Privacy Policy
This Privacy Notice is related to the collection, use, processing and sharing of your personal data, including sensitive personal data, by any member of Eazy Financial Services (“Eazy”).
The Data Manager of your personal data is Eazy, you have or may have a relationship with. Eazy is committed to ensuring that your personal data is protected under Bahrain Personal Data Protection Law (PDPL) (Act No. 30 of 2018).
1. Eazy collects your personal data directly from you via different communication channels such as emails, phone calls, face-to-face meetings or online during registration process and completion of application forms, in the payment process, and during your engagement with Eazy to provide you with services
2. Eazy also collects your personal data indirectly from Internet, social media, public records, and Third-party service providers.
Eazy only processes your personal data including sensitive personal data based on lawful basis under Bahrain PDPL.
Eazy may take decisions based on automated processing of personal data including profiling of an individual or group.
Based on the specified lawful reasons of processing your personal data, Eazy may handle and process your:
1. Identity details: full name, contact details including telephone numbers and email addresses, gender, marital status, family details, job title(s), location of birth, photograph, video.
2. Address details: residential address, employer address, correspondence address.
3. Identification details: identification numbers issued by government bodies (for example: CPR, passport copy, driver’s license number, other government-issued identity number).
4. Financial information: bank account information, income and other financial information.
5. Anti-fraud data: details about fraud convictions, allegations of crimes and sanctions details received from various anti-fraud databases, or regulators or law enforcement agencies.
6. Sensitive personal data such as ethnicity, religion, and criminal records.
Eazy may share your personal data including sensitive personal data for the below mentioned reasons:
1. Internally with Eazy’s subsidiaries when there is a legitimate business interest.
2. With third parties when required by the law, or where it is necessary to administer the relationship with you or where we have another legitimate interest in doing so. These third parties include external auditors, system support vendors, and governmental bodies and may include the following:
a. Third Party Service Providers
b. Banks to process payment transactions including online payments
c. Attorneys for managing court cases between you and Eazy
Your personal data will be processed as per Eazy’s Personal Data Protection Framework. We use reasonable and appropriate measures to protect your personal data from unintentional or unauthorized destruction, accidental loss, unauthorized alteration, disclosure or access, or any other form of processing, taking into account the risks involved in the processing and the nature of the personal data.
Eazy retains your personal data based on legal retention period requirements, the validity of the contract, fulfilling its intended purposes, and historical archiving. We securely destroy and erase or anonymize your personal data to ensure that it cannot be restored after exceeding the specified retention period. In the majority of cases this will be for minimum of ten years from the end of your relationship with Eazy.
You have the right to request Eazy to:
1. Access your personal data processed by Eazy
2. Change your personal data when it is inaccurate or incomplete
3. Remove, block or restrict your personal data when:
a. Purpose of personal data is no longer valid
b. Processing of personal data is unlawful
c. Processing of personal data lacks the legitimate interest of Eazy
d. Deletion is necessary for compliance with the law
e. Personal data is inaccurate
f. You wish to withdraw your consent
4. Submit an objection when personal data is used for:
a. Direct marketing
b. Processing that may result in defamation or discrimination causing possible financial or emotional loss
c. Decision making and the decision is taken based only on automated processing
5. Withdraw your consent at any time to process or transfer your personal data for a specific reason
Eazy has the right to reject your request. Eazy will inform you about the rejection along with the reason for rejection within 15 business days of receiving the request. In case your request is incomplete, Eazy will inform you within 10 days of receiving the request to complete your request. Further, you have the right to complain to Bahrain Personal Data Protection Authority/Ministry of Justice.
It is essential for Eazy to keep your personal data up to date and accurate. Therefore, kindly provide your updated information in case there is any change to your personal data during your business relationship with us.
Eazy has the right to review and update the privacy notice. In case of any changes, we will inform you of any substantial change in how we process your personal data.
Eazy welcomes your comments regarding this Privacy Notice. If there is any concern related to processing of your personal data, please do not hesitate to reach out to our Data Protection Supervisor (DPS) through the below contact details: DPS Email Address: DPS@eazy.bh
Eazy Financial Services B.S.C (Closed), Office 111, Building 709, Road 1708, Block 317, Diplomatic Area, P.O.BOX 75194 Manama - Kingdom of Bahrain
We will take commercially and reasonable efforts to promptly determine and remedy the problem.
Reporting of Incidents and Problems
1. User must allocate sufficient time to acquaint themselves with Bahrain’s and regional Information Security and Privacy laws.
2. Any log-on problems, computer errors, security events or any observed or suspected security weaknesses in Eazy application must be reported to Eazy Financial Services as quickly as possible.
3. User must report suspicious behavior and indications of device tampering to Eazy Financial Services.
4. Eazy Financial Services reserves the right to revoke the privileges of any User at any time. Conduct that interferes with the normal and proper operation of the application will not be permitted.
Attribution
- Several icons used within the app
are under CC license, attributed to flaticon.com
- Several animations used within the app are under CC license, attributed to rive.com and lottiefiles.com