This notice explains what personal information we collect, why we collect it, who we share it with and the choices available to you. It applies to personal and business banking customers and to visitors to our website.
Information we collect
We collect information you give us when you apply for or use an account, information generated by your use of our services, and information from third parties such as credit reference agencies and identity verification providers.
- Identity and contact details, including name, date of birth, address and government-issued identifiers
- Financial information, including balances, transaction history and payment instructions
- Technical information, including device identifiers, IP address and authentication events
- Documents supplied during identity verification
How we use your information
We process your information to operate your accounts, to meet legal and regulatory obligations, to detect and prevent financial crime, to manage risk, and to improve our services. Where we rely on your consent — for example for certain marketing communications — you may withdraw it at any time.
Who we share it with
We share information with payment networks and correspondent banks to execute your instructions, with regulators and law enforcement where legally required, with credit reference and fraud prevention agencies, and with service providers acting on our instructions under contract. We do not sell your personal information.
How long we keep it
We retain records for the period required by banking and anti-money-laundering legislation, typically at least five years after a relationship ends, and longer where a legal claim or regulatory matter requires it.
Your rights
Subject to local law, you may request access to the information we hold, ask us to correct inaccuracies, object to certain processing, or request erasure where no legal obligation requires us to retain it. Requests can be made through the secure message centre or in writing at any branch.
Security
We apply technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit and at rest, access controls, monitoring and staff training. No system is perfectly secure, so we also ask that you protect your own credentials and never share your password, PIN or one-time codes.
Cookies
Our website uses cookies that are strictly necessary for the site to function, together with optional analytics cookies. You can manage optional cookies through your browser settings without losing access to online banking.
Contacting us
Questions about this notice, or about how your information is handled, can be directed to our Data Protection Officer through the contact page or at any banking centre.