Page 6/11
Introduction
My personal data is data which by itself or with other data available to you can
be used to identify me. You are Cater Allen Private Bank, the data controller.
This data protection statement sets out how you’ll use my personal data. I can
contact your Data Protection Officer (DPO) at 201 Grafton Gate East, Milton
Keynes, MK9 1AN if I have any questions.
Where there are two or more people named on this form, this data protection
statement applies to each person separately.
The types of personal data you collect and use
Whether or not I become a customer, you’ll use my personal data for the
reasons set out below and if I become a customer you’ll use it to manage the
account, policy or service I’ve applied for. You’ll collect most of this directly
during the application journey either from me or from my Financial Adviser if I
have one. The sources of personal data collected indirectly are mentioned in
this statement. The personal data you use about me as a personal or business
customer (if I am one) may include:
n Full name and personal details including contact information (e.g. home
and/or business address and address history, email address, home, business
and mobile telephone numbers);
n Date of birth and/or age (e.g. to make sure that I’m eligible to apply);
n Financial details (e.g. salary and details of other income, and details of
accounts held with other providers);
n Records of products and services I’ve obtained or applied for, how I use
them and the relevant technology used to access or manage them (e.g.
mobile phone location data, IP address, MAC address);
n Biometric data (e.g. fingerprints and voice recordings for TouchID and voice
recognition);
n Information from credit reference or fraud prevention agencies, electoral
roll, court records of debt judgements and bankruptcies and other publicly
available sources as well as information on any financial associates I may
have;
n Family, lifestyle or social circumstances if relevant to the product or service
(e.g. the number of dependants I have);
n Education and employment details/employment status for credit and fraud
prevention purposes; and
n Personal data about other named applicants. I must have their authority to
provide their personal data to you and share this data protection statement
with them beforehand together with details of what I’ve agreed on their
behalf.
Providing my personal data
You’ll tell me if providing some personal data is optional, including if you ask
for my consent to process it. In all other cases I must provide my personal data
so you can process my application (unless I’m a customer and you already hold
my details).
Monitoring of communications
Subject to applicable laws, you’ll monitor and record my calls, emails, text
messages, social media messages and other communications in relation to
my dealings with you. You’ll do this for regulatory compliance, self-regulatory
practices, crime prevention and detection, to protect the security of your
communications systems and procedures, to check for obscene or profane
content, for quality control and staff training, and when you need to see a
record of what’s been said. You may also monitor activities on my account
where necessary for these reasons and this is justified by your legitimate
interests or your legal obligations.
Using my personal data: the legal basis and purposes
You’ll process my personal data:
1. As necessary to perform your contract with me for the relevant account,
policy or service:
a) To take steps at my request prior to entering into it;
b) To decide whether to enter into it;
c) To manage and perform that contract;
d) To update your records; and
e) To trace my whereabouts to contact me about my account and
recovering debt.
2. As necessary for your own legitimate interests or those of other persons
and organisations, e.g.:
a) For good governance, accounting, and managing and auditing your
business operations;
b) To search at credit reference agencies at my home and/or business
address (if I am a business customer) if I’m over 18 and apply for credit;
c) To monitor emails, calls, other communications, and activities on my
account;
d) For market research, analysis and developing statistics; and
e) To send me marketing communications, including automated decision
making relating to this.
3. As necessary to comply with a legal obligation, e.g.:
a) When I exercise my rights under data protection law and make requests;
b) For compliance with legal and regulatory requirements and related
disclosures;
c) For establishment and defence of legal rights;
d) For activities relating to the prevention, detection and investigation of
crime;
e) To verify my identity, make credit, fraud prevention and anti-money
laundering checks; and
f) To monitor emails, calls, other communications, and activities on my
account.
4. Based on my consent, e.g.:
a) When I request you to disclose my personal data to other people or
organisations such as a company handling a claim on my behalf, or
otherwise agree to disclosures;
b) When you process any special categories of personal data about me at
my request (e.g. my racial or ethnic origin, political opinions, religious or
philosophical beliefs, trade union membership, genetic data, biometric
data, data concerning my health, sex life or sexual orientation); and
c) To send me marketing communications where you’ve asked for my
consent to do so.
I’m free at any time to change my mind and withdraw my consent. The
consequence might be that you can’t do certain things for me.
Sharing of my personal data
Subject to applicable data protection law you may share my personal data with:
n The Santander group of companies* and associated companies in which
you have shareholdings;
n Sub-contractors and other persons who help you provide your products
and services;
n Companies and other persons providing services to you;
n Your legal and other professional advisors, including your auditors;
n Fraud prevention agencies, credit reference agencies, and debt collection
agencies when you open my account and periodically during my account
or service management;
n Other organisations who use shared databases for income verification and
affordability checks and to manage/collect arrears;
n Government bodies and agencies in the UK and overseas (e.g. HMRC
who may in turn share it with relevant overseas tax authorities and with
regulators e.g. the Prudential Regulation Authority, the Financial Conduct
Authority, the Information Commissioner’s Office);
n Courts, to comply with legal requirements, and for the administration of
justice;
n In an emergency or to otherwise protect my vital interests;
n To protect the security or integrity of your business operations;
n To other parties connected with my account e.g. guarantors and other
people named on the application including joint account holders who will
see my transactions;
n When you restructure or sell your business or its assets or have a merger or
re-organisation;
n Market research organisations who help to improve your products or
services;
n Payment systems (e.g. Visa or MasterCard), if you issue cards linked to
my account, who may transfer my personal data to others as necessary to
operate my account and for regulatory purposes, to process transactions,
7 Data Protection Statement
Applicant(s) to complete