Privacy Policy

Privacy policy

Learn more about our privacy policy.

Who are we?

At ICB, our tailored financial services delivery includes: Business Advisory, Portfolio Management, Personalised Relationship Management, Fast-tracked Service delivery and Self-service solutions, as such we treat your Personal Data as private and confidential.

This Privacy Policy describes what Personal Data we collect, what we do with it and how we protect it. Our registered office is at 724, Burundi. We act as the Data Controller when processing your Personal Data. Our designated Data Protection Officer can be reached at dpo@icb.global and telephone number +0000067899.

This policy (together with our Terms and Conditions) describes how we handle your data. By continuing to visit our website www.icb.global, you accept and consent to the practices described in this policy.

What we do

At ICB we gather and process your Data in accordance with this privacy notice (including Our Terms and Conditions) and in compliance with the relevant data protection regulations and laws. This notice provides you with the necessary information regarding your rights and our obligations and explains how, why, and when we process your data.

Information that we collect

We process your Personal Data to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.

The personal data we collect includes:

  • Name
  • Date of Birth
  • Home Address
  • Personal Email
  • Home Telephone Number
  • Mobile Telephone Number
  • Passport Number / Driver's License Number
  • National Identification Number (NIN)
  • Taxpayer ID
  • Sensitive Data (such as BVN, health/medical information, details about religion, sexuality, etc.)

We collect information in the following ways:

  • Online form
  • Website
  • Hard copy form
  • Email
  • Employment CVs

How We Use Your Personal Data

We take your privacy very seriously and will never disclose, share or sell your data without your consent, unless required to do so by law. We only retain your data for as long as necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time.

The purposes and reasons for processing your personal data are detailed below:

  • We collect your personal data in the performance of a contract or to provide a service and to ensure that orders are completed and can be sent out to your preferred address.
  • We collect and store your personal data as part of our legal or compliance obligation.
  • We have a legal obligation to share your personal data with regulatory bodies and credit bureaus who are a credit reference agency and provide us with financial background checks as part of our KYC obligations before opening an account with us.
  • We will occasionally send you marketing information where we have assessed that it is beneficial to you as our customer and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests.

Use of Information

The personal information collected during image uploads is used for the following purposes:

  • To identify the user who uploaded the image.
  • To communicate with the user regarding the uploaded image, such as to confirm receipt or to provide updates on the status of the upload.
  • To troubleshoot technical issues related to the image upload process.
  • To comply with legal or regulatory requirements, such as responding to subpoenas or court orders.

We will not use the personal information associated with image uploads for marketing purposes or sell it to third parties.

Protection of Information

We use industry-standard security measures to protect the personal information associated with image uploads from unauthorized access, disclosure, or alteration. We use encryption and secure protocols to ensure that the information is transmitted securely.

Retention of Information

We will retain the personal information associated with image uploads for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Once the information is no longer needed, we will securely dispose of it.

Third-Party Services

We may use third-party services, such as cloud storage providers, to store the images uploaded on our website or applications. These services may collect and process personal information associated with image uploads on our behalf. We ensure that these third-party services are reputable and comply with applicable data protection laws.

Children's Privacy

Our website or application is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it.

Your Rights

You have the right to access any Personal Data that we process about you and to request information about:

  • What personal data we hold about you.
  • The purposes of the processing.
  • The categories of personal data concerned.
  • The recipients of your personal data or who it will be disclosed to.
  • How long we intend to store your personal data for.

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You also have the right to request the erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us; to exercise your data portability rights, and to be informed about any automated decision-making we may use.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

Sharing and Disclosing Your Personal Data

We do not share or disclose any of your Personal Data without your consent, other than for the purposes specified in this notice or where there is a legal requirement. We use [a third-party/third-parties] to provide the below services and business functions; however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

Access to Mobile Camera, Gallery & Phone Book

By using our App, you agree to grant us access to your camera to collect images and other information from your device and gallery. Additionally, we may access your phone book contacts to provide you with this service.

Safeguarding Measures

We take your privacy seriously and implement every reasonable measure to protect and secure your personal data. We work diligently to safeguard your information from unauthorized access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

  • Network security
  • Password policies
  • SSL and TLS encryption
  • Pseudonymization
  • Restricted access
  • IT authentication
  • Firewalls
  • Anti-virus and malware protection

Transfers Outside Burundi

Personal data in Burundi is protected under the Burundi Data Protection Regulation (BDPR). However, some countries may not offer the same level of protection for your personal data. ICB does not transfer or store any personal data outside Burundi.

Legitimate Interests

As outlined in the "How We Use Your Personal Data" section, we occasionally process your personal data under the legitimate interests' legal basis. When doing so, we conduct a Legitimate Interests Assessment (LIA) to ensure that your rights and any risks to you are carefully balanced against our business needs. We take appropriate measures to ensure our interests remain proportionate and justified.

How Long We Keep Your Data

ICB retains personal data only for as long as is required by regulation. We follow strict review and retention policies to meet these obligations. Under Burundi laws and Central Bank Guidelines, we must keep basic personal data (such as name, address, and contact details) for no longer than seven (7) years after the termination of a business relationship.

If you have consented to receive direct marketing from us, we will keep your details until you notify us otherwise or withdraw your consent.

Sensitive Data

Due to legal and regulatory requirements, ICB may occasionally process sensitive personal data to uniquely identify you or for compliance purposes. When collecting such information, we ensure:

  • We request and process only the minimum necessary data for the specified purpose.
  • We identify a compliant legal basis before processing.
  • Where processing is based on consent, we obtain explicit authorization through a signature or other verifiable mechanism.
  • You can modify or withdraw consent at any time, unless there is a legitimate or legal reason preventing us from doing so.

Disclosure of Your Personal Data

Law Enforcement

Under certain circumstances, we may be required to disclose your personal data if mandated by law or in response to valid requests from public authorities (e.g., a court or government agency).

Other Legal Requirements

We may disclose your personal data in good faith if such action is necessary to:

  • Comply with a legal obligation.
  • Protect and defend the rights or property of the Bank.
  • Prevent or investigate possible wrongdoing in connection with our services.
  • Ensure the personal safety of our staff, customers, or the public.
  • Protect against legal liability.

Links to Other Websites

Our website does not currently contain links to third-party sites. However, if we include such links in the future, clicking on a third-party link will direct you to their website. We strongly advise you to review the Privacy Policy of every site you visit.

We do not control and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.

Cookie Notice

A 'cookie' is a small piece of data sent from a website and stored on the user's device by their web browser. Cookies help improve user experience by remembering useful information for future visits.

Our cookie policy explains what cookies are, the types of cookies we use, and how we use them.

Types of Cookies and How We Use Them

  • Session Cookies: These expire when you leave the site or close your browser, making navigation and user experience faster and more convenient.
  • Persistent Cookies: These remain stored on your device until their expiry dates are exceeded or they are manually deleted. They are used to customize your experience.

When you access our service through a computer or mobile device, we may collect certain data automatically, including (but not limited to) the type of device, unique device ID, IP address, operating system, internet browser type, and diagnostic data.

Keeping Your Personal Data Safe

Our cookies never store personal or sensitive information; they only contain a unique reference ID. The cookies we use cannot read or search your computer or mobile device to obtain information about you or your family, nor can they access material stored on your device.

Cookie Preferences

Different browsers offer various methods for managing cookies, including disabling them. However, some cookies are essential for functionality, and disabling them may impact certain services or site features.

Information We Share

We may share information about you and your dealings with us, to the extent permitted by law, with the following:

  • ICB branches and subsidiaries.
  • Regulators, supervisors, and government agencies or courts.
  • External auditors.
  • ICB staff.
  • Credit agencies.
  • Correspondent banks.

We may also collect, use, and exchange your information in ways permitted by law.

How We Protect Your Information

We implement appropriate technical and organizational measures to prevent loss, unauthorized access, misuse, modification, or disclosure of information under our control. Security controls and processes are regularly updated to meet and exceed industry standards.

Changes to this Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page, and you will be notified via email and/or a prominent notice on our service. You are advised to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, you can contact us:

Email: info@icb.global
Email: dpo@icb.global
Phone: +971 4 325 7402
Address: Avenue de la RDC, Mukaza Commune, Rohero, Bujumbura-Mairie, Bujumbura, Burundi