HNB Investment Banking – Privacy Policy

 

1. Introduction

HNB Investment Banking (“we”, “us”, “our”) is committed to safeguarding your personal data in accordance with the Personal Data Protection Act No. 09 of 2022. This Privacy Policy explains how HNB Investment Banking collects, uses, protects, shares, and transfers personal data.

 

2. Contact Details

• Address: 53, Srimath Anagarika Dharmapala Mawatha, Colombo 00300
• Email: info@hnbib.lk
• Hotline: +94 11 220 6216

 

3. Data We Collect

We collect (with your consent or where permitted by law):

• Identity & official IDs (name, DOB, gender, nationality, ID/passport numbers)
• Contact details (residential/business address, phone, email)
• Financial records (investment history, transaction data, account details)
• Communication metadata (call recordings, emails, web‑chat logs, IP addresses, device info)
• Sensitive data (e.g., biometric, health info—only where necessary) (hnbbanks.com, hnb.net)

 

4. How We Obtain Data

• Directly from you (applications, account setup, communications)
• From third parties (regulators, credit bureaus, advisors)
• Within the HNB Group and from public or legally‑permitted sources (net)

 

5. Use of Data

We use your data to:

• Deliver investment banking services (trading, advisory, KYC, etc.)
• Comply with legal duties (AML, regulatory/tax reporting)
• Enhance service quality, client relations, and digital experience
• Perform analytics, risk monitoring, and data‑security efforts
• Send optional marketing or event information (with your consent)
• Support automated processes where allowed (net, wsj.com, theasianbanker.com, ebanking.hnb.lk)

 

6. Legal Basis for Processing

Processing is lawful when:

• Required to fulfill contractual obligations
• Obligatory under law (e.g., AML/tax)
• Serving legitimate interests (fraud prevention, service enhancement)
• Based on your explicit consent

 

7. Data Sharing

We may share your personal data with:

• Entities within the HNB Group under strict governance (net)
• Service providers (e.g., custodians, IT vendors, auditors)
• Regulators, authorities, credit bureaus as required
• Law enforcement in line with applicable law

 

8. International Transfers

Where necessary, we may transfer data outside Sri Lanka, ensuring adequate safeguards, as mandated by applicable law (hnb.net)

 

9. Data Retention

• Data is held during your engagement and thereafter according to regulatory or business needs
• Retention durations vary by data type and legal requirements
• After expiry, personal data is securely deleted or anonymized (net)

 

10. Security Measures

We protect your data using robust safeguards including encryption, firewalls, intrusion detection, access controls, audits, and staff training

 

11. Cookies & Online Tracking

Our website uses cookies and tracking tools for security, analytics, and personalization. Refer to our Cookie Policy for details

 

12. Your Rights

Depending on applicable law, you can:

• Access, correct, update, or restrict your personal data
• Withdraw consent or object to processing
• Request data deletion (where permitted)
• Appeal automated decisions
• File complaints with the Data Protection Authority (hnbbanks.com, hnb.net)

 

13. Policy Updates

We may revise this Privacy Policy. Please review it periodically—changes apply upon posting.

 

14. Contact Information

To exercise your rights or with questions, please contact:

Data Protection Officer / Customer Service
HNB Investment Banking
No. 53, Srimath Anagarika Dharmapala Mawatha, Colombo 00300
Hotline: +94 11 220 6216
Email: info@hnbib.lk