Speaking Up Privacy Policy
This privacy statement relates to the collection, use and disclosure of personal data, including special or sensitive personal data, by Standard Chartered Bank (“SCB”, “we” or “our”) relating to its Speaking Up channel. Personal data is information relating to an individual (“you” or “your”).
Purposes for which we may process your personal data
Personal data will be kept confidential and collected, processed and used only for the purpose of handling the report. We may also process your personal data where there is a legal or regulatory obligation to process your personal data or where it is in our legitimate interests to detect or prevent certain type of misconduct or fraud. We may also use it to exercise or defend potential claims raised against us, including, in connection with any legal proceedings (including any prospective legal proceedings), this may also involve obtaining legal advice or for establishing, exercising or defending our legal rights.
To whom we may disclose personal data
Any member of SCB, including our officers, employees, agents and advisers, may disclose your personal data to any of the following parties for any of the purposes specified above:
- any member of the Standard Chartered Group staff involved in the countries where we operate in investigating or addressing concerns arising out of the report submitted, including any officer, employee, agent or director;
- professional advisers (including auditors), third party service providers, agents or independent contractors providing services to support SCB’s review.
- any person to whom disclosure is allowed or required by local or foreign law, regulation or any other applicable instrument;
- any court, tribunal, regulator, enforcement agency, exchange body, tax authority, or any other authority (including any authority investigating an offence) or their agents anywhere in the world relating to any proceedings as a result of the review.
Security
Personal data may be transferred to, or stored at, a location outside of your country of residence. The security of your personal data is important to us. SCB has technical and organisational security measures in place to safeguard your personal data. When using external service providers such as NAVEX, we require that they adhere to security standards mandated by SCB and agree to apply equivalent levels of protection measures for personal data as SCB in accordance with applicable laws. We may do this through contractual provisions, including any required by a privacy regulator, and oversight of the service provider. Regardless of where personal data is transferred, we take all steps reasonably necessary to ensure that personal data is kept securely.
You should be aware that the Internet is not a secure form of communication and sending us any personal data over the Internet carries with it risks including the risk of access and interference by unauthorised third parties. Information passing over the Internet may be transmitted internationally (even when sender and recipient are located in the same country) via countries with weaker privacy and data protection laws than in your country of residence.
Retention
We retain your personal data in line with our legal and regulatory obligations and for business and operational purposes. Personal data will not be retained for longer than is necessary for the purposes in which it was collected.
Monitoring
To the extent permitted by law, we may record and monitor your electronic communications with us to ensure compliance with our legal and regulatory obligations and internal policies for the purposes outlined above.
Your rights
Subject to applicable law and regulations, you may have the following rights:
- Access
To request a copy of the personal data processed in relation to you. SCB may be allowed by law to charge a fee for this. - Correction
To request that we correct your personal data. - Erasure
To ask us to delete your personal data, for example if we no longer have a valid reason to process it. - Object
To object to how we process your personal data; this does not however mean you can decide or choose how we process your personal data. - Restriction
To restrict how your personal data is processed in certain cases, such as when the accuracy of your personal data is contested.
Contacting us
If you have any question relating to your rights or have any concerns or complaints in relation to how we process your personal data, the Global Head of Privacy can be contacted at:
Standard Chartered Bank
1 Basinghall Avenue
London
EC2V 5DD
privacy@sc.com
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time. This policy was last updated on 29/09/2021.