Privacy Policy

OBS Bank (“OBS Bank,” “we,” “us,” or “our”), a member of OBS Financial Group, respects your privacy and is committed to protecting the personal and financial information you entrust to us. This Privacy Policy explains how we collect, use, share, retain, and safeguard information when you visit our website, open or maintain an account, use our digital banking services, or otherwise interact with OBS Bank.

By using our services you acknowledge the practices described in this Policy. Where applicable law requires your consent, we will obtain it before processing your information for the purposes described below.

We collect information you provide directly to us, information generated when you use our services, and information we receive from third parties such as identity verification providers, credit reference agencies, payment networks, and government registries.

This includes your full legal name, date of birth, government identification numbers, residential and mailing addresses, phone number, email address, employment and income details, source of funds, tax residency, beneficial ownership information, security questions, and any documents you upload for account opening, servicing, or dispute resolution.

When you use our website or mobile experiences we automatically collect technical information such as IP address, approximate location derived from your IP address, device and browser identifiers, operating system, referring pages, session timestamps, authentication events, and interaction data. This information helps us secure your account, prevent fraud, and improve our services.

We collect and generate financial information necessary to provide banking services, including account balances, transaction history, payment instructions, card usage, standing orders, loan applications, credit decisions, and information required to process wire transfers, ACH entries, and card network settlements.

To comply with Know Your Customer (KYC), Customer Identification Program (CIP), and anti-money-laundering (AML) obligations, we collect government-issued identification documents, proof of address, biometric data where permitted, and information returned by identity verification and sanctions screening providers.

We collect information about the devices you use to access OBS Bank, including device model, operating system version, hardware identifiers, mobile network information, language settings, and time zone. We may register trusted devices to strengthen authentication and detect unauthorized access.

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, measure the performance of our services, detect fraud, and, with your consent where required, deliver relevant communications. You can manage your preferences through your browser settings or our cookie controls where offered.

We use your information to open and maintain accounts, authenticate you, process transactions, communicate about your accounts and services, comply with legal and regulatory obligations, prevent and investigate fraud, manage risk, improve our products, personalize your experience, and, where you have opted in, send relevant marketing communications.

Where required by law we rely on one or more of the following legal bases: performance of a contract with you, compliance with a legal obligation, protection of the vital interests of you or another person, our legitimate interests in operating a safe and sound banking business, and your consent where consent is the appropriate basis.

We share information only where necessary and permitted by law. We do not sell your personal information. We may share information with affiliates within OBS Financial Group, with service providers acting on our instructions, with payment networks and correspondent institutions to complete transactions, with regulators, courts, and law enforcement in response to lawful requests, and with successors in the event of a corporate transaction.

We engage carefully selected service providers for services such as cloud hosting, identity verification, fraud detection, communications, analytics, and customer support. Service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

We process personal information to meet obligations under applicable banking, consumer protection, tax, sanctions, and anti-money-laundering laws. This includes reporting to competent authorities where required and retaining records for the periods mandated by law.

We monitor accounts, sessions, and transactions to detect and prevent fraud, account takeover, and unauthorized activity. This may involve automated decision-making, device reputation checks, and information sharing with fraud prevention networks. Where a decision has a significant effect on you, you may request human review in accordance with applicable law.

We apply administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, strong authentication, least-privilege access controls, continuous monitoring, and independent security testing. No system is completely secure, and you also play an essential role in keeping your credentials confidential.

We retain personal information for as long as necessary to provide our services and to meet legal, accounting, tax, and regulatory requirements. Retention periods vary by record type. When information is no longer required we securely delete or anonymize it.

OBS Bank operates globally and may transfer personal information to countries other than the one in which it was collected. When we transfer information internationally we use appropriate safeguards such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

Subject to applicable law and legitimate business or legal reasons to refuse, you may request access to the personal information we hold about you, correction of inaccurate information, deletion, restriction or objection to certain processing, portability of information you provided, and withdrawal of consent where processing is based on consent. To exercise these rights please contact us using the details below.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by updating your notification preferences in your account. We will continue to send you service messages required to operate your account.

OBS Bank services are intended for individuals who are of legal age to enter into a binding contract. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

We may update this Privacy Policy from time to time. When we make material changes we will provide reasonable notice, for example by posting the updated Policy on our website or notifying you through your account. The effective date at the top of this Policy indicates when it was last revised.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact the OBS Bank Privacy Office at privacy@obsbank.com or by writing to OBS Bank, Privacy Office, 1 Financial Plaza, New York, NY 10005, United States.