Privacy Policy

Overview

Cathay Bank ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile applications, and banking services (collectively, the "Services").

We operate in the United States and Europe and comply with applicable privacy laws, including the Gramm-Leach-Bliley Act (GLBA), the California Consumer Privacy Act (CCPA), and the General Data Protection Regulation (GDPR) where applicable.

Information We Collect

We collect several types of information from and about users of our Services, including:

Personal Identifiers: Name, address, email address, phone number, Social Security number or national identification number, date of birth, and government-issued ID numbers.
Financial Information: Bank account numbers, routing numbers, transaction history, income information, credit history, and tax identification numbers.
Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
Usage Data: Pages visited, features used, time spent on our platforms, and clickstream data.
Location Data: Approximate location derived from IP address or precise GPS location with your consent.
Biometric Data: Facial recognition data and fingerprint scans used for authentication, with explicit consent.

How We Use Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our banking services
To process transactions and send related information
To verify your identity and prevent fraud
To communicate with you about your account, updates, and promotional offers
To comply with legal obligations and regulatory requirements
To conduct analytics and improve our user experience
To enforce our terms of service and protect our rights

We do not sell your personal information. We may share your information with:

Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, data analysis, and customer support.
Financial Partners: Banks, credit bureaus, and other financial institutions necessary to provide our services.
Legal Authorities: When required by law, court order, or government regulation.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards.
With Your Consent: When you explicitly authorize us to share information.

Data Security

We implement comprehensive security measures to protect your personal information, including:

256-bit AES encryption for data at rest and in transit
Multi-factor authentication (MFA) for account access
Regular security audits and penetration testing
Employee training on data protection practices
Incident response and breach notification procedures

Despite our efforts, no security system is impenetrable. We cannot guarantee the absolute security of your information.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct inaccurate or incomplete information.
Deletion: Request deletion of your personal information, subject to legal retention requirements.
Portability: Request a copy of your data in a structured, machine-readable format.
Restriction: Request that we limit the processing of your information.
Objection: Object to processing based on legitimate interests or direct marketing.
Withdraw Consent: Withdraw consent for processing where consent is the legal basis.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. You can manage your cookie preferences through your browser settings or our Cookie Preference Center.

Types of cookies we use:

Essential Cookies: Required for the operation of our Services.
Functional Cookies: Enable enhanced functionality and personalization.
Analytics Cookies: Help us understand how visitors interact with our Services.
Marketing Cookies: Used to deliver relevant advertisements.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we securely delete or anonymize it.

International Transfers

As a bank operating in both the US and Europe, we may transfer your personal information between these jurisdictions. We ensure such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending you a direct notification.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@Cathaybank.com
Mail: Cathay Bank Privacy Office, 350 Fifth Avenue, Suite 4500, New York, NY 10118
Phone: 1-800-Cathay-01

If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority.

On this page