NOTICE AND REQUEST FOR CONSENT

HDFC Bank Limited ("Bank" or "us" or "we") respects your privacy and is committed to protecting your personal data.

This notice and request for consent ("Notice") will inform you about how the Bank proposes to collect, handle, store, use, disclose and transfer ("Process") your personal data in connection with ("Other Products").

1. Other Products – "Other Product(s)" shall mean all products, services and/or businesses:

   (a) Of the Bank, e.g., Current Bank Account, Saving Bank Account, Cards, Deposits, Forex, Investments, Loans, Trading Accounts, Wallet Services.

   (b) Of subsidiaries, affiliates, associates or group companies of Bank (collectively, "Affiliates").

   (c) Of entities which the Bank or Affiliates offer, distribute, resell, refer, or where the Bank or Affiliates act as agent.

2. Categories of Personal Data: We may Process the following types of your personal data:

   (a) Identity and/or contact information such as name, physical address, mobile number, email address, signatures, date of birth, copy of identity and residence identifiers such as Aadhaar or other officially valid documents, Permanent Account Number, biometric information, marital status, citizenship, residential status, etc.

   (b) Financial or related information such as income details, employment or occupational information, bank account details, investment and transaction history, risk profile, financial knowledge and experience, nature and volume of anticipated business dealings, income tax returns, information collected when you undertake transactions including when you send or receive payments, etc.

   (c) Information that you provide about others such as that of your employer, family, authorized signatories and other authorized representatives in case of non-individual applicants, etc.

   (d) Information that others provide about you such as data obtained from other parties who are involved in transactions undertaken by you including any payment system participants.

   (e) Information from and about your online activities such as your location, IP address, device and operating system, unique identifiers such as International Mobile Equipment Identity (IMEI) number, technical usage data, contact lists, fingerprint (if you choose to enable it), passwords or PINs in encrypted form, etc.

   (f) Information such as records of our correspondence with you, your interaction with the Bank including chats, emails, telephone conversations, grievances, etc.

   (g) Derivative data such as credit scores, credit information, behavioural projections, analytical results, etc.

   Note: We may collect your personal data directly from you, from our affiliates or third parties such as credit information companies, regulators or governmental authorities who may have your personal data, or from publicly accessible sources such as your social accounts where you have made your personal data publicly available.

3. Purposes of Processing:

   We Process your personal data for the following purposes:

   (a) To meet our legal, regulatory or compliance obligations such as customer due diligence, know your customer/anti-money laundering checks, credit reporting, undertaking data protection impact assessments, data audits, etc.

   (b) In connection with the derivation and sharing of any Derivative Data.

   (c) In connection with contacting, establishing contact, whereabouts, including through email, postal address, telephone, social media, banners on applications/electronic platforms, notifications, website, premises of third parties/other persons.

   (d) In connection with deploying any analytics, automated processing, algorithms, robotics, profiling, encryptions, coding, anonymizations, etc., for any of the specified purposes.

   (e) To convey to, display or communicate with, market, sell, cross-sell to me, by the Bank internally or externally, Other Products through notifications, SMS, voice calls, WhatsApp, emails or other means of communication, whether online or offline or via telecommunications, the availability or eligibility or offer, whether in principle or otherwise, of any of the Other Products.

   Note: We may undertake the abovementioned activities either ourselves or through our affiliates or third parties such as vendors, service providers, other regulated entities such as credit information companies and KYC registration and authentication service agencies, etc., in accordance with our internal policies and applicable law.

4. Data Sharing: We may share your personal data with our affiliates or third parties such as credit information companies, bureaus, switches, networks, card associations, settlement, transfer and processing intermediaries, payment aggregators, payment gateways, payment systems, service providers, consultants, vendors, agents, fintech entities, co-brand entities/partners, distributors, selling/marketing agents, any partners, collaborators, co-lenders, co-originators, merchants, aggregators, lead generators, sourcing entities, clients, customers or other persons with whom the Bank has any direct or indirect arrangement or contract for any products or services, any TPAPs (for whom the Bank acts as PSP bank), or other players/intermediaries in any ecosystem of which the Bank is a part, entities managing loyalty programmes, offers, discounts, cashbacks, chargebacks, features, etc. Such entities may share your personal data with their service providers, consultants, vendors, etc., for the purposes mentioned in this Notice.

   In certain cases, these entities, which receive your personal data from us, may also be legally required to give you a notice regarding their Processing of your personal data and request your consent before they Process the same. We encourage you to read their privacy notices and contact them if you have any questions regarding how they Process your personal data.

5. Withdrawal of Consent: You have the right to withdraw your consent at any time by following the process provided under the 'Consent Withdrawal' section of the Privacy Policy.

   Please note that our Processing of your personal data before you withdraw your consent will not be impacted. You should also be aware that if you withdraw your consent for us to Process your personal data for some of the purposes we have mentioned in this Notice, we may not be able to continue offering you the Requested Product. This could mean that the terms and conditions applicable to discontinuation or closure of your Requested Product will become applicable.

   We encourage you to review the terms and conditions applicable to the Requested Product to understand the consequences of withdrawal of your consent in respect of use of your personal data.

6. Grievances: If you believe that you have any concerns regarding how we Process your personal data, you have the right to let us know your grievances. Please contact us at the details provided under 'Contact Information' below to register your concerns.

   Contact Information:

   Name of DPO: Rahul Rajendra Prasad

   Contact details: Privacy@hdfcbank.com

7. Consent Acknowledgement: By providing your consent by ticking the checkbox, you acknowledge and agree to the following:

   (a) That you have read and understood the contents of this Notice and consent to the Processing of your personal data as described here.

   (b) That you give your consent voluntarily, without any coercion or influence from the Bank or any other person.

   (c) That you will provide and ensure that the Bank maintains accurate, updated, complete and consistent personal data.

   (d) The Bank may Process your personal data for certain other purposes without your consent, where the law allows us to do so such as enforcement of a legal claim against you or for the Bank to make regulatory disclosures.

For more details about how we Process your personal data for various purposes, your rights under the law, and our privacy practices, please read our Privacy Policy.