How TONHANKS Global Trust Financial Group collects, uses, shares, and protects your personal and financial information.
This Privacy Policy applies to all customers and users of TONHANKS Global Trust Financial Group ("TONHANKS," "we," "our," or "us"), including its subsidiaries and affiliates. It covers information collected through:
Important: This policy is issued pursuant to the Gramm-Leach-Bliley Act (GLBA), the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) for European customers, and applicable state and international data protection laws.
We collect information necessary to provide banking services, verify identities, prevent fraud, and comply with regulatory requirements. The categories of information include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, Social Security Number, passport or government-issued ID | KYC compliance, identity verification |
| Contact Data | Email address, phone number, mailing address | Account communications, security alerts |
| Financial Data | Account balances, transaction history, credit scores, income documentation | Account management, lending decisions |
| Technical Data | IP addresses, browser type, device identifiers, login timestamps | Security monitoring, fraud detection |
| Biometric Data | Fingerprint scans, facial recognition data (where applicable) | Multi-factor authentication |
| Employment Data | Employer name, job title, annual income, employment history | Loan underwriting, payroll services |
We process your personal information only for legitimate business purposes, including:
We will never: Sell your personal information to data brokers, marketing companies, or any third party for commercial purposes unrelated to providing you banking services.
We share your information only in the following circumstances:
Your information may be shared among TONHANKS Global Trust Financial Group subsidiaries and affiliates for account servicing, internal auditing, and regulatory reporting purposes.
We engage carefully vetted third-party vendors who assist us with payment processing, data hosting, identity verification, and IT security. All vendors are bound by strict contractual data protection obligations and are prohibited from using your data for any purpose other than providing services to TONHANKS.
We may share information with third parties when you explicitly authorise us to do so, such as when initiating transfers to external financial institutions, enrolling in third-party insurance products, or linking your accounts with authorised financial applications.
Protecting your financial information is fundamental to our operations. We employ multiple layers of Premier-grade security:
Certifications: TONHANKS Global Trust maintains SOC 2 Type II, ISO 27001, and PCI-DSS Level 1 certifications. Our security program is audited annually by independent external assessors.
Our digital platforms use cookies and similar technologies to maintain session state, remember your preferences, and improve service delivery.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Session management, authentication state, security tokens | Session only |
| Functional | Language preferences, display settings, remembered account numbers | Up to 12 months |
| Analytics | Page views, navigation patterns, platform performance | Up to 24 months |
You may disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies may impact your ability to use online banking features.
We do not use advertising tracking cookies or share browsing data with third-party ad networks. We honour Do Not Track (DNT) browser signals.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
How to exercise your rights: Submit a verifiable request through your online banking dashboard under Account Settings, or by writing to our Data Protection Officer at the address provided in the Contact section below.
TONHANKS Global Trust Financial Group does not knowingly solicit or collect personal information from individuals under the age of 13. Our banking products are designed for adults aged 18 and older. If we learn that we have inadvertently collected information from a child under 13, we will promptly delete it and terminate the associated account.
For custodial accounts opened on behalf of minors, the parent or legal guardian is responsible for providing consent and managing the account. Information collected for custodial accounts is treated with the same protections as adult account data.
As a global financial institution operating in over 180 markets, your personal information may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place:
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable laws and regulations:
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes:
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:
We aim to respond to all privacy-related inquiries within 5 business days. Verifiable consumer requests under CCPA will be fulfilled within 45 calendar days.
