Data Privacy Notice (2024)

15. How we use your information to make automated decisions

Here we tell you how we use automated systems to make decisions about you and your money. We also explain the rights you have to challenge decisions made this way.

We sometimes use systems to make automated decisions about you or your business. This helps us to make sure our decisions are quick, fair, efficient and correct, based on what we know. Automated decisions can affect the products, services or features we may offer you now or in the future, or the price that we charge you for them. They are based on personal information that we have or that we are allowed to collect from others.

Here are the types of automated decision we make:

Pricing

We may decide what to charge for some products and services based on what we know. For instance, if you use our online mortgage calculator, it will use the personal financial details you put in to estimate the kind of mortgage we may offer you. If you apply for insurance, we will compare what you tell us with other records to work out how likely you are to make a claim. This will help us to decide whether to offer you the product and what price to charge you.

Tailoring products, services, offers and marketing

We may place you in groups with similar customers. These are called customer segments. We use these to study and learn about our customers’ needs, and to make decisions based on what we learn. This helps us to design products, services and offers for different customer segments, and to manage our relationships with them.

We also use customer segments from outside companies we work with - such as social networks - by asking them for groups of people who are similar to you, or have interests that are like yours in some ways. These companies help us look for new customers who may be interested in products, services or offers that our existing customers are interested in.

This helps us tailor the marketing that individuals receive or are shown on our own and other websites and mobile apps, including social media. It also helps us to design products, services and offers for different customer segments, and to manage our relationships with them.

Detecting fraud

We use your personal information to help decide if your personal or business accounts may be being used for fraud or money-laundering. We may detect that an account is being used in ways that fraudsters work. Or we may notice that an account is being used in a way that is unusual for you or your business. If we think there is a risk of fraud, we may stop activity on the accounts or refuse access to them.

Opening accounts

When you open an account with us, we check that the product or service is relevant for you, based on what we know. We also check that you or your business meet the conditions needed to open the account. This may include checking age, residency, nationality or financial position. It may mean we cannot offer you the account you want.

Approving credit

We use a system to decide whether to lend money to you or your business, when you apply for credit such as a loan or credit card. This is called credit scoring. It uses past data to assess how you’re likely to act while paying back any money you borrow. This includes data about similar accounts you may have had before.

Credit scoring uses data from three sources:

  • Your application form
  • Credit reference agencies
  • Data we may already hold

It gives an overall assessment based on this. Banks and other lenders use this to help us make responsible lending decisions that are fair and informed.

Credit scoring methods are tested regularly to make sure they are fair and unbiased.

This credit score can determine whether we will give you credit, or allow you to take another product or service.

Your rights

You can object to an automated decision we have made, and ask that a person reviews it.

If you want to know more about these rights, please contact us.

Back to top

Data Privacy Notice (2024)

FAQs

Data Privacy Notice? ›

A privacy notice should identify who the data controller is, with contact details for its Data Protection Officer. It should also explain the purposes for which personal data are collected and used, how the data are used and disclosed, how long it is kept, and the controller's legal basis for processing.

What is data privacy notice? ›

A privacy notice should identify who the data controller is, with contact details for its Data Protection Officer. It should also explain the purposes for which personal data are collected and used, how the data are used and disclosed, how long it is kept, and the controller's legal basis for processing.

Why am I getting a privacy notice? ›

It provides information regarding the categories of personal data handled, the legal justification for processing personal data, and the data provided to third parties. A privacy notice typically describes an organization's data processing practices and what website visitors can expect.

Do I need a data privacy notice? ›

The need to provide people with privacy information as soon as possible after obtaining their personal data is strongest where: your use of the data is likely to be unexpected or unwelcome; your use of the data is likely to have a significant effect on individuals; or.

What is a privacy notice document? ›

What Is a Privacy Notice? The privacy notice is a document you present to people who visit your site used to explain to them how you collect their information and how they can opt out.

What are the three types of privacy notices? ›

There are three types of privacy notices defined in the regulations: an initial notice, an annual notice, and a revised notice. The regulation specifies when and to whom a bank is required to give each type of privacy notification. Let's look at the when and who for each type of privacy notice.

Who must provide a privacy notice? ›

Your health care provider and health plan must give you a notice that tells you how they may use and share your health information. It must also include your health privacy rights. In most cases, you should receive the notice on your first visit to a provider or in the mail from your health plan.

Should I worry about privacy warning? ›

This warning signal is sent out by wifi hotspots, alerting users that the network may not be secure and require action before being able to connect. Without taking the necessary precautions, there is a higher chance of having personal data compromised.

Is it bad if it says privacy warning? ›

The Privacy Warning Message Usually Isn't Something to Worry About. You shouldn't have too many issues fixing the Privacy Warning message in most cases. Once you've toggled the Private Wi-Fi network feature on, everything should be back to normal.

Does privacy warning mean hacked? ›

For starters, it's important to know that seeing the error is just a warning, and it does not mean any of your private information is compromised.

What is considered data privacy? ›

Data privacy is focused on the use and governance of personal data—things like putting policies in place to ensure that consumers' personal information is being collected, shared and used in appropriate ways. Security focuses more on protecting data from malicious attacks and the exploitation of stolen data for profit.

Can you opt out of privacy notice? ›

An opt-out notice must be delivered with a privacy notice, and it can be part of the privacy notice. The opt-out notice must describe a "reasonable means" for consumers and customers to opt out.

Do I need a privacy policy if I don't collect data? ›

Your business should have a Privacy Policy even if it doesn't collect any data from users. Having a Privacy Policy that is easy to locate will make your website or app look more professional and trustworthy. Your policy doesn't need to be as long and complicated as a business that collects personal information.

When should a privacy notice be issued? ›

within a reasonable period of obtaining the personal data and no later than one month; if you use the data to communicate with the individual, at the latest, when the first communication takes place; or. if you envisage disclosure to someone else, at the latest, when you disclose the data.

What is privacy notice and consent? ›

An explicit privacy notice is generally required for any lawful processing of personal data under the GDPR where the lawful basis for that processing is not the consent of the data subject.

How long can you keep personal data for? ›

Under the GDPR, you can only hold personal data for as long as you need it. One of the 7 principles of the GDPR is the principle of storage limitation, which is the idea that personal data should only be kept long enough for it to be processed for its stated purpose.

How do I write a privacy notice? ›

Share this page
  1. your full contact details;
  2. the types of personal data you collect;
  3. where you got people's data from, if it wasn't from them;
  4. why you have people's information and what you're doing with it;
  5. your lawful basis and your legitimate interests where relevant;
  6. who you share people's information with; and.

How do you secure personal data? ›

6 Ways to Protect Your Personal Information Online
  1. Create strong passwords. ...
  2. Don't overshare on social media. ...
  3. Use free Wi-Fi with caution. ...
  4. Watch out for links and attachments. ...
  5. Check to see if the site is secure. ...
  6. Consider additional protection.

Which is not included in a notice of privacy practices? ›

What Is Not Included in The Notice of Privacy Practices? HIPAA Notice of Privacy Practices is a general summary of the patient's rights and the covered entity's policies. It won't include specific information like to whom they've already released your records.

Why does my iPhone say privacy warning? ›

In iOS 14, Apple added the privacy warning message to allow users to know when a network can see their MAC address. Without getting too technical, a MAC address can be used to identify a device on a network.

Why does my iPhone say privacy warning when I connect to Wi-Fi? ›

If your Apple device shows a privacy warning or weak-security warning about a Wi-Fi network, that network could expose information about your device. If you administer the Wi-Fi network, we recommend that that you update the settings of your Wi-Fi router to meet or exceed the security standards in this article.

Why is privacy warning on iPhone? ›

What is Wi-Fi privacy warning on iPhone? The warning message indicates the network is open, and other people on the same network may be able to see the user's data, including passwords, emails, and additional sensitive information. Public Wi-Fi is prone to expose users' MAC addresses to the network.

What is private Wi-Fi on iPhone? ›

About private Wi-Fi addresses

Starting with iOS 14, iPadOS 14, and watchOS 7, your device improves privacy by using a different MAC address for each Wi-Fi network. This unique MAC address is your device's private Wi-Fi address, which it uses for that network only.

Why do I have no Internet? ›

Restart your device.

Open your Settings app and tap Network & internet or Connections. Depending on your device, these options may be different. Turn Wi-Fi off and mobile data on, and check if there's a difference. If not, turn mobile data off and Wi-Fi on and check again.

What does it mean when your Wi-Fi is blocking encrypted DNS traffic? ›

Since some ISPs profit from selling your DNS traffic to marketing companies, they try to block DNS encryption, which prevents them from snooping on you. That's why iOS displays the network blocking warning message.

What does it mean when a network is blocking encrypted DNS traffic? ›

Your iPhone can encrypt DNS traffic so that the names of websites and servers you access cannot be seen by third parties. Occasionally your iPhone may display a warning that encrypted DNS traffic is being blocked.

What is a hacker warning? ›

Hacker Alert is an added level of security for your home Internet network, that provides alerts directly to you via email and SMS (text message) when malware is identified on any connected device in your home network.

Is data privacy a risk? ›

Significant reputation damage can result from misused data and/or data breaches. Organizations should understand and prepare for the reputational risks that extend beyond non-compliance with the myriad of data privacy laws and regulations.

Is data privacy good or bad? ›

In many jurisdictions, privacy is considered a fundamental human right, and data protection laws exist to guard that right. Data privacy is also important because in order for individuals to be willing to engage online, they have to trust that their personal data will be handled with care.

What are common examples of data privacy? ›

Data privacy is typically associated with the proper handling of personal data or personally identifiable information (PII), such as names, addresses, Social Security numbers and credit card numbers.

How do I stop getting privacy reports? ›

You can turn off App Privacy Report at any time in Settings > Privacy > App Privacy Report.

Should all websites have a privacy notice? ›

Yes, you need a privacy policy on your website. If you collect personal information from users, many laws require you to include a privacy policy on your site that explains your data-handling practices.

What is the data privacy Act of 2023? ›

The bill protects against the misuse or overuse of consumer nonpublic personal information. Under the bill, entities are directed to disclose to consumers why they are collecting certain pieces of data, and only use data for its stated purpose.

What happens if you don't accept privacy policy? ›

Additionally, customers who feel their privacy rights have been violated can sue your company. Companies need to understand the privacy laws in the regions where they do business, and the fines and penalties associated with non-compliance with such laws.

Can I write my own privacy policy? ›

Yes, you can write your own privacy policy. You don't need to hire a lawyer to write a policy for your website or app — using a privacy policy template will help you include all the clauses necessary to explain your data-handling practices to users.

What data can you collect without consent? ›

In summary, you can process personal data without consent if it's necessary for: A contract with the individual: for example, to supply goods or services they have requested, or to fulfil your obligations under an employment contract. This also includes steps taken at their request before entering into a contract.

How often must a customer receive a privacy notice? ›

You must provide a clear and conspicuous notice to customers that accurately reflects your privacy policies and practices not less than annually during the continuation of the customer relationship. Annually means at least once in any period of 12 consecutive months during which that relationship exists.

Which of the following is not considered as sensitive personal information? ›

Examples of non-sensitive data would include gender, date of birth, place of birth and postcode. Although this type of data isn't sensitive, it can be combined with other forms of data to identify an individual.

What is a privacy notice displayed after collection of data? ›

A privacy notice serves as a public notification to visitors of a website that their personal information may be collected, processed, and used for certain purposes.

Can I share personal data with a third party? ›

Data sharing usually means disclosing personal data to third parties outside your organisation. It can also cover the sharing of personal data between different parts of your own organisation, or other organisations within the same group or under the same parent company.

What is data privacy examples? ›

Data privacy is typically associated with the proper handling of personal data or personally identifiable information (PII), such as names, addresses, Social Security numbers and credit card numbers.

What is the purpose of a data privacy agreement? ›

A DPA is a legally binding document between a controller and a processor that sets forth the terms of data processing, such as duration, scope, and purpose. It also describes the relationship between the two parties as well as their rights and obligations in terms of safeguarding personal data.

What is a privacy notice for US employees? ›

An Employee Privacy Policy outlines an employee's personal privacy rights while in the workplace and details the employer's policies, procedures, and practices regarding the collection, storage, and disclosure of employee personal information (such as their legal name, residential address, and other identity ...

What are the two types of data privacy? ›

There are two primary types: Non-sensitive PII — Information that is already in the public record, such as a phone book and online directory. Non-personally identifiable information (non-PII) — Data that cannot be used to identify a person.

What are three issues of data privacy? ›

Visiting a website with an insecure URL. Falling prey to a phishing scam. Data breaches to services with which you've shared personal information. Reusing passwords.

Which are the 4 basic principles of data privacy? ›

Data minimisation. Accuracy. Storage limitation. Integrity and confidentiality (security)

What are the 8 data privacy rights? ›

Under Chapter IV of the Act, there are eight (8) rights that belong to data subjects, namely: the right to be informed; the right to access; the right to object; the right to erasure and blocking; the right to rectify; the right to file a complaint; the right to damages; and the right to data portability.

How do you ensure data privacy? ›

When managing data confidentiality, follow these guidelines:
  1. Encrypt sensitive files. ...
  2. Manage data access. ...
  3. Physically secure devices and paper documents. ...
  4. Securely dispose of data, devices, and paper records. ...
  5. Manage data acquisition. ...
  6. Manage data utilization. ...
  7. Manage devices.

How long is personal data stored for? ›

Under the GDPR, you can only hold personal data for as long as you need it. One of the 7 principles of the GDPR is the principle of storage limitation, which is the idea that personal data should only be kept long enough for it to be processed for its stated purpose.

What should I look for in a data privacy agreement? ›

Generally speaking, a DPA should include the scope and purpose of data processing, what data will be processed, how it will be protected, and the controller-processor relationship. GDPR data processing agreements must be particularly detailed.

Can my boss tell other employees my personal information? ›

Employees have the right to keep private facts about themselves confidential and the right to some degree of personal space. An employer that discloses private facts or lies about an employee may be held accountable in a civil action for invasion of privacy or defamation.

What is invasion of privacy at work by employer? ›

Public Disclosure of Private Facts

In case your employer publishes any of your information revealed in confidence, it is an invasion of privacy in the workplace. For example, it is likely an encroachment if somebody publicizes information about your health, sexual conduct, or financial situation.

What are examples of privacy in the workplace? ›

Employees have a right to privacy in the workplace, as well. This right applies to the worker's personal items, which include briefcases or handbags, as well as storage lockers and private email accessible only by the employee. Other employee rights include: Being free from harassment and discrimination of all types.

Top Articles
Latest Posts
Article information

Author: Rev. Leonie Wyman

Last Updated:

Views: 6388

Rating: 4.9 / 5 (59 voted)

Reviews: 90% of readers found this page helpful

Author information

Name: Rev. Leonie Wyman

Birthday: 1993-07-01

Address: Suite 763 6272 Lang Bypass, New Xochitlport, VT 72704-3308

Phone: +22014484519944

Job: Banking Officer

Hobby: Sailing, Gaming, Basketball, Calligraphy, Mycology, Astronomy, Juggling

Introduction: My name is Rev. Leonie Wyman, I am a colorful, tasty, splendid, fair, witty, gorgeous, splendid person who loves writing and wants to share my knowledge and understanding with you.