This Privacy Policy explains how Starling e-Savings Bank (“we”, “us”, “our”) collects, uses, discloses and protects the personal information of our customers, website visitors and applicants. We are committed to protecting your privacy and to processing your personal data in line with applicable data protection laws.

We may collect the following categories of personal information when you interact with us:

• Identity details such as your name, date of birth and gender;
• Contact details such as your email address, phone number and residential address;
• Financial details such as account information, income and transaction history;
• Technical details such as your IP address, device information and browsing activity;
• Verification documents required for account opening and due diligence.

We use your personal information to:

• Open, manage and operate your accounts and provide banking services;
• Verify your identity and comply with anti-money laundering regulations;
• Process transactions, including payments, transfers and loan applications;
• Respond to your enquiries and provide customer support;
• Detect and prevent fraud, money laundering and other financial crime;
• Send you service updates and, with your consent, marketing communications.

We do not sell your personal information. We may share it with:

• Service providers who help us operate our services (e.g. card processors, IT providers);
• Regulators, law enforcement and government bodies where required by law;
• Credit reference agencies and fraud prevention agencies for eligibility checks;
• Professional advisers such as auditors and legal counsel.

Any third party we share data with is bound by confidentiality obligations and may only process your data for the purposes we specify.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. This includes 256-bit encryption, multi-factor authentication, firewalls and continuous fraud monitoring. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We retain your personal information for as long as necessary to provide our services and to comply with legal, regulatory, tax, accounting and reporting requirements. When personal data is no longer required, we securely delete or anonymise it.

Depending on your location, you may have the right to:

• Access a copy of the personal information we hold about you;
• Rectify inaccurate or incomplete information;
• Request the erasure of your personal information;
• Restrict or object to the processing of your data;
• Receive your data in a structured, machine-readable format (data portability);
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@coreassets.online.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Data Protection team at support@coreassets.online or write to us at 8619 S Wolcott Ave, Chicago, Illinois (IL) 60620, United States of America.