Legal grounds for using personal data
We will only use your personal data where the law allows us to. Data protection law refers to lawful bases of processing, four of which are set out below. The lawful basis that we rely on will depend on the purpose for which we are processing the data.
We will use your personal data in the following circumstances:
- Where we need to perform the contract we have already or are about to enter with you;
- Where we need to comply with our legal obligations;
- Where you have consented to us using your personal data; or
- Where we feel it is necessary for our legitimate interests and we are confident that processing the data will not lead to a significant risk to you.
In very limited circumstances we may process data about your health so that we can protect your financial interests.
Consent
Much of what we do with your personal information is not based on your consent, instead it is based on another lawful basis. If we do seek your consent, we will explain how we wish to process your personal data. For processing that is based on your consent, you have the right to take it back at any time. You can do this by contacting us using the details here.
Purposes for using your data
The table below sets out the ways we use your personal data and the lawful basis we rely on for that processing.
Purpose |
Lawful basis |
To confirm your identity |
To comply with legal obligation |
To carry out credit check |
You have given your consent |
To open and manage your account |
To perform the contract |
To collect money owed to us |
To perform the contract |
To manage our relationship with you, for example:
- To provide details of changes to our terms and conditions;
- To keep our records up to date;
- To respond to queries and complaints;
- To communicate with you about the Society.
|
To perform the contract
To comply with legal obligations |
To prevent financial crime |
To comply with legal obligations |
To protect branch security |
To comply with legal obligations |
To market our products and services |
You have given your consent |
To comply with legal and regulatory obligations generally |
To comply with legal obligations |
Sharing your data with other payment services providers |
To comply with legal obligations
You have given your consent |
Marketing
We may use your home address, phone numbers, email address and social media (e.g., Facebook, Google, and message facilities in other platforms) to contact you according to your marketing preferences. You will only receive such materials where you have opted in. You can stop our marketing at any time by telephone, email or visiting one of our branches.
We will never sell of share your personal data with any third party for marketing purposes.
Monitoring personal data processing
In this section monitoring means any listening to, recording of, viewing of, intercepting of, or taking and keeping records (as the case may be) of calls, email, social media messages, in person face to face meetings and other communications including CCTV.
We may monitor where permitted by law and we will do this where the law requires it. Where we are required by the Financial Conduct Authority’s regulatory regime to record certain telephone lines we will do so.
Some of our monitoring may be to comply with regulatory rules, self-regulatory practices or procedures relevant to our business, to prevent or detect crime, in the interests of protecting the security of our communications systems and procedures, to have a record of what we have discussed with you and actions agreed with you, to protect you and to provide security for you such as in relation to fraud risks on your account and for quality control and staff training purposes.
CCTV
We have CCTV inside and outside all our premises to keep both our customers and staff safe. We have signage in the areas which are covered by CCTV to remind you.
All CCTV footage is kept secure and is retained in line with our data retention policy. Footage may be disclosed to other parties, but in very limited circumstances, for example when we are required to do so by law.