The Bank is committed to safeguarding the privacy and security of personal information in accordance with all applicable data protection legislation, including Lebanese Law No. 81, and related regulations.

• The Bank routinely reviews and updates its data protection policies to ensure compliance with evolving legal and regulatory requirements.
• Customers are encouraged to adopt best practices for safeguarding their personal data; the Bank provides guidance on online security and data protection measures

The Bank may collect personal information, which can include, without limitation: names and family details, contact information, identification documents (passport, ID card, etc.), financial and tax records, transaction history, device and usage data (IP address, browser type, device information), as well as data collected via cookies or similar technologies. 

• Personal data will be processed in a lawful, transparent manner based on contractual necessity, compliance with applicable laws, legitimate interests (including but not limited to credit assessments, legal claims, video surveillance, client feedback for marketing purposes), or with the explicit consent of the customer.

The Bank implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

• Security measures include encryption, multi-factor authentication, firewalls, regular security audits, and staff training to ensure confidentiality and integrity of customer information.

Personal data may be shared with the Bank’s shareholders, outsourcing partners, sub-processors, business partners, suppliers, correspondent banks, auditors, professional advisors, and consultants, both within Lebanon and abroad, for purposes consistent with the collection objectives and as permitted or required by law.

• Customers provide explicit consent for the Bank to use their data for targeted marketing of its products and services.

Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required under applicable laws, regulations, or court orders.

• Upon expiration of the retention period or once the intended purpose is achieved, data will be securely deleted or anonymized.
• Customers may request deletion of their personal data, subject to legal obligations or restrictions.