How we use and protect your personal data

Who are we

UK Finance is the collective voice for the banking and finance industry. Representing more than 300 organisations across the industry, we act to enhance competitiveness, support customers and facilitate innovation.

UK Finance is a limited company (with company number 10250295) registered at 1 Angel Court, London, EC2R 7HJ. 

This Privacy Notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you. It also contains useful information about who to contact in the event you have a question or query.

You can find more information about UK Finance by clicking here

UK Finance is registered with the Information Commissioners Office - Registration Number ZA274661. 

If you are applying for a role at UK Finance, please see our Candidate Privacy Notice.

If you are a UK Finance employee, please refer to our colleague Privacy Notice. 

Our commitment to you

At UK Finance we foster a culture that values data protection through knowledge, transparency, awareness, and communications.

Our aim is to build and maintain trust and confidence with all whom we engage with, when handling personal data.

Personal Data

In carrying out our activities we may process the following types of personal data:

  • Your personal information (for example, your name and date of birth)
  • Contact details (for example, your postal address, phone number, e-mail address or mobile number)
  • Customer Relationship Data (such as, notes of calls or requests you may have made or attendance at an event or webinar)
  • Payment Transactions Data (when you make a purchase) 
  • Financial information (for example, bank account numbers)
  • Online profile and social media information
  • Communications data
  • Technical Information including internet protocol (IP) address, your login data, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
  • Location data
  • Economic crime related information (for example financial crime and fraud information)
  • Visual images and personal appearance (such as copies of passports or CCTV images)
  • Information about your family, lifestyle, and social circumstances (such as dependents, marital status, next of kin and contact details)

In some instances we may process the following special category data: 

physical or mental health details, political opinion, racial or ethnic origin and religious beliefs.  

We will only process this information with your consent (permission) or in situations where it is in the wider public interest.

How personal data is processed?

We obtain personal data in several ways, for example through your use of our services or other dealings with us, including through the UK Finance website, through the member onboarding process, completion of enquiry forms, and from information provided in the course of communications and ongoing correspondence. 

Examples are as follows:

  • When filling in forms, including paper and on our website www.ukfinance.org.uk (“our site”), by registering or signing up for services or by corresponding with us by phone, e-mail or other methods. This includes information you provide when you subscribe to our training, events and/or services, complete a survey, sign up to a newsletter, post material on our site, report a problem with our site, request further services.
  • When you browse a website which we operate or support.  In such cases, please refer to the Privacy Notice contained on the site.

Information received from events, training and working groups / committees.

We may collect information about you when you attend any of our events, training sessions and/or attendance of UK Finance working groups / committees.  

Some events or products, listed on our website, are organised in co-operation or sponsored by other organisations. When you register for this type of event or product, it will be made clear with whom your registration data is being shared.

This information may include your name, contact details, job title, company, business or personal email address, phone numbers (business or personal).

Information received from other sources.

We may receive information from other sources, such as from our members, associate members, government officials, law enforcement and fraud prevention agencies, regulatory bodies, our other partners for the purpose of providing services to our members. This includes supporting members and law enforcement and fraud prevention agencies to combat, prevent and detect economic criminal activity.  

The information received may include names, address, financial information, back account transaction information, criminal convictions and cautions and indications of potential or actual criminal activity.

What we use your personal information for

Below is a list of all the ways that we may use your personal information, and the lawful basis relied upon to do so. 

What we use your personal data for What is the lawful reason Business or commercial reason (our legitimate interest)
Manage client relationships; engage stakeholders Carried out pursuant to the agreement we have with you. Where no agreement, this is done within the legitimate interests of UK Finance. In order to provide and ensure we offer the best service to members and associate members, information can be used to manage relationships for the benefit of the member / associate member.
Inform and execute UK Finance’s policy work and non-policy projects Legitimate interests. In order to provide and ensure we offer the best service to members and associate members, information can be used to inform policy and non-policy engagements.
Perform contractual obligations for members Carried out pursuant to the agreement we have with you. N/A
Process complaints from members’ clients on their behalf Carried out pursuant to the agreement we have with members or with the consent of the person providing the complaint. N/A
Improve services offered to members Carried out pursuant to the agreement we have with you. N/A
Manage client relationships and communications Carried out pursuant to the agreement we have with you. N/A
Perform contractual obligations to members Carried out pursuant to the agreement we have with you. N/A
To process and administer lost account tracing claims submitted to mylostaccount.org.uk and to help develop the service further This is done with your consent. N/A
Manage websites and improve services Legitimate interests. In order to provide and ensure we offer the best service to members and associate members.
Member organisations’ clients submitting ‘Better Business Finance’ appeals Carried out pursuant to the agreement we have with you. N/A
To process and administer an independent complaints process for invoice finance and asset based lending member firms. This is provided by an independent specialist Alternative Dispute Resolution (ADR) provider This is done with your explicit consent. Clients of members can choose to share personal data with UK Finance.
Provide specific communications such as "News in brief", the Chief Executive newsletter and other "opt-in" material that can be subscribed to directly. This is done with your consent. You can withdraw your consent on request.
To upload and host blog material written and provided by members including associated personal data such as photographs of individuals. This is done with your consent. You can withdraw your consent on request but please be aware that, once published, the material would likely remain in circulation.
To produce videos from events. This is done with your consent. You can withdraw your consent on request but please be aware that, once published, the material would likely remain in circulation.
Placing cookies and similar technologies on devices and browsers for analytics purposes (please refer to our cookie notice). This is done with your consent. You can withdraw your permission at any time, by using the contact details at the end of this privacy notice or by clicking on the ‘C’ logo displayed on the web page.
To carry out suitable adjustments for events/services that involve the processing of special category (sensitive) personal data such as dietary needs or disabilities. This is done with your explicit consent. You can withdraw your consent on request but it may mean suitable arrangements cannot be made to accommodate your needs.
Business owners or their professional advisors submitting data through the use of the ‘Better Business Finance Finder’ telephone or online services This is done with your consent. You can withdraw your consent on request.
To process and administer 'Restore UK' WWII claims through the relevant financial institution(s) This is done with your consent. N/A
As a business contact, when we use your corporate email address to inform you of products, services, activities, of UK Finance, or to send newsletters or other information (business-to-business direct marketing) This is within our legitimate business interests to perform. Promoting UK Finance to business contacts. We will always offer you a simple way to opt out of these communications, should you wish to.
As a business contact who has enrolled in a UK Finance activity we may share your contact data (name, job title, organisation name and email address) with the activity sponsor, unless you choose to opt out from this. This is within our legitimate business interests, and those of the sponsors of our activities. Promoting UK Finance to our sponsors and enabling them to promote themselves to you if you have enrolled. We will always offer you a simple way to opt out of these communications, should you wish to.
If we use your private (non-corporate) email address to inform you of products, services, activities, of UK Finance, or to send newsletters or other information (business-to-customer direct marketing) This is done with your consent. We will always offer you a simple way to withdraw your consent, should you wish to.
Children and Young People Financial Education Provision Mapping project (contacting you in relation to the project survey after you have registered as a participant) This is done with your consent. You can withdraw your consent on request.
Community Access to Cash Initiative This is within our legitimate business interests to perform. To support the Community Access to Cash Initiative, including sharing the data with LINK and the Award Committee so that applications can be decided upon and the grant funding processed to successful applicants.
Events and training coordination (such as contacting you once you have signed up for an event or training) Carried out pursuant to the agreement we have with you. N/A
Prevention of and detection of crime related to economic crime including fraud and financial crime We carry out this use of data as this is within the public interest to carry this processing out. N/A
Hosting of joint working groups, information sharing meetings (for the purpose of the prevention and detection of crime) and other meetings specifically focused around economic crime We use data relating to the participants of the meetings to fulfil the agreement with have in place to facilitate the sessions. N/A
Hosting of websites and access to portals.  These include: the member portal, Financial Crime Alerts Service (FCAS); Financial Fraud Bureau (FFB) information sharing portal; Fraud Intelligence Sharing System (FISS); Mylostaccount. Carried out pursuant to the agreement we have with you. N/A
Queries from members of the public This is within our legitimate business interests to perform. This is conducted as required in order to help the request which has been provided to UK Finance.

Cookies and Pixels

We may obtain information about your general internet usage by using cookie files stored on your computer or device (“cookies“). Cookies are text files containing small amounts of information which are downloaded to your computer or device when you visit a website. They help us to improve our site and to deliver a better and more personalised service. You may disable cookies by changing the settings on your browser. However, if you do so, this may affect the use of our site.

For more information about our cookie usage, please consult our cookies policy.

We may also use pixels in emails to monitor information such as whether the email has been opened or not.

You can find more information about cookies in general and how to manage them at http://www.allaboutcookies.org/. 

How we share your personal data

UK Finance sometimes uses third party suppliers to help us deliver services and products, for the purposes listed below. When we do so we carry out due diligence assessments to ensure the supplier has appropriate data protection and security standards and our contracts include stipulations governing the processing of personal data in accordance with applicable data protection laws, regulations and regulatory guidance.

  • CRM system providers
  • IT and business services providers
  • Payment service providers 
  • Event management organisations
  • External Auditors
  • Legal advisors
  • Survey/ research management providers
  • Software applications, platform and website
  • Analytics, social media and marketing management, website live chat
  • Publishing services providers 

We may share personal information with other third-party organisations in the following circumstances:

  • If we are discussing a merger or acquisition; reorganised or sold, personal information may be transferred to respective third parties under suitable terms as to confidentiality;
  • If we are required to by law, or under any statutory code, or if we are requested by a government or regulatory authority,
  • If we are investigating or defending any legal claim

We do not sell personal data.

Economic Crime Information Sharing

We may share your personal data with law enforcement agencies, fraud prevention agencies, public authorities or other organisations to support with economic crime detection and prevention information sharing initiatives.

Sharing Anonymised Data

Where we have made your information anonymous, we may share this outside of UK Finance with partners such as research groups, universities, advertisers or connected sites. For example, we may share information publicly to show trends about the financial services market.

Links to External Websites

Our sites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or how such websites collect and use your data.  Please check these policies before you submit any personal data to these websites.

Where we store or transfer your personal data

We would usually ensure that the majority of personal data we store or process is within the UK or European Economic Area (EEA).

There may however, be situations where the data that we collect from you may be transferred to, and stored at, a destination outside the UK and EEA”). 

In those circumstances, we will ensure an equivalent level of protection for personal data. Bu putting in place appropriate safeguards to ensure that your data is adequately protected.

Security of your personal data

We take appropriate technical and organisational measures to ensure that your information is secure. 

We have appointed a Data Protection Officer to ensure that our management of personal data is in accordance with this Privacy Notice and the applicable legislation. 

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of the data transmitted to our site; any transmission of your data is at your own risk. Once we have received your information, we will use  procedures and security features to try to prevent unauthorised access.

UK Finance is ISO 27001 accredited. This an internationally recognised specification for information security management. To meet our commitment to protecting your data we have invested in our people, processes and technology. Independent assessments are carried out on a regular basis.
   
How long we keep your personal data

We process and retain your personal data no longer than necessary for the purpose it was collected and is processed and in compliance with a lawful basis, statutory retention periods, and our retention schedule. 

We retain your personal data in accordance with our data protection, and data retention policies.

Your rights

Data protection laws give you certain rights in relation to the data we hold on you. These include the following rights to:

  • request a copy of the personal data we hold about you;
  • request that we supply you (or a nominated third party) with a copy of the personal data that you provided to us;
  • inform us of a correction to your personal data 
  • exercise your right to restrict our use of your personal data 
  • exercise your right to erase your personal data; or
  • object to the ways in which we are using your personal data.

Your ability to exercise these rights will depend on a number of factors and in some instances, we will not be able to comply with your request e.g. because we have legitimate grounds for not doing so or where the right doesn’t apply to the particular data we hold on you.

Where you have provided consent to our use of your data, you also have the unrestricted right to withdraw that consent at any time. Withdrawing your consent means that we will stop processing the data that you had previously given us consent to use. There will be no consequences for withdrawing your consent.

If you would like more information on these rights, please contact us using the details below.

How to contact us

Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to  dpo@ukfinance.org.uk.

If you have a concern about any aspect of our privacy practices, you can make a complaint. This will be acted upon promptly. To make a complaint, please contact us via one of the methods set out above. If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with our supervisory authority, the Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.

Updates

This policy is kept under review, and changes may be made from time to time.

Updates:

10 May 2023

11 July 2024

14 November 2024