This privacy notice sets out how we, Yorkshire Building Society (YBS), collect and use your personal data and your privacy rights. This notice applies when you when you apply to have you story featured in future marketing.
Within this privacy notice, ‘YBS’ includes the trading names under which we operate (Chelsea Building Society, the Chelsea, Norwich and Peterborough Building Society, N&P and Egg) and its subsidiary companies. Any references to ‘us’, ‘our’ and ‘we’ means ‘YBS’.
When appropriate we will provide a ‘just in time’ notice to cover any additional processing activities not mentioned in this notice.
If you have any questions about this privacy notice, don’t hesitate to get in touch with us by contacting email@example.com. We’ll be more than happy to help.
An organisation that decides how the personal data it collects and holds is used is called a ‘data controller’. We call this use of personal data ‘processing’ – this includes the collection, storage, analysis, sharing, retention and disposal of personal data.
Because YBS is responsible for determining how your personal data is used, we will be the data controller and are registered with the Information Commissioner's Office (ICO) - the organisation in the UK that oversees that we are acting accordingly when processing personal data. Our registration numbers are:
What personal data do we collect?
We collect the following personal data from you:
Your Contact details (including phone number and/or email address)
Any personal information that you provide to us in the text box
How do we collect personal data?
We collect personal data about you, from you when you fill in and submit the contact form on our webpage. We may also collect personal data about you if you choose to provide this in the text box.
Lawful basis for processing personal data
It is in our legitimate business interests to collect authentic content for our marketing campaigns and we process your personal data for this and for contacting you about your voluntary story contribution for this purpose.
You have the right object to our processing of your personal data at any time (please see the section ‘What rights do you have in relation to your Personal Data?’ below for further details.
How do we use your personal data?
We will use your name and contact details to get in touch with you if we would like to feature your story. We use the content of your story (which may include personal data about you) to assess suitability for inclusion to feature in our marketing. If we choose your story to feature in our marketing, we will provide you with further information regarding our intended further use of your personal data at that time.
Who do we share your personal data with?
We will not share your personal data with anyone outside of YBS.
How long do we keep your personal data?
If we decide not to use your story, we will retain your personal data for a maximum of 6 months from when you sent it to us unless you contact us sooner to request earlier deletion. If you need to make such a request, please contact firstname.lastname@example.org
If we decide to use your story, we will retain your personal data for at least the time of our marketing campaign plus we will contact you every 12 months to confirm you’re still happy with the agreement; however, we will provide further information about how long we intend to retain your personal data for at the time of selection.
What rights do you have in relation to your Personal Data?
You have the right to request a copy of the personal data which YBS holds about you. This is known as ‘Data Subject Access Request (DSAR)’.
You have the right to erasure of your personal data. You can ask us to delete your personal data at any time.
You have the right to object to us processing your personal data.
You have the right to restrict us from processing your personal data.
You can request any of the above rights by writing to us at the address at end of this notice or emailing us at email@example.com.
Data Protection Officer (DPO) details
If you have any concerns about how we collect, use, share or keep your personal data, you think there has been a breach, or you have a question or concern about anything in this notice, you may contact our Data Protection Officer (DPO) using the details below:
Data Protection Officer
BD5 8LJ firstname.lastname@example.org
Contacting the Information Commissioner’s Office (ICO)
You have a right to complain to the Information Commissioner’s Office (ICO) if you have any concerns about how we collect, use, share or keep your personal data. You may contact them at:
Information Commissioner’s Office (ICO)