banner-logo

SmartWealth Other Products consent

 

NOTICE AND REQUEST FOR CONSENT

HDFC Bank Limited ("Bank" or "us" or "we") respects your privacy and is committed to protecting your personal data.

This notice and request for consent ("Notice") will inform you about how the Bank proposes to collect, handle, store, use, disclose and transfer ("Process") your personal data in connection with ("Other Products").

 

1. Other Products – Other Product(s)” shall mean all products, services and/ or businesses:
 

a. Of the Bank e.g. Current Bank Account, Saving Bank Account, Cards, Deposits, Forex, Investments, Loans, Trading Accounts, Wallet Services etc.
 

b. Of subsidiaries, affiliates, associates or group companies of Bank (collectively, "Affiliates");
 

c. Of entities which the Bank or Affiliates offer, distribute, resell, refer or where the Bank or Affiliates act as agent

 

2. Categories of Personal Data: We may Process the following types of your personal data:

 

Categories

Data Elements

Personal Identification Details

Name, signatures, date of birth, copy of identity and residence identifiers such as Aadhaar or other officially valid documents, Permanent Account Number, marital status, citizenship, residential status, etc.

 

Contact Details

Phone number, Email address, Address

 

Financial Information

Income details, employment or occupational information, transactional information

 

Biometric Information

Fingerprint (if you choose to enable it)

Related / Associated Individual Information

Nominee details, family details, associate details, employer details, authorized signatories and other authorized representatives in case of non-individual applicants, etc.

 

Online Activity Information

 

Location, IP address, device and operating system, unique identifiers such as International Mobile Equipment Identity (IMEI) number, technical usage data, contact lists, passwords or PINs in encrypted form, etc.

 

Communication Data

Records of our correspondence with you, your interaction with the Bank ( including chats, emails, telephone conversations, grievances) etc.

 

Derivative Data

Credit scores, credit information, behavioural projections, analytical results, etc.

 


Note
: We may collect your personal data directly from you, from our affiliates or third parties such as our vendors, credit information companies, regulators or governmental authorities who may have your personal data, or from publicly accessible sources.
 

3. Purposes of Processing of Personal Data: We may Process your personal data for the following purposes:

 

Purpose

Details & Use Cases

Relevant products and services communication

  • Processing of personal data to identify and communicate information about products and services of the Bank for which the you may be eligible, based on your profile and preferences, and only where explicit consent has been provided.

Compliance with legal and regulatory requirements

  • Reporting to regulatory authorities, including the Reserve Bank of India (RBI).
  • Conducting anti-money laundering (AML) checks and fraud detection.
  • Credit reporting to credit information companies.
  • Undertaking data protection impact assessments and data audits.

Eligibility Assessment

  • Assess eligibility for a product.

 

Enforcement of rights

  • To initiate legal or regulatory proceedings for enforcement of our rights or defending your claims.

 

Customer Support

  • To provide you with customer service and to communicate with you through emails, chats, telephone calls and other means.

 

Fraud Detection

  • To take actions necessary for prevention and detection of crime and fraud, portfolio sensitivity analysis, etc

 

 

Note: We may undertake the abovementioned activities either ourselves or through our affiliates or third parties such as vendors, service providers, other regulated entities such as credit information companies and KYC registration and authentication service agencies, etc., in accordance with our internal policies and applicable law.

 

4. Third-Party Sharing: We may disclose or transfer your personal data to the following entities for the following purposes:

 

Entity

Purpose

Regulatory and Statutory Authorities (Entities: Reserve Bank of India (RBI), Income Tax Department, and other government agencies)

  • Compliance with legal and regulatory obligations.
  • Reporting under applicable banking and financial laws (e.g., credit exposure, suspicious transactions).
  • Facilitating statutory audits and supervisory reviews.

Credit Bureaus and Rating Agencies (CIBIL, Experian, Equifax, CRIF Highmark, and similar credit reporting agencies)

  • Assessment of creditworthiness and risk profiling.
  • Reporting of loan performance and repayment history.

Service Providers and Technology Partners (IT service providers, payment gateways, and cloud storage

  • Secure storage and management of personal data.
  • Enabling Requested Product processing and payment services.

Legal and Advisory Professionals (Law firms, auditors, and consultants)

  • Addressing legal disputes or compliance-related issues.
  • Audit, risk management, and advisory services related to Requested Product.

Fraud Prevention Agencies (Fraud detection systems and risk assessment service providers)

  • Prevention of identity theft, fraud, or unauthorized transactions

Courts and Dispute Resolution Forums

  • Compliance with legal notices or court orders.
  • Resolution of disputes arising from the Request Product.

 

Note: In certain cases, these entities, which receive your personal data from us may also be legally required to give you a notice regarding their Processing of your personal data and request for your consent before they Process the same. We encourage you to read their privacy notices and contact them if you have any questions regarding how they Process your personal data.

 

5. Your Rights

 

Under the DPDPA, you have the right to:

 

a. Access, update and review your personal data.

 

b. Correct inaccuracies in your personal data.

 

c. Request erasure of your personal data.

 

d. Nominate another individual who can exercise your rights in case of your incapacity.

 

e. Raise grievances.

 

To exercise your rights, please contact us at [privacy@hdfc.bank.in].

 

6. Consent Withdrawal:

 

You have the right to withdraw your consent at any time by accessing Consent Connect.

 

Please note that our Processing of your personal data before you withdraw your consent will not be impacted. You should also be aware that if you withdraw your consent for us to Process your personal data for some of the purposes we have mentioned in this Privacy Notice, we may not be able to continue offering you the Requested Product. This could mean that the terms and conditions applicable to discontinuation or closure of your Requested Product will become applicable. Specifically, such withdrawal of your consent and consequent discontinuation/ closure of the Requested Product could also lead to consequent obligations/ charges as are applicable as per the terms and conditions of such Requested Product or loss of benefits. Illustratively, in the context of a savings account, this may include cessation of any standing instructions and discontinuation of linked services such as debit card, UPI, net banking, and EMI payments.

Accordingly, we encourage you to review the terms and conditions applicable to the Requested Product to understand the consequences of withdrawal of your consent in respect of Processing of your personal data and the resultant discontinuation / closure of the same.

.

7. Grievances: If you believe that you have any concerns regarding how we Process your personal data, you have the right to let us know your grievances. Please contact us at the details provided under 'Contact Information' below to register your concerns.

 

Contact Information:

 

Name of DPO: Rahul Rajendra Prasad

Contact details: Privacy@hdfc.bank.in

 

If you are not satisfied with the resolution of your grievance, you may make a complaint to the Data Protection Board of India.

 

8. By providing your consent by ticking the checkbox, you acknowledge and agree to the following:

 

a. That you have read and understood the contents of this Notice and consent to the Processing of your personal data as described here.

b. That you give your consent voluntarily, without any coercion or influence from the Bank or any other person.

c. That you will provide and ensure that the Bank maintains accurate, updated, complete and consistent personal data.

d. The Bank may Process your personal data for certain other purposes without your consent, where the law allows us to do so such as enforcement of a legal claim against you or for the Bank to make regulatory disclosures.

 

For more details about how we Process your personal data for various purposes, your rights under the law, and our privacy practices, please read our Privacy Policy

You can read this consent statement in your preferred local language by clicking here.