Weyay Bank by National Bank of Kuwait S.A.K.P. (hereafter referred to as "we" or “our” or "us" or “Weyay”) respects your right to privacy. In this Notice, “You” refers to data subject (customers, employees, website/ app visitors or contingent workers) whose personal data is processed by Weyay.

This Privacy Notice explains who we are, how we collect, share and use personal data about you, and how you can exercise your privacy rights. This Privacy Notice only applies to personal information that we collect through www.weyaybank.com (“Website”), or Mobile Application. 

If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided under the “How to contact us” heading below.

We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link below to jump to that section.

What Does Weyay Do?

Weyay is a digital proposition established in Kuwait with its own mobile banking application and website and is owned by National Bank of Kuwait S.A.K.P. Our banking services include a banking account, debit card and digital payments.

For more information about Weyay, please see the “About us” section on the Website.

What Personal Information Does Weyay Collect and Why?​

The personal information that we may collect about you broadly falls into the following categories:

Information that you provide voluntarily

When you sign up for Weyay app, we ask you for information so we can open the account for you.

The types of information we ask you to provide, and the reasons why we ask you to provide it, include:

Category of Data	Purpose of Processing
Name and contact details such as address, mobile number and email	For the purpose of processing applications for banking products and services and to provide those products and services to you (for individual customers) and to communicate with you in connection with those products and services. Your Email address will also be used to login to Weyay app.
Personal data you may provide in communications	Where we are corresponding with you online or by phone, you may provide personal data in that correspondence such as in connection with an enquiry or complaint such as a mobile number or email address.
Age	To verify we are legally permitted to provide you with banking products and services.
Data such as pictures,  a short video of yourself, tax identification number, Civil ID information	For identification purposes and to prevent fraud in connection with accounts and to comply with anti-money laundering requirements.
Answers you give to surveys about Weyay and our services	Those surveys will help us improve our services so we will store your answers.

If we ask you to provide any other personal information not described above, we will explicitly explain the reason for requesting this information.

Information That We Obtain From Third Party Sources

From time to time, we may receive personal information about you from third party sources (including credit reference agencies, world checking services, other banks who provide references on you), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.

The types of information we collect from third parties includes:

Category of Data	Purpose of Processing
Criminal records and proceedings checks, immigration status checks and World Checking searches	To comply with anti-money laundering and other account opening and maintenance requirements
Bank account, Loans, Credit / Debit card data, Financial transaction data	To provide our products and services to you, for internal analytics and credit portfolio management and for the purpose of detection and prevention of fraud
Data to check creditworthiness such as financial history, income and outgoings, credit history	To carry out checks to assess creditworthiness for credit facilities you have applied for or for which you propose to stand guarantor, for internal analytics and credit portfolio management
Net worth assessments	To assess whether you are a high net worth individual as defined in FCA or other regulations, so that we can, if you wish, obtain from you a declaration to that effect, which will exempt us from having to comply with certain regulatory steps when offering certain products
Data about claims and proceedings (or potential claims and proceedings) by or against you	To identify, exercise and defend contractual and other legal rights

 

Information That We Collect Automatically

When you visit our App or Website, we may collect certain information automatically from your device. In some countries, this information may be considered personal information under applicable data protection laws.

Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our App, including the pages accessed, buttons and links clicked.

Collecting this information enables us to better understand the visitors who come to our App and Website, where they come from, and what content on our App and/ or Website is of interest to them. We use this information for our internal analytics purposes and to improve the quality, performance and relevance of our App and Website to our visitors.

We’ll also ask for your consent to:

• tracking the location of your phone if you’ve authorized it (iOS)help protect you against fraud by
• share information about you with companies/ organizations we work with.

You don’t have to share information about yourself if you don’t want to. However, if you don’t, you may not be able to use some (or any) of our services.

Please note that by accepting the account opening Terms & Conditions and the Privacy Policy during account opening via Weyay App, you are providing your consent to share your information (as mentioned in the section “Information that you provide voluntarily”) with third parties and government institutions where Weyay is obliged in order to provide banking services for you.

Who does Weyay share my personal data with?

We allow access to your personal data only to those who require such access to perform their tasks and duties, and to contingent workers who have a legitimate purpose for accessing it. Whenever we allow a contingent worker to access personal data, we will implement appropriate measures to ensure the data is used in a manner consistent with NBK’s Privacy and Recruitment Notice and ensure that the confidentiality, availability and integrity of the data is maintained.

 

Group companies

We may share your personal data with other NBK Group companies as part of our recruitment processes. Where we do share personal data with other Group companies, this will include sending your personal data outside Kuwait.

 

Contingent workers

We may make certain personal data available to contingent workers who provide services relating to the recruitment process to us:

 

• recruitment or executive search agencies involved in your recruitment;
• background checking or other screening providers (with your consent) and relevant local criminal records checking agencies;
• data storage, shared services and recruitment platform providers, IT developers and support providers;
• contingent workers who provide support and advice including in relation to legal, insurance, health and safety, security and intel and whistleblowing / reporting issues.

 

We may also disclose your personal data to contingent workers on other lawful grounds, including:

 

• where we have your consent to do so. Where we have requested your consent to process your personal data, you have the right to withdraw your consent.
• To comply with legal obligations, including where necessary to abide by applicable laws, regulations or contractual obligations, or to respond to a court order, administrative or judiciary processes, including, but not limited to, a subpoena, government audit or search warrant;
• In response to lawful requests by public authorities or government agencies (including for tax, immigration, health and safety, national security or law enforcement purposes);
• As necessary to establish, exercise or defend against potential, threatened or actual legal claims or litigations;
• Where necessary to protect your vital interests or of another data subject;

In connection with the sale, assignment or other transfer of all or part of our business.

Legal Basis for Processing Personal Information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you or from third parties (such as to comply with anti-money laundering or immigration laws and fraud prevention) or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading below.

How Does Weyay Keep My Personal Information Secure?

We use appropriate technical and organizational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. Specific measures we use include, however not limited to:

• Physical access control systems
• A physical security presence
• Logical access controls (such as passwords)
• Perimeter security systems (such as firewalls)
• Information Classification and Handling Measures

 

We have put in place procedures to deal with any suspected personal data breach. In the event that we are required by law to inform you of any unauthorized access to your personal data we may notify you electronically, in writing, or by telephone. We will also notify any applicable regulator of a data breach where we are legally required to do so.

Data Retention

We retain personal information we collect from you as long as necessary for the purpose for which it is collected and to meet legal, regulatory and operational requirements (for example, to provide you with a service you have requested or to comply with applicable regulatory, legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Automated Decision-making

Automated decisions are decisions concerning you which are made automatically on the basis of a software algorithms, without human intervention.

We sometimes use computers to make decisions. We do this for deciding if:

• we can give you a Weyay account based on your age, residency, nationality, financial position and other circumstances, like the results of anti-money laundering and sanctions checks
• we need to take action, for example freeze a transaction or account, because we suspect fraud or money-laundering against Weyay or a customer. Our computers decide this based on patterns in our data, like an account or policy being used in a way that fraudsters work
• our services and products, or those of companies we work with, are suitable for you so that we can tailor our marketing.

 

Your Data Protection Rights

You have the following data protection rights:

If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time in response to changing regulatory, legal, technical or business developments. You can see when this Privacy Notice was last updated by checking the date displayed at the top of this Privacy Notice.

How to Contact Us?

If you have any questions or concerns about our use of your personal information, please contact our Data Protection Officer using the following details: DataPrivacy@weyaybank.com

COOKIE NOTICE

This Notice explains how Weyay by National Bank of Kuwait S.A.K.P. (hereafter referred to as "we" or “our” or "us" or “Weyay”) uses cookies in the web pages of our website at www.weyaybank.com ("Website"). It explains what these cookies are and why we use them.

What Are Cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used to do different jobs, like letting you navigate between pages efficiently, remembering your preferences and generally improving your browsing experience. Some cookies are deleted when you close down your browser. These are known as session cookies. Others remain on your device until they expire or you delete them from your cache. These are known as persistent cookies and enable us to remember things about you as a returning visitor. This website uses both session and persistent cookies.

If you visit our website, we collect information about your use of this site, information about the device or browser you use to access etc.

Why Do We Use Cookies?

We use a limited number of cookies for several reasons. One is to provide an online service more suited to the device you connect from, as well as to enhance your online experience by keeping track of your behavior within the site and to make sure you do not see the same special offers repeatedly. Some cookies are required for technical reasons in order for our Websites to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies also enable us to track the use of our Website. This is described in more detail in the table below.

Types of cookie	Who serves these cookies	How to refuse
Essential website cookies: These cookies are strictly necessary to provide you with a secure online environment to browse the services available through our Website and to use some of its features	Weyay Bank by National Bank of Kuwait S.A.K.P.	Because these cookies are strictly necessary to deliver the Websites to you, you cannot refuse them. You can, however, block or delete them by changing your browser settings, as described below under the heading "How can I control cookies?"
Performance and functionality cookies: These cookies are not used to identify you. They are used to enhance the performance and functionality of our Websites Without these cookies, certain functionality (like videos) may become unavailable.	Various	To refuse these cookies, please follow the instructions below under the heading "How can I control cookies?"
Analytics and customization cookies: These cookies collect information that is used in aggregate form to help us understand how our Website is being used. This does not enable us to engage in targeted marketing.	Google Analytics	To refuse these cookies, please follow the instructions below under the heading "How can I control cookies?"

 

Links to Other Websites

Our Website contains links to other websites. If you access those other websites they may use cookies. Please read any cookie privacy notices on those websites if you wish to know what cookies are being used.

How Can I Control Cookies?

You can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information.

How Often Will You Update This Cookie Notice?

New regulations may change the way in which the use of cookies is governed in the future. We may update this Cookie Notice from time to time in order to reflect these changes.

Please therefore re-visit this Cookie Notice regularly to stay informed about our use of cookies and related technologies.

The date at the top of this Cookie Notice indicates when it was last updated.

How to Contact Us?

If you have any questions about our use of cookies or other technologies, please contact our Data Protection Officer using the following details: DataPrivacy@weyaybank.com