The way you use your accounts, including information about payments you make or receive such as
the date, amount, currency and the details of the payee or payer (for example, retailers or other
individuals)
If you have used or made claims on any of the products and services that you have taken out with your
current account e.g. travel, phone, and gadget insurance
Our own records about any other accounts or products you or a trading entity you own or are
associated with have with us or other providers
Where we think it is necessary, our own records about your shareholders, members, beneficial owners
and other related individuals
Information from credit reference agencies and fraud prevention agencies
Organisations that provide their own data, or data from other third parties, to enable us to enhance the
personal data we hold, and then provide more relevant and interesting products and services to you
Criminal record checks and information
Employers
Joint account holders; other directors, partners, trustees or signatories, if applicable
People appointed to act on your behalf
Other banks and financial institutions (for example because you have asked us to display your other
accounts on our platforms, we have received information to address payments made in error, or you
have switched your account to us)
Publicly available sources which are available online or otherwise, such as media stories
Trading entities, you own or are otherwise associated with (for example special purpose vehicles,
trusts or partnerships) and the directors, partners, trustees or signatories of such entities.
If you give us personal data about other people (such as dependants or joint account holders) which
we’ll use to provide services, or if you ask us to share that information with third parties, for example to
provide payment initiation or account information services, then you confirm that you know that they
are aware of the information in this notice about how we will use their personal data.
3. What we use your information for and the legal basis for doing so
We must have a legal basis to process your personal data. In most cases, the legal basis will be one of
the following:
To allow us to take actions that are necessary in order to provide you with the product / service
(performance of a contract), for example, to make and receive payments
To allow us to comply with our legal obligations, for example, obtaining proof of identity to enable us
to meet our anti-money laundering obligations
To meet our legitimate interests, for example, to understand how clients use our services and to
develop new services, as well as improve the service we currently provide
Where we have your consent to do so
In the case of special categories of personal data, that it is in the substantial public interest.
The table below sets out the purposes for which we use your personal data and our legal basis for doing
so. Where we are relying on a legitimate interest, these are also set out below: