Alappuzha Govt. Servants' Co-Operative Bank Ltd. No. A 208 ("the Bank", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of the personal and financial information entrusted to us by our members and customers.

This Privacy Policy outlines how we collect, use, store, and safeguard your information when you visit our official website (https://gscbalpy.com), use our online portals, or interact with us through electronic communication channels, including our official WhatsApp Banking services.

---

1. Information We Collect

We collect information necessary to provide secure banking, financial, and customer support services:

• Personal Identifiers: Name, phone number, email address, residential address, account number, customer ID, and official identification documents (PAN, Aadhaar, etc., provided during KYC verification).
• Communication & Messaging Data: Mobile phone numbers, explicit opt-in/consent records, and message logs generated when you interact with our official WhatsApp Business account or website inquiry forms.
• Technical & Usage Information: IP address, browser type, device information, and website usage patterns collected via essential cookies when navigating our website.

2. Purpose of Data Collection and Use

Your personal and financial data is collected solely for lawful banking and operational purposes, including:

• Delivering core banking services, account management, and customer support.
• Sending automated transactional alerts, account updates, mini-statements, and OTP notifications via SMS and WhatsApp.
• Processing loan inquiries, deposit applications, and membership requests.
• Complying with regulatory mandates established by the Reserve Bank of India (RBI), Registrar of Co-operative Societies (RCS Kerala), and local statutory authorities.

3. WhatsApp Banking & Electronic Messaging Privacy

When you interact with the Bank through our official WhatsApp Business API Channel:

• Consent & Opt-In: We send automated transactional messages, statements, and alerts via WhatsApp only to users who have provided explicit, documented opt-in consent.
• Data Security & Encryption: All messages exchanged via the WhatsApp platform are protected by 256-bit end-to-end encryption.
• Data Storage: The Bank does not store sensitive banking credentials, PINs, or raw financial files within WhatsApp chat threads. Processing and long-term storage occur securely within our localized Core Banking System (CBS).
• Opt-Out Rights: You may withdraw your consent or stop receiving non-essential WhatsApp notifications at any time by contacting bank administration.

4. Data Sharing and Disclosure

The Bank does not sell, rent, trade, or share your personal information with third parties for marketing or cross-selling purposes. Information may be disclosed only under the following conditions:

• Regulatory & Legal Compliance: To regulatory bodies (RBI, RCS), tax authorities, law enforcement, or statutory auditors as required under Indian law.
• Authorized Service Providers: To authorized technical partners (such as Meta-approved WhatsApp Business Solution Providers, SMS gateways, and Core Banking software vendors) bound by strict non-disclosure agreements and Indian data protection laws.

5. Data Security & Storage (Localization)

• Data Localization: All personal, financial, and payment transaction data collected by the Bank is stored and processed on secure servers located within India, in strict accordance with RBI data localization directives.
• Security Standards: We employ industry-standard administrative, physical, and technical safeguards—including firewalls, SSL/TLS encryption, restricted access protocols, and regular auditing—to protect against unauthorized access, loss, or alteration.

6. Your Rights Under the DPDP Act

Under the Digital Personal Data Protection (DPDP) Act, you have the right to:

• Access & Summary: Request a summary of the personal data held by the Bank.
• Correction & Update: Request correction or updating of inaccurate or outdated personal data.
• Withdrawal of Consent: Withdraw your consent for non-essential digital communications at any time.
• Grievance Redressal: Submit queries or concerns regarding data processing to our designated Nodal Officer.

7. Grievance Redressal Officer

If you have questions, concerns, or grievances regarding this Privacy Policy or your personal data handling, please reach out to our Grievance Redressal Officer:

8. Updates to This Policy

The Bank reserves the right to update this Privacy Policy periodically to reflect changes in regulatory requirements or operational procedures. Any changes will be posted immediately on this page with an updated effective date.