Privacy Policy

1. Information We Collect

Lumora Financial collects information necessary to provide, secure, and improve our banking services and to meet legal and regulatory obligations. This may include:

• Identity and contact information — name, date of birth, address, phone number, email, and government-issued ID.
• Financial information — account balances, transaction history, credit information, and payment details.
• Technical and usage data — IP address, device and browser type, and how you use our website and apps.
• Communications — records of calls, emails, and chats with our customer service teams.

We collect this information when you apply for or use our products, contact us, or interact with our websites and apps. We may also receive information from credit bureaus, identity verification services, and other third parties where permitted by law.

2. How We Use Your Information

We use your information to:

• Open and manage your accounts and provide our products and services.
• Process transactions, verify identity, and prevent fraud and money laundering.
• Comply with laws and regulations (including KYC and anti–money laundering requirements).
• Communicate with you about your accounts, security alerts, and important updates.
• Improve our services, security, and user experience.
• Send you marketing where you have consented or where we are permitted by law (you can opt out at any time).

3. When We Share Information

We do not sell your personal information. We may share information only:

• With your consent or at your direction.
• With service providers who help us operate our business (under strict confidentiality and security obligations).
• To comply with law, court orders, or regulatory requests.
• To protect the rights, safety, or property of the Bank, our customers, or others (e.g., fraud prevention).
• In connection with a merger, sale, or other transfer of assets (with notice where required).

4. How We Protect Your Information

We use technical, physical, and administrative safeguards to protect your data, including encryption in transit and at rest, access controls, and ongoing monitoring. We require our service providers to protect your information to the same standards. Despite these measures, no system can be completely secure; we encourage you to protect your credentials and devices and to report any suspicious activity.

5. Data Retention

We retain your information for as long as needed to provide our services, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. When we no longer need it, we securely delete or anonymize it in line with our retention policies.

6. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access and receive a copy of the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information (subject to legal and regulatory retention requirements).
• Opt out of marketing communications.
• Lodge a complaint with a data protection authority.

To exercise these rights, contact us using the details below. We will respond in accordance with applicable law. For more on cookies and similar technologies, see our Cookie Policy.

7. Children’s Privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us so we can delete it.

8. Third-Party Services

We do not use third-party tracking widgets or external data collection services. Previously used external charting widgets and IP geolocation services have been removed to protect your privacy. We do not send your IP address or browsing data to external services for tracking or analysis.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the current version on this page and, for material changes, we will provide additional notice as required by law. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy questions, requests, or complaints:

Last updated: April 19, 2026