Privacy Policy

BANK OF BARODA (KENYA) LIMITED PRIVACY POLICY

Introduction

Thank you for visiting our website.

This privacy policy regulates how personal information is used in a complete and transparent manner by specifically Bank of Baroda (Kenya) Limited (BoBKL).

We are committed to ensure that your personal information is processed in a way that is compatible with the specified, explicit, and legitimate purpose of collection.

Collection of Information

While using our service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Information we hold about you will often come from you directly (for example, when you apply for a new product).

Where personal data relates to a child, we will process the personal data only where parental or legal guardian consent has been given. The processing of such data will be done in a manner that protects and advances the rights and best interests of the child.

That information will include the following:

Your personal details (for example, your name, date of birth, passport information or other identification information)
Your contact details (for example, your postal address, phone number, email address or mobile number)
Behavioral biometrics (information such as the way you use your device for our online services or when making online payments)
Details of transactions (for example, payments you make and receive)
Financial information (for example, your bank account number, credit- or debit-card numbers, financial history), including information you provide for the purposes of providing a payment-initiation service (a service that allows a third party to give us instructions to make payments from your account on your behalf) and an account-information service (a service that allows you to see your accounts with different providers in one place) for accounts you hold with other providers
Proof of income (such as pay slips or bank statements), if you provide these when you apply for a particular product
Details about your health and lifestyle, to meet our regulatory obligations, including those relating to responsible lending
Information about criminal convictions and offences (for example, for mortgage applications)
Information about any other BoBKL products and services you currently have, you have applied for, or you have had in the past. If you do not provide personal data that we tell you is mandatory (that is, which you must provide), it may mean that we cannot provide you with the service you want or meet all our obligations to you.
We use Closed Circuit Television (CCTV) surveillance recordings. CCTV Devices are installed at strategic locations to provide a safe and secure environment in all our branches, BoBKL premises and ATMs as a part of our commitment to security and crime prevention.
We maintain a register of visitors in which we collect and keep your personal data such as names, company/institution details, telephone number, vehicle registration details, National ID number and device serial number and model (where you visit our premises with your personal devices e.g laptops). This information is collected for health, safety and security purposes.
We collect and retain your personal data (name, telephone number, and vehicle registration details) when you request for a parking space in any of our BoBKL premises. We use the data you provide to ensure effective car park management, health and safety compliance, for security purposes and inventory management.
When you use BoBKL WIFI for guest and visitors, we collect email IDs and will provide user name and password. We record the device address and also log traffic information in the form of sites visited, duration and date sent/received.

We will also hold information we collect about you from other sources. This includes information about the following:

How you are using our branches, telephone services, websites or apps
Your interactions with us (for example, through social media)
Your digital devices, when we carry out checks designed to confirm where you live. These checks include identifying the IP address your device is connected to, your use of our website and apps, the type of device you use, the operating system and screen resolution, and the way you interact with us
The way you use your accounts, including information about payments you make or receive, such as the date, amount, currency, and the details of who you make payments to or receive payments from (for example, retailers or other people)
Whether you have used, or made claims under, any of the products and services that you have taken out with your current account (for example, travel, phone and gadget insurance)
Any other accounts or products you have with us or other providers, or any business you own or are associated with.

We may collect information from the following.

Credit reference agencies (who may check their information against other databases – public or private – they have access to) and fraud prevention agencies
Organizations that provide their own personal data, or personal data from other third parties, to help us to improve the personal data we hold, and provide more relevant and interesting products and services to you
Criminal record checks and information
Employers
Joint account holders
People appointed to act on your behalf
Other banks and financial institutions (for example, when you have asked us to display their accounts on our platforms, we have received information to investigate incorrect payments, or you have switched your account to us)
Publicly available sources, such as media stories and online registers or directories
Businesses you own or are associated with, such as investment companies, trusts or partnerships, as well as the directors, partners, trustees, authorized officers or agents of those businesses.
If you give us personal data about other people (such as your family or joint account holders), or you ask us to share their personal data with third parties, you confirm that they understand the information in this notice about how we will use their personal data

Use of Data

Bank of Baroda (Kenya) Limited uses the collected data for various purposes but are not limited to:

Verifying your identity information through publicly available and/or restricted government databases to comply with applicable Know Your Customer (KYC) requirements.
Assessing the purpose and nature of your business or principal activity, your financial status and the capacity in which you are entering into the business relationship with us.
Creating a record of you on our system to verify your identity, provide you with the products and/or services you have applied for from us or from third parties on our ecommerce platforms.
Communicate with and keep you informed about the products and/or services you have applied for.
Verification of age and consent where the personal data relates to a child.
Identifying you and verifying your physical address.
Identifying your source of income and similar information.
Assessing your personal financial circumstances and needs before providing advice to you.
Responding to any of your queries or concerns, we may record or monitor telephone calls between us so that we can check instructions and make sure that we are meeting our service standards.
Carrying out credit checks and credit scoring.
To perform our obligations under a contractual arrangement with you.
Fraud prevention, detection and investigation
Any purpose related to the prevention of financial crime, including sanctions screening, monitoring of anti-money laundering and any financing of terrorist activities.
Further processing for historical, statistical or research, survey and other scientific or business purposes where the outcomes will not be published in an identifiable format.
Provide aggregated data (which do not contain any information which may identify you as an individual) to third parties for research and scientific purpose.
In business practices including to quality control, training and ensuring effective systems operations.
To understand how you use our products and services for purposes of developing or improving products and services.
Administer any of our online platforms/websites.
To comply with any legal, governmental, or regulatory requirement or for use by our lawyers in connection with any legal proceedings.
For purposes relating to the merger, assignment, sale, or transfer of any of our businesses, legal entities or assets, in whole or in part, as part of corporate transactions.
Where you have applied for employment at BOBKL, we perform applicant screening and background checks.
Where you are a BOBKL employee (including contractors), we create an employment record of you on our system to facilitate continuous monitoring during your employment with us.
Where you are a BOBKL director, we create a record of you as a director on our system.
Where you are a supplier to BOBKL, we process your personal information for due diligence, risk assessment, administrative and payment purposes.
For security purposes when accessing any of BOBKL buildings/premises; and
Where you attend an event sponsored by BOBKL, we will be taking photos or videos of the event. These images or videos will be used by us to share news about the event, and may be used in press releases, printed publicly, and published on our website.

Direct marketing

We will require your consent before sending any marketing and promotional offers and any other after sale services.

We do respect that you have the right to object to processing and can opt out at any time by following the unsubscribe link or instructions provided in any email/sms we send.

Location Data

We may use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time, through your device settings.

Data Protection and Privacy Rights

Customers as Data Subjects have the following data protection rights:

(Please note that we may ask you to verify your identity and provide signed instructions before responding to such requests.)

The right to access, update or to delete the information we have on you.

Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.

The right of rectification.

You have the right to have your information rectified if that information is inaccurate or incomplete.

The right to object.

You have the right to object to our processing of your Personal Data.

The right of restriction.

You have the right to request that we restrict the processing of your personal information.

The right to data portability.

You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.

The right to withdraw consent.

You also have the right to withdraw your consent at any time where BoBKL relied on your consent to process your personal information.

The right to lodge a complaint.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data if we are in breach of the above rights.

Retention of Personal Data

BoBKL will retain your personal data only for as long as is necessary to achieve the purpose for which they were collected. We may retain your personal data and/or information for a period of up to seven (7) years or as may be required by law and maintains specific records management and retention policies and procedures, so that personal data are deleted after a reasonable time according to the following retention criteria:

Where we have an ongoing relationship with you.
To comply with a legal obligation to which it is subject.
Where retention is advisable to safeguard or improve the Bank’s legal position

Disclosure of Data

BoBKL may disclose your Personal Data in the good faith belief that such action is necessary to:

To comply with a legal obligation;
To protect and defend the rights or property of BoBKL;
To prevent or investigate possible wrongdoing in connection with a Service offered;
To protect the personal safety of users of the Service or the public; and
To protect against legal liability.

Transfer of Data

BoBKL being a subsidiary of Bank of Baroda India, may transfer data to our servers which are not located in Kenya. Our website and online resources are owned and operated in India and the information you provide may be accessible by our affiliates and vendors in other countries.

We have put in appropriate technical and organizational safeguards to protect and secure any personal data that you may have shared with us.

We will try our best to ensure that no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information and seeking your consent prior to transferring.

If you are located outside KENYA and choose to provide information to us, please note that we transfer the data, including Personal Data, to KENYA and process it there.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. If you cannot find the privacy policy on any of these sites once you have arrived at their site via a link from our site, you should contact that site directly for more information.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to This Privacy Policy

This policy was last updated on 12/04/2024.

We may update our Privacy Statement from time to time. We will notify you of any changes by posting the new Privacy Statement on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Statement. You are advised to review this Privacy Statement periodically for any changes. Changes to this Privacy Statement are effective when they are posted on this page.

Privacy Contact Information

If you have any questions about this Privacy Statement or in the event you wish to lodge an objection to the processing of your personal data kindly reach us through the following contact DPO.KENYA@bankofbaroda.com. An email is preferable mode of contact as it shows the time and date wherein the complaint was lodged.

Please, note that your request will be actioned within 14 days from the date of the receipt of your request. Your request attracts no charges.