Invest with SmartWealth

New age investment with HDFC bank

Consent

HDFC Bank Limited ("Bank" or "us" or "we") respects your privacy and is committed to protecting your personal data.

This notice and request for consent ("Notice") will inform you about how the Bank proposes to collect, handle, store, use, disclose and transfer ("Process") your personal data in connection with the [Wealth Management] and related services you request from the Bank ("Requested Product").

1 . Categories of Personal Data: We may Process the following types of your personal data:

Categories	Data Elements
Personal Identification Details	Name, physical address, mobile number, email address, signatures, date of birth, copy of identity and residence identifiers such as Aadhaar or other officially valid documents, Permanent Account Number, marital status, citizenship, residential status, biometric information etc.
Contact Details	Phone number, Email address, Address.
Investment & Portfolio Data	Holdings, transaction history, investment preferences
Financial Information and related information	Income details, employment or occupational information, bank account details, investment and transaction history, risk profile, financial knowledge and experience, nature and volume of anticipated business dealings, income tax returns, information collected when you undertake transactions including when you send or receive payments, etc.
Related / Associated Individual Information	Employer details , family details , authorized signatories and other authorized representatives’ details in case of non-individual applicants, etc.
Online Activity Information	Location, IP address, device and operating system, unique identifiers such as International Mobile Equipment Identity (IMEI) number, technical usage data, contact lists, fingerprint (if you choose to enable it), passwords or PINs in encrypted form, etc.
Communication Data	Records of our correspondence with you, your interaction with the Bank ( including chats, emails, telephone conversations, grievances) etc.
Derivative Data	Credit scores, credit information, behavioural projections, analytical results, etc.

Note: We may collect your personal data directly from you, from our affiliates or third parties such as our vendors credit information companies, regulators or governmental authorities who may have your personal data, or from publicly accessible sources.

2. Purposes of Processing of Personal Data: We Process your personal data for the following purposes:

Purpose	Details & Use Cases
Verification and authentication	Verifying your identity, address, and identity details. Performing e-KYC checks in compliance with regulatory requirements. Verifying your employment status, income, and job stability to assess repayment capacity. Verifying the authenticity of employment data helps prevent fraudulent applications.
Compliance with legal and regulatory requirements	Reporting to regulatory authorities, including the Reserve Bank of India (RBI). Conducting anti-money laundering (AML) checks and fraud detection. Credit reporting to credit information companies. Undertaking data protection impact assessments and data audits.
Provision of Requested Product	To provide you with wealth management and investment services, including assessing your suitability and risk profile, offering investment-related services, executing transactions, servicing your portfolio, complying with regulatory requirements, and communicating with you about your investments.
Enforcement of rights	To initiate legal or regulatory proceedings for enforcement of our rights or defending your claims.
Customer Support	To provide you with customer service and to communicate with you through emails, chats, telephone calls and other means.
Fraud Detection	To take actions necessary for prevention and detection of crime and fraud, portfolio sensitivity analysis, etc

Note: We may undertake the abovementioned activities either ourselves or through our affiliates or third parties such as vendors, service providers, other regulated entities such as credit information companies and KYC registration and authentication service agencies, etc., in accordance with our internal policies and applicable law.

3 Data Sharing: We may disclose and transfer your personal data to the following entities for the following purposes:

Entity	Purpose
Regulatory and Statutory Authorities (Entities: Reserve Bank of India (RBI), Income Tax Department, and other government agencies)	Compliance with legal and regulatory obligations. Reporting under applicable banking and financial laws (e.g., credit exposure, suspicious transactions). Facilitating statutory audits and supervisory reviews.
Asset Management Companies / Issuers/ Depositories / Exchanges	Transaction processing, Settlement & reporting
Service Providers and Technology Partners (IT service providers, payment gateways, and cloud storage	Secure storage and management of personal data. Enabling Requested Product processing and payment services.
Legal and Advisory Professionals (Law firms, auditors, and consultants)	Addressing legal disputes or compliance-related issues. Audit, risk management, and advisory services related to Requested Product.
Fraud Prevention Agencies (Fraud detection systems and risk assessment service providers)	Prevention of identity theft, fraud, or unauthorized transactions
Courts and Dispute Resolution Forums	Compliance with legal notices or court orders. Resolution of disputes arising from the Request Product.
Payment aggregators, payment gateways, payment systems	Processing transactions initiated by you.

Note: In certain cases, these entities, which receive your personal data from us may also be legally required to give you a notice regarding their Processing of your personal data and request for your consent before they Process the same. We encourage you to read their privacy notices and contact them if you have any questions regarding how they Process your personal data.

4 Your Rights

Under the DPDPA, you have the right to:

a. Access, update and review your personal data.

b. Correct inaccuracies in your personal data.

c. Request erasure of your personal data.

d. Nominate another individual who can exercise your rights in case of your incapacity.

e. Raise grievances.

To exercise your rights, please contact us at [privacy@hdfc.bank.in].

5. Consent Withdrawal:

You have the right to withdraw your consent at any time by accessing Consent Connect.

Please note that our Processing of your personal data before you withdraw your consent will not be impacted. You should also be aware that if you withdraw your consent for us to Process your personal data for some of the purposes we have mentioned in this Privacy Notice, we may not be able to continue offering you the Requested Product. This could mean that the terms and conditions applicable to discontinuation or closure of your Requested Product will become applicable. Specifically, such withdrawal of your consent and consequent discontinuation/ closure of the Requested Product could also lead to consequent obligations/ charges as are applicable as per the terms and conditions of such Requested Product or loss of benefits. Illustratively, in the context of a savings account, this may include cessation of any standing instructions and discontinuation of linked services such as debit card, UPI, net banking, and EMI payments.

Accordingly, we encourage you to review the terms and conditions applicable to the Requested Product to understand the consequences of withdrawal of your consent in respect of Processing of your personal data and the resultant discontinuation / closure of the same.

6. Grievances: If you believe that you have any concerns regarding how we Process your personal data, you have the right to let us know your grievances. Please contact us at the details provided under 'Contact Information' below to register your concerns.

Contact Information:

Name of DPO: Rahul Rajendra Prasad

Contact details: Privacy@hdfc.bank.in

If you are not satisfied with the resolution of your grievance, you may make a complaint to the Data Protection Board of India.

7. By providing your consent by ticking the checkbox, you acknowledge and agree to the following:

(a) That you have read and understood the contents of this Notice and consent to the Processing of your personal data as described here.

(b) That you give your consent voluntarily, without any coercion or influence from the Bank or any other person.

(d) The Bank may Process your personal data for certain other purposes without your consent, where the law allows us to do so such as enforcement of a legal claim against you or for the Bank to make regulatory disclosures.

For more details about how we Process your personal data for various purposes, your rights under the law, and our privacy practices, please read our Privacy Policy.

You can read this consent statement in your preferred local language by clicking here.