Skip to main content

Privacy policy

Version 4.2 · Effective 1 August 2026

Template placeholder. This document is illustrative sample copy written for a website template. It is not legal advice and does not describe a real institution. Replace it entirely with a policy drafted for your own organisation before launch.

This policy explains what personal information Rielora Capital Bank collects, why we collect it, who we share it with, and the choices you have. It applies to this website, our mobile app, our branches and our telephone service.

1. What we collect

We collect information in three ways: what you give us, what we observe when you use our services, and what we receive from third parties such as credit reference agencies.

  • Identity and contact data — name, date of birth, address, email, phone number, and identification documents used to verify you.
  • Financial data — account balances, transaction history, income information you provide, and credit information supplied by reference agencies.
  • Technical data — IP address, device identifiers, browser type, operating system, and how you navigate our site and app.
  • Communications — recordings of telephone calls, secure messages, emails and branch appointment notes.

2. How we use it

We process your information on the following bases:

  • To perform our contract with you — operating accounts, processing payments, providing statements and administering lending.
  • To meet legal obligations — identity verification, anti-money-laundering checks, sanctions screening, tax reporting and regulatory returns.
  • For our legitimate interests — detecting fraud, managing credit risk, improving our services, and protecting the security of our systems.
  • With your consent — marketing communications, and any optional analytics cookies you accept.

We do not sell personal information, and we do not use your transaction data to target advertising on third-party platforms.

3. Who we share it with

We share personal information only where necessary, and only with parties bound by confidentiality obligations:

  • Payment networks and settlement systems required to move your money.
  • Credit reference and fraud prevention agencies.
  • Regulators, tax authorities and law enforcement where legally required.
  • Service providers who process data on our behalf under written instruction — cloud hosting, card production, statement printing and customer communication tools.

4. Cookies

We use three categories of cookie. Essential cookies keep your session secure and cannot be switched off. Functional cookies remember preferences such as language. Analytics cookies help us understand which pages are useful. You choose which optional categories to accept when you first visit, and you can change that choice at any time.

5. Your rights

Depending on where you live, you may have the right to:

  • Request a copy of the personal information we hold about you.
  • Ask us to correct information that is inaccurate or incomplete.
  • Ask us to delete information, where we are not required to keep it.
  • Object to processing based on legitimate interests, or withdraw consent.
  • Request that we transfer certain information to another provider.
  • Opt out of the sharing of personal information, where applicable law provides that right.

We respond to verified requests within 30 days and never charge for a first request.

6. How long we keep it

We keep account records for the life of the relationship and for at least five years after it ends, as required by financial services record-keeping rules. Call recordings are kept for six years. Marketing preferences are kept until you change them. Where information is no longer needed, it is deleted or irreversibly anonymised.

7. Security

All data in transit is protected with TLS 1.3 and all data at rest is encrypted. Access is granted on a least-privilege basis, logged, and reviewed quarterly. We hold ISO 27001 certification, report annually against SOC 2 Type II, and maintain PCI DSS Level 1 compliance for card data. See the security centre for the controls that protect your account directly.

8. Contact us

Our Data Protection Officer can be reached at privacy@northcrest.bank, or by writing to Data Protection Officer, Rielora Capital Bank, No. 21-22 , Sangkat Veal Vong, Khan 8 Makara, Cambodia. If you are unhappy with our response you have the right to complain to your relevant supervisory authority.

Rielora Capital Bank is a fictional institution created for this website template. This document is sample content and carries no legal effect.

We use cookies to keep your session secure, remember preferences and understand how the site is used. Read our cookie policy.