Privacy Statement

Last updated 1 April 2022

At Unity Trust Bank, we are committed to protecting and respecting your privacy, and we take the protection of your personal information seriously.

Our Privacy Statement explains our approach to collecting, storing, and processing your personal information, along with your rights, and how to get in touch with us if you have any further questions.

What information do we collect about you?

We collect and process:

• information you give us when you open an account with us or apply for one of our products or services (our “Services”). This will be the name, address, telephone numbers, date of birth, personal address and email address, country of residence and position within the organisation for all people who are named on the account (“Account Details“);
• information you provide when you voluntarily complete customer surveys, provide feedback and participate in customer focus groups (“Feedback“);
• correspondence you may have with us (including recordings of your calls with us) and any complaints you have raised to our attention (“Correspondence“);
• information from credit reference agencies Equifax plc and GBG plc who gather information for us from public authorities, (for example the Driver Vehicle Licensing Agency (DVLA) and local authorities who run the UK electoral rolls) to verify your identity (“Compliance Information“);
• your name, business name, business address, business email address and business telephone number where these have been obtained from third parties for the purposes of marketing (“Lead Generation Data“);
• information about your use of our website is collected using cookies. You can read more about these here.

How will we use the information about you?

We use personal information to provide you with our Services, updates concerning our Services, and to send administrative information to you, for example information regarding changes to our terms, conditions, or policies. We also need to use your personal information to ensure the security of our Services, as well as for the purposes of preventing or detecting fraud.

This means that the legal basis for us processing your personal information described above will typically be the following:

• because it is necessary to fulfil a contract that we have in place with you;
• where the processing is necessary for compliance with our legal obligations; or
• for our legitimate business interests.

We process personal information about you, and may contact you, for our legitimate business interests to help us better understand our customers and improve our customer engagement and our Services. We process this information for analysing our business, market research, audits, developing new products, enhancing our website, improving our Services, identifying usage trends, determining the effectiveness of our promotional campaigns, tailoring the customer experience and content based on your past activities on the website or Internet Banking, gauging customer satisfaction or providing customer service (including trouble shooting in connection with customer issues).

We use and keep call recordings between you and us for our legitimate business interest of internal training purposes, and also to ensure that we are handling your query correctly.

For the purpose of marketing, we receive information from third parties about individuals who may be interested in receiving our Services. We do this for our legitimate business interests of expanding our business.

Marketing preferences

We use the following channels to provide you with information about our Services which may be of interest to you:

• Email
• Phone
• Post
• Text

If you have consented to receive marketing communications, you have the right to amend your preferences, including the communication channels and opt out at any time. You can do this by updating your user preferences here or by emailing us@unity.co.uk. Please note, if you opt out or amend your preferences, we may still contact you about Service-related issues, such as where we make changes to our Services, our terms and conditions or this Privacy Statement.

We will never sell or disclose your personal information to third parties for marketing activities, although we do use customer management and fulfilment agencies to help us with our own marketing activities.

How we store your personal information and how long we store it for

We only store your personal information in the UK and our suppliers do not send personal information outside the EEA. However, we will of course, have to disclose your details to external banks outside the EEA if you have requested payment to such bank accounts.

We will only retain your personal information for the following periods:

• Your Account Details, Correspondence and Compliance Information – 6 years after you have closed your account with us;
• Lead Generation Data – 6 years after this data was initially captured
• Feedback Data – 6 years after this data was initially captured

Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will stop processing that personal information and delete it. This will not affect the lawfulness of processing based on consent before its withdrawal.

If we have anonymised your personal information or aggregated your personal information in a way that you can no longer be identified from it, then we will continue to keep and use this anonymised information.

Who we share your personal information with

We cannot run our business or provide many of our services and benefits without involving other people and businesses, and sometimes we pass your information to these other people and businesses as set out below. We only share your information where we can do so in accordance with our legal data protection and privacy obligations. We will share your personal information with:

• credit reference service providers who provide anti-fraud and credit score information to us, central and local government departments, for example the Driver Vehicle Licensing Agency (DVLA) and local authorities who run the UK electoral rolls, banks and finance companies who also provide anti-fraud services, in each case as necessary in order to benefit from their services. Where your personal information has been shared with us by third parties, we will share this information with customer management and fulfilment agencies who help us to generate leads and book appointments for our Relationship Managers;
• fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment. Further details of how your information will be used by us and these fraud prevention agencies, and your data protection rights can be found by following this link.
• customer management and fulfilment service providers so we can manage your transactions and deal with your account applications and amendments;
• payment service providers who provide services for sending and receiving payments;
• data security providers who provide us with our safeguards for your personal data;
• professional advisors who need it to provide advice to us;
• compliance and regulatory bodies: police, local authorities, HM Revenue & Customs (HMRC), the Financial Conduct Authority, the Prudential Regulation Authority, the courts and any other central or local government bodies where they request it and we may lawfully disclose it, for example for the prevention and detection of crime;
• other people who make a subject access request to us, where we are allowed to do so by law (see ‘Your rights’ below for what we mean by a subject access request).

We also share the information we process where we are legally obliged to do so, for example, to comply with a court order.

Your rights

You have certain rights in relation to your personal information. These include:

• (where we rely on your consent to process your personal information) the right to withdraw consent to the processing of your personal information,
• the right to request access to your personal information (a “subject access request”);
• to correct any mistakes on our records;
• to erase or restrict your personal information where it is no longer needed for the purpose for which they were obtained or used;
• the right to object to our use of your personal information based on legitimate business interests, including for profiling and marketing; and
• the right, in certain circumstances, to receive a machine-readable copy of, the personal information you provided to us.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We will handle any request to exercise your rights in accordance with applicable law.

If you wish to exercise any of these rights, please write to us using the contact details set out in the “Contacting Us” section below with the subject line ‘Personal information request’. In your request, please supply the following details:

• First name(s) & surname
• Address & postcode
• Details of the type of information you are seeking
• Proof of Identity – this could be a document which contains a signature, such as a passport.

In your request, please make clear what right you would like to exercise. Providing us with this information will help us to quickly identify and deal with your request.

Links

For your convenience, this site contains links to other sites. This Privacy Statement only covers the Unity Trust Bank website. Links within this site to external websites are not covered by this Statement. Unity Trust Bank does not accept any responsibility for the content, accuracy, privacy practices and performance of such sites. Any comments or queries in relation to such linked sites should be directed to the owner of those sites. We recommend that you read the Privacy Statement for every website that you visit.

Changes to our Privacy Statement

We regularly review our Privacy Statement and will publish any updates on this webpage. This Privacy Statement was last updated on 1 April 2022.

Contacting us

If you have any questions, or feedback about this Privacy Statement, or would like to exercise your rights concerning your personal data please get in touch with our Data Protection Officer.

Email: dpo@unity.co.uk

Call: 0345 140 1000

Write to us at: Unity Trust Bank, PO Box 7193, Planetary Road, Willenhall, WV1 9DG

We will do our very best to answer any questions and resolve any complaint to your satisfaction. If, for whatever reason, you feel we do not meet the high standards we expect of ourselves, you have the right to complain to the UK Data Protection Supervisory Authority, the Information Commissioner’s Office (ICO).

Definitions

Browser or Web Browser

There are many web browsers, but the most common ones are Internet Explorer, Firefox, Chrome and Safari. Web browsers are used to locate and display webpages.

Data Controller

We, Unity Trust Bank, registered office: Unity Trust Bank, Four Brindley Place, Birmingham, B1 2JB, are the data controller.

IP (Internet Protocol)

All networks connected to the internet speak IP, the technical standard that allows data to be transmitted between two devices. TCP/IP (Transmission Control Protocol/Internet Protocol) is responsible for making sure messages get from one computer to another and that the messages are understood.

IP Address

When you are connected to the internet you have an IP address. It may look something like this ‘198.184.98.9’.

If you are a dial-up customer using an analogue modem or ISDN, your IP address will usually change each time you connect to the Internet. This means that you cannot be uniquely identified by your IP address.

Web Server

The computer which sends webpages to your computer.

Cookie Options

You can find out more about cookies and how we use them on our website here.