1) Who we are & scope

Sudanese French Bank (SFB) we owns and operates this website and related digital services. This Privacy Policy describes our privacy practices for:

• Our public website(s) (sfbank-sd.com)
• Digital channels and electronic services (including, for example, the Alfransi app)
• Any related pages, forms, and communications where this Policy is referenced

We are committed to protecting personal information in line with applicable laws and regulations, and with widely recognized global privacy principles where applicable.

2) Information we collect

We may collect personal information in the following ways:

(A) Information you provide directly

• Contact details (such as name, phone number, email address)
• Information you submit via forms or messages (e.g., inquiries or support requests)
• Any additional information you voluntarily include in your communication

(B) Information collected automatically

• IP address and device identifiers
• Browser type, operating system, and technical logs
• Usage data (pages visited, time spent, referring and exit pages)
• Cookies and similar technologies (see section “Cookies & tracking technologies”)
• Analytics data and interaction patterns

(C) Information from third parties (limited)

We may receive limited information from trusted service providers who support our operations (for example hosting, security, or analytics), only as needed to operate, secure, and improve our services.

3) How we use information

We use personal information for purposes such as:

• Operating and maintaining our website and digital services
• Supporting business operations and service delivery
• Improving user experience, performance, and content
• Creating website/app statistics and understanding usage trends
• Responding to inquiries and communicating when necessary (including verifying information where needed)
• Sending important service-related notices or updates
• Security & fraud prevention (detecting misuse, protecting systems, and managing cyber risks)
• Providing optional additional services, where permitted or based on your preferences/consent (where applicable)

4) Legal bases (where applicable)

Depending on the jurisdiction and applicable law, we may process personal information based on one or more of the following:

• Performance of a service requested by you
• Legal or regulatory obligations
• Legitimate interests (such as securing and improving our services), balanced against your rights
• Consent where required (for example, certain cookies or optional communications)

5) Sensitive information

SFB does not intentionally collect sensitive personal information (such as political opinions, religious beliefs, or health data). If a specific service requires such information, we will seek your explicit consent in advance where required by law.

If you submit sensitive information voluntarily (whether requested or not), you acknowledge that it may be processed in accordance with this Policy and applicable law.

6) Sharing & disclosures

(A) We do not sell personal information

SFB does not sell or trade customer personal information.

(B) Service providers (processors)

We may share limited information with trusted service providers who perform services on our behalf (such as hosting, cybersecurity, analytics, and technical support). Such providers are required to protect the information and use it only to deliver services to SFB.

(C) Legal and regulatory disclosure

We may disclose personal information when necessary to comply with applicable laws and regulations, legal proceedings, governmental or regulatory requests, financial services regulators, and law enforcement agencies.

7) International transfers

Some technology providers or infrastructure may be located outside your country. Where cross-border transfers occur, we take appropriate measures to protect information (such as contractual and security safeguards) consistent with applicable law.

8) Information security

We implement administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, alteration, or disclosure. Access to customer information is limited to authorized and appropriately trained personnel.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9) Data retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, or as required by law and regulatory obligations.

• Usage & analytics data: typically retained for a limited period and may be aggregated and/or de-identified where feasible.
• Transaction and regulatory records: may be retained longer where required by applicable laws or regulators.

10) Your rights & choices

Subject to applicable law, you may have rights such as:

• Requesting access to your personal information
• Requesting correction of inaccurate or incomplete information
• Requesting deletion of your account or personal information (with legal/regulatory exceptions)
• Objecting to or restricting certain processing in specific circumstances
• Withdrawing consent where processing is based on consent (where applicable)

To exercise your rights, please contact us using the “Contact us” details below. We may need to verify your identity before processing certain requests to protect your security.

11) How to request account deletion

If you wish to request deletion of your account (where applicable), please follow these steps:

1. Send an email to: info@sfbank.com
   Subject: “Account Deletion Request”
2. Include: your username, your registered email address, and an optional brief reason for the request.
3. Verification: we may contact you to verify your identity to ensure account security.
4. Processing time: requests are generally processed within 30 days of receipt.
5. What is deleted: your account, personal information, usage data, and any related content, subject to legal/regulatory exceptions.
6. What may be retained: certain data may be retained for legal, regulatory, or security reasons (including transaction records and logs), for the period required by applicable obligations.

12) Cookies & tracking technologies

SFB uses cookies and similar technologies to:

• Enable core website functionality
• Improve service quality and performance
• Understand preferences and interactions
• Analyze trends and usage patterns

You can control cookies through your browser settings (for example blocking or deleting cookies). If a cookie consent banner is available, you may also be able to manage categories (e.g., analytics) through that interface. Disabling certain cookies may affect site functionality.

13) Third-party websites

Our website may contain links to third-party sites. This Policy does not apply to those external sites, and we encourage you to review their privacy policies before providing information to them.

14) Children’s privacy

Our digital services are not intended for children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

15) Policy updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page and the “Last updated” date will be revised.

16) Contact us

If you have questions, concerns, or complaints regarding this Privacy Policy or how we protect personal information, please contact:

• Email: info@sfb-sd.com
• Website: sfbank-sd.com