Privacy Policy

This Privacy Policy applies to all beneficiaries who are account holders of Bhutan National Bank Ltd. and other banks and who receive funds credited into their bank accounts through the remittance service powered by IPAY – Transcash International Pty Ltd., Australia, a remittance service provider registered with Austrac. For senders / clients in Australia using the BNB Remit App or Website, the applicable privacy obligations are governed under IPAY's Privacy Policy in accordance with AUSTRAC & ASIC requirements.

The Privacy policy of Bhutan National Bank Ltd. (BNBL) describes what, why, and how we collect, process, share, and store personal information of our customers. In the course of doing business with BNBL (Registration Number L19960902BHU030), you will be sharing personal information including but not limited to your name, address, bank/credit card information, telephone number, passport and citizenship identification number, and email address. This personal information is gathered for various purposes, such as account opening, identity verification, customer response, and product or service updates. The Bank gathers personal information that you voluntarily provide us via email, online, or other direct contact through forms. The term "Personal Information" in this Privacy Policy means any information from which your identity is apparent or can be reasonably ascertained.

How We Use Your Personal Information and Protect Your Personal Information?

BNBL employs strict measures to verify your identity to avoid the possibility of misuse of your identity and will only use your Personal Information for the first transaction that you have entered into with BNBL. BNBL will retain your Personal Information for use in any further transactions with BNBL but will not under any circumstances disclose your Personal Information to any other party unless with your written consent or BNBL is required by law to do so;

BNBL takes steps to protect personal information against unauthorized disclosure. The Personal Information shared by you with BNBL will be encrypted as soon as it is entered into the BNBL system to protect you from loss, theft, misuse, alteration or deletion.

The bank protects personal data by preventing unauthorized access, but cannot guarantee data security or website entry.

Only BNB employees who are required to have or know your personal information for the purposes of effecting the transaction or transactions requested by you will have the use of your Personal Information;

If you are an account holder in Bhutan National Bank, BNB may use your Personal Information to share with you new offers that might be beneficial to you, however, you can choose at any time to restrict BNB's promotion you of its products by opting out.

BNB is always upgrading its system to avoid the loss or theft of customers' Personal Information however BNB provides no warranty to customers in the event of a very sophisticated attack on the BNB system causing loss or theft of any of our customers' Personal Information.

Customers should use secure online platforms, passwords, and secure browsers, and report any unauthorized use to the bank immediately.

The policy and website use are governed by laws Royal Government of Bhutan and bank regulations, with the bank acting as a Data Controller, ensuring consent before access.

BNB upholds privacy by providing various rights such as access, consent withdrawal, objecting to data processing, rectification, erasure, data portability, processing restriction, automated decision-making protection, and complaint lodgment. BNB securely stores personal information for at least 10 years, with the information destroyed after. We do not share, sell, or rent customer information, but may store it with third parties. Third parties must respect data security and treat it lawfully.

How can you contact us about Privacy?

You can send an email at  dpo@bnb.bt to seek more information about anything contained in this policy, or to request a printed copy of this policy

About this policy

This policy is effective as of 1 March 2024. We will update this policy when our information handling practices change, and any amendments will apply to the information we hold at the time of the update. You are encouraged to check our website from time to time to view our current policy or contact us for a printed copy.