This Privacy Policy describes how the Bank of Jordan (BOJ) collects, uses, and protects your personal data when you visit or interact with our website. We are committed to handling your information in compliance with the Jordanian Personal Data Protection Law (PDPL) and maintaining transparency about your rights and our responsibilities.

Definitions

For clarity, the following terms are used in this Policy:

• “We,” “Us,” or “Our” refer to the Bank of Jordan (BOJ) and its subsidiaries, that you may engage with directly or indirectly through our website.
• “You” or “Your” refer to any individual or legal entity visiting our website, obtaining information about BOJ’s products or services, or engaging with our online channels.
• Personal Data: Any data or information related to a natural person that directly or indirectly identifies them, regardless of its source or form. This includes data concerning the individual, their family status, or their location.
• Processing: One or more operations carried out in any form or by any means, with the purpose of collecting, recording, copying, storing, organizing, revising, utilizing, using, transmitting, distributing, publishing, linking to other Data, making available, transferring, displaying, concealing its identity, encoding, destroying, registering, erasing, modifying, describing, or disclosing by any and all possible means.
• Profiling: The automated processing of Data to identify the trends, preferences, choices, or behaviors of the Data subject.
• Controller: Any natural or legal person located inside or outside the Kingdom, who has the Data under their custody.
• Processor: The natural or legal person responsible for processing the Data.

Who are we?

We are Bank of Jordan. Our address Al-Shmeisani - Abdul Hameed Sharaf St. - Building No.15. You can contact us by post at the above address, by email at: BOJ@bankofjordan.com.jo

The contact details of our Data Protection Officer are: +962 6 5609200

DPO@bankofjordan.com.jo, Bank of Jordan Head Office telephone on +962 6 5609200

Why do we collect your information?

We collect personal data to manage and enhance our customer relationship with you, tailor our marketing activities, and develop products and services that reflect our customers’ preferences.

• We process your personal data only for predefined and lawful purposes.
• Customer relationship management.
• Targeted marketing
• To comply with a certain region’s legislation or regulation
• We collect your cookies:
• Strictly necessary cookies to ensure that our website is able to function properly.
• Strictly necessary cookies that help you log on
• Strictly necessary cookies that help us provide core services and features
• Strictly necessary cookies that help keep our website secure
• Strictly necessary cookies that help us detect fraud or crime
• Optional cookies that we use to make your visit more personal
• Optional cookies that help us improve our website

How do we collect your information?

We collect personal data about you through various methods:

• Directly: We may ask for your consent or request information directly from you when you interact with our website, use our services, or communicate with us.
• Indirectly: We may obtain data from other sources where it is available, including intermediaries, BOJ affiliates, cookies, device identifiers, social media platforms, and public sources.

When you use our website

When you use our website to browse our products and services and view the information, we make available, several cookies are used by us and by third parties.

When you use our website/Application, you trust us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control. This information is usually such as cookies. Learn more about our cookie policy

When you submit an enquiry via our website or via our call center

When you submit an enquiry via our website, social media, Paid advertisement or call center, we ask you for your full name, contact telephone number, Date of Birth, P.O Box, and Mother Name, as well as the request details. Please be aware that all information given to our call center agents and customers conversations are recorded on our systems and is protected in accordance with the Jordanian Personal Data Protection Law (PDPL). By proceeding, you are approving that Bank of Jordan may save or process your personal data.

We use this information to respond to your query, including providing you with any requested information about our products and services. We may also email you several times after your enquiry to follow up on your interest and ensure that we have answered it to your satisfaction. We will do this based on our interest in providing full information about our services and/or products and our desire to best serve you

Your enquiry is processed and stored in our databases and will not be shared unless it applies with Data Privacy rules and regulations.

What kind of personal information do we collect?

We collect personal data about you when you access or use our website, online platforms, or interact with us through other channels. This includes data collected directly from you, or indirectly from sources such as cookies, social media, public sources, or intermediaries.

Customer and General User Data

The types of personal data we collect may include:

• Identification and Authentication Data: Name, personal identity code, customer number, and other identifiers.
• Contact Details: Address, email, telephone number, and other communication channels.
• Customer Relationship Data: Account information, customer category, preferences, and service usage details.
• Financial Data: Transaction history, income, account balances, agreement details, and product/service usage information.
• Legal and Compliance Data: Data required by law, such as KYC information, regulatory checks, or anti-fraud measures.
• Technical and Online Data: IP address, browser type, device information, login timestamps, and browsing activity on our website or app.

Candidate / Job Applicant Data

If you apply for a job through our website, we may collect:

• Full Name
• Date of Birth and Birthplace
• Address
• Sex/Gender and Marital Status
• Contact Details
• Education Details
• Employment History
• References and reference details
• Nationality/Citizenship
• Remuneration, pension, and benefits details
• Extra information voluntarily provided by referees
• IP address and usage activity
• Dates, times, and frequency of accessing our services

Note: The above list is not exhaustive, and we may collect additional data as required for legal, regulatory, or operational purposes.

How do we use your information?

We use your personal data only where we have your consent, or where we have lawful grounds for processing under the Jordanian Personal Data Protection Law (PDPL). This includes legitimate interests such as maintaining site functionality, providing services, and ensuring compliance with laws.

We may use your information to:

• Respond to inquiries and feedback, including participation in competitions or online requests.
• Provide information, products, or services you have requested.
• Perform contractual obligations and manage our relationship with you.
• Enable participation in interactive website features.
• Present content optimally for your device.
• Conduct analytics to improve website performance and advertising.
• Detect and prevent misuse, fraud, abuse, or other unlawful acts.
• Promote new services and products suited to your preferences.
• Comply with regulatory, legal, and supervisory obligations.
• Detect, prevent, or investigate financial crimes, including money laundering or terrorism financing.

Legal Bases for Processing

Depending on the purpose of processing, BOJ may rely on one or more of the following legal bases:

• Consent: Where you have provided explicit permission for processing. At BOJ, we understand the importance of your privacy and the importance of obtaining your consent for the processing of personal data. We want to assure you that when you provide consent, it is freely given, specific, and informative. You have the right to withdraw your consent at any time. Your trust is paramount to us, and we strive to uphold it. With us, you can have confidence that your personal data is handled with the utmost care and respect for your privacy and your rights.
• Contractual necessity: To perform or fulfill contractual obligations with you.
• Legal or regulatory compliance: To meet requirements applicable to BOJ as a licensed financial institution.
• Legitimate interest: For purposes such as security, fraud prevention, and service improvement.

Access and Disclosure of Personal Data

Your personal data is treated as confidential. However, to operate efficiently and meet regulatory requirements, we may share your data with:

• BOJ branches, subsidiaries, and affiliates.
• Agents, subcontractors, or service providers acting on our behalf.
• Credit reference and fraud prevention agencies.
• Payment processors, card issuers, and correspondent banks.
• External auditors, professional advisors, and legal representatives.
• Government entities, regulators, supervisory authorities, and law enforcement agencies.
• Entities involved in mergers, acquisitions, or corporate restructuring.

All third parties are required to process your data securely, in accordance with BOJ instructions and the Jordanian Personal Data Protection Law (PDPL).

Cross-Border Data Transfers
In some cases, your personal data may be transferred or stored outside the country or region where it was originally collected. This may include transfers between BOJ Group entities or to third parties located in other jurisdictions. BOJ ensures that such transfers comply with applicable data protection laws and regulations in all relevant jurisdictions, and that appropriate safeguards are implemented to ensure the continued protection of your personal data.

Data Protection and Security

BOJ implements organizational, technical, and physical measures to protect your data from unauthorized access, alteration, loss, or misuse. Access is restricted to authorized personnel only.

We ensure all service providers follow equivalent standards of data protection and regularly assess their compliance.

You are responsible for maintaining the confidentiality of your online credentials (usernames, passwords, etc.).

Data Retention Period

Your personal data is retained only as long as necessary to fulfill the purposes for which it was collected or as required by law.
Typically, data is kept for at least five (5) years after the end of your relationship with BOJ, or longer if legally required.

Your Rights as a client

Under the Jordanian Personal Data Protection Law (PDPL), you are entitled to exercise the following rights with respect to your personal data held by BOJ:

• Right of Access: Request access to your personal data and details on how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, where applicable.
• Right to Restriction or Objection: Object to or request restrictions on processing in certain circumstances.
• Right to Data Portability: Request to receive your data in a structured, machine-readable format or have it transferred to another controller.
• Right to Withdraw Consent: Withdraw your consent at any time for processing based on consent.
• Right to Notification: Be notified of any personal data breach that could affect your rights or freedoms.
• Right not to be subject to automated decision-making or profiling: In some circumstances, you can request that BOJ does not make decisions affecting you solely based on automated processing or profiling.

How to Exercise your rights?

You can exercise your rights at any time you wish to exercise them. You can send an email to our Data Protection Officer (DPO) and include the following information:

• Type of request

Which right do you want to exercise?

• The data that is involved in this request

Which of the data that you have previously consented to processing do you want to address?

• Request details

explain to the best of your ability what do you want us to do?

• Reason/Justification

To the best of your ability, explain why you are submitting this request

• Signature

Your signature

• Name

Your name as it is registered in Bank of Jordan

• Date

The date of submission

At Bank of Jordan, we prioritize security and privacy for all our customers. As part of our commitment to ensuring the safety of your information, we kindly ask for your cooperation in verifying your identity for each request.

Your Right to Complain

If you believe your personal data is processed in violation of the Jordanian Personal Data Protection Law (PDPL), you may file a complaint with the Personal Data Protection Authority or the competent supervisory authority.

Updates to This Policy

BOJ may update this Privacy Policy periodically to reflect changes in services, practices, or legal requirements. Any updates will be posted on our website with an updated effective date.