Information we hold | Our privacy policy | NatWest

The information we process

We collect and process various categories of personal information at the start of, and for the duration of, your relationship with us. We will limit the collection and processing of information to information necessary to achieve one or more legitimate purposes as identified in this notice.

Personal information may include...

Basic personal information
including name and address, date of birth and contact details

Financial information 
including account and transactional information and history
 

Information about your family,
lifestyle and social circumstances
(such as dependents, marital status, next of kin and contact details)
 

Information about your financial circumstances 
including personal wealth,  assets and liabilities, proof of income and expenditure, credit and borrowing history and needs and goals

 

Education and employment information

Goods and services provided

Visual images and personal appearance
(such as copies of passports or CCTV images)

Online profile and social media information and activity
based on your interaction with us and our websites and applications, including for example, your banking profile and login information, Internet Protocol (IP) address, smart device information, location coordinates, online and mobile banking security authentication, mobile phone network information, searches, site visits and spending patterns

We may also process certain special categories of information for specific and limited purposes, such as detecting and preventing financial crime or to make our services accessible to customers. We will only process special categories of information where we’ve obtained your explicit consent or are otherwise lawfully permitted to do so (and then only for the particular activities and purposes set out here  for which the information is provided).

Special categories of information for specific and limited purposes may include...

Information about racial or ethnic origin

Religious or philosophical beliefs

Trade union membership

Physical or psychological health details or medical conditions

Biometric information 
relating to the physical, physiological or behavioural characteristics of a person, including for example using voice recognition or similar technologies to help us prevent fraud and money laundering

Where permitted by law, we may process information about criminal convictions or offences and alleged offences for specific and limited activities and purposes, such as to perform checks to prevent and detect crime and to comply with laws relating to money laundering, fraud, terrorist financing, bribery and corruption, and international sanctions. It may involve investigating and gathering intelligence on suspected financial crimes, fraud and threats and sharing data with law enforcement and regulatory bodies set out in What we do with the data.

This guide contains
the following sections:

Overview
Information we hold
What we do with the data
Sharing data outside NatWest
Your rights

Add your signposting title here… How we obtain information

Your information is made up of all the financial and personal information we collect and hold about you/your business and proprietors, officers and beneficial owners of that business and your transactions. It includes:

Information you give to us

Information that we receive from third parties
including other RBS group companies, third parties who provide services to you or us, and credit reference, fraud prevention or government agencies and other banks (where permitted by law)

Information that we learn about you through our relationship with you
and the way you operate your accounts and/or services, such as the payments made to and from your accounts

Information that we gather from the technology which you use to access our services
(for example location data from your mobile phone, or an IP address or telephone number)  and how you use it (for example pattern recognition)

Information that we gather from publicly available sources
such as the press, the electoral register, company registers and online search engines

Add your signposting title here… How long we keep your information

Why we keep records

By providing you with products or services, we create records that contain your information, such as customer account records, activity records, tax records and lending and credit account records. Records can be held on a variety of media (physical or electronic) and formats.

We manage our records to help us to serve our customers well (for example for operational reasons, such as dealing with any queries relating to your account) and to comply with legal and regulatory requirements. Records help us demonstrate that we are meeting our responsibilities and to keep as evidence of our business activities.

Retention periods may vary based on the type of record

Retention periods for records are determined based on the type of record, the nature of the activity, product or service, the country in which the relevant RBS company is located and the applicable local legal or regulatory requirements. We (and other RBS group companies) normally keep customer account records for up to six years after your relationship with the bank ends, whilst other records are retained for shorter periods, for example ninety days for CCTV records or twelve months for call recordings. Retention periods may be changed from time to time based on business or legal and regulatory requirements.

We may on exception retain your information for longer periods, particularly where we need to withhold destruction or disposal based on an order from the courts or an investigation by law enforcement agencies or our regulators. This is intended to make sure that the bank will be able to produce records as evidence, if they are needed.

Contact us for personal information

If you would like more information about how long we keep your information, please contact us at 03457 888 444 Overseas number +44 3457 888 444 Minicom 0800 404 6161.

Set Tab for lightbox