Data Protection Policy
Introduction
JBSS (Jotbazar Banik Somobay Somity Ltd.) is committed to protecting your personal data and ensuring compliance with data protection laws. This policy outlines how we collect, process, store, and protect your information.
Last Updated: December 2024
Data Protection Principles
We follow these fundamental principles to ensure your data is protected:
Lawfulness & Fairness
We process data lawfully and fairly
Purpose Limitation
Data is collected for specific, legitimate purposes
Data Minimization
We collect only necessary data
Accuracy
We ensure data is accurate and up-to-date
Storage Limitation
Data is retained only as long as necessary
Security
We implement appropriate security measures
Types of Data We Process
Personal Data
- Name and identification details
- Contact information
- Date of birth and age
- Address and location
- Employment information
Financial Data
- Bank account details
- Transaction history
- Savings and investment data
- Loan and credit information
- Payment records
Legal Basis for Processing
We process your personal data based on the following legal grounds:
Contract Performance
To fulfill our contractual obligations to you
Legal Obligation
To comply with applicable laws and regulations
Legitimate Interest
To provide and improve our services
Consent
When you provide explicit consent
Data Security Measures
We implement comprehensive security measures to protect your personal data:
Encryption
Advanced encryption for data transmission and storage
Access Control
Strict access controls and authentication measures
Regular Audits
Regular security audits and vulnerability assessments
Staff Training
Regular training on data protection and security
Incident Response
Established procedures for security incidents
Physical Security
Secure facilities and equipment protection
Data Retention Policy
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.
Account Information
Personal and account details
Retention Period: 7 years after account closureFinancial Records
Transaction and financial data
Retention Period: 10 years for tax complianceLoan Documents
Loan applications and agreements
Retention Period: 7 years after loan completionMarketing Data
Marketing preferences and communications
Retention Period: 3 years after last interactionYour Data Protection Rights
You have several rights regarding your personal data:
Right to Access
Request a copy of your personal data
Right to Rectification
Request correction of inaccurate data
Right to Erasure
Request deletion of your personal data
Right to Portability
Request transfer of your data
Right to Object
Object to processing of your data
Right to Restriction
Request restriction of data processing
Data Breach Procedures
In the unlikely event of a data breach, we have established procedures to respond quickly and effectively to protect your information.
Immediate Response
Immediate containment and assessment of the breach
Notification
Notify relevant authorities and affected individuals
Investigation
Thorough investigation and documentation
International Data Transfers
Your personal data is primarily processed within Bangladesh. If we need to transfer data internationally, we ensure adequate protection measures are in place.
Adequacy Decisions
Transfer only to countries with adequate protection
Standard Contractual Clauses
Use approved contractual safeguards
Contact Our Data Protection Officer
If you have any questions about data protection or wish to exercise your rights, please contact our Data Protection Officer:
info@jbssltd.com
+88 01739-926209
+88 01712-803989
Jotbazar, Manda, Naogaon
Mon-Fri: 9:00 AM - 6:00 PM