Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Finconex (“we”, “us”, or “our”) collects, uses, and protects personal data when you register as a Third Party Provider (TPP) and use our open banking platform services in Bahrain.

1. Data we collect

When you create a TPP account we may collect:

2. How we use your data

We process personal data to:

3. Legal basis and consent

By accepting this policy at registration you consent to processing necessary for account creation and onboarding. Additional consents may be requested for identity verification and regulatory checks during onboarding.

4. Sharing and disclosure

We do not sell personal data. We may share data with regulated financial institutions, identity verification providers, infrastructure partners, and authorities where required by law or to deliver the services you request.

5. Data retention and security

We retain data for as long as your account is active and as required by applicable law. We apply encryption, access controls, and monitoring aligned with financial-sector security expectations.

6. Your rights

Subject to applicable law, you may request access, correction, or deletion of your personal data, or object to certain processing. Contact us using the details below to exercise these rights.

7. International transfers

Where data is processed outside Bahrain, we implement appropriate safeguards consistent with applicable data protection requirements.

8. Contact

For privacy enquiries: privacy@finconex.bh