Cookie Policy

CRDB BANK COOKIE POLICY

Last Updated: July 2026

1. Introduction

CRDB Bank Plc ("CRDB", "we", "us", or "our") uses cookies and similar technologies on our website to ensure that it functions properly, provides a secure browsing experience, remembers your preferences, improves website performance, measures the effectiveness of our communications and marketing activities, and helps us better understand how visitors use our website.

This Cookie Policy explains what cookies are, why we use them, the categories of cookies we use, how third parties may use cookies through our website, your rights and choices regarding cookies, and how cookie-related personal data is processed.

This Cookie Policy should be read together with CRDB's Privacy Notice and Terms of Service.

2. What Are Cookies?

Cookies are small text files placed on your computer, mobile phone, tablet, or other device when you visit a website. They help websites recognize your device, remember your preferences, understand how websites are used, and improve user experience.

In addition to cookies, we may use similar technologies including:

• Pixels
• Tags
• Scripts
• Software Development Kits (SDKs)
• Local storage technologies
• Server-side tracking mechanisms
• Device identifiers
• Conversion APIs

For simplicity, this Policy refers to all these technologies collectively as "cookies."

3. Legal Basis for the Use of Cookies

CRDB processes cookie-related information in accordance with:

• The Personal Data Protection Act, 2022;
• The Personal Data Protection (Collection and Processing of Personal Data) Regulations, 2023;
• Applicable banking, cybersecurity, and regulatory requirements; and
• Other laws and regulations applicable to CRDB's operations.

Strictly Necessary Cookies

Strictly necessary cookies are required to operate our website securely and effectively. These cookies are used based on our legitimate interest in maintaining the security, functionality, integrity, and availability of our website and do not require consent.

Preference, Analytics and Marketing Cookies

Preference cookies, analytics cookies, and marketing cookies are used only after you have provided your consent through our cookie management tools, unless otherwise permitted by applicable law.

You may withdraw your consent at any time through the Cookie Settings functionality available on our website. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Why We Use Cookies

CRDB uses cookies for the following purposes.

a) To Make the Website Work

These cookies support:

• Website functionality;
• Page navigation;
• Session management;
• Website security;
• Form submission;
• Fraud prevention;
• User authentication;
• Saving cookie choices and privacy preferences.

b) To Remember Your Preferences

These cookies help us remember choices you make, such as:

• Language preferences;
• Region or country selection;
• Accessibility settings;
• Personal website preferences.

c) To Improve the Website

These cookies help us understand:

• How visitors use the website;
• Which pages are visited;
• How users navigate the website;
• Which devices and browsers are being used;
• Areas where we can improve the website experience.

d) To Measure Marketing Performance

With your consent, cookies may be used to:

• Measure advertising effectiveness;
• Understand which campaigns generate customer engagement;
• Analyze website conversions;
• Improve communications and campaigns;
• Support audience measurement and reporting;
• Improve future marketing investments and customer experiences

5. Types of Cookies We Use

5.1 Strictly Necessary Cookies

Always Active

These cookies are essential for the operation and security of the website and cannot be disabled through our cookie banner because some website features would not function correctly without them.

These cookies may support:

• Website security;
• Fraud prevention;
• Page navigation;
• Session management;
• Authentication;
• Form submission;
• Load balancing;
• Saving consent preferences.

5.2 Preference Cookies

These cookies allow the website to remember choices you make to provide a better and more personalized browsing experience.

Examples include:

• Language preferences;
• Country selection;
• User interface settings;
• Display preferences.

You may choose whether to allow these cookies.

5.3 Analytics Cookies

These cookies help us understand how our website is used and allow us to improve content, functionality, performance, and user experience.

Analytics cookies may help us understand:

• Pages visited;
• Visitor journeys through the website;
• Device and browser usage;
• Time spent on pages;
• Website performance;
• Campaign landing-page performance.

Examples of analytics providers may include:

• Google Analytics;
• Other approved analytics and measurement services.

You may choose whether to allow these cookies.

5.4 Marketing and Advertising Cookies

These cookies help us measure, improve, and personalize our marketing activities and customer engagement efforts. They are activated only after you provide your consent.

With your consent, these cookies may help us:

• Measure advertising effectiveness;
• Track website interactions;
• Analyze campaign outcomes;
• Understand customer engagement;
• Improve campaign reporting;
• Support remarketing activities where permitted by law;
• Deliver more relevant communications where permitted.
• Examples of services that may use such technologies include:
• Google Ads;
• Google Analytics;
• Google Tag Manager;
• Google Marketing Platform;
• Meta Ads;
• Meta Pixel;
• Meta Conversions API;
• LinkedIn Ads;
• LinkedIn Insight Tag;
• TikTok Ads;
• TikTok Pixel;
• Other approved advertising, analytics, media, and technology service providers.

You may choose whether to allow these cookies.

6. Use of Data for Advertising Measurement

When you interact with our website, landing pages, online services, forms, or campaigns, CRDB may collect limited information to understand campaign performance and improve our services.

This may include:

• Pages visited;
• Forms submitted;
• Buttons clicked;
• Website interactions;
• Campaign sources;
• Browser information;
• Device information;
• IP address;
• Date and time of visits;
• Cookie consent status;
• Contact information voluntarily submitted through forms, such as email addresses and telephone numbers.

Where contact information is used for advertising measurement purposes, it may be protected using privacy-enhancing techniques such as hashing, where required and technically supported.

CRDB uses this information to measure and improve marketing effectiveness and customer experience. We do not sell personal information.

7. Protection of Banking and Financial Information

CRDB recognizes the confidentiality obligations applicable to customer information under banking and data protection laws.

CRDB does not sell personal information and will not intentionally share sensitive banking information with advertising platforms.

This includes:

• Account numbers;
• Card numbers;
• PINs;
• Passwords;
• One-Time Passwords (OTPs);
• CVV numbers;
• Account balances;
• Detailed transaction histories;
• Loan repayment or default status;
• Information indicating financial hardship;
• National identification numbers;
• Other confidential banking credentials.

Advertising cookies, pixels, tags, and similar technologies should not be deployed on secure banking pages displaying confidential account, card, loan, or transaction data.

8. Third-Party Services

CRDB may engage approved service providers to support:

• Website operations;
• Analytics;
• Advertising;
• Marketing measurement;
• Conversion tracking;
• Campaign reporting;
• Website optimization;
• Security and fraud prevention.

These providers may process limited information on our behalf and are required to implement appropriate safeguards to protect personal data.

Examples may include:

• Google Analytics;
• Google Ads;
• Google Tag Manager;
• Google Marketing Platform;
• Meta Ads;
• Meta Pixel;
• Meta Conversions API;
• LinkedIn Ads;
• LinkedIn Insight Tag;
• TikTok Ads;
• TikTok Pixel;
• Other approved analytics and technology providers.

Use of these technologies is subject to your cookie preferences and applicable law.

9. International Data Transfers

Some of CRDB's service providers, including analytics, advertising, and technology partners, may process data on servers located outside the United Republic of Tanzania.

Where you consent to analytics or marketing cookies, information relating to your device, browser, website interactions, and IP address may be processed by these providers outside Tanzania.

CRDB will take reasonable steps to ensure that cross-border transfers are conducted in accordance with applicable legal requirements, including Sections 31 and 32 of the Personal Data Protection Act, 2022, and any applicable regulatory guidance. Such safeguards may include:

• Your consent where required;
• Appropriate contractual arrangements;
• Regulatory approvals or permits where required;
• Technical and organizational measures designed to protect personal data.

Users are encouraged to review the privacy notices of relevant third-party providers for additional information regarding their processing practices.

10. Google Consent Mode and Advertising Consent

CRDB may use consent management solutions, including Google Consent Mode or similar technologies, to respect and operationalize your cookie choices.

For example:

• Analytics measurement may be enabled if analytics cookies are permitted;
• Advertising measurement and personalization may be enabled where marketing consent is provided;
• Analytics and marketing technologies may be restricted where non-essential cookies are rejected.

11. Cookie Inventory

CRDB maintains a cookie inventory identifying cookies and similar technologies deployed across its digital platforms. The inventory may include:

The cookie inventory should be periodically reviewed and updated whenever new technologies are implemented or existing technologies change.

12. Your Cookie Choices

You may control the use of non-essential cookies through our cookie management tools. You may:

• Accept all cookies;
• Reject non-essential cookies;
• Enable selected categories;
• Change your preferences at any time.

Rejecting non-essential cookies will not prevent access to the website, although some personalization, analytics, and marketing-related functionality may be limited.

You may also manage cookies through your browser settings.

13. Changing or Withdrawing Consent

You may change or withdraw your consent at any time through the Cookie Settings functionality available on the website.

Withdrawal of consent does not affect the lawfulness of processing undertaken before consent was withdrawn.

14. Your Rights

Subject to applicable law, you may have the right to:

• Be informed about the processing of your personal data;
• Access personal data held about you;
• Request correction of inaccurate information;
• Object to certain processing activities;
• Withdraw consent where processing is based on consent;
• Request restriction of processing in permitted circumstances;
• Lodge a complaint with the Personal Data Protection Commission

For more information about your rights and how to exercise them, please refer to CRDB's Privacy Notice.

15. Cookie Retention

Some cookies operate only during an active browsing session and are deleted when the browser is closed. Other cookies may remain on your device for a defined period or until manually deleted.

CRDB retains cookie-related information only for as long as necessary to fulfill the purposes for which it was collected and in accordance with applicable legal, regulatory, operational, and security requirements.

16. Changes to this Cookie Policy

CRDB may update this Cookie Policy from time to time to reflect changes in:

• Applicable laws and regulations;
• Website functionality;
• Advertising technologies;
• Analytics tools;
• Security requirements;
• Business operations.

The updated version will be published on the CRDB website and the "Last Updated" date will be revised accordingly.

17. Contact Us

If you have any questions regarding this Cookie Policy, cookies used by CRDB, or the processing of personal data, please contact:

CRDB Bank Plc
Ali Hassan Mwinyi Road P.O Box 268 Dar es Salaam, Tanzania
Dar es Salaam, Tanzania

Email: [email protected]

Telephone: +255 (0)755197 700

If you are dissatisfied with how your personal data has been handled, you may also raise concerns with the Personal Data Protection Commission (PDPC) in accordance with applicable law