Purpose Of Processing

This Privacy Policy ensures compliance with:

• State Bank of Pakistan (SBP) regulations,
• Apple App Store and Google Play Store requirements, and
• Best international data protection practices.

The purpose is to:

• Explain what information the bank collects and why.
• Describe how customer data is processed, stored, and protected.
• Outline customer rights and the bank’s security measures.

Information We Collect

The information collected by Halan Microfinance Bank Limited through its Mobile App is in accordance with SBP regulations and may include, but is not limited to:

• Personal information required for KYC and account opening but not limited to, such as full name, father / husband name, CNIC, date of birth, address, contact details, gender, CNIC Issuance date, date of expiry, and email address.
• Financial information related to accounts, transactions, and linked services.
• Authentication data such as Login PIN, TPIN, and Card PIN.
• Information about the customer’s use of mobile banking services, including transactions, bill payments, and other related activities.
• Additional information as may be required by the bank from time to time to comply with regulatory, operational, or security requirements

Purpose of Data Collection & Usage

Halan collects and processes customer data for the following purposes:

• To comply with Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter Financing of Terrorism (CFT) regulations.
• To provide and improve secure mobile banking services, including but not limited to account management, fund transfers, bill payments, card management, and any other services the bank may introduce from time to time.
• To authenticate customer identity and enable secure logins.
• To prevent fraudulent activities and detect unauthorized access.
• To comply with SBP directives and other legal obligations.

Data Sharing & Third Parties

Halan does not sell, rent, or trade customer information. However, data may be shared in the following cases:

• With regulators such as the State Bank of Pakistan (SBP), Financial Monitoring Unit (FMU), or other authorities where required by law.
• With payment processors, service providers, and technical vendors who assist in delivering secure banking services.
• With law enforcement agencies based on valid legal requirements.

Any third-party service provider engaged by the bank is contractually obligated to maintain strict confidentiality and comply with SBP’s data security standards.

Data Retention

Halan retains customer data for as long as required under applicable laws and SBP’s data retention guidelines. Once the retention period has expired, the bank securely deletes or anonymizes the data, as permitted by regulatory requirements.

Security & Protection of Information

Halan implements bank-grade security controls to safeguard customer data, including:

• End-to-End Encryption for personal and financial information.
• Two-Factor Authentication (2FA) and OTP verification for:
  • Mobile App registration
  • KYC information updates
  • PIN changes and high-value transactions
• Biometric authentication where enabled by the customer.
• Continuous system monitoring and fraud detection mechanisms.

Important: Halan will never request customer PINs, passwords, or OTPs via SMS, phone, or email. Customers should never share their credentials with anyone.

Customer Rights

Customers have the right to:

• Request access to their personal information held by the bank.
• Request correction or updates to their data where required.
• Lodge complaints with the bank if they believe their information has been misused.

Note: Customers cannot request deletion of their financial data due to SBP’s data retention obligations.

Third-Party Links & Integrations

The Mobile App may contain links to third-party services or websites. Halan is not responsible for the privacy practices, content, or security of these third-party platforms. Customers are encouraged to review their respective privacy policies before using such services.

Updates to the Privacy Policy

Halan may revise this Privacy Policy from time to time to reflect regulatory requirements or enhancements to our services which shall also be binding to the Customers. Updated versions will be:

• Published on the Halan Mobile App and official website.
• Communicated to customers via in-app notifications where necessary.

Disclaimer

Although Halan implements strict security measures, no system can be guaranteed 100% secure. Halan shall not be liable for unauthorized access, service interruptions, or data breaches beyond its reasonable control.

Contact Us

For support, complaints, or inquiries:
📧 Email: digitalcomplaint@halan.com.pk
☎ Call Center: 021-111-238-267
🌐 Website: www.halan.com.pk

Registered Office:

Halan Microfinance Bank Ltd. Head Office 3rd Floor, 3rd Gate, Islamic Chamber of Commerce, Clifton Block-9, Karachi.