Relevant collection
We seek information reasonably necessary to provide banking services, manage risk and comply with applicable requirements.
ClearPlain-language privacy information
Purpose-ledData used for specified purposes
ProtectedReasonable security safeguards
AccessibleDirect DPO and grievance contact
Our privacy commitment
Responsible banking includes responsible data use.
GRC Bank acts as the Data Fiduciary for the personal data described in this policy. We process personal data only for lawful and specified purposes connected with our banking services, legal obligations, security and customer support.
Meaningful choices
Where processing depends on consent, we explain the purpose and provide a way to withdraw that consent.
Accountable protection
We apply organisational and technical safeguards appropriate to the nature and risk of the processing.
This policy applies to digital personal data processed through GRC Bank’s website, applications, accounts, banking products, branches, customer-support channels and related services. It may also apply where personal data is initially collected offline and subsequently digitised.
A separate notice may be provided when we collect information for a particular product or purpose. That notice should be read together with this policy.
Data Fiduciary: GRC Bank
Registered office: [GRC Bank registered office address]
Registered office: [GRC Bank registered office address]
The information collected depends on the account, product, transaction or service you request.
Identity and KYC data
Name, photograph, date of birth, gender, signature, PAN, officially valid documents, customer identification numbers and information required to verify your identity.
Contact and profile data
Residential or correspondence address, email address, telephone number, occupation, communication preferences and account profile information.
Financial information
Bank account information, income details, source of funds, assets, liabilities, credit information and information needed to assess eligibility for banking products.
Transaction information
Deposits, withdrawals, transfers, beneficiaries, payment references, merchant information and records relating to products and services used by you.
Device and usage information
IP address, browser and device information, login records, security logs, pages visited, approximate location and information generated when you use our digital services.
Communications
Emails, support requests, complaints, feedback, call records and other communications exchanged with GRC Bank.
Please contact our Data Protection Officer to submit a privacy request, withdraw consent or raise a grievance. Include your name, registered contact information and sufficient details to help us understand the request.
We will investigate the concern and respond within the period specified by our grievance-redressal procedure. After exhausting GRC Bank’s grievance process, you may approach the Data Protection Board of India through the prescribed channel, where applicable.
GRC Bank privacy contact
Speak directly with our Data Protection Officer.
Need more help?
Contact GRC Bank →