1. About this policy
This Privacy Policy explains how PaneFinance Bank (“PaneFinance”, “we”, “us” or “our”) collects, uses, shares and protects personal information about you. It applies when you visit our website, use our internet banking service, open or use an account with us, or contact us.
We operate from our head office in Jakarta, Indonesia, and through branches in South Korea and Vietnam. We handle personal information in line with the data protection laws that apply in each of those countries.
2. Information we collect
Depending on how you use our services, we may collect:
- Identity and contact details, such as your name, date of birth, nationality, address, email address and phone number.
- Verification information, such as identity documents, photographs and other records we need to confirm who you are and meet our legal obligations.
- Account and transaction information, such as account numbers, balances, payments, transfers, cards and loan activity.
- Business information, if you bank with us for a business, such as company details, ownership, directors and authorised users.
- Communications, such as messages you send through our contact form, email, chat or phone.
- Technical information, such as your IP address, device and browser type, language preference and how you use our website and internet banking.
We also receive information from third parties, such as identity verification providers, credit and fraud-prevention agencies, public registers and other financial institutions, where the law allows.
3. How we use your information
We use personal information to:
- provide and manage your accounts and process your transactions;
- verify your identity and carry out the checks required by anti-money-laundering, counter-terrorist-financing and sanctions laws;
- detect, prevent and investigate fraud and security incidents;
- meet legal, tax and regulatory obligations and respond to requests from authorities;
- provide customer support and handle complaints;
- improve and develop our services; and
- send you service messages and, where you agree or the law allows, information about products that may interest you.
Where the law requires a legal basis, we rely on the performance of our contract with you, compliance with legal obligations, our legitimate interests in running a safe and effective bank, or your consent.
5. International transfers
Because we operate in several countries, your information may be transferred to, stored in or accessed from a country other than the one where you live. When we do this, we take steps to protect it as required by applicable law, such as contractual safeguards and security controls.
7. How we protect your information
We protect personal information with technical and organisational measures, including encryption in transit, access controls, staff training and monitoring for suspicious activity.
No system is completely secure, so please help us: keep your login details private, use a strong and unique password, and tell us straight away if you suspect unauthorised access. We will never ask for your password by email, phone or chat.
8. How long we keep it
We keep personal information for as long as we need it to provide our services and for the purposes in this policy, and for as long as banking, tax, anti-money-laundering and other laws require us to keep records. When we no longer need it, we delete it or anonymise it.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information, or to restrict or object to how we use it, where the law allows;
- withdraw your consent at any time where we rely on it;
- receive a copy of your information in a portable format, where the law provides; and
- complain to the data protection authority in your country.
To use these rights, contact us using the details below. We may need to verify your identity first, and some requests may be limited where we must keep information to meet legal obligations.
10. Children
Our services are intended for people who are legally old enough to enter into a banking contract in their country. We do not knowingly collect personal information from anyone below that age, except where a parent or guardian opens or manages an account for them as the law allows.
11. Links to other websites
Our website may link to websites run by others. We are not responsible for their privacy practices, so please read their policies.
12. Changes to this policy
We may update this policy from time to time. When we make important changes we will post the updated version here and change the date at the top of this page. Where the law requires, we will also tell you directly.
13. Contact us
If you have a question about this policy or want to use your rights, email support@panefinanceltd.com or write to PaneFinance Bank, Head Office, Jakarta, Indonesia. You can also reach us through our contact page.