Privacy notice

What we collect

Identity and contact details, date of birth, address, occupation, and the identification documents we are required to see.

Transaction data: the payments you make and receive, their amounts, dates and counterparties.

Technical data: the IP address and browser your sessions are opened from, kept so that we can show you where your account has been accessed and investigate anything unexpected.

Why we hold it

To operate your accounts, which is the performance of our contract with you.

To meet legal obligations on identity verification, record-keeping and the prevention of financial crime. These obligations override your preferences, including a request for erasure.

To protect the bank and its clients from fraud, which is our legitimate interest.

How long we keep it

For the life of the relationship and for the retention period required of us afterwards — typically ten years from the end of the relationship. We do not keep personal data indefinitely because it might one day be useful.

Who we share it with

Payment networks and correspondent banks, to the extent needed to execute an instruction you gave us.

Regulators and law enforcement, where we are legally required to report.

We do not sell personal data, and we do not share it for anyone else's marketing.

Your rights

You may ask for a copy of the data we hold about you, ask us to correct it, or object to processing that relies on our legitimate interests. Where a legal obligation requires us to keep something, we will say so rather than quietly decline.

Requests go to info@cesis.example.