How is my personal data protected and used?

How it is protected

• Encrypted in transit and at rest.
• Staff access is role-based, granted on a least-privilege basis, and logged.
• Sensitive fields — credentials, security answers, card data — are stored using one-way hashing or tokenisation, so they cannot be read back.
• Systems are monitored continuously and access records retained for audit.

What it is used for

• Operating your accounts and processing your instructions.
• Verifying your identity and preventing fraud and financial crime.
• Meeting legal, regulatory and tax-reporting obligations.
• Servicing your relationship and improving our services.

We do not sell your personal data.

Your rights

Depending on your jurisdiction you may have the right to access the data we hold, correct inaccuracies, restrict or object to certain processing, and request deletion. Deletion is limited by law: banking and anti-money-laundering rules require certain records to be retained for a defined period after an account closes, and we cannot delete those earlier.

To exercise a right, raise a support ticket or write to us. Full detail is in our privacy policy.