Privacy Notice
Your Personal Data - Mortgage Customers
This document is intended for persons who have a business relationship with Bath Building Society. Such persons could include Mortgage Brokers, Independent Financial Advisers, Business Development Managers, Supplier representatives, Surveyors, Valuers or any other business contact.
In your relationship with the Society you are likely to provide us with certain data (such as name and contact details) which is regarded as personal. Such data is protected by the UK General Data Protection Regulations (or UK GDPR for short). This document gives a brief overview of how we use your data.
Our Responsibility
Bath Building Society will be the data controller for your personal data, which means we will be responsible for the data we collect about you in relation to your savings account. This includes data you provide to us, as well as that which we get from other sources (for example, from Credit Reference Agencies).
As your data controller:
- We only collect data that is necessary
- We store it safely and securely
- We do not hold it for longer than necessary
How we use your personal data
The data we collect from you is used to maintain our business relationship, allowing us to contact you or send you information which may be relevant to you in your business role.
We do not sell your personal data. We may share your data but only where we believe it to be in your interests, or where we are obliged to do so.
Reasons for processing your personal data
The UK GDPR says that firms can only use personal data where there is a fair reason to do so. Some of the acceptable reasons it states are when
- the processing is necessary to do with your account
- we have a legal duty to process the data
- we have a legitimate interest in processing the data
- we have your specific consent
We will send you information when we believe it is in your interests and/or within the expectations of your relationship with the Society. You can request that we stop sending you such information at any time.
Your rights relating to your personal data
The UK GDPR gives you the below rights relating to your personal data. This is intended as a brief summary, for more detail you can view our full privacy notice:
| Right to be informed |
You can ask about how we collect and use your data, and how long we keep it for |
| Right to access |
You can ask for a copy of your data, commonly referred to as a Subject Access Request (SAR) |
| Right to rectification |
You can ask us to correct any errors with your data |
| Right to erasure |
You can request that we delete your data |
| Right to restrict processing |
You can ask us to limit how we use your data |
| Right to data portability |
You can ask us to transfer your data |
| Right to object |
You can ask us to stop processing your data, although in some cases we may continue to do so |
| Rights related to automated decision-making, including profiling. |
You have some protections against automated decision making and profiling. You can request information about the processing that takes place, and ask for human intervention or challenge a decision. |
For further information
If you have any questions on the subject you can email
dataprotection@bibs.co.uk or write to us at our Head Office at 15 Queen Square, Bath, BA1 2HN.
Bath Building Society
Business to Business Privacy Notice (short) – Oct 2024
