PRIVACY POLICY
This Privacy Policy explains how by Maldives Islamic Bank, together with its facilitating partner, Crowe Maldives LLP (together, "we", "us", "our") collects, uses, discloses, and safeguards personal data submitted by applicants, nominees, nominators, judges, and other participants (collectively, "you") through the Awards Portal in connection with the Awards Programme (the "Programme"). By submitting an entry or otherwise using the Awards Portal, you acknowledge that you have read and understood this Policy.
Information We Collect
Depending on your role in the Programme, we may collect the following categories of personal data:
- Identification and contact details, such as name, job title, organisation, email address, phone number, and postal address.
- Entry and submission content, such as award category, project descriptions, supporting statements, written work, images, video, or other creative or professional materials submitted for evaluation.
- Supporting materials, such as CVs, biographies, references, endorsements, or letters of support, where requested.
- Nomination details, where you are nominated by a third party rather than applying directly.
- Account and technical data, such as login credentials, IP address, browser type, and portal usage logs, collected automatically when you use the Portal.
- Payment information, where an entry fee applies, processed via a designated third-party payment provider (we do not store full card details).
We do not knowingly request special category or sensitive personal data (such as health, religious belief, or racial or ethnic origin) unless expressly required for a specific, disclosed purpose of the Programme (for example, a diversity monitoring question that is clearly marked optional).
How We Use Submitted Materials
All documents, data, and information submitted via the Awards Portal (the "Submitted Materials") are treated as confidential and are used solely for the purpose of evaluating and administering the Programme, including to:
- Assess and score entries or nominations against the published Programme criteria.
- Communicate with you about the status of your entry, shortlisting, results, and ceremony logistics.
- Verify eligibility and the accuracy of submitted information.
- Compile anonymised or aggregated statistics about the Programme.
- Publicise results (for example, winner and finalist names, organisation, and award category), where you have consented or such publication is an inherent and disclosed part of entering the Programme.
- Comply with applicable legal, regulatory, tax, or audit obligations.
We will not use your Submitted Materials for any purpose beyond evaluating and administering the Programme without seeking your further consent, except where required by law.
Legal Basis for Processing
Where applicable data protection law requires a lawful basis, we rely on one or more of the following:
- Consent: where you have actively submitted an entry or nomination and agreed to this Policy.
- Legitimate interests: in administering a fair, credible, and well-run Programme, and in promoting its results.
- Legal obligation: where retention or disclosure is required by law or regulation.
- Contract: where processing is necessary to perform obligations connected with your entry (for example, prize fulfilment).
Disclosure to Third Parties
Submitted Materials shall not be disclosed to any third party except to those directly and necessarily involved in evaluating or administering the Programme, and then only on a strict need-to-know basis. This may include:
- Independent judges or evaluation panel members, bound by confidentiality obligations.
- Programme administrators, sponsors, or partners with a defined operational role, under written confidentiality terms.
- Service providers who host, support, or maintain the Portal (for example, cloud hosting or payment processing providers), acting only on our instructions.
- Regulators, auditors, or law enforcement, where disclosure is required or permitted by law.
We do not sell Submitted Materials or personal data to third parties.
Data Retention and Destruction
Upon conclusion of the Programme, all Submitted Materials shall be securely destroyed or permanently deleted, save where retention is required by applicable law, regulation, or for the establishment, exercise, or defence of legal claims. Where results are published as part of the Programme, publicly announced information (such as winner names and award categories) may be retained indefinitely as a public record of the Programme.
Data Security
We maintain appropriate technical and organisational measures designed to protect Submitted Materials against unauthorised access, alteration, disclosure, or destruction. Submitted Materials should only be transmitted through the secure channels designated for this purpose (namely, the Awards Portal itself). No warranty is given as to the confidentiality or security of information transmitted by any other means, including unencrypted email, and we accept no liability for materials submitted outside the designated secure channels.
International Transfers
Where Submitted Materials are transferred to, stored, or accessed from a country other than your own (including by service providers or judges located elsewhere), we take reasonable steps to ensure such transfers are subject to appropriate safeguards consistent with applicable data protection law.
Your Rights
You may have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, subject to our retention obligations described above.
- Object to or request restriction of certain processing.
- Request a copy of your data in a portable format.
- Withdraw consent at any time, where processing is based on consent (this will not affect the lawfulness of processing before withdrawal, and may affect our ability to continue evaluating your entry).
To exercise any of these rights, please contact us using the details in Section 11 below.
Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices or for legal or operational reasons. The updated version will be posted on the Portal with a revised "Last updated" date. Continued use of the Portal following any changes constitutes acceptance of the revised Policy.
Contact Us
If you have questions about this Policy, or wish to exercise any of your data protection rights, please contact:
Data Protection Contact: Organisation: Email: