Privacy Policy

Effective Date: [Insert Date]

Bank of Khartoum (“the Bank”, “we”, “our”) is fully committed to safeguarding your privacy and ensuring the protection of your personal data in accordance with applicable laws and regulations, including the Sudanese Data Protection Law, where applicable, and international standards such as the General Data Protection Regulation (GDPR), to the extent relevant.

By using the Bank of Khartoum website or online services, you agree to the terms set forth in this Privacy Policy.

1. Collection and Use of Personal Data
We collect personal data that you voluntarily provide through our website and digital services, including but not limited to:

• Full name, national ID, and contact details
• Account, transaction, and service usage data
• IP address and browser/device metadata

Your information is used for:

• Delivering banking products and services
• Enhancing your digital banking experience
• Managing risk, compliance, fraud prevention, and analytics
• Marketing communication (subject to your consent)
• Regulatory and legal reporting

2. Security and Confidentiality Measures

• All customer data is encrypted and stored on secure servers with restricted access.
• Role-based access controls and two-factor authentication are in place for internal systems.
• Employees with access to customer data are trained in data protection and subject to disciplinary actions if violations occur.
• Customers are responsible for safeguarding their credentials and must report any loss or misuse immediately via our official contact channels.

3. Customer Rights
You have the right to:

•  Access your personal data
• Request correction of inaccurate or outdated information
• Request deletion or restriction of your data, subject to legal and regulatory requirements
• Withdraw consent for direct marketing at any time

Requests can be made by contacting: privacy@bankofkhartoum.com

4. Data Sharing and Disclosure

• We do not sell or lease your data. Personal data may be shared with:
• Regulatory or governmental authorities as required by law
• Service providers and vendors (e.g., IT support, marketing agencies) under strict confidentiality agreements
• Credit reporting agencies and fraud detection partners
• Parties involved in business transactions such as mergers or reorganizations (subject to confidentiality)

All third parties are contractually obligated to use your data only for the purposes agreed with the Bank.

5. Cookies and Tracking Technologies
We use cookies to ensure our website functions correctly and to enhance your browsing experience. These cookies help us understand general visitor behavior and improve site performance, but they do not collect personal data or track users across other websites. We do not use third-party advertising or analytics cookies. By continuing to use our website, you consent to the use of these basic cookies. You can choose to disable cookies through your browser settings, though some site features may not work properly as a result. We do not currently offer an on-site tool to manage cookie preferences. This policy may be updated from time to time to reflect changes in our practices or regulations.”

6. Data Transfers
Personal data may be processed or stored outside Sudan in countries with adequate data protection frameworks. In such cases, we ensure safeguards like data transfer agreements, encryption, and service provider audits are in place.

7. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of these websites. Please review their privacy policies before providing any personal information.

8. Online Transactions and Digital Banking Risks

• Customers are responsible for the accuracy of instructions and information submitted online.
• The Bank is not liable for delays or errors caused by external systems, currency fluctuations, or third-party disputes.
•  Fees, commissions, or deductions are made as per our approved tariff schedule.
• The Bank may, without prior notice, offset or freeze funds to settle outstanding obligations.
  

9. Data Retention
We retain your personal data only as long as necessary for the purposes outlined, or as required by law, after which it is securely deleted or anonymized.

10. Policy Updates and Communication
This policy may be updated periodically. All changes will be posted on our website. We may notify you via banners, emails, or other appropriate channels.

By continuing to use the website, you agree to the latest published version of this Privacy Policy.

Contact Us
For privacy-related queries or complaints:
privacy@bankofkhartoum.com