Skip to content
USA

Privacy Notice

Your Personal Data

We are Standard Chartered Group. We collect and process various types of data obtained directly from you as well as from other sources so that we can deliver our products and services to our clients and operate our business. Protecting your personal data is important to us.

Read more details in the privacy notice below. Choose the relevant notice based on your relationship with us.

SC PRIVACY NOTICE (US)
(PERSONAL, BUSINESS AND CORPORATE BANKING)

Protecting your personal information

Your personal information is important to us, and we want to make sure you know how we use and protect it. In this privacy notice, we’ll explain how we collect, disclose, and process your personal information. We’ll also tell you about your rights and how you can exercise them. We may also provide you where relevant, with additional privacy information in a separate notice for specific channels, products, services, businesses and activities.

In this privacy notice, “we”, “us” or “our”, refers to the Standard Chartered Groupbranch, subsidiary or legal entity operating under the Standard Chartered brand you interact with that processes your personal information and decides how it is collected and used.  Standard Chartered Group means each of, or collectively, Standard Chartered PLC, its subsidiaries and affiliates, including each branch or representative office.  Please refer to the ‘How to get in touch’ section of this privacy notice for details of the relevant Standard Chartered Group member(s) providing this privacy notice.

Some of our affiliates’ websites have their own brand identity and their own separate privacy notices to provide relevant information for specific products and services they provide.  You should refer to the relevant privacy notices as directed by those affiliates in relation to how they use your personal information.  This privacy notice does not apply to third-party websites where our online advertisements are displayed or to linked third-party websites we do not operate or control. These websites should have their own privacy notices, which you can read to understand how they collect and process your personal information and your rights.

We’ll update this privacy notice from time to time to let you know about any changes to how we use your personal information. You can find the current version date listed at the end of this privacy notice. If you have any questions or concerns about your personal information, please don’t hesitate to get in touch (you can find our details under ‘How to get in touch’ below).

What types of personal information do we collect?

Personal information is information that either identifies you or is about you, and we may collect it from a few different sources. This includes collecting personal information directly from you, third parties acting for you or who are related to you, from companies, businesses or organisations who are our clients that you represent or are related to you, from other members of the Standard Chartered Group and from other organisations, or publicly available sources.

Personal information we collect in respect to corporate client relationships is primarily limited to the information on directors and officers, other employees, direct and indirect beneficial owners and authorised persons we need to enable us to meet our due diligence obligations, signatory details and contact information of individuals we interact with to enable the provision of services to clients.

If you give us someone else’s personal information, you must have their permission and explain to them how we’ll use it.

In the preceding 12 months, we may have collected the following different types of personal information, depending on whether you bank with us as a client, that is either as an individual, company, business or organisation or you are related to or represent such individual, company, business or organisation, where it’s relevant and allowed by law: 

  • Identification data – information that identifies (uniquely or semi uniquely) you. For example, your name, your date of birth, your photographs, CCTV and video recordings of you and other identifiers and tax identification number
  • Contact data – information that allows addressing, sending or communicating a message to you. For example, your email address, your phone or mobile number and your residential or business address
  • Professional data – information about your educational or professional background
  • Financial and commercial data – information that identifies your financial position, status and history. For example, your account details, your source of funds, your financial and credit rating history
  • Behavioral data – information relating to your behaviors, activities or actions online. For example, your browsing behavior and how you interact with our online products and services, or those provided by third-party organisations, such as our social media companies
  • Personal relationship data – information about associations or close connections between individuals or entities that can determine your identity. For example, spouse or employer relationships
  • Communications data – information relating to you contained in voice, messaging, email and other communications we have with you. For example, service requests.

Sensitive personal information

We may sometimes need to collect more sensitive personal information from you, but we only do this if it’s necessary and with your consent, or where allowed by law. This sensitive personal information (sometimes known as special category personal information) may include things like:

  • Social security number
  • Official/government identifiers such as passport number or State driver’s license number
  • Precise geolocation data – information that provides or contains a device’s location
  • Criminal convictions, proceedings or allegations data – information about criminal convictions or related information that we identify in relation to our financial crime prevention obligations, for example, details about any criminal convictions or related information. This includes details of offences or alleged offences or convictions.

We usually get your personal information from the following:

  • Businesses and other organisations – such as:
    • your employer and/or company, business or organisation you represent or is related to you
  • Publicly available resources – such as online registers or directories or online publications, social media posts and other information that is publicly available
  • Cookies – when you visit, browse, or use our websites, online banking or mobile applications, we may use cookies to automatically collect certain information from your device. We may use such information, where relevant, for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content and to determine the security status of your account. For more information on how we use cookies and how you can control them when visiting our websites, please see our Cookies Policy at https://www.sc.com/us/cookie-policy/

Why do we collect your personal information?

We collect your personal information when completing know-your-customer (KYC) reviews on your entity. Under the KYC requirements, we need to identify and verify beneficial owners, directors, controllers and other relevant parties so that we can provide our products and services, manage our relationship with our clients and operate our business. This is necessary when you hold your own bank account with us and also when you represent, or are associated with, other individuals or organisations who bank with us, for example, if you act as a guarantor, employee, shareholder, director, officer or authorised person.

What we use your personal information for is often referred to as our purposes of processing and these are detailed below. We may not be able to offer or provide our products and services if you do not provide us with or want us to process the personal information that we consider is necessary and/or is required to meet our legal and regulatory obligations.

Purposes of Processing

We process your personal information for the following purposes, as relevant, depending on whether you have your own bank account with us or you represent, or are associated with, other individuals or organisations who bank with us.

Assessing and providing products and services to our clients

This includes:

  • assessing eligibility and suitability of product and service applications for clients; we may retain a record of the application if our eligibility criteria are not met
  • assessing your suitability as an individual guarantor
  • conducting relevant due diligence and KYC checks as required by applicable law
  • conducting credit checks and financial assessments
  • setting credit limits for clients
  • obtaining quotations for clients from third-party product providers, such as insurance products from insurance providers we partner with and assisting such providers to manage insurance products, including wealth management products.

Managing banking relationships and administering client accounts

This includes:

  • establishing, continuing and managing banking relationship and account with us or, where applicable, any member of the Standard Chartered Group
  • providing clients with appropriate access to our products and services, such as our online and mobile banking platforms
  • operating, providing and evaluating the products and services for clients
  • effecting transactions and acting on instructions or requests, such as transferring money between accounts and making payments to third parties for clients
  • maintaining up-to-date records of authorised persons and signature lists
  • administering, for example, credit facilities or loans for clients
  • maintaining contact information
  • responding to questions or managing any complaints, including monitoring social media conversations and posts to identify conversations, sentiments, and complaints about the Standard Chartered Group
  • issuing notifications about changes to the terms and conditions of our products and services
  • recording our communications for record-keeping and evidential purposes including online messages, email and telephone
  • facilitating open banking for clients, including with Account Information Service Providers (AISPs).

Operating our business

This includes:

  • managing authentication and user access controls for clients, for example, for online and mobile banking
  • creating and maintaining our credit scoring models relating to clients
  • conducting credit management activities, which includes maintaining client credit history and ensuring ongoing credit worthiness
  • assisting other banks and third parties recover funds that have entered client accounts as a result of erroneous payments
  • engaging in business operational management, such as performing administrative tasks relating to the products and services we provide, monitoring and reporting of our financial portfolio, risk management activities, audits and ensuring operation and security of our communications and processing systems, systems development and testing, business planning and decision-making.

Improving our products and services to our clients

This includes:

  • developing, testing and analysing our systems, products and services
  • monitoring and recording our communications with you, for example, phone calls, for training and quality purposes
  • conducting customer satisfaction surveys
  • gathering insights by aggregating data from the use of our products and services and our applications to provide you with more tailored products and services.

Keeping you and our people safe

This includes:

  • conducting identity verification security checks for building access
  • using CCTV surveillance recordings at our branches, premises and ATMs for the purposes of preventing and detecting fraud and/or other crimes, such as theft
  • investigating and reporting on incidents or emergencies on our properties and premises
  • for the security of our systems and networks in order to keep your data safe and confidential
  • for other health and safety compliance purposes.

Detecting, investigating and preventing financial crimes

This includes:

  • conducting identity verification security checks against government and other official centralised databases, as required by law
  • monitoring and recording our communications and screening applications and transactions in connection with actual or suspected fraud, financial crime or other criminal activities
  • recording and monitoring your electronic communications with us, to the extent permitted by applicable law, to ensure compliance with our legal and regulatory obligations and internal policies
  • conducting checks against government and non-government third parties’ fraud prevention and other financial crime prevention databases to prevent money laundering, terrorism, fraud and other financial crimes, to protect you, our clients and the integrity of the financial market. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies and may result in others refusing to provide services or employment to you.

Complying with applicable laws, regulations and other requirements

This includes:

  • identifying and investigating compliance with our own Standard Chartered Group policies
  • complying with relevant local and foreign law, regulations, rules, directives, judgments or court orders, requests, guidelines, government sanctions, embargo, reporting requirements, restrictions, demands or agreements with any authority (including domestic or foreign tax authorities), court or tribunal, enforcement agency or exchange body in any relevant jurisdiction where the Standard Chartered Group operates
  • following any voluntary guidelines or recommendations from industry bodies or associations.

Exercising our legal rights and conducting legal proceedings

This includes:

  • tracing and exercising our rights and protecting ourselves against harm to our rights and interests
  • retaining records as may be necessary as evidence for any potential litigation or investigation
  • recovering debts and arrears
  • obtaining professional advice
  • investigating or making an insurance claim
  • responding to any insurance related matter, action or proceeding
  • defending or responding to any current or prospective legal, regulatory, or industry bodies or association related matter, action or proceeding.

Facilitating Standard Chartered Group mergers, acquisitions, and divestments

This includes:

  • evaluating our business and providing continuity of services to you after a transfer of our business as a result of a merger, acquisition, sale or divestment.

Who may we disclose your personal information to?

We may disclose your personal information within the Standard Chartered Group and its affiliates.  Standard Chartered Group may disclose your personal information for the purposes of processing as set out in this privacy notice, including with our service providers, our business partners, other third parties and as required by law or requested by any authority. Who these are depends on your interactions with us as an individual client or as a representative for another individual or organisation that banks with us.

Over the last 12 months, we have disclosed for a business purpose to Standard Chartered Group and its affiliates the following categories of personal information:

  • Identification data
  • Certain sensitive personal information such as social security number and official/government identifier

We limit how, and with whom, we disclose your personal information, and take steps to ensure your personal information is kept confidential and protected when we disclose it. We may disclose your personal information for our purposes of processing with the following, where relevant and allowed by law:

  • Other members of the Standard Chartered Group
  • Authorised third parties
    • legal guardians, joint account holders, actual or intended guarantors/sureties, trustees, beneficiaries, executors, or authorised persons of our clients, any actual or potential participants or sub-participants in relation to any of our obligations in respect of any banking agreement, assignees, novatees or transferees (or any officers, employees, agents or advisers of any of them)
    • any other person you have authorised us by your consent to disclose your personal information to.
  • Third parties that can verify your information
    • other non-government third parties’ that conduct financial crime prevention databases checks to prevent money laundering, terrorism, fraud and other financial crimes.
  • Our service partners
    • professional advisers such as auditors, legal counsel, conveyancers and asset valuation specialists
    • insurers or insurance brokers
    • service providers (such as operational, administrative, data processing and technology service providers), including anyone engaged or partnered with to analyse and facilitate improvements or enhancements in Standard Chartered Group’s operations or provision of products and services
  • Government and law enforcement agencies
    • as required by law or requested by any authority, which includes any government, quasi-government, regulator, administrative, regulatory or supervisory body, court, tribunal, enforcement agency, exchange body or domestic or foreign tax authorities, having jurisdiction over any Standard Chartered Group member whether within or outside your jurisdiction and whether or not that Standard Chartered Group member has a relationship with you.
  • Other third parties
    • the individual, company, business or organisation, as applicable, that you represent or is related to you
    • third parties in case of a merger, acquisition or divestment: if we transfer (or plan to transfer) any part of our business or assets. If the transaction goes ahead, the interested party may use or disclose your personal information in the same way as set out in this privacy notice, and subsequently notify you of any changes they may make in terms with how they process your personal information.

Is there personal information that we do not disclose?

Certain personal information we do not disclose:

  • In the last 12 months we have not sold or shared your personal information for cross-context behavioral advertising.
  • We do not use or disclose your sensitive personal information for any purpose other as permitted by law (providing you the products or services requested in compliance with regulatory requirements).

Where do we transfer personal information?

Your personal information may be stored, disclosed and transferred by us within the Standard Chartered Group or with other third parties for the purposes described in this privacy notice. We do this in order to operate effectively, efficiently and securely in facilitating transactions and providing products and services to our clients, to improve and support our processes and business operations and to comply with our legal and regulatory obligations. This may involve storing, disclosing and transferring your personal information cross border to other jurisdictions.

Where recipients of your personal information are in jurisdictions that are outside the US, and local laws may not have similar data protection laws as the jurisdiction where you are or where we have a relationship, we will take all reasonable steps necessary to ensure that your personal information has an appropriate adequate level of protection and safeguards to comply with applicable law.

How do we protect your personal information?

We take the privacy and security of your personal information very seriously. To protect your data, we have put in place a range of technical, physical and organisational measures to protect and keep your personal information confidential. Standard Chartered Group has implemented information security policies, rules and technical measures to protect personal information and to comply with legal and regulatory requirements. We train and require staff who access your personal information to comply with our data privacy and security standards. We require our service providers, or other third parties we engage with and to whom we disclose your personal information to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal information.

We have put in place procedures to deal with personal information breach and will notify you and/or any applicable regulator of a relevant or material breach where we are legally required to do so.

How long do we keep your personal information?

We keep your personal information for business or legal reasons while you engage with us, and for a period of time afterwards for the purposes described in this privacy notice in accordance with our data retention policy standards and as required by applicable law. We will delete, anonymise, destroy and/or stop using personal information when we no longer need it.

What are your personal information protection rights?

We respect your personal information, and you have the following rights about how we use your information:

  • Right to access your data – you may request that we disclose to you the following information covering the 12 months preceding your request:
    • The categories of personal information that we collected about you and the categories of sources from which we collected such personal information;
    • The business or commercial purpose for collecting personal information relating to you;
    • The categories of personal information about you that we disclosed, and the categories of third parties to whom we disclosed, such personal information; and
    • The personal information that we maintain about you.
  • Right to correct your data – if your personal information is incorrect, you can ask us to update it.
  • Right to delete your data – you can ask us to delete your personal information. However, we may need certain personal details to provide our products and services to you.

We will verify and respond to requests to exercise your personal information rights in line with applicable law. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies. We may need to request additional personal information from you in order to verify your identity and protect against fraudulent requests. We will not unlawfully discriminate against you for exercising your rights under applicable law. If you have any questions about your rights, please contact us using the details below.

Authorized agents

If you would like an agent to make a request on your behalf to the extent permitted under applicable law, the agent may use the request methods listed above.  Not all kinds of requests can be made by authorized agents. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent.  In addition, we may require that you verify your identity as described above or confirm that you provided the agent permission to submit the request.

How to get in touch

The following Standard Chartered Group companies act as the business (sometimes known as controller in other jurisdictions) responsible for processing your personal information in the United States:

  • Standard Chartered Bank New York Branch
  • Standard Chartered Securities (North America) LLC

Address:
1095 Avenue of the Americas
New York
NY 10036

Contacting us by phone:

Corporate and Institutional Banking  Please contact the client Relationship Manager

Or by post at:
1095 Avenue of the Americas
New York
NY 10036

Got a complaint?
If you have any concerns or complaints about how we’re using your personal information, please talk to us. You can contact the client Relationship Manager.

Cookies
Please see our separate Cookie Policy at https://www.sc.com/us/cookie-policy/

Other Terms and conditions
There may be specific terms and conditions in our banking and product agreements that govern the collection, use and disclosure of your personal information. Such other terms and conditions must be read in conjunction with this privacy notice.

This privacy notice was updated on 30 June 2023.

SC PRIVACY NOTICE (US)
(RECRUITMENT)

Protecting your personal information

Your personal information is important to us, and we want to make sure you know how we use and protect it. In this privacy notice, we’ll explain how we collect, disclose, and process your personal information. We’ll also tell you about your rights and how you can exercise them. We may also provide you where relevant, with additional privacy information in a separate notice for specific channels, products, services, businesses and activities.

In this privacy notice, “we”, “us” or “our”, refers to the Standard Chartered Groupbranch, subsidiary or legal entity operating under the Standard Chartered brand you interact with that processes your personal information and decides how it is collected and used.  Standard Chartered Group means each of, or collectively, Standard Chartered PLC, its subsidiaries and affiliates, including each branch or representative office.  Please refer to the ‘How to get in touch’ section of this privacy notice for details of the relevant Standard Chartered Group member(s) providing this privacy notice.

Some of our affiliates’ websites have their own brand identity and their own separate privacy notices to provide relevant information for specific products and services they provide.  You should refer to the relevant privacy notices as directed by those affiliates in relation to how they use your personal information.  This privacy notice does not apply to third-party websites where our online advertisements are displayed or to linked third-party websites we do not operate or control. These websites should have their own privacy notices, which you can read to understand how they collect and process your personal information and your rights.

We’ll update this privacy notice from time to time to let you know about any changes to how we use your personal information. You can find the current version date listed at the end of this privacy notice. If you have any questions or concerns about your personal information, please don’t hesitate to get in touch (you can find our details under ‘How to get in touch’ below).

What types of personal information do we collect?

Personal information is information that either identifies you or is about you, and we may collect it from a few different sources. This includes collecting personal information directly from you, third parties acting for you or who are related to you, from companies, businesses or organisations who are related to you, from other members of the Standard Chartered Group and from other organisations, or publicly available sources.

If you give us someone else’s personal information, you must have their permission and explain to them how we’ll use it.

In the preceding 12 months, we may have collected the following different types of personal information when you apply for a job with us or are engaged to provide services to us, where it’s relevant and allowed by law:

  • Identification data – information that identifies (uniquely or semi uniquely) you. For example, your name, your gender, your date of birth, your nationality, employment eligibility documentation, your photographs, CCTV and video recordings of you, video, photographic images or audio recordings submitted as part of the recruitment process, and other identifiers such as tax identification number.
  • Contact data – information that allows addressing, sending or communicating a message to you. For example, your email address, your phone or mobile number and your residential address.
  • Professional data – information about your educational or professional background. For example, academic background (such as your university or school diplomas/certificates and other educational achievements), current and previous employment details, curriculum vitae/resume, professional qualifications and licences, references and work visa
  • Financial data – information that identifies your financial position, status and history. For example, your credit reports, payslips and other financial information 
  • Behavioral data – information relating to your behaviors, activities or actions online. For example, results of any pre-employment testing such as psychometric testing
  • Personal relationship data – information about associations or close connections between individuals or entities that can determine your identity. For example, politically exposed person, public official, client, close personal or close financial relationships
  • Communications data – information relating to you contained in voice, messaging, email and other communications we have with you, for example, via online forms.

Sensitive personal information

We may sometimes need to collect more sensitive personal information from you, but we only do this if it’s necessary and with your consent, or where allowed by law. This sensitive personal information (sometimes known as special category personal information) may include things like:

  • Racial or ethnic origin data – information which reveals your racial or ethnic origin
  • Social security number
  • Official/government identifiers such as passport number or State driver’s license number
  • Health data – information relating to your health status
  • Trade union membership – if relevant in certain jurisdictions
  • Geo-location data – information that provides or contains a device’s location

We are committed to providing equal opportunities and fair treatment in employment and recruitment. As part of this, we ask optional demographic questions as part of our application process. These questions are asked purely for the purposes of furthering those aims and creating a diverse and inclusive working environment. The answers to these questions do not form part of our selection process and they are not disclosed to the relevant decision makers. They are only reviewed as an aggregated and anonymised report for our Internal Global Diversity and Inclusion and Analytics teams to better assess and address our current level of diversity. You have the choice not to answer these questions.

We usually get your personal information directly from you, but we may also obtain your personal information from elsewhere as follows: 

  • People you know – such as:
    • friends or relatives who have referred you to us
    • your previous employers
    • recruitment agencies
    • other people you appoint to act as your referees
    • other people you appoint to act on your behalf
  • Businesses and other organisations – such as:
    • your employer and/or company, business or organisation you represent or is related to you
    • credit reference and fraud prevention agencies
    • criminal records bureau
    • Standard Chartered career webpage
    • social network sites, for example LinkedIn, Facebook and Google+
  • Publicly available resources – such as online directories, career platforms, publications, social media posts and other information that is publicly available
  • Cookies – when you visit, browse, or use our websites, online banking or mobile applications, we may use cookies to automatically collect certain information from your device. We may use such information, where relevant, for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content and to determine the security status of your account. For more information on how we use cookies and how you can control them when visiting our websites, please see our Cookies Policy at https://www.sc.com/us/cookie-policy/

Why do we collect your personal information?

We collect your personal information so that we can manage our recruitment process and operate our business.

What we use your personal information for is often referred to as our purposes of processing and these are detailed below. We may not be able to proceed with your job application if you do not provide us with or want us to process the personal information that we consider is necessary and/or is required to meet our legal and regulatory obligations.

Purposes of Processing

We process your personal information for the following purposes, as relevant:

Assessing and processing your job application

This includes:

  • reviewing your application (which may include interview videos)
  • assessing your skills, qualifications and suitability for the job role or engagement you applied for (including results of psychometric tests)
  • processing your application
  • conducting pre-employment or pre-engagement searches, background checks to verify your identity
  • obtaining references
  • communicating with you in relation to your application. We may also notify you of other potential career opportunities or job vacancies that we think might suit you.

Improving our applicant screening procedures

This includes:

  • engaging in business operational management, such as performing administrative tasks, risk management activities, audits and ensuring operation and security of our communications and processing systems
  • auditing business operations
  • gathering insights by aggregating data from our recruitment process to improve the recruitment process, including the process of screening job applicants.

Keeping you and our people safe

This includes:

  • conducting identity verification security checks for building access
  • using CCTV surveillance recordings at our branches, premises and ATMs for the purposes of preventing and detecting fraud and/or other crimes, such as theft
  • investigating and reporting on incidents or emergencies on our properties and premises
  • for the security of our systems and networks in order to keep your data safe and confidential
  • for other health and safety compliance purposes.

Detecting, investigating and preventing financial crimes

This includes

  • conducting pre-employment or engagement identity verification screening, including searches with a credit reference agency, sanctions screening checks and criminal record checks to the extent permitted by applicable law
  • recording and monitoring your electronic communications with us, to the extent permitted by applicable law, to ensure compliance with our legal and regulatory obligations and internal policies.

Complying with applicable laws, regulations and other requirements

This includes:

  • identifying and investigating compliance with our own Standard Chartered Group policies
  • complying with relevant local and foreign law, regulations, rules, directives, judgments or court orders, requests, guidelines, government sanctions, embargo, reporting requirements, restrictions, demands or agreements with any authority (including domestic or foreign tax authorities), court or tribunal, enforcement agency or exchange body in any relevant jurisdiction where the Standard Chartered Group operates
  • following any voluntary guidelines or recommendations from industry bodies or associations.

Exercising our legal rights and conducting legal proceedings

This includes:

  • tracing and exercising our rights and protecting ourselves against harm to our rights and interests
  • retaining records as may be necessary as evidence for any potential litigation or investigation
  • obtaining professional advice
  • investigating or making an insurance claim
  • responding to any insurance related matter, action or proceeding
  • defending or responding to any current or prospective legal, regulatory, or industry bodies or association related matter, action or proceeding.

When do we conduct direct marketing?

We may sometimes, and with your consent if required by applicable law, use your contact details to send relevant marketing communications (such as by post, email, telephone, SMS, secure messages, mobile app or social media). You may withdraw your consent at any time by contacting us using the details below.

We may send the following communications:

  • job opportunities
  • seminars and webinars
  • other events or opportunities

Who may we disclose your personal information to?

We may disclose your personal information within the Standard Chartered Group. Standard Chartered Group may disclose your personal information for the purposes of processing as set out in this privacy notice, including with our service providers, our business partners, other third parties and as required by law or requested by any authority. Who these are depends on your interactions with us.

Over the last 12 months, we have disclosed for a business purpose to each of the categories of third parties described in the paragraphs below, all of the categories of personal information and sensitive personal information described above in the ‘What types of personal information do we collect?’ section above.

We limit how, and with whom, we disclose your personal information, and take steps to ensure your personal information is kept confidential and protected when we disclose it. We may disclose your personal information for our purposes of processing with the following, where relevant and allowed by law:

  • Other members of the Standard Chartered Group
  • Authorised third parties
    • any other person you have authorised us by your consent to disclose your personal information to.
  • Third parties that can verify your information
    • ex-employers
    • credit bureaus or credit reference agencies (including the operator of any centralised database used by credit reference agencies), credit protection providers, rating agencies, debt collection agencies, fraud prevention agencies and organisations.
  • Our service partners
    • recruitment agencies
    • professional advisers such as auditors and legal counsel
    • insurers or insurance brokers
    • service providers (such as operational, administrative, data processing and technology service providers), including anyone engaged or partnered with to analyse and facilitate improvements or enhancements in Standard Chartered Group’s operations or provision of products and services
    • providers of professional services, such as screening and authentication providers, pre-employment health test providers, market researchers and management consultants.
  • Government and law enforcement agencies
    • as required by law or requested by any authority, which includes any government, quasi-government, regulator, administrative regulatory or supervisory body, court, tribunal, enforcement agency, exchange body or domestic or foreign tax authorities, having jurisdiction over any Standard Chartered Group member whether within or outside your jurisdiction and whether or not that Standard Chartered Group member has a relationship with you.
  • Other third parties
    • third parties in case of a merger, acquisition or divestment: if we transfer (or plan to transfer) any part of our business or assets. If the transaction goes ahead, the interested party may use or disclose your personal information in the same way as set out in this privacy notice, and subsequently notify you of any changes they may make in terms with how they process your personal information.

Is there personal information that we do not disclose?

Certain personal information we do not disclose:

  • In the last 12 months we have not sold or shared your personal information for cross-context behavioral advertising.
  • We do not use or disclose your sensitive personal information for any purpose other as permitted by law (providing you with employment opportunities and reasonably expected associated activities). 

Where do we transfer your personal information?

Your personal information may be stored, disclosed and transferred by us within the Standard Chartered Group or with other third parties for the purposes described in this privacy notice. We do this in order to improve and support our processes and business operations and to comply with our legal and regulatory obligations. This may involve storing, sharing and transferring your personal information cross border to other jurisdictions.

Where recipients of your personal information are in jurisdictions that are outside the US, and local laws may not have similar data protection laws as the jurisdiction where you are or where we have a relationship, we will take all reasonable steps necessary to ensure that your personal information has an appropriate adequate level of protection and safeguards to comply with applicable law.

How do we protect your personal information?

We take the privacy and security of your personal information very seriously. To protect your data, we have put in place a range of technical, physical and organisational measures to protect and keep your personal information confidential. Standard Chartered Group has implemented information security policies, rules and technical measures to protect personal information and to comply with legal and regulatory requirements. We train and require staff who access your personal information to comply with our data privacy and security standards. We require our service providers, or other third parties we engage with and to whom we disclose your personal information to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal information.

We have put in place procedures to deal with personal information breach and will notify you and/or any applicable regulator of a relevant or material breach where we are legally required to do so.

How long do we keep your personal information?

We keep your personal information for business or legal reasons while you engage with us, and for a period of time afterwards for the purposes described in this privacy notice in accordance with our data retention policy standards and as required by applicable law.  We will delete, anonymise, destroy and/or stop using personal information when we no longer need it and are no longer required by law to maintain it.

What are your personal information protection rights?

We respect your personal information, and you have the following rights about how we use your information:

  • Right to access your data – you may request that we disclose to you the following information covering the 12 months preceding your request:
    • The categories of personal information that we collected about you and the categories of sources from which we collected such personal information;
    • The business or commercial purpose for collecting personal information relating to you;
    • The categories of personal information about you that we disclosed, and the categories of third parties to whom we disclosed, such personal information; and
    • The personal information that we maintain about you.
  • Right to correct your data – if your personal information is incorrect, you can ask us to update it.
  • Right to delete your data – you can ask us to delete your personal information. However, we may need certain personal details to provide our products and services to you.
  • Right to restrict or object to processing – you can ask us to stop using your data or change how we use it. However, we may need certain personal details to engage with you or provide our products and services to you.
  • Right to object to automated decision making – you can ask us to review a decision made solely by automated processing if it negatively impacts you.
  • Right to data portability – you can ask us to provide your personal information to another organisation in a format that can be easily read by machines.
  • Right to change or withdraw consent – if we ask for your consent to use your personal information, you can change your mind at any time.
  • Right to withdraw from direct marketing – you can tell us to stop sending you marketing emails or invitations to surveys at any time.

We will verify and respond to requests to exercise your personal information rights in line with applicable law. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies. We may need to request additional personal information from you in order to verify your identity and protect against fraudulent requests. We will not unlawfully discriminate against you for exercising your rights under applicable law. If you have any questions about your rights, please contact us using the details below.

Authorized agents

If you would like an agent to make a request on your behalf to the extent permitted under applicable law, the agent may use the request methods listed above.  Not all kinds of requests can be made by authorized agents. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent.  In addition, we may require that you verify your identity as described above or confirm that you provided the agent permission to submit the request.

How to get in touch

The following Standard Chartered Group companies act as the business (sometimes known as controller in other jurisdictions) responsible for processing your personal information in the United States:

  • Standard Chartered Bank New York Branch
  • Standard Chartered Securities (North America) LLC

Address:
1095 Avenue of the Americas
New York
NY 10036

Got a complaint?
If you have any concerns or complaints about how we’re using your personal information, please talk to us. You can contact us at AskHR@sc.com.

Cookies
Please see our separate Cookie Policy at https://www.sc.com/us/cookie-policy/

Other Terms and conditions
There may be specific terms and conditions in our recruitment process that govern the collection, use and disclosure of your personal information. Such other terms and conditions must be read in conjunction with this privacy notice.

This privacy notice was updated on 3 July 2023.

SC PRIVACY NOTICE (US)
(VENDORS)

Protecting your personal information

Your personal information is important to us, and we want to make sure you know how we use and protect it. In this privacy notice, we’ll explain how we collect, disclose, and process your personal information. We’ll also tell you about your rights and how you can exercise them. We may also provide you where relevant, with additional privacy information in a separate notice for specific channels, products, services, businesses and activities.

In this privacy notice, “we”, “us” or “our”, refers to the Standard Chartered Groupbranch, subsidiary or legal entity operating under the Standard Chartered brand you interact with that processes your personal information and decides how it is collected and used.  Standard Chartered Group means each of, or collectively, Standard Chartered PLC, its subsidiaries and affiliates, including each branch or representative office.  Please refer to the ‘How to get in touch’ section of this privacy notice for details of the relevant Standard Chartered Group member(s) providing this privacy notice.

Some of our affiliates’ websites have their own brand identity and their own separate privacy notices to provide relevant information for specific products and services they provide.  You should refer to the relevant privacy notices as directed by those affiliates in relation to how they use your personal information.  This privacy notice does not apply to third-party websites where our online advertisements are displayed or to linked third-party websites we do not operate or control. These websites should have their own privacy notices, which you can read to understand how they collect and process your personal information and your rights.

We’ll update this privacy notice from time to time to let you know about any changes to how we use your personal information. You can find the current version date listed at the end of this privacy notice. If you have any questions or concerns about your personal information, please don’t hesitate to get in touch (you can find our details under ‘How to get in touch’ below).

What types of personal information do we collect?

Personal information is information that either identifies you or is about you, and we may collect it from a few different sources. This includes collecting personal information directly from you, third parties acting for you or who are related to you, from companies, businesses or organisations who are our clients that you represent or are related to you, from other members of the Standard Chartered Group and from other organisations, or publicly available sources.

Personal information we collect in respect to our vendors is primarily limited to the information on directors and officers, other employees, direct and indirect beneficial owners and authorised persons we need to enable us to meet our due diligence obligations, signatory details and contact information of individuals we interact with to enable the provision of services to Standard Chartered Group.

If you give us someone else’s personal information, you must have their permission and explain to them how we’ll use it.

In the preceding 12 months, we may have collected the following different types of personal information, depending on whether you provide goods and/or services to us directly or you are related to or represent such individual, company, business or organisation, where it’s relevant and allowed by law:

  • Identification data – information that identifies (uniquely or semi uniquely) you. For example, your name, your photographs, CCTV and video recordings of you, building access data to our premises and social media profile details. We may also collect other identifiers such as tax identification number
  • Contact data – information that allows addressing, sending or communicating a message to you. For example, your email address, your phone or mobile number and your residential or business address
  • Professional data – information about your educational or professional background. For example, occupation, title, licenses, and professional memberships, documents evidencing industrial track-record, client testimonials, current and previous employment details, curriculum vitae/resume, professional qualifications, references and work visa 
  • Financial and commercial data – information that identifies your financial position, status and history. For example, your account details when you are the recipient of a payment by us, your background information, such as your business financial credit report and score
  • Geo-location data – information that provides or contains a device’s location. For example, your internet protocol (IP) address or your cookies identifier
  • Behavioral data – information relating to your behaviours, activities or actions online. For example, your browsing behaviour and how you interact with our online products and services
  • Personal relationship data – information about associations or close connections between individuals or entities that can determine your identity. For example, the agency, company, business or organisation you represent or is related to you
  • Communications data – information relating to you contained in voice, messaging, email and other communications we have with you. For example, via online forms and online subscriptions

Sensitive personal information

We may sometimes need to collect more sensitive personal information from you, but we only do this if it’s necessary and with your consent, or where allowed by law. This sensitive personal information (sometimes known as special category personal information) may include things like:

  • Social security number
  • Official/government identifiers such as passport number or State driver’s license number
  • Precise geolocation data – information that provides or contains a device’s location
  • Criminal convictions, proceedings or allegations data – information about criminal convictions or related information that we identify in relation to our financial crime prevention obligations, for example, details about any criminal convictions or related information. This includes details of offences or alleged offences or convictions.

We usually get your personal information directly from you, but we may also obtain your personal information from elsewhere as follows: 

  • People you know – such as such as your colleagues, contractors and associates
  • Businesses and other organisations – such as:
    • your employer and/or company, business or organisation you represent or is related to you
    • other financial institutions and financial service providers
  • Publicly available resources – such as online registers or directories or online publications, social media posts and other information that is publicly available

Cookies – when you visit, browse, or use our websites, online banking or mobile applications, we may use cookies to automatically collect certain information from your device. We may use such information, where relevant, for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content and to determine the security status of your account. For more information on how we use cookies and how you can control them when visiting our websites, please see our Cookies Policy at https://www.sc.com/us/cookie-policy/.

Why do we collect your personal information?

We collect your personal information so that we can manage our relationship with you, or the organisation you represent, and operate our business.

What we use your personal information for is often referred to as our purposes of processing and these are detailed below. You or the individual, company, business or organisation that you are related to or represent, may not be able to offer or provide products and/or services to us if you do not provide us with or want us to process the personal information that we consider is necessary and/or is required to meet our legal and regulatory obligations.

Purposes of Processing

We process your personal information for the following purposes, as relevant, depending on whether you provide goods and/or services to us directly or you represent, or are associated with, other individuals or organisations who provide goods and/or services to us.

Onboarding, managing and monitoring our vendor relationships

This includes:

  • conducting vendor due diligence at onboarding, contract renewal and as required during the contract performance
  • engaging with you as a representative of our vendor/service provider for the purpose of providing goods and/or services to us
  • creating and maintaining our vendor account
  • contacting you
  • monitoring the performance of vendor contracts
  • settling bills and accounts

Operating our business

This includes:

  • engaging in business operational management, such as performing administrative tasks, risk management activities, audits and ensuring operation and security of our communications and processing systems
  • developing, testing and analysing our systems, products and services, for example, to offer a well-functioning website or other applications to users
  • monitoring and recording our communications with you, for example, phone calls, for training and quality purposes.

Keeping you and our people safe

This includes:

  • using CCTV surveillance recordings at our premises for the purposes of preventing and detecting fraud and/or other crimes, such as theft
  • investigating and reporting on incidents or emergencies on our properties and premises
  • for the security of our systems and networks in order to keep your data safe and confidential
  • for other health and safety compliance purposes.

Detecting, investigating and preventing financial crimes

This includes:

  • conducting identity verification security checks against government and other official centralised databases, as required by law
  • monitoring and recording our communications and screening applications and transactions in connection with actual or suspected fraud, financial crime or other criminal activities
  • recording and monitoring your electronic communications with us, to the extent permitted by applicable law, to ensure compliance with our legal and regulatory obligations and internal policies.

Complying with applicable laws, regulations and other requirements

This includes:

  • identifying and investigating compliance with our own Standard Chartered Group policies
  • complying with relevant local and foreign law, regulations, rules, directives, judgments or court orders, requests, guidelines, government sanctions, embargo, reporting requirements, restrictions, demands from or agreements with any authority (including domestic or foreign tax authorities), court or tribunal, enforcement agency or exchange body in any relevant jurisdiction where the Standard Chartered Group operates
  • following any voluntary guidelines or recommendations from industry bodies or associations.

Exercising our legal rights and conducting legal proceedings

This includes:

  • tracing and exercising our rights and protecting ourselves against harm to our rights and interests
  • retaining records as may be necessary as evidence for any potential litigation or investigation
  • recovering debts and arrears
  • conducting litigation to enforce our rights or the rights of any other member of the Standard Chartered Group
  • obtaining professional advice
  • investigating or making an insurance claim
  • responding to any insurance related matter, action or proceeding
  • defending or responding to any current or prospective legal, regulatory, or industry bodies or association related matter, action or proceeding.

Who may we disclose your personal information to?

We may disclose your personal information within the Standard Chartered Group. Standard Chartered Group may disclose your personal information for the purposes of processing as set out in this privacy notice, including with our other service providers, our business partners, other third parties and as required by law or requested by any authority. Who these are depends on whether you provide goods and/or services to us directly or you represent, or are associated with, other individuals or organisations who provide goods and/or services to us.

Over the last 12 months, we have disclosed for a business purpose to Standard Chartered Group and its affiliates the following categories of personal information:

We limit how, and with whom, we disclose your personal information, and take steps to ensure your personal information is kept confidential and protected when we disclose it. We may disclose your personal information for our purposes of processing with the following, where relevant and allowed by law:

  • Other members of the Standard Chartered Group
  • Authorised third parties
    • any other person you have authorised us by your consent to disclose your personal information to.
  • Third parties that can verify your information
    • credit bureaus or credit reference agencies (including the operator of any centralised database used by credit reference agencies) and fraud prevention agencies and organisations
    • other non-government third parties’ that conduct financial crime prevention databases checks to prevent money laundering, terrorism, fraud and other financial crimes.
  • Our service partners
    • professional advisers such as auditors and legal counsel
    • insurers or insurance brokers
    • service providers (such as operational, administrative, data processing and technology service providers), including anyone engaged or partnered with to analyse and facilitate improvements or enhancements in Standard Chartered Group’s operations or provision of products and services
    • providers of professional services, such as market researchers, forensic investigators and management consultants.
  • Other financial services organisations
    • other financial institutions, such as merchant banks, correspondent banks or national banks.
  • Government and law enforcement agencies
    • as required by law or requested by any authority, which includes any government, quasi-government, regulator, administrative regulatory or supervisory body, court, tribunal, enforcement agency, exchange body or domestic or foreign tax authorities, having jurisdiction over any Standard Chartered Group member whether within or outside your jurisdiction and whether or not that Standard Chartered Group member has a relationship with you.
  • Other third parties
    • the individual, company, business or organisation, as applicable, that you represent or is related to you
    • third parties in case of a merger, acquisition or divestment: if we transfer (or plan to transfer) any part of our business or assets. If the transaction goes ahead, the interested party may use or disclose your personal information in the same way as set out in this privacy notice, and subsequently notify you of any changes they may make in terms with how they process your personal information.

Is there personal information that we do not disclose?

Certain personal information we do not disclose:

  • In the last 12 months we have not sold or shared your personal information for cross-context behavioral advertising.
  • We do not sell or share your personal information for cross-context behavioral advertising.
  • We do not use or disclose your sensitive personal information for any purpose other as permitted by law (providing you the products or services requested in compliance with regulatory requirements). 

Where do we transfer personal information?

Your personal information may be stored, disclosed and transferred by us within the Standard Chartered Group or with other third parties for the purposes described in this privacy notice. We do this in order to operate effectively, efficiently and securely in facilitating transactions and providing products and services to our clients, to improve and support our processes and business operations and to comply with our legal and regulatory obligations. This may involve storing, sharing and transferring your personal information cross border to other jurisdictions.

Where recipients of your personal information are in jurisdictions that are outside the US, and local laws may not have similar data protection laws as the jurisdiction where you are or where we have a relationship, we will take all reasonable steps necessary to ensure that your personal information has an appropriate adequate level of protection and safeguards to comply with applicable law.

How do we protect your personal information?

We take the privacy and security of your personal information very seriously. To protect your data, we have put in place a range of technical, physical and organisational measures to protect and keep your personal information confidential. Standard Chartered Group has implemented information security policies, rules and technical measures to protect personal information and to comply with legal and regulatory requirements. We train and require staff who access your personal information to comply with our data privacy and security standards. We require our service providers, or other third parties we engage with and to whom we disclose your personal information to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal information.

How long do we keep your personal information?

We keep your personal information for business or legal reasons while you engage with us, and for a period of time afterwards for the purposes described in this privacy notice in accordance with our data retention policy standards and as required by applicable law. We will delete, anonymise, destroy and/or stop using personal information when we no longer need it.

What are your personal information protection rights?

We respect your personal information, and you have the following rights about how we use your information:

  • Right to access your data – you may request that we disclose to you the following information covering the 12 months preceding your request:
    • The categories of personal information that we collected about you and the categories of sources from which we collected such personal information;
    • The business or commercial purpose for collecting personal information relating to you;
    • The categories of personal information about you that we disclosed, and the categories of third parties to whom we disclosed, such personal information; and
    • The personal information that we maintain about you.
  • Right to correct your data – if your personal information is incorrect, you can ask us to update it.
  • Right to delete your data – you can ask us to delete your personal information. However, we may need certain personal details to provide our products and services to you.
  • Right to restrict or object to processing – you can ask us to stop using your data or change how we use it. However, we may need certain personal details to engage with you or provide our products and services to you.
  • Right to change or withdraw consent – if we ask for your consent to use your personal information, you can change your mind at any time.

We will verify and respond to requests to exercise your personal information rights in line with applicable law. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies. We may need to request additional personal information from you in order to verify your identity and protect against fraudulent requests. We will not unlawfully discriminate against you for exercising your rights under applicable law.  If you have any questions about your rights, please contact us using the details below.

Authorized agents

If you would like an agent to make a request on your behalf to the extent permitted under applicable law, the agent may use the request methods listed above.  Not all kinds of requests can be made by authorized agents. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent.  In addition, we may require that you verify your identity as described above or confirm that you provided the agent permission to submit the request.

How to get in touch

The following Standard Chartered Group companies act as the business (sometimes known as controller in other jurisdictions) responsible for processing your personal information in the United States:

  • Standard Chartered Bank New York Branch
  • Standard Chartered Securities (North America) LLC

Address:
1095 Avenue of the Americas
New York
NY 10036

If you have any questions about this privacy notice or would like to exercise any of your personal information protection rights, you may contact your US Supply Chain Management representative at:

Address:
1095 Avenue of the Americas
New York
NY 10036

You can also send us your inquiry by email at americas.dataprivacy@sc.com

Got a complaint?

If you have any concerns or complaints about how we’re using your personal information, please talk to us by using the contact information set forth above.

Cookies

Please see our separate Cookie Policy at https://www.sc.com/us/cookie-policy/.

Other Terms and conditions

There may be specific terms and conditions in our vendor agreements that govern the collection, use and disclosure of your personal information. Such other terms and conditions must be read in conjunction with this privacy notice.

This privacy notice was updated on 10 August 2023.

SC PRIVACY NOTICE (US)
(VISITORS AND OTHER NON-CLIENTS)

Protecting your personal information

Your personal information is important to us, and we want to make sure you know how we use and protect it. In this privacy notice, we’ll explain how we collect, disclose, and process your personal information. We’ll also tell you about your rights and how you can exercise them. We may also provide you where relevant, with additional privacy information in a separate notice for specific channels, products, services, businesses and activities.

In this privacy notice, “we”, “us” or “our”, refers to the Standard Chartered Groupbranch, subsidiary or legal entity operating under the Standard Chartered brand you interact with that processes your personal information and decides how it is collected and used.  Standard Chartered Group means each of, or collectively, Standard Chartered PLC, its subsidiaries and affiliates, including each branch or representative office. Please refer to the ‘How to get in touch’ section of this privacy notice for details of the relevant Standard Chartered Group member(s) providing this privacy notice.

Some of our affiliates’ websites have their own brand identity and their own separate privacy notices to provide relevant information for specific products and services they provide. You should refer to the relevant privacy notices as directed by those affiliates in relation to how they use your personal information. This privacy notice does not apply to third-party websites where our online advertisements are displayed or to linked third-party websites we do not operate or control. These websites should have their own privacy notices, which you can read to understand how they collect and process your personal information and your rights.

We’ll update this privacy notice from time to time to let you know about any changes to how we use your personal information. You can find the current version date listed at the end of this privacy notice. If you have any questions or concerns about your personal information, please don’t hesitate to get in touch (you can find our details under ‘How to get in touch’ below).

What types of personal information do we collect?

Personal information is information that either identifies you or is about you, and we may collect it from a few different sources. This includes collecting personal information directly from you, third parties acting for you or who are related to you, from companies, businesses or organisations who are our clients that you represent or are related to you, from other members of the Standard Chartered Group and from other organisations, or publicly available sources.

If you give us someone else’s personal information, you must have their permission and explain to them how we’ll use it.

If you are:

  • a visitor to our websites, social media pages, premises or ATMs
  • An attendee of our events or webinars
  • a sponsorship or donation beneficiary
  • a subscriber, where you subscribe to receive our publications, reports and research
  • someone who contacts us for information  
  • someone who reports an issue or complaint, for example, via an online form or through email
  • a payment transaction beneficiary or remitter; or
  • any other individual who is not a client or related to a client, then,

We may collect the following different types of personal information from you, where it’s relevant and allowed by law:

  • Identification data – information that identifies (uniquely or semi uniquely) you. For example, your name, your photographs, CCTV and video recordings of you, building access data to our premises and social media profile details. We may also collect other identifiers and tax identification number if you make a report, for example, via an online form or through email
  • Contact data – information that allows addressing, sending or communicating a message to you. For example, your email address, your phone or mobile number and your residential or business address
  • Financial and commercial data – information that identifies your financial history. For example, your bank account number when you are the recipient of a payment by our client
  • Behavioral data – information relating to your behaviours, activities or actions online. For example, your browsing behaviour and how you interact with our online advertisements
  • Personal relationship data – information about associations or close connections between individuals or entities that can determine your identity. For example, the agency, company, business or organisation you represent or is related to you
  • Communications data – information relating to you contained in voice, messaging, email and other communications we have with you. For example, via online forms and online subscriptions.

Sensitive personal information

We may sometimes need to collect more sensitive personal information from you if you make a report, for example, via an online form or through email, but we only do this if it’s necessary and with your consent, or where allowed by law. This sensitive personal information (sometimes known as special category personal information) may include things like:

  • Racial or ethnic origin data – information which reveals your racial or ethnic origin
  • Political data – information which reveals your political opinions
  • Religious or philosophical data – information which reveals religious or philosophical beliefs
  • Official/government identifiers such aspassport number or State driver’s license number
  • Precise geolocation data – information that provides or contains a device’s location
  • Trade union data – information which reveals trade union membership, if relevant in certain jurisdictions
  • Health data – information relating to your health status
  • Sexual orientation and gender identity data – information concerning your sex life or sexual orientation
  • Criminal convictions, proceedings or allegations data – information about criminal convictions or related information that we identify in relation to our financial crime prevention obligations, for example, details about any criminal convictions or related information. This includes details of offences or alleged offences or convictions.

We usually get your personal information directly from you, but we may also obtain your personal information from elsewhere as follows: 

  • Businesses and other organisations – such as:
    • the agency, company, business or organisation you represent or is related to you
    • other financial institutions and financial service providers
  • Publicly available resources – such as online registers or directories or online publications, social media posts and other information that is publicly available
  • Cookies – when you visit, browse, or use our websites, online banking or mobile applications, we may use cookies to automatically collect certain information from your device. We may use such information, where relevant, for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content and to determine the security status of your account. For more information on how we use cookies and how you can control them when visiting our websites, please see our Cookies Policy at https://www.sc.com/us/cookie-policy/.

Why do we collect your personal information?

We collect your personal information so that we can manage our relationship with you, respond to your requests, and operate our business and provide our products and services.

What we use your personal information for is often referred to as our purposes of processing and these are detailed below. We may not be able to offer or provide our products and services if you do not provide us with or want us to process the personal information that we consider is necessary and/or is required to meet our legal and regulatory obligations.

Purposes of Processing

We process your personal information for the following purposes, as relevant:

Operating our business

This includes:

  • engaging in business operational management, such as performing administrative tasks, risk management activities, audits and ensuring operation and security of our communications and processing systems
  • developing, testing and analysing our systems, products and services, for example, to offer a well-functioning website or other applications to users.
  • monitoring and recording our communications with you, for example, phone calls, for training and quality purposes.

Promoting and protecting our brand

This includes:

  •  branding and corporate affairs management, creating publications, marketing campaigns and producing advertisements
  • gathering insights by aggregating data from the use of our products and services and our applications, for example, social media listening to identify, assess and discover key
  • social media monitoring to identify our brand mentions to protect our brand and reputation
  • facilitating sponsorship, donations and events.

Getting in touch with you

This includes:

  • sending you requested publications, newsletters, reports and relevant content
  • providing you with information and our range of products and services as requested
  • responding to your reports of wrongdoing and complaints, including whistleblowing.

Keeping you and our people safe

This includes:

  • conducting identity verification security checks for building access
  • using CCTV surveillance recordings at our premises for the purposes of preventing and detecting fraud and/or other crimes, such as theft
  • investigating and reporting on incidents or emergencies on our properties and premises
  • for the security of our systems and networks in order to keep your data safe and confidential
  • for other health and safety compliance purposes.

Detecting, investigating and preventing financial crimes

This includes:

  • monitoring and recording our communications and screening applications and transactions in connection with actual or suspected fraud, financial crime or other criminal activities
  • recording and monitoring your electronic communications with us, to the extent permitted by applicable law, to ensure compliance with our legal and regulatory obligations and internal policies.

Complying with applicable laws, regulations and other requirements

This includes:

  • identifying and investigating compliance with our own Standard Chartered Group policies
  • complying with relevant local and foreign law, regulations, rules, directives, judgments or court orders, requests, guidelines, government sanctions, embargo, reporting requirements, restrictions, demands from or agreements with any authority (including domestic or foreign tax authorities), court or tribunal, enforcement agency or exchange body in any relevant jurisdiction where the Standard Chartered Group operates
  • following any voluntary guidelines or recommendations from industry bodies or associations.

Exercising our legal rights and conducting legal proceedings

This includes:

  • tracing and exercising our rights and protecting ourselves against harm to our rights and interests
  • retaining records as may be necessary as evidence for any potential litigation or investigation
  • obtaining professional advice
  • investigating or making an insurance claim
  • responding to any insurance related matter, action or proceeding
  • defending or responding to any current or prospective legal, regulatory, or industry bodies or association related matter, action or proceeding.

Facilitating Standard Chartered Group mergers, acquisitions, and divestments

This includes:

  • evaluating our business and providing continuity of services to you after a transfer of our business as a result of a merger, acquisition, sale or divestment.

When do we conduct direct marketing?

We may sometimes, and with your consent if required by applicable law, use your contact details to send relevant marketing communications (such as by post, email, telephone, SMS, secure messages, mobile app or social media). You may withdraw your consent at any time by contacting us using the details below.

We may send the following communications:

  • news, offers and promotions about our products and services
  • appeals for charitable non-profit making donations, sponsorships and contributions
  • seminars and webinars
  • other events or opportunities.

To the extent permitted by applicable law, we may disclose limited information about you with social media and advertising companies for the purpose of online advertising. For example, to check whether you have an account with social media companies, so we can ask them to display more relevant marketing messages to you about our products and services or to exclude you from receiving advertisements for services which you already use.

Federal law gives you the right to limit some but not all disclosures of your personal information related to:

  • affiliates’ everyday business purposes related to your creditworthiness
  • affiliates directly marketing to you
  • nonaffiliates marketing to you

State laws may give you additional rights to limit sharing. 

Who may we disclose your personal information to?

We may disclose your personal information within the Standard Chartered Group. Standard Chartered Group may disclose your personal information for the purposes of processing as set out in this privacy notice, including with our service providers, our business partners, other third parties and as required by law or requested by any authority. Who these are depends on your interactions with us.

Over the last 12 months, we have disclosed for a business purpose to Standard Chartered Group and its affiliates the following categories of personal information:

  • Identification data
  • Certain sensitive personal information such as social security number and official/government identifier

We limit how, and with whom, we disclose your personal information, and take steps to ensure your personal information is kept confidential and protected when we disclose it. We may disclose your personal information for our purposes of processing with the following, where relevant and allowed by law:

  • Other members of the Standard Chartered Group
  • Authorised third parties
    • any other person you have authorised us by your consent to disclose your personal information to.
  • Third parties that can verify your information
    • fraud prevention agencies and organisations.
    • other non-government third parties’ that conduct financial crime prevention databases checks to prevent money laundering, terrorism, fraud and other financial crimes.
  • Our service partners
    • professional advisers such as auditors and legal counsel
    • insurers or insurance brokers
    • service providers (such as operational, administrative, data processing and technology service providers), including anyone engaged or partnered with to analyse and facilitate improvements or enhancements in Standard Chartered Group’s operations or provision of products and services
    • providers of professional services, such as market researchers, forensic investigators and management consultants.
  • Strategic referral partners
    • business alliance, co-branding partners or other companies or organisations that the Standard Chartered Group cooperates with based on contractual arrangements or other joint ventures
    • social media and advertising companies
    • charitable and non-profit organisations.
  • Other financial services organisations
    • other financial institutions, such as merchant banks, correspondent banks or national banks
    • payment service providers, including merchants, payment processors and card association members, payment-initiation and card-based payment instrument service providers such as VISA and Mastercard.
  • Government and law enforcement agencies
    • as required by law or requested by any authority, which includes any government, quasi-government, regulator, administrative, regulatory or supervisory body, court, tribunal, enforcement agency, exchange body or domestic or foreign tax authorities, having jurisdiction over any Standard Chartered Group member whether within or outside your jurisdiction and whether or not that Standard Chartered Group member has a relationship with you.

Is there personal information that we do not disclose?

Certain personal information we do not disclose:

  • In the last 12 months we have not sold or shared your personal information for cross-context behavioral advertising.
  • We do not use or disclose your sensitive personal information for any purpose other as permitted by law (providing you the products or services requested in compliance with regulatory requirements). 

Where do we transfer personal information?

Your personal information may be stored, disclosed and transferred by us within the Standard Chartered Group or with other third parties for the purposes described in this privacy notice. We do this in order to operate effectively, efficiently and securely in facilitating transactions and providing products and services to our clients, to improve and support our processes and business operations and to comply with our legal and regulatory obligations. This may involve storing, sharing and transferring your personal information cross border to other jurisdictions.

Where recipients of your personal information are in jurisdictions that are outside the US, and local laws may not have similar data protection laws as the jurisdiction where you are or where we have a relationship, we will take all reasonable steps necessary to ensure that your personal information has an appropriate adequate level of protection and safeguards to comply with applicable law.

How do we protect your personal information?

We take the privacy and security of your personal information very seriously. To protect your data, we have put in place a range of technical, physical and organisational measures to protect and keep your personal information confidential. Standard Chartered Group has implemented information security policies, rules and technical measures to protect personal information and to comply with legal and regulatory requirements. We train and require staff who access your personal information to comply with our data privacy and security standards. We require our service providers, or other third parties we engage with and to whom we disclose your personal information to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal information.

How long do we keep your personal information?

We keep your personal information for business or legal reasons while you engage with us, and for a period of time afterwards for the purposes described in this privacy notice in accordance with our data retention policy standards and as required by applicable law. We will delete, anonymise, destroy and/or stop using personal information when we no longer need it.

What are your personal information protection rights?

We respect your personal information, and you have the following rights about how we use your information:

  • Right to access your data – you may request that we disclose to you the following information covering the 12 months preceding your request:
    • The categories of personal information that we collected about you and the categories of sources from which we collected such personal information;
    • The business or commercial purpose for collecting personal information relating to you;
    • The categories of personal information about you that we disclosed, and the categories of third parties to whom we disclosed, such personal information; and
    • The personal information that we maintain about you.
  • Right to correct your data – if your personal information is incorrect, you can ask us to update it.
  • Right to delete your data – you can ask us to delete your personal information. However, we may need certain personal details to provide our products and services to you.
  • Right to restrict or object to processing – you can ask us to stop using your data or change how we use it. However, we may need certain personal details to engage with you or provide our products and services to you.
  • Right to change or withdraw consent – if we ask for your consent to use your personal information, you can change your mind at any time.
  • Right to withdraw from direct marketing – you can tell us to stop sending you marketing emails or invitations to surveys at any time.

We will verify and respond to requests to exercise your personal information rights in line with applicable law. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies. We may need to request additional personal information from you in order to verify your identity and protect against fraudulent requests. We will not unlawfully discriminate against you for exercising your rights under applicable law. If you have any questions about your rights, please contact us using the details below.

Authorized agents

If you would like an agent to make a request on your behalf to the extent permitted under applicable law, the agent may use the request methods listed above.  Not all kinds of requests can be made by authorized agents. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent.  In addition, we may require that you verify your identity as described above or confirm that you provided the agent permission to submit the request.

How to get in touch

The following Standard Chartered Group companies act as the business (sometimes known as controller in other jurisdictions) responsible for processing your personal information in the United States:

  • Standard Chartered Bank New York Branch
  • Standard Chartered Securities (North America) LLC

Address:
1095 Avenue of the Americas
New York
NY 10036

If you are a visitor to one of our offices and you have questions about this privacy notice you should call: + 1 646-845-1183

If you are a visitor to our website and you have questions about this privacy notice you should call: +1 646 845 1115

Got a complaint?

If you have any concerns or complaints about how we’re using your personal information, please talk to us by using the contact information set forth above.

Cookies

Please see our separate Cookie Policy at https://www.sc.com/us/cookie-policy/.

This privacy notice was updated on 10 August 2023.