Privacy Statement

BOC is committed to protecting your personal information and ensuring the security of your data. This Privacy Statement explains how we collect, use, disclose, and safeguard your information when you use our website or our banking and financial services. We process personal data in accordance with applicable data protection legislation.

We define "personal data" as any information that identifies or can identify an individual. We may collect and process the following categories of personal data:

• Name, contact details (address, email, telephone number), identification information, and date of birth
• Financial information, transaction data, and payment card information
• Gender and nationality
• Information collected through website cookies and electronic banking services
• Data received from third parties and from public sources where relevant and permitted by law

We collect this data directly from you, indirectly through your use of our services, through cookies and similar technologies on our website, and through our electronic banking and mobile applications.

We use your personal data for the following purposes:

• Managing your accounts and delivering banking and financial services
• Processing transactions and administering products and services
• Evaluating and improving our products, services and your user experience
• Marketing our products and services (where you have consented or where permitted by law)
• Risk management, including fraud prevention and anti-money laundering compliance
• Performing accounting and auditing functions
• Fulfilling legal and regulatory requirements
• Communicating with you, including account updates, service notifications and responding to your enquiries
• Handling your applications and processing your requests

By accessing or using our website and services, you consent to the practices described in this Privacy Statement. We also process personal data where necessary for the performance of our contract with you, to comply with our legal obligations, for our legitimate interests (such as improving our services and preventing fraud), and for individuals who have had or may have a business relationship with us.

We may disclose your personal data to our affiliates, service providers, regulatory and law enforcement authorities when required by law, and to other third parties where necessary for the purposes set out in this Privacy Statement or with your consent. We require that any such third parties protect your data in line with applicable law and our standards.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory and internal policy requirements.

Depending on applicable law, you may have the right to access your personal data, to correct or update it, to request its deletion or restriction of processing, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise these rights or for any questions about this Privacy Statement, please contact us using the customer chat function on our site or via the contact details provided on our website.

We may update this Privacy Statement from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this Privacy Statement periodically to stay informed about how we protect your information.

If you have any questions or concerns about this Privacy Statement or our handling of your personal data, please contact our customer services using the chat function on our site.