Privacy Notice

State Bank of Pakistan (SBP) is established under the State Bank of Pakistan Act 1956.  Its main objective is to achieve domestic price stability by way of regulating the monetary and credit system of Pakistan and, without prejudice to said primary objective, contribute to the stability of the financial system of Pakistan and support the general economic policies of the Federal Government to foster development and fuller utilization of the country’s productive resources. The head office of SBP is located in Karachi, Pakistan.

For registering on the SBP InvestPak web portal, certain information will be collected through its various applications and its privacy shall be maintained in terms of the following Privacy Notice.

Interpretation and Definitions

Definitions

For the purposes of this Privacy Notice:

  • Account means a unique account created by or for any individual in order to access the applications.
  • Application refers to an application program or application software available on the SBP web portal.
  • Country refers to Pakistan.
  • Device means any computing or communications hardware with information storage capability (e.g., computers, servers, Cyber Security & Monitoring appliances, personal digital assistance (PDAs), cellular telephones, tablets, smartphones, fax machines, printers, and copiers)
  • Personal Data encompasses any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular individual, also constitute personal data
  • Service refers to the facilities provided through the online Portal.  
  • Service Provider signifies any natural or legal person who processes data on behalf of the SBP. This may include third-party companies or individuals engaged by SBP to facilitate the Service and provide it on its behalf.
  • Usage Data refers to the information collected automatically by the application. This information may be about use of our Service and may include information about your device and service information.
  • User refers to the individual accessing or using the Service. It also applies to the Organization or any other legal entity on whose behalf an individual is accessing or using the Service, as applicable.

What Data/Information Do We Collect?

Personal Data

SBP may collect specific personally identifiable information explicitly provided by the User that will be used to contact or identify the User. Such personally identifiable information may include, but is not limited to:

  • User name, mother’s name, date of birth, CNIC, residency status, phone numbers, email address, International Bank Account Numbers (IBANs), Investor Portfolio Securities (IPS) Account, and any other details.  

Usage Data

Usage Data is gathered automatically when using the Service. It may include information such as device name, model, mobile network code, mobile country code, and User operating system version, time & duration of use of the Service or any other features, traffic usage and touch interaction and other inputs, location information. Such information shall be collected while using the Service either with the User’s specific consent or by disclosure that will be displayed at the time of collection of information.

SBP may use third party analytic services for identification of usage trends and/or evaluation of the effectiveness of promotional campaigns, for the enhancement of Service, products, services, marketing efforts, and overall User experience.

Who Do We Share User Information With?

We may share User information with:

  • SBP Subsidiaries.
  • Service Providers to monitor and analyze the use of the Services provided through the online Portal and to contact you for improvement of service.
  • Other Parties for any purpose with your explicit consent.

How SBP will Use the Information?

SBP will use the information for the following purposes: 

  • To manage your account, allowing you to access various functionalities of the Service.
  • To identify and authenticate you for secure use of the Service.
  • To provide you Service.
  • To monitor the usage of Service.
  • Performance of a contract, including the development, compliance, and execution of purchase contracts for products, items, or services you have acquired or any other contract with us through the Service.
  • To contact you via email, telephone calls, SMS, or equivalent forms of electronic communication, such as push notifications from mobile application.

How long will SBP Retain User Information?

SBP will retain your Personal Data to the extent required to fulfill legal obligations (e.g., compliance with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Additionally, SBP may retain Usage Data for a shorter duration, except when it is utilized to enhance security, improve Service functionality, or when legal obligations mandate longer retention periods.

Storage of User Information

User Information, including Personal Data, may be processed at the SBP’s office and in other locations where the parties involved in processing are situated.

By consenting to this Privacy Notice and submitting your information, you agree to the storage of your information as described.

Protection of Information

SBP will take all reasonable steps to ensure that User data is treated securely and in accordance with this Privacy Notice.

The security of User Data is important to us, but it is essential to remember that no method of transmission over the Internet or electronic storage is 100% secure. Although we make every effort to employ commercially acceptable means to protect User Data, we cannot provide an absolute guarantee of its security.

Account and Service Linking with Third Parties

The Service may include links to and data from third-party websites that are not operated by SBP. If a User clicks on a third-party link, the User will be directed to that third party's website. SBP strongly recommends reviewing the Privacy Notice of third party’s website.

SBP has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party websites or services. 

SBP Website and mobile application obtain the market benchmark data and other data from third party sources; the authenticity and correctness of such data is not SBP’s responsibility. 

Changes to this Privacy Notice

SBP may periodically update this Privacy Notice. Any changes will be communicated by posting the new Privacy Notice on this page. SBP will also notify Users via email and/or provide a prominent notice on the Service before the changes take effect. The "Last updated" date at the top of this Privacy Notice will be revised accordingly.

SBP recommends reviewing this Privacy Notice regularly for any updates. Changes to this Privacy Notice will become effective from the date when posted on this page.

Contact Us

If you have any questions about this Privacy Notice, You can contact us: