Your Rights and our interests
You have rights over your personal information - set out in the Data Protection legislation. Take a look at details of these rights below.
To exercise a right, please read the details carefully to make sure it’s right for you and your circumstances and then choose a contact option. We have one month to respond to these requests, but we aim to respond sooner and keep you updated on progress.
Yes. This right is sometimes called the right of erasure or right to be forgotten. If you chose to exercise this right, we would consider the circumstances first because the right is not always available and we sometimes need to keep your information.
Before making a request, please consider the following:
- If you have an open, active account or mortgage with us, we need to keep your information because we need to manage your account, provide a service, keep you updated and monitor communications.
- If you had an open, active account or mortgage with us:
- In the last 6 years, we generally keep your information to help us investigate any issues that might arise in connection with your relationship with us. This might help us to resolve any concerns you may raise with us or
- Over 6 years ago, we might keep your information for a longer period if this is necessary in connection with your or our right to establish, start or defend legal claims, to investigate complaints, or to protect our business.
- If you applied for a mortgage with us we may securely keep information about credit applications for up to four years. This helps us to manage our lending criteria so we can continue to lend responsibly.
- • If you only enquired about our services and don’t open an account, we may securely keep your information for 12 months to monitor our services and respond to any concerns you may raise with us.
Yes. This is called the right to rectification. If you feel some of the information we hold about you is inaccurate or incomplete, by contacting us you can find out if you can get it corrected or add further information and how to go about it. We might ask you to provide official documentation to show the correct information before we change our records.
Yes. There are two options available 1) the right of access and 2) the right to data portability:
- The right of access allows you to request Principality provide the information held about you. This is called a subject access request. If you choose this option, please contact us. We will securely send you paper copies of this information in the post.
- The right to data portability allows you to request your information in a machine readable format. This means the information may not be easy for you to read because it’s designed specifically for computers to read. If you want information displayed in a readable format, you should contact us about a subject access request. If you choose the right to data portability we will send the information you have provided us (only) on a compact disc. This option is sometimes suggested by lenders when you’re considering making an application. At Principality, we won’t ask for this information when you’re making an application for our services and we do not accept information about you from other lenders in this format.
Yes. These rights are as follows:
- The right to restrict processing. If you’ve made a request for your information to be corrected, you can ask us to stop using your data or contacting you whilst your request is investigated. It’s important to note that we will still need to contact you with important information such as statements or if we identify unusual activity on your account, but we will endeavour to resolve your request before further using your information wherever possible. If you usually receive direct marketing we’ll stop sending you this. If you want to start receiving this again after we’ve resolved your request, you’ll need to tell us.
- The right to object. If you feel we’re using or processing your information inappropriately you can ask us to address this. This might be if you want us to stop sending you direct marketing in which case we can meet your request. If your request was about something else, we would consider the circumstances of your request.
Yes. You have the right to:
- Restrict processing; if you’ve made a request for your information to be corrected, you can ask us to stop contacting you whilst your request is investigated.
- You can choose not to receive direct marketing from us at any time. You can do this online through Your Account, at a branch or by contacting us. It can take 6 weeks to update changes so you may continue to receive marketing information during this time.
If you have an active account or mortgage with us, we will still need to contact you to manage your account, provide a service, to keep you updated and to meet your regulatory obligations such as send you statements.
Under Data Protection legislation, we must have a lawful basis before using your personal data. There are six bases available. One basis is referred to as "legitimate Interest." This means we have a genuine and legitimate reason to use your information and it is necessary for our business, provided we are not unjustifiably harming your rights nor interests. For example, we have a legitimate interest to retain images gathered by CCTV when you visit one of our branches or when you’ve attended a Principality event, like the Annual General Meeting.
Rest assured, all your personal information is kept safe, secure and won’t be shared with anyone it shouldn’t be.
Our legitimate interests
We take measures to provide a first class, service. These measures include performing quality assurance and audits using our customers’ information. This helps us identify training needs, risks or enhancements to our processes, procedures and website. Our regulators might ask us to demonstrate how we meet their rules and this sometimes means sharing customer information.
We may contact customers when a special deal period is coming to an end to let them know about other products available even if they‘ve chosen not to receive direct marketing. We do this because we believe it’s a service expected from us.
Where our customers can no longer deal with us through no fault of their own, or wish to set up arrangements for us to deal with representatives for them, we may collect the personal data of someone else who is authorised to deal with the accounts.
Remaining competitive means we’re continually developing products and services that will interest customers, both current and new. To do this we need to understand our customers and the market. One of the ways we do this is by analysing customers’ information, behaviour and feedback. Because we’re continually evolving, changes we make are recorded and this can sometimes include retaining customer information for this purpose.
For further information about customer research at Principality, please visit our page, Customer Research.
We love opening up possibilities to everybody in our community and are proud to support our three charity partners. More information can be found on our Charity page. One of the ways we help is by arranging volunteers and events to raise awareness for these important causes. Those choosing to get involved might provide personal information to help organise or run the event, or be involved in promotional images to support our charity partners.
We know that protecting our Members and business from the impact of financial crime is vital. Amongst other means, we achieve this by prudently identifying risks and monitoring threats within legal and regulatory expectations.
We always aim to do the right thing for our customers, including those who have left the Principality. Part of this involves being fully informed by way of record keeping and by taking legal advice. Sometimes this means keeping hold of information for longer periods than usual.
In a world of advancing technology we actively examine the systems we use to store customer information so we can identify threats and emerging problems. We must also actively monitor our premises to keep our data, our premises and most importantly our customers and colleagues safe.
To make a request or ask us questions about these rights:
- Telephone: 0330 333 4000
- E-mail: SMEnhancedRightsSupp@principality.co.uk
- Post: FREEPOST PRINCIPALITY BUILDING SOCIETY
- If you feel the need, you have the right to complain by contacting us so we can investigate your concerns. Alternatively you can contact the Information Commissioner (ICO) which is the regulator for data protection legislation. The ICO’s contact details can be found at ico.org.uk/concerns or by calling 0303 123 1113.
Useful Related Links
Questions & Comments
- If you have any questions or comments, or want more information, you can Contact Us or you can contact our Data Protection Officer as follows. Email: DPO@principality.co.uk or Post: Principality Data Protection Officer, Principality Building Society, Principality House, The Friary, Cardiff, CF10 3FA.