Mobile Banking Application Privacy Policy

Commercial Bank of Ceylon PLC (“The Bank” or “We”) respects your privacy and is committed to protecting the personal data that you share with us. This Privacy Policy is intended to explain the policies and practices regarding the use and disclosure of your personal data by the Bank.

We collect personal data about you when you use our products or services, or deal with us in some way. Personal data comprises all the details the Bank collects and/ or holds about you, directly or indirectly, your transactions, financial information, geographical location, device information, interactions and dealings with the Bank, including information received from third parties and information collected through use of our website and any other electronic banking channels of the Bank as well as through traditional banking methods.

By using our products and services, you consent to the collection and use of your personal data by the Bank.



Why we collect your data

We collect your personal data to carry out and administer our services to you and in an effort to improve your customer experience. Without such data the Bank may be unable to establish or continue banking facilities or provide banking services.

We may collect, use and exchange your personal data for purposes which include the following;

  • Identity verification, sanction screening and due diligence checks.
  • Processing of requests for banking products and services.
  • Establishment, continuation and management of banking relationships and accounts.
  • Operational and marketing purposes.
  • Prevention, detection, investigation and prosecution of crimes, frauds and other illegal activities
  • Improve our service to you and your experience with us.
  • Conduct research and surveys with the aim of improving our products and services.
  • Comply with Laws, and assist Government or Law Enforcement Agencies.


Disclosure of your personal data

Data held by the Bank relating to you will be kept confidential. However, the Bank may provide such data to the following parties for the purposes as mentioned above. These parties will include;

  • Any agent, contractor or third party service provider who provides administrative, telecommunications, computer, payment or securities clearing or other services to the Bank in connection with the operation of its business.
  • Any person under a duty of confidentiality to the Bank that has undertaken to keep such information confidential.
  • Any Regulatory Authority, Law Enforcement Authority or Judicial Courts.


Data Security

We will take all reasonable precautions at all times to protect your personal data which we hold from misuse, loss and unauthorised access, modification or disclosure. The Bank has in place standard technical and procedural security measures to provide a robust security environment, where the adequacy of these measures is reviewed regularly.



Changes to the Privacy Policy

The Bank reviews and updates this Privacy Policy from time to time as needed.



Third Party Content and Links to Third Party Content

Certain content provided through our electronic banking services may be hosted and served by third parties. In addition, these electronic banking services may link to third party web sites, apps or other content over which we have no control and which are governed by the privacy policies and business practices of those third parties. The Bank is not responsible for the privacy practices or business practices of such third parties.



Contact Us

If you have any questions or would like further information about our privacy policy and information handling practices, please contact us at info@combank.net.