Privacy Policy

Effective Date: 01 April, 2026

1. Introduction

   The Hindusthan Co-op. Bank Ltd. ("the Bank", "we", "us", or "our") is committed to protecting the privacy and confidentiality of all personal information collected from its customers, website visitors, and prospective applicants. This Privacy Policy explains how we collect, use, store, protect, and disclose your personal information in the course of providing banking and financial services through our branches, website, and digital platforms.

   By accessing our website or using any of our services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, we request that you discontinue use of our services and contact us at the details provided in Section 7.

2. Information We Collect & How We Use It

   We collect personal information that is necessary for the provision of banking services, compliance with regulatory obligations, and improvement of our products and platforms. The categories of information we collect include:

   • Personal Identification Information Full name, date of birth, gender, Aadhaar number, PAN card number, passport number, voter ID, and driving licence details — collected for KYC compliance as mandated by the Reserve Bank of India and applicable anti-money laundering regulations.
   • Contact Information Residential and correspondence address, mobile number, email address, and emergency contact details — collected for communication, service delivery, and account management purposes.
   • Financial Information Income details, bank account information, transaction history, loan repayment records, credit history, and investment details — collected for credit assessment, account management, and regulatory reporting.
   • Employment & Business Information Employer name, designation, business registration details, GST information, and financial statements — collected for loan eligibility assessment and risk evaluation.
   • Digital & Behavioural Information IP address, browser type, device information, pages visited, time spent on the website, and clickstream data — collected for website analytics, security monitoring, and service improvement.

   We use the information collected for the following purposes: account opening and KYC verification, loan processing and credit assessment, transaction processing and account management, regulatory compliance and audit requirements, fraud prevention and risk management, customer support and grievance resolution, and communication of product updates and service notifications.

3. Cookies & Tracking

   Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and improve service delivery. Cookies are small data files placed on your device when you visit our website.

   Types of Cookies We Use:

   • Strictly Necessary Cookies Essential for the functioning of our website. These cannot be disabled as they enable core features such as secure login, session management, and form submission.
   • Analytical Cookies Used to understand how visitors interact with our website, including pages visited, time spent, and navigation patterns. This data is used in aggregate form and does not identify individual users.
   • Functional Cookies Used to remember your preferences, such as language settings and previously entered information, to provide a more personalised browsing experience.

   You may disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some sections of our website. We do not use cookies to collect sensitive personal or financial information.

4. Data Security & Protection

   The Bank employs industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our data security measures include:

   • Encryption All sensitive data transmitted through our website and digital platforms is encrypted using Secure Socket Layer (SSL) technology and other industry-standard encryption protocols.
   • Access Controls Access to personal information is restricted to authorised personnel on a need-to-know basis. All employees handling personal data are bound by confidentiality obligations.
   • System Security Our digital infrastructure is protected by firewalls, intrusion detection systems, and regular security audits conducted in accordance with RBI cybersecurity guidelines.
   • Physical Security Physical records containing personal information are stored in secured premises with restricted access and are subject to the Bank's document retention and destruction policies.

   While we take all reasonable precautions to safeguard your data, no method of transmission over the internet or electronic storage is entirely secure. In the event of a data breach that affects your rights and interests, we will notify you and the relevant regulatory authorities in accordance with applicable law.

5. Your Rights & Choices

   As a customer or website visitor, you have the following rights with respect to your personal information:

   • Right to Access You may request a copy of the personal information we hold about you at any time by contacting our Grievance Officer at the details provided in Section 7.
   • Right to Correction If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction or updation of the same.
   • Right to Withdrawal of Consent Where processing of your personal data is based on your consent, you may withdraw that consent at any time. Please note that withdrawal of consent may affect our ability to provide certain services to you.
   • Right to Restriction You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to its use for a specific purpose.
   • Right to Grievance Redressal You have the right to raise a grievance regarding the handling of your personal data with our Grievance Officer, and to escalate the matter to the relevant regulatory authority if your grievance is not resolved to your satisfaction.

   To exercise any of the above rights, please submit a written request to our Grievance Officer. We will respond to all requests within 14 working days.

6. Data Retention Policy

   We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements.

   The retention periods applicable to different categories of data are as follows:

   • KYC & Account Documents Retained for a minimum of 5 years from the date of account closure, as required under the Prevention of Money Laundering Act (PMLA) and RBI KYC guidelines.
   • Loan & Credit Records Retained for a minimum of 8 years from the date of full and final loan repayment or closure of the credit facility.
   • Transaction Records Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable banking regulations.
   • Website & Digital Data Retained for a period of 6 months from the date of collection, unless required for longer periods for security or legal purposes.

   Upon expiry of the applicable retention period, personal information is securely destroyed or anonymised in accordance with the Bank's data disposal policy.

7. Grievance & Contact Information

   If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal information, please contact our designated Grievance Officer:

   • Grievance Officer Name: Jeevan Vilas Salunkhe
   • Designation: Nodal Officer
   • The Hindusthan Co-op. Bank Ltd.
   • Address: Horizon Tower, Behind Marathi Vidnyan Parishad, Opp. ATI, Chunabhatti, Mumbai - 400 022
   • Email: jeevansalunkhe@hindusthan.bank.in
   • Response Time: 14 working days
   • Working Hours: Monday to Saturday, 10:00 AM to 5:30 PM

   We are committed to resolving all privacy-related grievances within 14 working days of receipt. If you are not satisfied with the resolution provided, you may escalate your complaint to the Reserve Bank of India's Banking Ombudsman or the relevant data protection authority.

8. Changes to This Privacy Policy

   The Bank reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our internal practices. All changes will be effective from the date of publication on our website.

   We will notify you of any material changes to this Privacy Policy through a prominent notice on our website and, where appropriate, through direct communication via your registered email address or mobile number. Your continued use of our website or services after the effective date of any such changes will constitute your acceptance of the updated Privacy Policy.

   We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.