Privacy policy

Privacy Notice

Who are we

UK Finance, the Building Societies Association (BSA) and National Savings and Investments (NS&I) all of whom have operational responsibilities under MyLostAccount.

UK Finance is a limited company (with company number 10250295) registered at 1 Angel Court, London EC2R 7HJ Please refer to https://www.ukfinance.org.uk for further information.

For information about the BSA please refer to https://www.bsa.org.uk.

For information about NS&I please refer to https://www.nsandi.com.

This Privacy Notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you. It also contains useful information about who to contact in the event you have a question or query.

The MyLostAccount tracing services covers over 30 UK banks, 42 building societies and the full range of National Savings & Investment products.

You can find more information about MyLostAccount in general by clicking here www.mylostaccount.org.uk/about-us/.

Personal Data

In carrying out our activities we may process the following types of personal data:

  • Your personal information (for example, your name and date of birth)
  • Contact details (for example, your postal address, phone number, e-mail address or mobile number)
  • Customer Relationship Data (such as, notes of calls or requests you may have made)
  • Financial information (for example, bank account numbers)
  • Communications data such as emails and text messages
  • Technical Information including internet protocol (IP) address, your login data, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.

How personal data is processed

We obtain personal data in several ways as follows:

  • When submitting a MyLostAccount search online or by completing and sending a paper form to UK Finance, the BSA or NS&I as appropriate for them to submit online on your behalf
  • By corresponding with us by phone, e-mail, in writing.
  • When you browse a website which we operate or support. In such cases, please refer to the Privacy Notice contained on the site.

Information may be collected directly from you as the account holder or via your authorised representative.

What we use your personal information for

Below is a list of all the ways that we may use your personal information, and the lawful basis relied upon to do so.

WHAT WE USE YOUR PERSONAL DATA FOR

WHAT IS THE LAWFUL BASIS

BUSINESS OR COMMERCIAL REASON (OUR LEGITIMATE INTEREST)
Cookies

Helping to trace your lost account.

Consent

N/A

Communicate with you

Legitimate Interests

We will use your data in support of your request to trace an account.

Help and support

Legitimate Interests

We will use your data if you contact us for help or support in tracing an account.


Cookies

We may obtain information about your general internet usage by using cookie files stored on your computer or device (“cookies“). Cookies are text files containing small amounts of information which are downloaded to your computer or device when you visit a website. They help us to improve our site and to deliver a better and more personalised service. You may disable cookies by changing the settings on your browser. However, if you do so, this may affect the use of our site.

For more information about our cookie usage, please consult our cookies policy.

You can find more information about cookies in general and how to manage them at http://www.allaboutcookies.org/.

How we share your personal data

MyLostAccount sometimes uses third party suppliers to help us deliver services and products, for the purposes listed below. When we do so we carry out due diligence assessments to ensure the supplier has appropriate data protection and security standards and our contracts include stipulations governing the processing of personal data in accordance with applicable data protection laws, regulations and regulatory guidance.

  • CRM system providers
  • Business services providers
  • IT service providers
  • External Auditors
  • Legal advisors
  • Software applications, platform and website

We may also share information with other third-party organisations in the following circumstances:

  • Financial institutions whom you have identified as part of your search criteria
  • If we are discussing a merger or acquisition; reorganised or sold, personal information may be transferred to respective third parties under suitable terms as to confidentiality
  • If we are required to by law, or under any statutory code, or if we are requested by a government or regulatory authority
  • If we are investigating or defending any legal claim
  • Law enforcement agencies, fraud prevention agencies, public authorities or other organisations to support with economic crime detection and prevention

We do not sell personal data.

Links to External Websites

Our sites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or how such websites collect and use your data. Please check these policies before you submit any personal data to these websites.

Where we store or transfer your personal data

We would usually ensure that the majority of personal data we store or process is within the UK or European Economic Area (EEA).

There may, however, be situations where the data that we collect from you may be transferred to, and stored at, a destination outside the UK and EEA.

In those circumstances, we will ensure an equivalent level of protection for personal data. By putting in place appropriate safeguards to ensure that your data is adequately protected.

Security of your personal data

We take appropriate technical and organisational measures to ensure that your information is secure.

We have appointed a Data Protection Officer to ensure that our management of personal data is in accordance with this Privacy Notice and the applicable legislation.

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of the data transmitted to our site; any transmission of your data is at your own risk. Once we have received your information, we will use procedures and security features to try to prevent unauthorised access.

How long we keep your personal data

We process and retain your personal data no longer than necessary for the purpose it was collected and is processed and in compliance with a lawful basis, statutory retention periods, and our retention schedule.

our data protection, and data retention policies.

Your rights

Data protection laws give you certain rights in relation to the data we hold on you.

These include the following rights to:
Your ability to exercise these rights will depend on a number of factors and in some instances, we will not be able to comply with your request e.g., because we have legitimate grounds for not doing so or where the right doesn’t apply to the particular data we hold on you.

  • request a copy of the personal data we hold about you
  • request that we supply you (or a nominated third party) with a copy of the personal data that you provided to us
  • inform us of a correction to your personal data
  • exercise your right to restrict our use of your personal data
  • exercise your right to erase your personal data
  • object to the ways in which we are using your personal data.

Where you have provided consent to our use of your data, you also have the unrestricted right to withdraw that consent at any time. Withdrawing your consent means that we will stop processing the data that you had previously given us consent to use. There will be no consequences for withdrawing your consent.

If you would like more information on these rights, please contact us using the details below.

How to contact us

Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to dpo@ukfinance.org.uk.

If you have a concern about any aspect of our privacy practices, you can make a complaint. This will be acted upon promptly. To make a complaint, please contact us via one of the methods set out above. If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with our supervisory authority, the Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.

Updates

This policy is kept under review, and changes may be made from time to time.

Updates:

August 2024