Global Privacy Policy

1. Scope & Fiduciary Commitment

This Global Privacy Policy governs the processing of personal and transactional information collected by Banexra Bank Group entities across our public website, mobile applications, customer treasury portals, and physical representative hubs in London, New York, Zurich, Dubai, and Lagos. We operate under rigorous international privacy frameworks, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the Swiss Federal Data Protection Act (FADP), and global banking secrecy benchmarks.

2. Categories of Information We Collect

To execute retail and corporate banking services, we process several categories of customer information:

• Identity & Verification Data: Legal name, biometric passport numbers, national identification numbers, tax identification numbers (TIN/SSN), residential utility verification, and facial recognition liveness checks.
• Financial & Transactional Records: Account balances, wire instructions, counterparty details, source-of-wealth declarations, trade invoices, and credit risk evaluations.
• Digital & Telemetry Data: Public IP addresses, hardware identifiers, browser fingerprinting, session telemetry, geolocation markers, and multi-factor authentication (MFA) device states.

3. Lawful Bases for Processing

We do not sell customer information under any circumstance. We collect and process your information exclusively on three legal bases:
• Performance of Contract: To maintain your multicurrency ledger, execute SWIFT/RTGS transfers, issue physical/virtual payment cards, and clear institutional investments.
• Statutory Regulatory Obligation: Compliance with mandatory Anti-Money Laundering (AML), Know Your Customer (KYC), Common Reporting Standard (CRS), and Foreign Account Tax Compliance Act (FATCA) reporting mandates.
• Legitimate Interests: Real-time heuristic fraud screening, server intrusion mitigation, and operational resilience auditing.

4. Statutory AML Retention vs. Right to Erasure

While the GDPR affords individuals the "Right to Erasure" (Right to be Forgotten), international monetary regulations mandate that financial institutions retain transactional ledgers, account opening forms, and identity verification dossiers for a statutory minimum of 5 to 10 years following the formal closure of an account relationship. During this post-closure period, records are archived into restricted, encrypted cold storage accessible exclusively by the Group Compliance & Legal division.

5. Cross-Border Data Transfers

As an international clearing institution, Banexra Bank may transfer encrypted data across sovereign borders. All international transfers are safeguarded by binding Standard Contractual Clauses (SCCs), certified ISO/IEC 27001 data center architectures, and end-to-end hardware-level tokenization.

6. Data Subject Rights & Inquiries

You retain the right to request access to your stored personal records, demand rectification of discrepancies, export portable machine-readable account statements, or contest automated risk underwriting. Contact our Group Data Protection Officer directly: