This Privacy Policy explains how CIBC Digital Business collects, uses, discloses, and protects personal and business information obtained through our commercial banking platform. We are committed to maintaining the confidentiality, integrity, and security of client information in accordance with Canadian federal and provincial privacy legislation.
We collect information you provide when opening a business account, including business registration details, beneficial ownership information, financial statements, tax identification numbers, and authorized representative identities. We also collect transaction data, platform usage logs, authentication records, and communication history.
Client information is used to provide and maintain commercial banking services, verify identity and authority, process transactions, detect and prevent fraud, comply with regulatory obligations, and improve platform functionality. We do not sell personal or business information to third parties.
We may share information with regulatory authorities as required by law, payment processing networks to complete transactions, credit reporting agencies for credit assessment, and service providers who assist in platform operations under strict confidentiality agreements.
Account information is retained for the duration of the client relationship plus seven years as required by Canadian banking regulations. Transaction records are retained for a minimum of seven years. Authentication logs are retained for 18 months.
Canadian privacy legislation provides clients with rights to access, correct, and request deletion of personal information, subject to legal and regulatory retention requirements. To exercise these rights, contact our Privacy Officer using the information provided below.
Last updated: August 2026