Privacy Policy
We appreciate the trust you place in us when sharing your personal data. The security and confidentiality of that data are very important to us. In this document, we will explain how we collect, use and protect your personal data in accordance with applicable Lebanese laws and regulations specifically law No. 81/2018, BDL circulars, and international data protection standards.
We will also explain what rights you have with regards to your personal data and how you can exercise those rights.
We collect personal data from you for one or more of the following purposes:
- To provide you with information or services that you have requested or which we think may be relevant to a subject in which you have demonstrated an interest;
- To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services;
- To fulfil a contract that we have entered into with you or with the entity that you represent;
- To ensure the security and safe operation of our website and underlying business infrastructure, and
- To manage any communication between you and us.
We provide below more details about the data that we collect for each of these purposes, the lawful basis for doing so, and the period for which we will retain each type of data.
Technical Information
In addition, and in order to ensure that each visitor to any of our websites can use and navigate the site effectively, we collect the following:
- Technical information, including the Internet Protocol (IP) address used to connect your device to the Internet;
- Your login information, browser type and version, time zone setting, browser plug-in types and versions;
- Operating system and platform;
- Information about your visit, including the Uniform Resource Locators (URL) clickstream to, though, and from our site.
Our cookies policy, which can be viewed from our web site, describes in detail how we use cookies.
Your Rights
We identify your rights in respect of the personal data that we collect and describe how you can exercise those rights, including:
- Right to access and obtain a copy of your personal data
- Right to request correction of inaccurate or incomplete data
- Right to request deletion of your personal data, subject to legal retention requirements
To exercise any of these rights, you may contact us at: connect@mynxt.com
Lawful basis for the processing of personal data
We describe below the various forms of personal data we collect and the lawful basis for processing this data. Our business architecture, accounting and systems infrastructure and compliance organization means that all personal data is processed on common, Group-wide platforms. We have processes in place to make sure that only those people in our organization who need to access your data can do so. A number of data elements are collected for multiple purposes, as shown below. Some data may be shared with third parties and, where this happens, this is also identified below. Sharing is limited to what is necessary and subject to confidentiality and data protection obligations.
All processing is performed in compliance with Lebanese Law No. 81/2018 and, where relevant, with the principles of the EU General Data Protection Regulation (GDPR).
When we process on the lawful basis of legitimate interest, we apply the following test to determine whether it is appropriate:
- The purpose test – is there a legitimate interest behind the processing?
- Necessity test – is the processing necessary for that purpose?
- Balancing test – is the legitimate interest overridden, or not, by the individual's interests, rights or freedoms?
Data collection process
- Data collection that includes client information such as name, location, email, and business sector to deliver requested services based on contractual fulfilment, and to send related updates under legitimate interest. Phone numbers and personal contact information are also collected for follow-up purposes, under legitimate interest or consent, respectively. All data is shared internally only. The retention period is up to 10 years from the collection date.
- Transactional information such as personal and banking details are collected to process purchases, fulfil accounting obligations, and support legal claims, based on contractual performance, statutory obligations, or legitimate interest. The retention period is up to 10 years from the collection date.
- Payment card data such as account number, cardholder name, and expiration date are collected to complete transactions and may be shared with card companies. The retention period is up to 10 years from the collection date.
- Security information is gathered to protect systems from cyber threats under legitimate interest, and may be shared with relevant technical entities. Data is retained as per legal time limits.
- Communication data is used to follow up on user inquiries, also under legitimate interest, and shared internally or with professional advisers. Data is retained as per legal time limits.
Push Notifications
We may send you push notifications to provide service-related updates such as transaction notifications, security alerts, authentication requests and service updates. To enable these notifications, we may collect and process device identifiers and push notification tokens associated with your device. You may manage your notification preferences through your device settings or within the Application.
Location Data
With your permission, the Application may collect and process precise location data while the Application is in use and, where enabled on your device, where required for specific services, while the Application is running in the background. Such information may be used to provide location-based features and services, including "Send Money by Location" functionality, enhance safety and security, and improve the user experience. You may withdraw or modify your location permissions at any time through your device settings. If you disable location access, some features of the Application may not function properly.
Third-Party Service Providers
We may disclose certain personal information to third-party service providers that perform services on our behalf, maintain security, prevent fraud or support the operation of the Application. This disclosure of personal information is only as reasonably necessary for service providers to perform services for us and it is subject to contractual restrictions on confidentiality and security. Service providers are not authorized to use or disclose your personal information for their own independent marketing or other purposes. These service providers may include:
- Identity verification and biometric authentication providers: Uqudo (ID and passport scanning) and AWS (facial liveness)
- Push notification service providers: OneSignal and Firebase Cloud Messaging
- Attribution and deep-linking service providers: Branch
- Customer support and communication service providers: Crisp
- Application security, fraud prevention and telemetry service providers: Talsec (freeRASP)
Cookies Policy
What are cookies?
A cookie is a small file of letters and numbers that is downloaded on to your device when you visit a website. Cookies are used by many websites and can do a number of things, like remembering your preferences, recording what you have chosen as options, and counting the number of people looking at a website.
Why do we use them?
We use cookies for a number of reasons, such as:
- To help us improve your experience when using our website
- To remember your preferences so there is no need for you to select the same customized options on each visit
- To analyze how well our website is performing
- To learn more about the way you interact with our website
The key reason for using cookies, however, is to make our website more convenient, efficient and user-friendly for you.
Types of cookies we use
- Necessary Cookies: These cookies ensure the website functions properly. They do not identify you as an individual, but rejecting them may affect website performance.
- Performance Cookies: These cookies collect anonymous data on user interactions such as time spent and pages visited to insure site performance. They do not identify you as an individual.
- Functionality Cookies: These cookies store user preferences like language or username to provide a more personalized online experience and may collect personally identifiable information disclosed by the user, such as usernames or user IDs.
Social media and third-party cookies
To enrich our website content, we may sometimes embed videos from other social media websites such as YouTube, Facebook, and other providers. As a result, when you visit a page with content embedded, you may be presented with cookies from these websites. AM Bank has no control or liability over these cookies set, please check the relevant third party's cookie policy for more information.
We also offer a widget where content or information can be shared easily on sites like Facebook, Yammer, Twitter, LinkedIn, Google+, and others. These sites may set a cookie when you are logged into their service. AM Bank has no control or liability over these cookies, please check the relevant third party's cookie policy for more information.
How can I control my cookies?
You can use your web browser to:
- Delete all cookies
- Block all cookies
- Allow all cookies
- Block third-party cookies
- Clear all cookies when you close the browser
- Open a 'private browsing' / 'incognito' session, which enables you to browse the internet without storing local data
Changing your cookie settings, including deleting and disabling them, may mean that the functionality of our website and your ability to use some of the features will be affected. You will still be able to use our website but you may not be able to access all of AM Bank content and some of the functions may not operate correctly.
You can also visit www.allaboutcookies.org for details on how to delete or reject cookies and for further information on cookies. To learn about the use of cookies on mobile phones and other devices' browsers, and for details on how to reject or delete such cookies, please refer to your device user manual.
