LOOKING AFTER YOUR INFORMATION
One of our fundamental objectives is protecting your privacy. The Data Protection Act requires us to manage personal information in accordance with the Data Protection Principles. We are required to process your personal information fairly and lawfully. This means that you are entitled to know how we intend to use any information you provide. You can then decide whether you want to give it to us in order that we may provide the product or service that you require.
All our employees are personally responsible for maintaining customer confidentiality.
We provide training and education to all employees to remind them about their obligations. In addition, our policies and procedures are regularly audited and reviewed.
Where you provide information about others (for example, for joint accounts or if you are referring a client) you must ensure that you have their consent or are otherwise entitled to provide this information to us.
When you access our website, register with us, contact us, send us feedback, purchase products or services via our website, post material to our website and compete customer surveys via our website we may acquire personal information about you.
When we receive from each other, from our business partners, or through other organisations (for example card associations, credit reference agencies, insurance companies, retailers, comparison websites, social networks, and fraud prevention agencies) whether in the course of providing products and services to you or otherwise, and from information we gather from your use of and interaction with our internet and mobile banking services and the devices you use to access them.
The personal information we collect about you depends on the particular activities carried out through our website. Such information includes:
your name, address and contact details
date of birth
details of any feedback you give us by phone, email, post or via social media
information about the services we provide to you
your account details, such as username, login details
We use this personal information to:
create and manage your account with us
verify your identity
provide goods and services to you
customise our website and its content to your particular preferences
notify you of any changes to our website or to our services that may affect you
improve our services
This website is not intended for use by children under the age of 13 and we do not knowingly collect or use personal information relating to children.
When we use your personal information, we are required to have a legal basis for doing so. There are various different legal bases upon which we may rely, depending on what personal information we process and why.
The legal bases we may rely on include:
consent: where you have given us clear consent for us to process your personal information for a specific purpose
contract: where our use of your personal information is necessary for a contract, we have with you, or because you have asked us to take specific steps before entering into a contract
legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
vital interests: where our use of your personal information is necessary to protect you or someone else’s life
public task: where our use of your personal information is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law
legitimate interests: where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information, which overrides our legitimate interests).
For further details on when we collect personal information, what we collect as well as how we use it, please read the following sections:
When information is collected
What information we ask for
How and why we use your information
When you register with us
Contact details: your name and email address
We ask for this:
— to create and manage your account with us
— to communicate with you about your account
We rely on [insert] as the lawful basis for collecting and using your personal information.
We will keep this information until:
— you close your account with us
— we close your account
We will treat your personal information as private and confidential, but may share it within our Group and disclose it outside the Group if:
(a) allowed by this Privacy Notice or any other agreement between us;
(b) you consent;
(c) if needed by our agents, advisers or others involved in running accounts and services for you and your business or collecting what you or your business owe Group companies;
(d) needed by subcontractors to help us manage your records;
(e) HM Revenue & Customs or other authorities require it;
(f) the law, regulatory bodies (including for research purposes), or the public interest permits or requires it;
(g) required by us or others to investigate or prevent crime;
(h) needed by market research companies to assist us in improving our products and services;
(i) to any other parties connected with your account (including guarantors);
(j) required as part of our duty to protect your accounts; or
(k) you use price comparison websites or other similar services to research or purchase financial products and services. These providers will use information about you and your relationship with us to help ensure you get the best results from their services, enabling you to make an informed choice. We will always ensure your personal information remains safe and secure.
If you were ‘introduced’ to us by a third party, we will give them your contact details and sufficient information about you to help with their accounting and administration. Introducers may use these details to contact you about products and services unless you have asked them not to do so.
The Government also requires us to screen applications that are made to us to ensure we are complying with the international fight against terrorism and other criminal activities. As a result of this we may need to disclose information to government bodies. We will share personal information with law enforcement or other authorities if required by applicable law.
Some of those third-party recipients may be based outside the European Economic Area.
We may transfer your personal information to other subsidiaries of the Group which are located outside the European Economic Area (EEA).
Such countries do not have the same data protection laws as the United Kingdom and EEA. Whilst the European Commission has not given a formal decision that provide an adequate level of data protection similar to those which apply in the United Kingdom and EEA, any transfer of your personal information will be subject to appropriate or suitable relevant safeguards as permitted under the GDPR Article permitting the transfer.
We may process payments through other financial institutions such as banks and the worldwide payments system operated by the SWIFT organisation if, for example, you make a CHAPS payment or a foreign payment. Those external organisations may process and store your personal information abroad and may have to disclose it to foreign authorities to help them in their fight against crime and terrorism. If these are based outside the EEA, your personal information may not be protected to standards similar to those in the UK.
For further information on cookies generally visit www.aboutcookies.org or www.allaboutcookies.org.
We would like to send you information about products and services and special offers, which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by post, email, telephone, text message (SMS) or automated call.
We would also like to share your information with selected third parties with whom you wish to share data so that they may send you information about their products AND/OR services, depending on what you agree with us.
We will only ask whether you would like us to send you marketing messages when you tick the relevant boxes.
If you have previously agreed to being contacted in this way, you can unsubscribe at any time by:
—contacting us at
—using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts
For more information on your rights in relation to marketing, see 'Your rights’ below.
Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:
fair processing of information and transparency over how we use your use personal information
access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address
require us to correct any mistakes in your information which we hold
require the erasure of personal information concerning you in certain situations
receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
object at any time to processing of personal information concerning you for direct marketing
object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
object in certain other situations to our continued processing of your personal information
otherwise restrict our processing of your personal information in certain circumstances
claim compensation for damages caused by our breach of any data protection laws
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individual’s rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
email, call or write to our Data Protection Officer,
let us have enough information to identify you,
let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill), and
let us know the information to which your request relates
We’re committed to respecting your privacy and safeguarding your personal data.
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Please contact us our Data Protection Officer, if you have any questions about this privacy notice or the information we hold about you.