Data Protection Act

Your Rights under the Act

Under the Act you have a right to:

• An adequate level of security for your personal information: See our Security section.
• Object to direct marketing:
  • You can opt out of marketing when completing an application form.
  • You can, of course, contact us at any time, quoting your account number(s) and requesting your name to be taken off our marketing list
  • If you do not wish to receive unsolicited mail from other organisations you can also register your details with the Mailing Preference Services run by the Direct Marketing Association
• Challenge automated decisions:
  If a decision affecting you is made by a computer (for example, automated credit scoring), you have the right to discuss the matter with us. The decision will be reviewed and may be changed, if appropriate
• Obtain a copy of your personal information, which we hold. This is called a 'subject access request'. We will charge you a fee of £10 to process your request. For a copy of your personal information, please contact us.
• Have incorrect personal information corrected. If you demonstrate that your personal information in our records is inaccurate, we will correct it
• Compensation if we breach the law and you suffer damage. If you suffer loss or damage because we do not comply with the Data Protection Act, you may be entitled to compensation
• Invoking your rights. If you have any queries relating to the use of your personal information please contact us

Legal requirements

When we process your personal information, it must be:

1. Processed fairly and lawfully and, in particular, not be processed unless certain conditions are met, the most common of which is consent
2. Obtained only for one or more specified and lawful purposes, and not further processed in any manner incompatible with that purpose or those purposes
3. Adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed
4. Accurate and, where necessary, kept up to date
5. Kept for no longer than is necessary for the purpose or purposes for which they were collected
6. Processed in accordance with Your rights under the Data Protection Act.
7. Protected by appropriate technical and organisational measures against unauthorised or unlawful processing and accidental loss, destruction or damage
8. Transferred to a country or territory outside the European Economic Area only if that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal information, or if you consent.