Privacy Statement

Nations Trust Bank, American Express Privacy Policy Statement

The privacy of individuals, including our customers and clients, is of utmost importance to Nations Trust Bank PLC. This includes information or opinions about you that we collect and record which reasonably could be used to identify you.

When dealing with our customers and clients we generally collect your name, address, telephone number and other contact details. Depending on the type of account or facility you apply for or have, we may also collect and update personal information necessary to set up and maintain the account or investment, such as date of birth, employment details, bank account details, tax file number, basic financial information, and other information about your credit worthiness and credit history. We also record information about the status of your account and the transactions you make or wish to make on your account. We generally do not collect sensitive information (such as relating to ethnic origin, religious or philosophical beliefs, membership of a political or trade association, sexual preferences or health), and would not do so without your consent.

Generally, we collect, update and use personal information about you to carry on our business, including

• To process your application for account-based services or facilities (including to check your identity and obtain credit reports and assess your credit worthiness) and to establish and manage your account or facility, and carry out transactions you wish to make
• To provide requested services to you, and bill you for our services and collect overdue Payments
• For our research and development of new products and services
• For training, quality control and verification purposes (including monitoring and recording your telephone conversations with us from time to time)
• To communicate our, a related company’s or a third party’s marketing offers to you - when making the offer we will let you know how you may stop receiving any further marketing offers. Where another organisation outside of Nations Trust Bank PLC and its related companies is involved in the offer, we do not give information about you to that organisation To meet our legal obligations.

Generally, we collect personal information directly from you, such as when you apply for or request a product or service, when you participate in our call centre marketing campaigns, competitions or surveys, in response to our advertising or direct mail or when you have other dealings with us. We may collect that information over the telephone or internet, in person (when you visit us at an Nations Trust Bank PLC office or branch or through an agent) and when you write to us.

We may also collect personal information through third parties such as:

• Credit reporting agencies, when you apply for an American Express Card or other credit facility
• A business that provides commercial credit worthiness information
• Merchants, when you request or make purchases using a Nations Trust Bank PLC Card
• Referees (if you give us the name of someone who can give a reference about you)
• Publicly available sources of information.

We store personal information in a combination of secure computer storage facilities and paper based files and other records. We have taken a number of steps to protect the personal information we hold from misuse, loss and unauthorised access, modification or disclosure. We use generally accepted technology and security so that we are satisfied that your information is transmitted safely to us through the internet or other electronic means. We will take reasonable steps to securely destroy or permanently de-identify personal information when we no longer need it.

Generally, we may disclose personal information about you in the following circumstances

• Where we have contracted an external organisation to provide us with support services. This may include but is not limited to processing applications or orders, marketing support, deliveries, market research and debt collection. These service providers may be within or outside Sri Lanka
• To comply with our legal obligations
• Where we suspect that unlawful activity has been or may be engaged in and the personal information is a necessary part of our investigation or reporting of the matter. We also may disclose personal information about you in the following circumstances
• Referees (if you give us the name of someone who can give a reference about you)
• Publicly available sources of information.
• To credit reporting agencies in connection with us providing credit to you or recovering from you amounts that you owe under any contract you have with us. We impose strict requirements of security and confidentiality on all third parties as to how they handle personal information. We provide our outside contractors only with information they need to perform their services - they are not permitted to use the information for any purpose except to provide the service to us.
• Where organisations cooperate with us in offering products and services such as co-brand partners
• To meet your request for services such as American Express Travel Services (including emergency services), foreign exchange & merchant services
• To anyone else you authorise us to disclose information to, from time to time.

We will take reasonable steps to make sure that the personal information we collect, use or disclose is accurate, complete and up-to-date. If your personal details change, such as your telephone number or billing address, please contact us so that we can continue to provide you with our products and services.