Privacy Notices

First Issued: 18 May 2018
Revised Version: 19 October 2026

Who We Are?

National Bank of Kuwait (International) PLC "we", "us", and "ours" or "NBKI" or “NBK UK”) is a company registered in England & Wales with Company Number 02773743 and registered with the UK Information Commissioner’s Office (ICO) with registration number Z6471287.

This Privacy Notice is prepared for customers of NBKI and explains who we are, how we collect, share and use customers' personal information, and how you can exercise your privacy rights.  If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the bottom of this Privacy Notice.

In some situations, we provide additional privacy information at the point your information is collected, for example where you use digital onboarding services, biometric identity verification services or our online services. These supplementary notices should be read alongside this Privacy Notice.

Contents

• What NBKI does
• Personal information we collect and where we collect it from
• How we use your personal information, including lawful bases
• Who we share your personal information with
• International transfers
• Data retention
• Automated decision-making and technology-assisted processing
• Your rights and complaints

What Does NBKI Do?

NBKI is a bank incorporated in the UK which mainly services clients of its Kuwaiti parent company when those clients want banking services in the UK.  Corporate clients will generally have some nexus with the MENA region. NBKI is headquartered in the United Kingdom, but its parent, National Bank of Kuwait S.A.K.P., has branches, subsidiaries and representative offices in a number of countries, including most of the Gulf Cooperation Council (GCC) countries.  A list of our group companies can be found at Our Network. Our banking services include current and deposit accounts, FX services, property finance, trade finance and letters of credit and guarantees for corporate customers. Our Treasury department is also active in institutional banking, including accepting and making institutional deposits.

For more information about NBKI, please see our Website.

Our services are intended for adults and we do not knowingly collect personal information directly from children except where necessary in connection with products or services provided to a customer.

What Personal Information Does NBKI Collect and Why?

NBKI is the ‘data controller’ of your personal information it collects and processes as set out in this Privacy Notice. This means we are responsible for how we hold and use your personal information about you. We are required to notify you of the information in this Privacy Notice and why we process your data.

Where We Collect Personal Information From

We collect personal information from a number of sources depending on the products and services you use. 

These sources include:

• information provided directly by you;
• information generated through your use of our products, services and mobile banking application;
• your employer or authorised representatives;
• NBK Group companies;
• identity verification, customer due diligence and fraud prevention providers;
• credit reference, sanctions screening and adverse media providers;
• public sources and public registers; and
• regulators, government bodies and law enforcement agencies.

Further details of the specific sources used for each processing activity are set out in the table below.

Categories of Personal Information we Process

Depending on the products and services you use, we may process:

• identity and verification information;
• contact information;
• account and relationship information;
• transaction and financial information;
• customer due diligence, sanctions screening and financial crime information;
• device, technical and online information;
• communications, enquiries and correspondence;
• complaint, dispute and investigation information;
• biometric verification information (where applicable);
• information obtained from public sources and third-party providers.

The categories of information used for a particular purpose are explained in the table below.

Processing Activities

The table below explains the main ways in which NBKI uses personal information, including the categories of personal information involved, where the information comes from, the purpose of the processing and the lawful basis relied upon.

Please note: Where you use the NBK UK Mobile Banking App, NBKI may process information relating to your notification preferences and the delivery of notifications. Depending on your selected preferences, notifications may be delivered through email, SMS, in-app messaging or other communication channels made available by NBKI. You can manage your notification preferences through the mobile banking application or other preference management tools made available to you. 

Use of Messaging Services

Where made available by NBKI, customers may choose to communicate with us through messaging services such as WhatsApp for certain types of enquiries and account-related communications. Messages exchanged through these channels may contain personal information provided by you and may be retained, monitored, reviewed and archived by NBKI and its service providers for customer service, security, fraud prevention, regulatory compliance, record-keeping and audit purposes. Please do not use messaging services to send information where we have asked you to use another communication channel instead. The scope of activities that may be conducted through messaging services may be limited and may be subject to separate terms, conditions or channel-specific guidance provided by NBKI.

What Legal Grounds do we Rely on to Process Your Personal Information?

The table below explains the purposes for which we use your personal information and the legal grounds we rely on for each processing activity. Depending on the circumstances, we may rely on one or more of the following legal grounds under UK data protection law.

• Providing services under a contract: We may process your personal information where this is necessary to enter into, perform or administer a contract with you, or to take steps at your request before entering into a contract with us. For example, we rely on this legal ground when assessing applications for products and services, opening and managing accounts, processing transactions and customer instructions, communicating with you about your accounts and providing digital banking and related services.
• Meeting a legal obligation: We may process your personal information where this is necessary to comply with a legal or regulatory obligation that applies to NBKI. For example, we may process your personal information to verify your identity, conduct customer due diligence and "know your customer" checks, comply with anti-money laundering and sanctions requirements, fulfil regulatory reporting obligations and respond to requests from regulators, courts or law enforcement authorities.
• Legitimate interests: We may process your personal information where this is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and freedoms. Before relying on legitimate interests, we consider the impact of the processing on individuals and ensure that the processing is proportionate and appropriately safeguarded. Examples of our legitimate interests include:
  • operating, managing and improving our products and services;
  • ensuring the security of our systems, networks and customer accounts;
  • preventing and detecting fraud and other unlawful activity;
  • managing customer relationships and communications;
  • conducting internal administration, governance and audit activities; and
  • establishing, exercising or defending legal rights.
    You have the right to object to processing based on legitimate interests in certain circumstances. Further details of your rights are set out below.
• Consent: In limited circumstances, we may process your personal information where you have provided your consent for us to do so. For example, consent may be used where required for certain optional communications, notification preferences, cookies or similar technologies. Where we rely on consent, we will
  • explain this to you at the point consent is obtained;
  • providing consent is generally voluntary; and
  • you may withdraw your consent at any time.
    The withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

In some cases, we need personal information in order to provide products and services, comply with legal obligations or enter into and perform our contract with you. If you fail to provide personal information when requested, we may not be able to provide some or all of our services, establish or maintain a banking relationship with you, open or operate your account, or comply with our legal and regulatory obligations, including customer due diligence requirements.

In limited circumstances, NBKI may process special category personal data where this is necessary for the provision of our services, to comply with legal or regulatory obligations, to prevent fraud or financial crime, or where you have provided such information to us. For example, this may include biometric information used as part of remote identity verification processes where customers choose to use digital onboarding services. Where we process special category personal data, we will do so in accordance with applicable data protection laws and, where appropriate, provide additional information at the point of collection.

Who Does NBKI Share my Personal Information With?

We may disclose your personal information to the following categories of recipients:

• to our group companies. A list of our current group companies is available at Our Network
  We benefit from a centralised IT system, provided by our parent company, based in Kuwait. It allows us to access larger, more sophisticated systems to process your personal information. In order to protect your personal information in accordance with the UK's Data Protection laws we have put in place an agreement with our parent company through a set of standard contractual clauses. In respect of corporate customers, Group will have access to the personal details of individuals associated with the corporate, to enable relationship officers in Kuwait to access a consolidated view of the customer. It is not used by group companies for marketing purposes. Access is restricted and can only be viewed if the corporate customer has an account with Group.
  Depending on the products and services provided, information accessible within the NBK Group may include identity information, contact details, account information, customer relationship information, transaction information and compliance-related information. Group access is restricted to authorised personnel with a legitimate business need and is not used for independent marketing purposes unless separately explained to you.
• to third-party services providers and partners that support the operation of our business, the provision of our products and services, customer onboarding and identity verification, financial crime prevention, payment processing, communications, notification services, information technology and operational activities. This may include providers that facilitate, secure, monitor, archive or retain communications exchanged through approved communication channels, including messaging services where made available by NBKI.
• to professional advisers, including legal advisers, auditors and consultants.
• to payment networks, card schemes and financial institutions involved in processing transactions and providing banking services.
• to any competent law enforcement body, regulatory, government agency, court or other third-party where we believe disclosure is necessary (i) as a matter of applicable law or regulation including anti-bribery and corruption regulations and anti-money laundering laws, (ii) to exercise, establish or defend our legal rights, (iii) for fraud prevention purposes (iv) to protect your vital interests or those of any other person.
• to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.
• to any other person with your consent to the disclosure.

A current list of our principal service provider categories is available on request.

How Does NBKI Keep my Personal Information Secure?

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. Specific measures we use include:

• physical access control systems
• a physical security presence
• logical access controls (such as passwords)
• perimeter security systems (such as firewalls)
• vulnerability management

International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident.  These countries may have Data Protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Specifically, our servers are located in the UK, and our group companies and third-party service providers and partners operate around the world.  This means that when we collect your personal information we may process it in any of these countries.

The main international transfers carried out by NBKI may include transfers to NBK Group entities, technology and operational service providers, identity verification providers, sanctions and adverse media screening providers, payment service providers and other third parties that support our banking, compliance and operational activities. 

The categories of information transferred will depend on the service involved but may include identity and contact information, account information, transaction information, customer due diligence information, fraud prevention information, technical information and compliance-related records. 

Where a transfer is not covered by UK adequacy regulations, NBKI uses appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or other permitted safeguards under Article 46 of the UK GDPR, as applicable to the transfer. 

However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These include implementing the Standard Contractual Clauses for transfers of personal information between our group companies, which require all group companies to protect personal information they process in accordance with UK Data Protection law.  These clauses are regularly reviewed to ensure they meet current legal requirements. 

We have implemented similar appropriate safeguards with our third-party service providers and partners. 

Where our messaging service provider processes data outside the UK, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place.

Data Retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). This includes our specific obligations under the FCA rules. 

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.  

We will keep transaction records for a minimum of seven years from the date of the relevant transaction, other information may be held for at least five years after the termination of our services. 

Retention periods vary depending on the type of information and the reason it is held. For example, customer onboarding and due diligence records, anti-money laundering and sanctions records, transaction records, customer communications, call recordings and complaint records may be retained for different periods where required for regulatory, legal, audit, financial crime prevention, complaint handling or dispute resolution purposes. 

Communications with NBKI, including telephone conversations, emails and approved messaging-channel communications, may be retained for regulatory, legal, audit, security, complaint-handling and record-keeping purposes.

Some records may need to be retained after an account has closed or after a particular service has ended, where this is required by law or regulation or where retention is necessary to establish, exercise or defend legal rights. 

Automated Decision-making

Automated decisions are decisions concerning you which are made automatically on the basis of a computer determination, without human review.  We do not make decisions about customers solely by automated means where those decisions produce legal effects or similarly significant effects. We may use technology tools and automated systems to support identity verification, fraud prevention, anti-money laundering checks, sanctions screening, customer due diligence and ongoing monitoring activities. These systems may generate alerts, verification results, confidence scores or risk indicators. However, decisions relating to account opening, customer risk assessments and account management continue to involve appropriate human review.

Your Data Protection Rights

You have the following Data Protection rights:

• If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below.  
• You may also have the right to object to certain processing, ask us to restrict processing of your personal information or request portability of personal information in certain circumstances. Where we rely on legitimate interests, you may ask us for more information about the balancing test we have carried out.
• You have the right to opt-out of marketing communications we send you at any time. Where permitted by law, NBKI may send you information about products, services, events and business developments that may be relevant to you. You can exercise your opt-out right by using any unsubscribe mechanism provided in the communication or by contacting us using the details set out under the "How to contact us" heading below. [Please note that account servicing communications, security alerts, fraud prevention messages, account statements, product administration communications, regulatory notices and other operational communications relating to your banking relationship are not marketing communications and may still be sent to you even if you have opted out of marketing].
• Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time.  Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You also have the right to raise a complaint with us directly about how we handle your personal data. Please see the “Complaints Handling Process” section below for details.
• You have the right to complain to a data protection authority about our collection and use of your personal information.  For more information, please contact your local Data Protection authority. The Data Protection authority in the UK is the Information Commissioner’s Office (ICO).  

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable Data Protection laws. If you wish to exercise any of the above rights, please contact the Data Protection Officer at the details listed below. 

Complaints Handling Process

In accordance with Section 164A of the UK Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, NBKI is committed to maintaining a formal complaints process for all data-related concerns.

If you have a complaint about how your personal data is handled, you may submit it to our Data Protection Officer (DPO) using the contact details provided in the “How to contact us” section of this Privacy Notice.

We will acknowledge your complaint within 30 days of receipt and aim to investigate and respond without undue delay, typically within three months.

If you are not satisfied with our response, you may escalate your complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. Contact details for the ICO are also provided in this Privacy Notice.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. This may be by posting a notice on the Website or notifying you. We encourage you to review this Notice to be informed of how NBKI is processing your personal information. 

You can see when this Privacy Notice was last updated by checking the date displayed at the top of this Privacy Notice.  

How to Contact us

If you have any questions or concerns about our use of your personal information, please contact our Data Protection Officer (“DPO”) using the following details: DataProtection@nbki.com. OR

National Bank of Kuwait (International) PLC
13 George Street
London W1U 3QJ
Website: www.nbk.com/london

If you have concerns about our use of your personal information, please contact the DPO, but in the event you are not satisfied please contact the ICO, the UK Supervisory authority for Data Protection issues. Their address is:

ICO
Wycliffe House
Water Lane
Wilmslow, SK9 5AF 
Website: https://ico.org.uk/

First Issued: 18 May 2018
Revised Version: 19 June 2026

National Bank of Kuwait (International) PLC "we", "us", and "ours" or "NBKI") respects your right to privacy. NBKI is a company registered in England & Wales with Company Number 02773743 and registered with the UK Information Commissioner’s Office (ICO) with registration number Z6471287.

This Privacy Notice explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. This Privacy Notice only applies to personal information that we collect through the UK pages on the Website www.NBK.com ("Website”) Please see our other Privacy Notices how we process personal information that we collect when you use our services or interact with us through other means. These other notices are all contained in the section headed “Privacy Notices” which is located at the foot of the UK web pages.

NBKI is the controller of information that we process for the purposes described in this Privacy Notice.

If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the end of this Privacy Notice.

What does NBKI do?

NBKI is a bank incorporated in the UK which predominantly services clients of its Kuwaiti parent company when those clients want banking services in the UK or France. Corporate clients will generally have some nexus with the MENA region. NBKI is headquartered in the United Kingdom, but its parent, National Bank of Kuwait S.A.K.P., has branches, subsidiaries and representative offices in a number of countries, including most of the Gulf Cooperation Council (GCC) countries. Our banking services include current and deposit accounts, FX services, property finance, trade finance and letters of credit and guarantees for corporate customers. 

If you have any questions, concerns, or wish to raise a complaint about our use of your personal information, please contact us using the details provided at the end of this Privacy Notice.

What personal information does NBKI collect and why?

The personal information that we may collect about you broadly falls into the following categories:

Information that you provide voluntarily

Generally, our Website is not designed to collect information from customers and other visitors. It is designed to communicate information about our services and for customers to obtain key information they need to know, for example about our charges, the deposit protection scheme, the terms and conditions of accounts etc. For this reason, we will not in most circumstances be asking you to input information or to register with us. The exceptions to this are:

• Where you wish to sign up as a new user using the new user registration form for online banking
• If you contact us through any email addresses on our Website and provide us with any personal information we will process that information

Information that we collect automatically

When you visit our Website, we may collect certain information automatically from your device. In some countries, including the United Kingdom and countries in the European Economic Area, this information may be considered personal information under applicable Data Protection laws.

Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked. 

Collecting this information enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors.

Some of this information may be collected using cookies and similar tracking technology, as explained further in our Cookies Notice, which is also on this Website in the section headed "Privacy Notices".

Information that we obtain from third-party sources

We do not receive information about you from third parties via our Website.

Who does NBKI share my personal information with?

We may disclose your personal information to the following categories of recipients:

• to our group companies, third-party services providers and partners who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Website), or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information. View the list of our current group companies. We may share your personal data with carefully selected third-party service providers and partners who support the delivery, functionality and security of our Website. We ensure that all such third parties are subject to appropriate contractual and security obligations to protect your personal data.
• to any competent law enforcement body, regulatory, government agency, court or other third-party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person
• to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice
• to any other person with your consent to the disclosure

Legal basis for processing personal information 

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

Our Cookie Notice is also on this Website and describes what cookies we use and why. When you first access the UK section of the Website, you will be presented with a pop-up banner directing you to the Cookie Notice. 

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the "How to contact us".

How does NBKI keep my personal information secure?

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

International data transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have Data Protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Specifically, our servers are located in the UK, and our group companies and third-party service providers and partners operate around the world. This means that when we collect your personal information, we may process it in any of these countries.

However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These include implementing the Standard Contractual Clauses for transfers of personal information between our group companies, which require all group companies to protect personal information they process in accordance with UK Data Protection law.

We have implemented similar appropriate safeguards with our third-party service providers.

Data retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. The only exception to not processing backup archives may be where it becomes necessary to retrieve that archived information. 

Your Data Protection rights

You have the following Data Protection rights:

• Access your personal data - Request a copy of the personal data we hold about you
• Request correction - Ask us to correct any inaccurate or incomplete personal data
• Request deletion - Ask us to delete your personal data where there is no valid reason for us to continue processing it
• Object to processing - Object to the processing of your personal data where we are relying on legitimate interests as our legal basis, or for direct marketing (if applicable)
• Restrict processing - Ask us to suspend the processing of your personal data in certain circumstances
• Data portability - Request that we transfer your personal data to you or to a third party, where technically feasible
• Withdraw consent - Where we rely on your consent to process your personal data, you may withdraw that consent at any time

You can exercise any of these rights by contacting us using the details set out below.

How to complain about how we use your personal data

If you are unhappy with how we use your personal data, or how we have handled a request you have made (including a request to access your personal data), you have the right to make a complaint to us.

You can raise a complaint by contacting our Data Protection Officer using the contact details provided below.

We will:

• Acknowledge your complaint within 30 days, and
• Investigate and respond without undue delay, typically within three months

We take all data protection complaints seriously and will seek to resolve them fairly and promptly.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. This may be by posting a notice on the Website or notifying you. We encourage you to review this Notice to be informed of how NBKI is processing your personal information.

You can see when this Privacy Notice was last updated by checking the date displayed at the top of this Privacy Notice.

Escalating your complaint

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

You can contact the ICO's website.

How to contact us

If you have any questions or concerns about our use of your personal information, please contact our Data Protection Officer (“DPO”) sing the following details: DataProtection@nbki.com OR

National Bank of Kuwait (International) PLC
13 George Street
London, W1U 3QJ

First Issued: 18 May 2018
Revised Version: 19 June 2026

This Notice explains how National Bank of Kuwait (International) PLC ("we", "us", and "ours" or "NBKI") is a company registered in England & Wales with Company Number 02773743 and registered with the UK Information Commissioner’s Office (ICO) with registration number Z6471287.

NBKI uses a limited number of cookies when you visit the UK sections of our Website at www.NBK.com (“Website”). It explains what these cookies are and why we use them. Although this Notice relates generally to the Website of National Bank of Kuwait S.A.K.P. it is only intended to meet the legal obligation to inform visitors of cookies that are used on the UK pages of the Website.

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a Website. Cookies are widely used by Website owners in order to make their Websites work, or to work more efficiently, as well as to provide reporting information. 

Cookies set by the Website owner (in this case, National Bank of Kuwait S.A.K.P.) are called "first party cookies". Cookies set by parties other than the Website owner are called "third-party cookies". Third-party cookies enable third-party features or functionality to be provided on or through the Website (e.g. advertising, interactive content and analytics). The parties that set these third-party cookies can recognise your computer both when it visits the Website in question and also when it visits certain other Websites. 

Why do we use cookies?

We use a limited number of cookies for several reasons. Some cookies are required for technical reasons in order for our Website to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies also enable us to provide Website functionality, or to track the use of our Website. This is described in more detail in the table below. 

Detailed List of Cookies Used on Our Website

Below is a detailed list of the cookies we use on our website. This table includes information about the name of each cookie, its purpose, and description.

How to Refuse Cookies

To refuse these cookies, please follow the instructions below under the heading "How can I control cookies?".

What about other tracking technologies, like web beacons?

Cookies are not the only way to recognise or track visitors to a Website. Some Websites use similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enable Website owners to recognise when someone has visited their Website or opened an e-mail sent to them. This allows Website owners, for example, to monitor the traffic patterns of users from one page to another within the Website, to deliver or communicate with cookies. We do not use web beacons or other tracking technologies

Do you use Flash cookies or Local Shared Objects?

"Flash Cookies" (also known as Local Shared Objects or "LSOs") are used by some Website owners to, among other things, collect and store information about your use of services, fraud prevention and for other site operations. We do not use Flash cookies or Local Shared Objects.

Do you use social networking cookies?

These cookies are used to enable you to share pages and content that you find interesting on our Website through third-party social networking and other Websites. We do not use these sort of cookies.

Do your cookies serve targeted advertising?

We do not engage in targeted marketing and we do not use cookies that would enable us to engage in such activities.

Links to other Websites

Our Website contains links to other Websites. If you access those other Websites they may use cookies. Please read any Cookie Notices on those Websites if you wish to know what cookies are being used.

How can I control cookies?

You have the right to decide whether to accept or reject cookies and you can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our Website though your access to some functionality and areas of our Website may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information.

How often will you update this Cookie Notice?

We may update this Cookie Notice from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal or regulatory reasons. Please therefore re-visit this Cookie Notice regularly to stay informed about our use of cookies and related technologies. 

The date at the top of this Cookie Notice indicates when it was last updated. 

Where can I get further information?

If you are unhappy with how we use your personal data, or how we have handled a request you have made (including a request to access your personal data), you have the right to make a complaint to us at any time.

You can raise a complaint by contacting our Data Protection Officer using the contact details set out below.

We will acknowledge your complaint within 30 days and investigate and respond without undue delay, typically within three months.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

If you have any questions, concerns, or wish to raise a complaint about our use of cookies or personal data, please contact our Data Protection Officer using the details below.

You also have the right to complain to the Information Commissioner’s Office (ICO).

For further information on how to raise a complaint, please see our Privacy Notice.

Data Protection Officer (“DPO”) at DataProtection@nbki.com OR

National Bank of Kuwait (International) PLC
13 George Street
London, W1U 3QJ

Date: 1 March 2021
Last Updated: 19 June 2026

National Bank of Kuwait (International) PLC ("we", “us”, and "our" or "NBKI") respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal information about our contacts, and how our contacts can exercise their privacy rights. If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the end of this Privacy Notice.

NBKI is the controller of information that we process for the purposes described in this Privacy Notice.

What does NBKI do?

NBKI is a bank incorporated in the UK which mainly services clients of its Kuwaiti parent company when those clients want banking services in the UK. Corporate clients will generally have some nexus with the MENA region. NBKI is headquartered in the United Kingdom, but its parent, National Bank of Kuwait S.A.K.P., has branches, subsidiaries and representative offices in a number of countries, including most of the Gulf Cooperation Council (GCC) countries. View the list of our current group companies. Our banking services include current and deposit accounts, FX services, property finance, trade finance and letters of credit and guarantees for corporate customers. Our Treasury department is also active in institutional banking, including accepting and making institutional deposits.

What personal information does NBKI collect and why?

The personal information that we may collect about you broadly falls into the following categories:

Information that you provide

You may provide us information directly which may include:

In addition correspondence with you may contain certain personal information that we exchange in the ordinary course of business such as to schedule meetings and calls and manage services we provide to you (or your employer) or you (or your employer) provide to us.

If we ask you to provide any other personal information not described above, then the personal information we will ask you to provide, and the reasons why we ask you to provide it, will be made clear to you at the point we collect your personal information.

Information that we obtain from third-party sources

From time to time, we may receive personal information about you from third-party sources (including from your employer and on occasion other suppliers and partners), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.

Who does NBKI share my personal information with?

We may disclose your personal information to the following categories of recipients:

• to our group companies, third-party services providers and partners who provide data processing services to us, or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information.We may share your personal data with carefully selected third-party service providers and partners who support the delivery of our services. These may include IT providers and other professional advisers. We ensure that all such third parties are subject to appropriate contractual and security obligations to protect your personal data.. 
• to any competent law enforcement body, regulatory, government agency, court or other third-party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
• to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice;
• to any other person with your consent to the disclosure.

Legal basis for processing personal information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your Data Protection interests or fundamental rights and freedoms.

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

Mostly, however, we process contacts information for our legitimate business interests in the context of providing or receiving services to customer or from our service providers or in the case of partners, for the purpose of the collaboration or partnership.

If we collect and use your personal information in reliance on anything other than our legitimate interests, we will make clear to you at the relevant time. For example, if we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading at the end of this Notice.

How does NBKI keep my personal information secure?

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

International data transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have Data Protection laws that are different to the laws of your country.

NBKI's group companies are based outside of the UK and the EEA.

We benefit from a centralised IT systems, provided by our parent company, based in Kuwait. It allows us to access larger, more sophisticated systems to process your personal information. In order to protect your personal information in accordance with the UK's Data Protection laws we have put in place an agreement with our parent company through a set of standard contractual clauses for personal data transfers.

We may also use third parties or partners who are based outside the UK. As with our group companies, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These include implementing standard contractual clauses for personal data transfers with these parties.

We have implemented similar appropriate safeguards with our third-party service providers and partners.

Data retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to receive services from you (or your employer), to provide services to our customers, to collaborate with our partners or to comply with applicable legal, tax or accounting requirements). 

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Automated decision-making

Automated decisions are decisions concerning you which are made automatically on the basis of a computer determination (using software algorithms), without human review. We do not use automated decision-making.

Your Data Protection rights

• Access your personal data - Request a copy of the personal data we hold about you.
• Request correction - Ask us to correct any inaccurate or incomplete personal data.
• Request deletion - Ask us to delete your personal data where there is no valid reason for us to continue processing it.
• Object to processing - Object to the processing of your personal data where we are relying on legitimate interests as our legal basis, or for direct marketing (if applicable).
• Restrict processing - Ask us to suspend the processing of your personal data in certain circumstances.
• Data portability - Request that we transfer your personal data to you or to a third party, where technically feasible.
• Withdraw consent - Where we rely on your consent to process your personal data, you may withdraw that consent at any time.

You can exercise any of these rights by contacting us using the details set out below.

How to complain about how we use your personal data
If you are unhappy with how we use your personal data, or how we have handled a request you have made (including a request to access your personal data), you have the right to make a complaint to us.
You can raise a complaint by contacting our Data Protection Officer using the contact details provided below.
We will:

• Acknowledge your complaint within 30 days, and
• Investigate and respond without undue delay, typically within three months.

We take all data protection complaints seriously and will seek to resolve them fairly and promptly.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. This may be by posting a notice on the Website or notifying you. We encourage you to review this Notice to be informed of how NBKI is processing your personal information.

You can see when this Privacy Notice was last updated by checking the date displayed at the top of this Privacy Notice.

Escalating your complaint

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

You can contact the ICO's website.

How to contact us

If you have any questions or concerns about our use of your personal information, please contact our Data Protection Officer (“DPO”) using the following details: DataProtection@nbki.com. OR

National Bank of Kuwait (International) PLC
13 George Street
London, W1U 3QJ.