The Nainital Bank Ltd Mobile Banking Privacy Policy

Summary

‘NAINI NEO’ is a mobile banking application of The Nainital Bank Ltd. By downloading this app, you agree to terms and conditions of this Privacy Policy given by the application. We will not be able to on-board you in case you are not in agreement with the terms and conditions. By mere use of ‘NAINI NEO’, you expressly consent to our use and disclosure of your personal information in accordance with the Privacy Policy. This Privacy Policy is incorporated into and subject to terms and conditions.

This Application collects some Personal Data (including account related information) from its Users.

Following data is accessed for the following purposes and using the following services:

Applicability/who is covered under this policy

This Policy is applicable to all natural persons, whose personal information is either collected/ received/ possessed/ stored/ dealt in/ handled by Bank/users of the Mobile Banking Application and provide information to the Bank through the Mobile Application, are covered under this Policy.

Bank’s Commitment

The Nainital Bank Limited undertakes not to disclose the information provided by the customers to any person, unless such action is necessary to:

1. Conform to legal requirements or comply with legal process.
2. Protect and defend The Nainital Bank Limited’s rights, interests or property.
3. Enforce the terms and conditions of the products or services.
4. Act to protect the interests of The Nainital Bank Limited or its members, or of other persons.

The Nainital Bank Limited endeavors to safeguard and ensure the security of the information provided by the customer. The Nainital Bank Limited uses 256-bit encryption for the transmission of the information in an online system, which is currently the permitted maximum level of encryption in India.

• Profile photo is stored in application local storage on user’s device only and not on server. Stored profile image is retrieved from local storage on dashboard navigation and shown as user’s profile image.
• SMS is sent to verify mobile number registered for mobile banking application, in received SMS OTP is read and auto fetched for financial transactions.

The information, material, advices, suggestions, illustrations, notifications, circulars etc. are collectively stated the content in the application. If the said content contains any mistakes, omissions, inaccuracies and typographical errors, etc. The Nainital Bank Limited assumes no responsibility thereof.

The Nainital Bank Limited makes no warranty or representation regarding any content provided through this website and disclaims its liability in respect thereof. Any action on customer part based on the said content is at customer own risk and responsibility. The Nainital Bank Limited reserves its right to correct any part of the said content at any time as and when required at its sole discretion. The content of this website shall not be displayed or printed in any form in part or whole without the prior written approval of The Nainital Bank Limited.

The Nainital Bank Limited may become privacy to the personal information of its customers, including information that is of a confidential nature. The Nainital Bank Limited is strongly committed to protecting the privacy of its customers and has taken all reasonable measures to protect the confidentiality of the customer information and its transmission through the world-wide web and it shall not be held liable in any manner for disclosure of the confidential information in accordance with this Privacy Commitment or in terms of the agreements, if any, with the customers or by reasons beyond its control.

Responsibility of the customer

The customer would be required to cooperate with The Nainital Bank Limited to ensure the security of the information, and it is recommended that the customers choose their Login PIN and Transaction PIN carefully such that no unauthorized access is made by a third party. The customers should not disclose their Login PIN, Transaction PIN and OTP to anyone or keep any written or other record of the Login PIN and Transaction PIN such that a third party could access it.

Authorization

The customer authorizes The Nainital Bank Limited, to exchange, share, part with all information related to the details and transaction history of the customers to Banks/Financial institutions / Credit Bureaus / Agencies / participation in any telecommunication or electronic clearing network as may be required by law, customary practice, credit reporting, statistical analysis and credit scoring, verification or risk management and shall not hold The Nainital Bank Limited, liable for use or disclosure of this information.

Collection of Personally Identifiable Information and Other Information

When you use our application, we collect and store your personal information provided by you from time to time. We do so to ensure that you are provided a safe, efficient, smooth and seamless experience. This also allows us to understand your needs and provide for services and features that best suit them. We strive to provide services and features that best suit them. We strive to provide for customizations on our application to ensure that your experience is always safer and easier. This requires collection of personal information to the extent necessary for achieving this purpose and objective.

You may please note that it is mandatory to register yourself in order to use the app. And once you give us your personal information, you are not anonymous to us. We may automatically track certain information about you based upon your behavior on our app to the extent permitted by law.

If you choose to transact on the app, we collect information about your transaction behavior. We collect some additional information such as details of recipient or payer of the transaction, location, etc. which may be used for providing better experience to you while using the App.

Use of Demographic/ Profile Data / Your Information

We use personal information to provide the services you request. We use personal information to resolve disputes; troubleshoot problems; send money, measure consumer interest in our products and services and we may use the information to keep you apprised on any products, services and updates that shall be made available for use of our customers. We use the information thus obtained to customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our terms and conditions which are an integral part of the use of this application; and as otherwise described to you at the time of such collection.

We identify and use your IP address to help diagnose problems with our server, and to administer our app. Your IP address is also used to help identify you and to gather broad demographic information.

Sharing of personal information

We may disclose personal information if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal processes. We may disclose personal information to law enforcement offices upon such requests, third party rights owners or others in the good faith belief that such disclosure is reasonable necessary to:

• Enforce our Terms or Privacy Policy
• Respond to claims that an advertisement, posting or other content violates the rights of a third party
• To protect the rights, property or personal safety of our users or the general public.

We will share some or all of your personal information with another business entity should we (or our assets) plan to merge with, or be acquired by that business entity, or re-organization, amalgamation, restructuring of business. Should such a transaction occur that other business entity (or the new combined entity) will be required to follow this privacy policy with respect to your personal information.

Methods of Data processing

Data is controlled and processed by the Bank. The Data center processes the data of Users in a proper manner and appropriate security measures are taken to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and / or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data center, in some cases, the Data may be accessible to bank officials, involved with the operation of the service (administration, sales, marketing, legal, system administration) or external parties (such as vendors, third party technical service providers, mail & SMS carriers) appointed, if necessary, as Data Processors by the business Owner. The updated list of these parties may be requested from the business owner at any time.

Storage of your information

With reference to the provision of the regulatory laws and rules, the Bank shall maintain all necessary records of transactions between the Bank and the customer for at least five years from the date of the transaction.

Further, preserve the records pertaining to the identification of the customers and their addresses obtained while opening the account and during the course of business relationship, for at least eight years after the business relationship is ended.

The Bank is also required to maintain the records for a longer duration in case there is a dispute and matter is pending in any Court/Enforcement Agencies etc.

Notwithstanding anything, Regulators/Courts may, by an order in writing, direct any banking company to preserve any of the books, accounts or other documents, for a period specified for their preservation.

In case of e-record, the Bank has well defined procedures for the process of sanitization, to expunge data from storage media for destruction.

Bank has well defined procedures and standards for handling data security.

Place of data processing 

The Data is processed at the bank’s Data center and in any other places where the parties involved with the processing are located.

Retention time 

The Data is kept for the time necessary to provide the mobile banking service, as requested by the User.

Legal action 

The User's Personal Data may be used for legal purposes by the bank, in Court or in the stages leading to possible legal action arising from improper use of this application or the related services. The User is aware of the fact that the Data Controller may be required to reveal personal data upon request of public authorities.

Additional information about User's Personal Data 

Additional information about User's Personal Data: In addition to the information contained in this privacy policy, this Application may provide the User with additional information concerning particular services or the collection and processing of Personal Data upon request.

System Logs and Maintenance 

For operation and maintenance purposes, this Application and any third party services may collect files that record interaction with this Application (System Logs).

Information not contained in this policy 

More details concerning the collection or processing of Personal Data may be requested from the bank at any time. Please see the contact information at the beginning of this document.

The rights of Users 

Users have the right, at any time, to know whether their Personal Data has been stored and can consult the bank to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the bank at the contact information set out above. This Application does not support “Do Not Track” requests. To determine whether any of the third party services it uses honor the “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy 

The bank reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Definitions and legal references

Personal Data (or Data)

Any information regarding a natural person, a legal person, an institution or an association, which is, or can be, identified, even indirectly, by reference to any other information, including a personal identification number.

Usage Data 

Information collected automatically from this Application (or third party services employed in this Application), which can include: the mobile number and SIM serial number of the Users who use this Application, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

User

The individual (registered customer) using this Application, which must coincide with or be authorized by the bank Subject, to whom the Personal Data refer.

Data Subject

The legal or natural person to whom the Personal Data refers to Data Processor (or Data Supervisor) The natural person, legal person, public administration or any other body, association or organization authorized by the bank to process the Personal Data in compliance with this privacy policy.

Bank (or Owner)

 The Nainital Bank Ltd is the Owner of this Application.

This Application

This Application: The hardware or software tool by which the Personal Data of the User is collected.

Cookie: Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory. This service does not use these “cookies” explicitly. However, the app may use third party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Contact Information: In order to address to any feedback, discrepancies or grievance related to the personal information residing with the Bank, the customer may visit:

Website: www.nainitalbank.co.in

Contact us @ 1800 180 4031

Notice of Change: The Bank may, from time to time, change this policy. The effective date of this policy, as stated below, indicates the last time this Policy was revised or materially changed.

Effective Date: 26-05-2025