed to safeguarding the privacy of everyone who banks with us or visits our website and digital channels.

This Privacy Policy describes how we collect, use, disclose and protect your personal information when you use our products, services, websites and mobile applications (together, our "Services"). It also explains the rights you have in relation to your information and how you can exercise them.

By using our Services, you acknowledge that you have read and understood this policy. If you do not agree with it, please discontinue use of our Services. Where required by law, we will seek your consent before processing your information.

We collect information that you provide directly, information generated through your use of our Services, and information obtained from trusted third parties. This may include:

• Identity & contact data — name, date of birth, national ID or passport details, address, email and phone number.
• Financial data — account numbers, balances, transactions, card details, income and credit information.
• Verification data — documents and information collected to meet Know Your Customer (KYC) and anti-money-laundering obligations.
• Technical data — IP address, device identifiers, browser type, operating system and app version.
• Usage data — pages viewed, features used, session times and interactions within our digital channels.
• Communications — records of your correspondence with us, including calls, emails and chat messages.

We use your personal information to operate our business and deliver the Services you expect, including to:

• Open, administer and service your accounts and process your transactions.
• Verify your identity and comply with legal, regulatory and contractual obligations.
• Detect, prevent and investigate fraud, financial crime and security incidents.
• Provide customer support and respond to your requests and enquiries.
• Personalise and improve our products, channels and customer experience.
• Send service messages and, where permitted, marketing communications you can opt out of at any time.

We only process your personal information where we have a lawful basis to do so. Depending on the circumstances, this may be because:

• It is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• It is necessary to comply with a legal or regulatory obligation.
• It is in our legitimate interests to run, protect and improve our business, provided your rights are not overridden.
• You have given consent, which you may withdraw at any time.

We do not sell your personal information. We may share it, only as necessary and with appropriate safeguards, with:

• Service providers and partners who support our operations under strict confidentiality obligations.
• Regulators, courts, law-enforcement and other authorities where required or permitted by law.
• Card networks, payment schemes and correspondent banks to process your transactions.
• Professional advisers such as auditors, lawyers and insurers.

Our websites and apps use cookies and similar technologies to keep you signed in, remember your preferences, measure performance and improve your experience.

You can control cookies through your browser or device settings. Disabling certain cookies may affect the availability or functionality of some features. For more detail, please refer to our Cookie Policy.

We apply layered technical and organisational measures — including encryption, access controls, network monitoring and staff training — designed to protect your information against unauthorised access, loss or misuse.

No method of transmission or storage is completely secure. We encourage you to protect your credentials, use strong unique passwords and notify us immediately of any suspected unauthorised activity.

We retain your personal information for as long as your relationship with us is active and thereafter for the periods required to meet legal, regulatory, tax and accounting obligations, resolve disputes and enforce our agreements.

When information is no longer required, we securely delete or anonymise it.

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you and request a copy.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information where there is no overriding legal reason to retain it.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.

Some of our partners and service providers may process your information in countries other than your own. Where we transfer personal information across borders, we put in place appropriate safeguards to ensure it remains protected in line with this policy and applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we do, we will revise the "Last updated" date above and, where appropriate, notify you through our channels.

We encourage you to review this page periodically to stay informed about how we protect your information.

If you have questions about this policy or wish to exercise your privacy rights, please contact our Data Protection team: