Introduction
IDFC FIRST Limited and its subsidiaries are committed to protecting theircustomer's personal information. This Privacy Policy is created to help the customer understand how the bank collects, uses and protects customer's information when they visit bank's web and WAP sites and use their products and services.
This Privacy Policy covers the following topics:
Personal Information Collected Online
- How is Personal Information used
- How Personal Information is Shared
- How is Other Information Used and Collected
- How is Customer information kept accurately
- How access to Customer Information is limited to employees
- Information Security
- Other Information about IDFC FIRST Website
- IDFC FIRST Limited commitment to Personal Privacy
- Change in Policy
Personal Information collected online
Personal Information means personally identifiable information such as information customer provides via forms, surveys, applications or other online fields including name, postal or email addresses, telephone, fax or mobile numbers, or account numbers.
How is personal information used
Bank may use Personal Information:
- To respond to customers inquiries and fulfill requests.
- To inform customer about important information regarding the Site, products or services for which customer apply or may be interested in applying for, or in which customer is already enrolled, changes to terms, conditions, and policies and/or other administrative information.
- To deliver marketing communications that bank believe may be of interest to customer, including, ads or offers tailored to customers.
- To personalize customer experience on the Site.
- To allow customer to apply for products or services (e.g., to prequalify for a mortgage, apply for a credit card, or to open a retirement account, investment account or other financial product) and evaluate customer's eligibility for such products or services.
- To verify customer's identity and/or location (or the identity or location of customer's representative or agent) in order to allow access to customer's accounts, conduct online transactions and to maintain measures aimed at preventing fraud and protecting the security of account and Personal Information.
- To allow customer to participate in surveys and other forms of market research, sweepstakes, contests and similar promotions and to administer these activities.
- To allow customer to use some Site financial planning tools. Information that customer enters into one of these planning tools may be stored for future access and use. Customer have the option not to save the information.
- For business purposes, including data analysis, audits, developing and improving products and services, enhancing the Site, identifying usage trends and determining the effectiveness of promotional campaigns.
- For risk control, for fraud detection and prevention, to comply with laws and regulations, and to comply with other legal process and law enforcement requirements.
How personal information is shared
The Information shall not be shared with any external organization unless the same is necessary to enable IDFC to provide services to the customer or to enable the compilation of a transaction, credit reporting, or the same is necessary or required pursuant to applicable banking norms or pursuant to the terms and conditions applicable to such Information as agreed to with IDFC. Needless to add, confidentiality norms as applicable to banks shall be adhered to. IDFC may also share Information to provide customer with superior services and a range of offers.
How other information is used and collected
IDFC FIRST Bank and their third-party service providers may collect and use Other Information in a variety of ways, including:
Through customer's browser or device: Certain information is collected by most browsers and/or through customer's device, such as Media Access Control (MAC) address, device type, screen resolution, operating system version and internet browser type and version. Bank uses this information to ensure Sites function properly, for fraud detection and prevention, and security purposes.
Using cookies : Cookies are pieces of information stored directly on the device, customer is using. Cookies used by Bank do not contain or capture unencrypted Personal Information. Cookies allow Bank to collect information such as browser type, time spent on the Site, pages visited, language preferences, and customer's relationship with Bank. Bank uses the information for security purposes, to facilitate navigation, to display information more effectively, to personalize/tailor customer's experience while engaging with Bank. Bank collects statistical information about the usage of the Site in order to continually improve the design and functionality, to monitor responses to advertisements and content, to understand how account holders and visitors use the Site and to assist Bank with resolving questions regarding the Site. IDFC FIRST uses encrypted cookies.
IP Address : IP Address is a number that is automatically assigned to the device that customer is by his Internet Service Provider (ISP). An IP Address is identified and logged automatically in Bank's server log files whenever a user visits the Site, along with the time of the visit and the page(s) that were visited. Collecting IP Addresses is standard practice on the internet and is done automatically by many web sites. IDFC FIRST bank use IP Addresses for purposes such as calculating Site usage levels, helping diagnose server problems, for compliance and security purposes, for advertising, and administering the Site.
Aggregated and De-identified Data : Aggregated and De-identified Data is data that IDFC FIRST Bank may create or compile from various sources, including but not limited to accounts and transactions. This information, which does not identify individual account holders, may be used for bank's business purposes, which may include offering products or services, research, marketing or analyzing market trends, and other purposes consistent with applicable laws.
Information we collect from third-party e-mails in your account (EMAIL ACCOUNT DATA)
a)Subject to your consent, we may request certain third parties sending e-mails to you, to provide information about you which could help us to customize and personalize your experience of our Services.
b)If you choose to link and connect your email account with our application, we may access the said account for purposes such as collecting your financial, institutional and transactional information to be able to organize your information in your e-mail account and provide deep analytics.
c) We shall seek your consent and request access to your email account. If permitted, the application shall automatically secure access to the contents of emails on an ongoing basis for the purpose of providing an in-depth view of your net worth on a regular basis.
d)The Application's access to your email account(s) is authorized through the email provider's access mechanism. You can choose to enable us to access one or more of your email accounts by explicitly consenting to each single account separately. Please note that your consent to any of the above is purely voluntary. You may de-link and stop the access to your email account/s any time you wish.
e)We only read emails from financial and institutional service providers including, but not limited to, banks and credit card issuers and do not open, read or access any personal (non-institutional) emails. We hereby confirm that we do not access any other personal emails. This distinction is made based on the sender email address.
f) Please note that such data obtained by this integration will be used by the Bank solely for providing the Services, populating, tracking and updating the User's investment information on a monthly/ quarterly / annual basis and on user demand of those investments made through the account including those on the platform and consolidate them at one place, providing accurate analytics on the User's spent pattern and further improving the User experience pertaining to the features of the Platform and consolidate user's investment details and history. We shall not use or transfer any data or information received from the integration of your email addresses with the account on the Platform, to third parties for any purpose other than as explicitly authorised by the User.
g) The Services shall not use your Email data for serving advertisements.
h) The Services shall not allow humans to read this e-mail data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the App's internal operations and even then, only when the data have been aggregated and anonymized.
i) You may at any time opt to de-link your email addresses connected with the account opened on the Platform, by managing these connections with the options provided on the platform. For example, Google Mail's permission settings are located at: myaccount.google.com/permissions. A user may de-link and stop the access to their email accounts any time they wish. Any outdated data will be purged from time to time as per the Bank's policy
IDFC FIRST Bank's use of information received from Google API will adhere to Google API Services User Data Policy, including the Limited Use requirements.
How is customer information kept accurately
It is in customer's interest, and it is bank's objective, for them to have accurate, current, and complete information concerning customer and his accounts. Bank has strict procedures that their employees abide by to meet this objective. While some procedures are required by Central, State laws or RBI regulations, bank have implemented additional procedures to maintain accurate, current, and complete financial information, including processes to update information and remove outdated information.
How access to customer information is limited to employees
IDFC FIRST Bank has procedures that limit access to personally identifiable information to those employees with a business reason for knowing such information about customer. Bank educates the employees on their responsibility to protect the confidentiality of customer information, and hold them accountable if they violate this privacy policy.
Security
To protect Personal Information from unauthorized access and use, bank retains data and uses security measures that comply with applicable laws. These measures may include device safeguards, secured files and buildings as well as oversight of Bank's third party service providers including the Digital lending App of LSP's (detailed list of LSP's is available on Bank's website (https://www.idfcfirstbank.com/personal-banking/adlp/digital-lending-partners) to ensure information remains confidential and secured.
Other information about IDFC FIRST bank's website
- For customers using IDFC FIRST Bank's Internet Banking, all visitor information is collected along with any information that customer while using IDFC FIRSt Bank's web site.
- Links to, or from, IDFC FIRST Bank's web site: IDFC FIRST Bank is not responsible for information practices employed by web sites linked with bank's web site. Generally, links to non-IDFC FIRST Bank's web sites are provided solely as pointers to information on topics that may be useful to users of IDFC FIRST Bank's web site.
- Encrypted information: Information provided by customer on IDFC FIRST Bank's web site is encrypted or scrambled in order to secure information.
IDFC FIRST bank's commitment to personal privacy
- A potential customer who inquires about bank's products and services or who would like a copy of bank's privacy policy
- A customer who has established a relationship with bank
- A potential customer who has applied for a loan
- A visitor to IDFC FIRST Bank's web site
Change in policy
Privacy policy is subject to change periodically.