Introduction and Contact Information
Please read this privacy notice carefully as it sets out how Al Maryah Community Bank and its group companies (AMCB) use your personal information. If you have any questions about this privacy notice or do not agree with it, please contact us at privacy@mbankuae.com or write to us at [P. O. Box 111485, Abu Dhabi, U.A.E.], before using this website or our mobile application or providing us with your personal information in person, as applicable. Our website terms of use explain the terms on which you are allowed to use our website www.mbankuae.com and social media webpages, all of which provide a gateway to our products and services, as well as lots of other useful information about AMCB www.mbank.ae/terms-conditions/.
AMCB is the UAE’s first digital bank licensed by the Central Bank in line with the country’s digital strategy and fully integrated with the government’s smart services.
Changes to the Privacy Notice
We may change this privacy notice from time to time by updating this page. You should check this page from time to time to ensure you are happy with any changes. You can also ask us for a physical copy of this notice by contacting us using the details set out above.
What information do we collect?
When you use our website or mobile application or provide us with your personal information, as applicable, please bear in mind that we may record:
- the areas of the website or mobile application that you visit;
- information about your computer or mobile device, such as which browser you are using, your network location, the type of connection you are using (e.g. broadband, ADSL etc.) and your IP address.
- your title, full name, signature, and contact details, including for instance your email address, home and mobile telephone numbers and fax number;
- your home address, correspondence address (where different from your home address) and address history;
- your date of birth and/or age, e.g. to make sure that you are eligible to apply for the product and/or that it is suitable for you;
- your place of birth, nationality, residency details and any other citizenships if this is necessary for us to comply with our legal and regulatory requirements;
- your government identification number and identification documents including for instance document type, number, country of issue and expiry date;
- records of how you have contacted us and, if you get in touch with us online, details such as your mobile phone location data, IP address and MAC address;
- details of your marital status, spouse’s name and account information, dependents, beneficiaries, beneficial owners, representatives, indemnifiers, tax status, sources of income and funds, assets and liabilities, and whether you are a politically exposed person;
- details of shareholdings, prominent functions, directorships and/or employment including for instance your occupation, salary, employer and length of service;
- details of your products and services including for instance application information, customer ID number, account number, account balance and currency, account history, security or collateral held by us, your branch name, standing orders, direct debits, payment transactions, cards held, card numbers, details of additional signatories, online banking details, information relating to complaints and/or fraud reports, and details associated with account closure and/or card cancellation;
- your Liveliness Videos and photos as part of the onboarding / registration (Sign Up) or for account recovery or for KYC or for personalized customer experience purposes.
- As part of the onboarding process, we are taking a picture of the user’s face based on some gestures requested such as “Wink with your left/right eye” or “Smile”. This picture is requested as part of the registration process where the user is usually asked to scan his legal documents. Once the user takes a picture of his face, we compare this picture to the one found in the scanned legal documents to verify that this is the same user.
- security identifiers; and
- the type and location of your device / handset.
We collect some of this information using cookies. Please refer to our Cookies Policy for more details.
Once you submit information through our website or mobile application, which includes when you log in to your account, we will know who you are and your activities on this website and information about you and/or your company may be recorded on our systems. For example, we may ask for the following information when you log into your account, register for product updates or apply for a new product or service:
- [your name];
- [company name];
- [email address];
- [postal address];
- [telephone number];
- [your comments/questions]; and
- [the products/services you are interested in].
We may also collect personal information from telephone calls and/or other correspondence with you, whether by email, our online chat function or otherwise, or in person from one of our kiosks.
What is the source of your personal Information?
We will generally collect your personal information from you directly. If you are introduced to us by an approved intermediary, we will obtain some personal information about you indirectly from them when they introduce you to us.
In addition, we obtain your personal information from other sources such as fraud prevention agencies, credit bureaus, your employer, landlord, other lenders, publicly available directories and information (e.g., telephone directory, social media, internet, news articles), debt recovery and/or tracing agents, other organizations to assist in prevention and detection of crime, police and law enforcement agencies.
What do we do with the information we collect?
We use this information for all sorts of reasons.
The main reason we use this information is to provide you with the website and information about our products and services (whether available via the website or offline). We also use the information for:
- internal record keeping;
- product and service development;
- developing our website;
- answering your queries or complaints;
- market research;
- marketing our own products and services to you.
- complying with our legal obligations; and
- performing our contract with you or for taking steps prior to entering into it.
On what basis do we use your personal information?
We use your personal information on the following basis
- with your consent, where you have indicated that you would like to receive marketing messages from us;
- for the legitimate interests of AMCB, being the purposes set out in the “What do we do with the information we collect?” section above; and
- to comply with certain legal and regulatory obligations of AMCB.
Handling of Non-Customer Data
We are committed to ensuring the privacy and security of personal information provided by non-customers. If you are not a customer but have provided us with your personal information, please be assured that:
- The information you provide will be used for specific purposes such as resolving inquiries, processing sales leads, collecting feedback, or other relevant interactions.
- We will not use your information for any marketing purposes.
- Your data will be handled with the same level of care and security as customer data, and we will ensure that it is processed in accordance with applicable data protection laws and regulations.
- We will retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including resolving inquiries, processing sales leads, collecting feedback, or other relevant interactions.
Marketing
We would like to provide you with information about AMCB’s products and services and other information which we think you may find interesting. We may send you such information by post, email, mobile application notifications, and/or telephone, unless you have asked us not to do so.
If you are a customer of ours or you have previously asked us for information on our products and services, we may send you information by email; however, in every marketing email message we send you, we will give you the opportunity to unsubscribe from our mailings altogether.
We do not provide your personal information to external organizations (i.e. outside of AMCB) for their own marketing purposes without your explicit consent.
If at any time you do not want your information used for direct marketing purposes, please contact us at info@mbankuae.com and if you decide that you no longer wish to receive marketing emails from us, please contact us at info@mbankuae.com by replying to this email with the subject line ‘Unsubscribe’.
Whom do we share your information with?
We share your personal information with third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, data hosting providers, IT consultants carrying out testing and development work on our business technology systems, research and mailing houses and function coordinators. These third parties comply with similar and equally stringent undertakings of privacy and confidentiality.
We also share your personal information with our other group companies for internal reasons, primarily for business and operational purposes, which include the following:
- joint account holders, trustees and beneficiaries and any person with power of attorney over your affairs (in each case only if relevant to you);
- other payment services providers such as when you ask us to share information about your account with them;
- other account holders or individuals when we have to provide your information to them because some money paid to you by them should not be in your account;
- our legal and other professional advisers, auditors and actuaries;
- financial institutions and trade associations;
- governmental and regulatory bodies;
- tax authorities who are overseas for instance if you are subject to tax in another jurisdiction we may share your personal information directly with relevant tax authorities overseas;
- other organizations and businesses who provide services to us such as debt recovery agencies, back up and server hosting providers, IT software and maintenance providers, document storage providers and suppliers of other back-office functions;
- buyers and their professional representatives as part of any restructuring or sale of our business or assets;
- credit bureaus; and
- market research organizations who help us to develop and improve our products and services.
As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us, your personal information will be disclosed to such entity. Also, if any bankruptcy, insolvency or reorganization proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible they will be sold or transferred to third parties.
Where required we share your personal information with third parties: to comply with a legal obligation; when we believe in good faith that an applicable law requires it; at the request of government authorities conducting an investigation; to verify or enforce our website terms of use www.mbank.ae/terms-conditions/ or other applicable policies; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to the our website, our business or the public.
How and when can you withdraw your consent?
Much of what we do with your personal information is not based on your consent, instead it is based on other legal grounds. For processing that is based on your consent, you have the right to take back that consent for future processing at any time. You can do this by contacting us using the details above.
To comply with payment services regulations, we have to share some of your personal information with other payment service providers in some circumstances such as when you ask us to share information about your account with them. Whilst those payment services regulations mention ‘consent’ for this, ‘consent’ in that context does not have the same meaning as ‘consent’ under data protection laws. The legal grounds which may be relevant to this are compliance with our legal obligations, performance of our contract with you, our legitimate interests, or a combination of these. Therefore, if you ask to withdraw consent from what we do with your personal information where we need to have it the payment services regulations, we may still have to hold and use your personal information.
Consequences of withdrawing your consent:
- We may still need to retain and use your personal information to comply with our legal obligations or perform our contract with you.
- Withdrawing consent may limit our ability to provide certain services or functionalities that rely on the processing of your personal information.
- You may still exercise other rights regarding your personal data, such as requesting access to, rectification, or deletion of your data where applicable and legally permissible.
What should you do if your personal information changes?
You should tell us without delay so that we can update our records.
Do you have to provide your personal information to us?
We are unable to provide you with products and services or to process your application without having personal information about you. Your personal information is required before you can enter into the relevant contract with us, or it is required during the life of that contract, or it is required by laws that apply to us. If we already hold some of the personal information that we need – for instance if you are already a customer – we may not need to collect it again when you make your application.
Do we do any monitoring involving processing of your personal information?
In this section monitoring means any listening to, recording of, viewing of, intercepting of, or taking and keeping records (as the case may be) of calls, email, text messages, social media messages, in person face to face meetings and other communications. We may monitor where permitted by law and we will do this where the law requires it.
Some of our monitoring may be to comply with regulatory rules, self-regulatory practices or procedures relevant to our business, to prevent or detect crime, in the interests of protecting the security of our communications systems and procedures, to have a record of what we have discussed with you and actions agreed with you, to protect you and to provide security for you (such as in relation to fraud risks on your account) and for quality control and staff training purposes. Some of our monitoring may check for obscene or profane content in communications.
We may conduct short-term carefully controlled monitoring of your activities on your account(s) where this is necessary for our legitimate interests or to comply with our legal obligations. For instance, where we suspect fraud, money laundering or other crimes.
Telephone calls and/or in person meetings between us and you in connection with your application and/or your account(s) may be recorded to make sure that we have a record of what has been discussed and what your instructions are. We may also record these types of calls for the quality control and staff training purposes.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect, including locked cabinets and electronic password protection.
If you suspect or become aware of a security incident (e.g., you receive a suspicious communication from someone claiming to be an AMCB employee or from an unauthorized website claiming to be affiliated with our bank), please report the incident immediately by calling our 24/7 hotline number at 600 57 1111. or Our International number which is printed on your debit cards is +971-2-412-2222, as soon as possible.
How long will we keep your personal information?
We will always keep your personal information for the period required by law. We will also keep your personal information where we need to do so in connection with legal action or an investigation involving AMCB. Otherwise, we will only keep your personal information for the period necessary to fulfil the purposes outlined above and in any event for no more than five years thereafter.
Linking to other websites
Our website or marketing email messages sometimes include links to other websites which are not within our control. Once you have left our website/marketing email message, we cannot be held responsible for the content of other websites or the protection and privacy of any information which you provide to those websites. You should exercise caution and look at the privacy statement applicable to the website in question.
Data Anonymization and Use of Aggregated Information
Your personal information may be converted into statistical or aggregated data which cannot be used to identify you. It may then be used to produce statistical research and reports. This aggregated data may be shared and used in all the ways described in this privacy notice.
Data Subject Rights in UAE
Under UAE Data Protection law, you have certain rights regarding your personal data. These include:
- The right to access the personal information we hold about you;
- The right to request the correction of inaccurate personal information;
- The right to request the deletion of your personal information in certain circumstances;
- The right to object to the processing of your personal information;
- The right to request the restriction of processing your personal information;
- The right to data portability, allowing you to obtain and reuse your personal information for your own purposes across different services;
- The right to withdraw your consent at any time where we rely on your consent to process your personal information.
If you wish to exercise any of these rights, please contact us at privacy@mbankuae.com.
Contact us
If you have any questions about the processing of your personal information or need additional information, please contact us at privacy@mbankuae.com.