Privacy Policy

WE CARE ABOUT YOUR PRIVACY

Access Bank (Zambia) Limited respects your privacy and is committed to protecting your personal data in accordance with The Data Protection ACT No.3 of 2021 (DPA) and the EU General Data Protection Regulation (GDPR).

As a valued customer or individual using any of our platforms, attending our events or visiting our offices (data subject), we remain committed to safeguarding your information with the utmost diligence. You have the right to make decisions regarding the sharing of your personal information. We encourage you to make informed choices that allow us to offer you high-quality products and services tailored to meet your financial needs.

Our Privacy Policy seeks to provide you with information about how Access Bank Zambia Limited processes your personal information (including the collection, usage, storage, retention, and security of your Personal Data). 

What constitutes consent?

You consent to our use of your personal information when you (voluntarily) provide us with it to access any of our products online or in any of our banking outlets. Your consent is confirmed when you sign forms or documents enabling us to provide certain services to you, or when you accept the terms and conditions on our online platforms.

Security of personal information

Safeguarding your personal information is our main concern. We maintain physical, electronic and procedural safeguards that comply with applicable laws to secure your information from unauthorized access and use, accidental or unlawful alteration and destruction, and other unlawful or unauthorized forms of processing. We engage in the continuous training of our employees in the proper management of personal information. When we use other companies to provide services, we require them to protect the confidentiality of the personal information they receive.

At Access Bank (Zambia), we take data protection very seriously and we provide our customers with all necessary data security to protect such personal information from unauthorized access. We require any third parties who carry out any work on our behalf to comply with appropriate compliance standards to protect your information. We are pleased to announce that we comply with global best practices and other relevant legislation.

The information we collect.

We currently collect and process personal information necessary to open a bank account and render any other banking services as we engage in our normal course of business. This includes the following:

• Personal details such as name, date of birth, family details, gender, ID details, Taxpayer Identification Number (TPIN), Social Security Number (SSN), contact information, online identifiers, passport pictures and any other similar information.
• Biometric information comprising of your fingerprints and facial recognition.
• Location and contact data such as postal address, residential address, digital address, email address and telephone numbers.
• Financial data such as bank account details, card payment details and other electronic or non-electronic payment details.
• Transaction data such as details about payments to and from you and other details of products and services you have acquired from us.
• Online identifiers such as internet protocol (IP) address, your login identity data, browser type and version, and information about how you use our website, products, and services.
• Information for regulatory compliance and monitoring purposes such as nationality, country of residence, source of funds, details of the origin of your wealth and other documents required for anti-money laundering, combatting the financing of terrorism, and proliferation of weapons for mass destruction which may be necessary to enable us to comply with applicable regulatory reporting requirements.
• Video recordings (CCTV footage).
• The Bank may also obtain your personal data from third parties depending on the products and services we provide to you. This will include trade or transaction counterparts, credit reference agencies, public registers (such as beneficial ownership registers), financial crime screening databases, fraud prevention agencies, and persons or entities instructed by you to provide us with your personal data.

What we use your Personal Data For

Access Bank (Zambia) will always process your personal data for a specific purpose and process only the personal data relevant to achieving that purpose. Depending on our relationship with you and the products and services that we provide to you, we may process your personal data for the following compatible purposes:

• Account opening.
• Providing products and services including identity verification, transaction processing, cards issuance and keeping adequate records.
• For communication purposes through various mediums such as in person, via phone, SMS, email, and managing any customer complaints.
• Managing our customer and related parties’ relationships including compiling internal reports, managing clients’ files, and conducting risk assessments.
• Carrying out operational and administrative functions including the processing of payments, and access management.
• To study how our customers use our products and services, testing new products and managing our brand.
• When you visit our branches, we use CCTV cameras for security reasons and record keeping purposes.
• For direct marketing of products and services that we think may be of interest to you, our client or prospective client.
• To meet the Bank`s regulatory obligations. This includes compliance checks, transactions monitoring and reporting, making disclosures to, and complying with requests from public authorities, regulators, tax authorities, governmental bodies, or law enforcement agencies, investigating and preventing fraud.
• To administer and protect our business and our website, ensure business continuity, manage complaints, undertake remediation activities, and resolve queries (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
• Allowing access to our website and other banking platforms.
• Conduct background checks and maintenance of employee database.

Basis for Processing Information

We shall process your information on the following basis:

• To enter and perform our contractual obligations.
• To comply with our legal obligations.
• For the performance of a statutory duty.
• For the legitimate interest of Access Bank Zambia and our Data Subjects.
• To satisfy a public interest.
• Prior consent has been obtained from data subjects for the use and processing of personal data.

Information We Share

We may share information with other people for any of the reasons provided above. The category of persons who may be entitled to this information may include:

• Any employee of Access Bank Zambia who may need the information to administer a contract or service we are providing to you.
• Auditors, third-party service providers (local and foreign), agents or independent contractors who assist the Bank to provide customers with a product or service.
• Third parties with accruing legal obligations e.g., trustees and executors, guarantors, anyone holding a power of attorney to operate an account on your behalf and joint account holders.
• Correspondent Banks, Counterparties and Collaborators to process a transaction or service.
• A merchant or a member of a card association where the disclosure is in connection with usage of a card (including Debit card, Credit card and Prepaid Cards).
• Any person authorized to operate your account and to act on your behalf in giving instructions.
• Any person to whom disclosure is permitted or required by law
• Any court of competent jurisdiction, regulator, law enforcement agency, tax authority, or an authority investigating an offence or their agents.
• Any debt collection agency, credit bureau or credit reference agency.
• Money laundering and Terrorism financing related checks, for fraud prevention and detection.

Data Subject Rights

You are entitled to the following rights as a data subject:

• Right to be informed
• Right of access to personal data
• Right to restrict processing
• Right to object
• Right to give and withdraw consent.
• Right to amend (rectification)
• Right to erasure/deletion
• Right to data portability
• Freedom from automated decision-making
• Right to lodge complaints

Cookies Policy

Cookies are pieces of information that our website and applications transfer to your computer to enable our systems to recognize your browser and tailor the information on our website to your interests.

Access Bank (Zambia) Limited and our service providers may use cookies to collect information about you so we can provide the experiences you request, recognize your visit, track your interactions, and improve experience with all customers.

Cookies may also be used on our platforms to retain information on the last activities of the user.

This information continues to be accessible by the user the next time he/she visits the website. The web browser quickly uses it to remember the last activity of the user on the website and allows him/her to continue from there without reloading the entire website at every visit. This helps greatly to boost the user's experience on the website in terms of the website's speed over the browser.

Although most browsers automatically accept cookies, you can amend your browser settings to disable cookies. This may however prevent you from fully experiencing the website as it was intended.

The cookies are not stored in a permanent storage, like a database, and so are deleted once the browsers are closed, or can be singled out for deletion by clearing out the browser's data.

How long we keep your information.

Access Bank (Zambia) Limited shall keep your information for as long as it is necessary and relevant to the purposes set out in this Privacy Policy unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we may either delete or anonymize such information, or if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your information and isolate it from further processing.

How we keep your information secure

We have put in place appropriate technical, organizational, and physical security measures to prevent your Personal Data from being lost, altered, used, or accessed in an unauthorized way. In addition, the Bank limits access to your Personal Data to only employees, agents, contractors and other third parties who have a business need to know and we require them to protect the confidentiality of the personal information they receive.

Available remedies

In the event of a breach of your data protection rights, we will ensure that any damage is addressed promptly. However, you have the right to report the incident to the Data Protection Commission (DPC), info@dataprotection.gov.zm. You can email our Data Protection Officer via email ZambiaInformationSecurity@accessbankplc.com or seek other legal remedies. 

Time Frame for Remedy

At Access Bank (Zambia) Limited, we are committed to promptly addressing any violations of data subjects' rights. Upon receiving a complaint or becoming aware of a breach, we will acknowledge the issue within 72 hours. We aim to fully resolve all issues within one (1) month. In cases where more time is required due to complexity, we will inform the data subject of the extension and the reasons for it within the initial one-month period.

Automated decision making

We do not engage in automated decision-making as all our processes have human intervention.

How to contact us

If you have any questions about this Privacy Policy, our privacy practices, the data we hold regarding you, or would like to exercise any of your rights to your Personal Data, please do not hesitate to contact us at: Access Bank Zambia Head Office, Corner of Church Road and Nasser Road Ridgeway, Lusaka.

Changes to this Privacy Policy

We may modify or update our Privacy Policy from time to time and ask that you regularly check this website to make sure you are familiar with the most recent versions.

By enrolling for our services or entering any contractual arrangements with us, you confirm that you have read, understood, and accepted to be bound by the terms and conditions of this Privacy Policy.