Your Information and Your Rights

We want our customers to understand their rights when it comes to their data, and the reasons we may collect it. The below sections cover Your Rights and our ‘Legitimate interests’ in collecting data, in line with the Data Protection legislation.  You can also read our Privacy Policy which covers our commitment to keeping your personal information secure, and explains how we collect and use your personal information.

Your Rights

You have rights over your personal information - set out in the Data Protection legislation. Take a look at details of these rights below.

To exercise a right, please read the details carefully to make sure it’s right for you and your circumstances and then choose a contact option. We have one month to respond to these requests, but we aim to respond sooner and keep you updated on progress.

Can I request that the personal information the Principality holds about me is deleted?

Yes. This right is sometimes called the right of erasure or right to be forgotten. If you chose to exercise this right, we would consider the circumstances first because the right is not always available and we sometimes need to keep your information.

Before making a request, please consider the following:

  • If you have an open, active account or mortgage with us, we need to keep your information because we need to manage your account, provide a service, keep you updated and monitor communications.
  • If you had an open, active account or mortgage with us:
    • In the last 6 years, we generally keep your information to help us investigate any issues that might arise in connection with your relationship with us. This might help us to resolve any concerns you may raise with us or
    • Over 6 years ago, we might keep your information for a longer period if this is necessary in connection with your or our right to establish, start or defend legal claims, to investigate complaints, or to protect our business.
  • If you applied for a mortgage with us we may securely keep information about credit applications for up to four years. This helps us to manage our lending criteria so we can continue to lend responsibly.
  • • If you only enquired about our services and don’t open an account, we may securely keep your information for 12 months to monitor our services and respond to any concerns you may raise with us.

More information about this can be found in our Privacy Policy.

Can I request Principality correct information held about me if I feel it’s inaccurate or add additional information I feel it’s incomplete?

Yes. This is called the right to rectification. If you feel some of the information we hold about you is inaccurate or incomplete, by contacting us you can find out if you can get it corrected or add further information and how to go about it. We might ask you to provide official documentation to show the correct information before we change our records.

Can I see the information Principality holds about me?

Yes. There are two options available 1) the right of access and 2) the right to data portability:

  • The right of access allows you to request Principality provide the information held about you. This is called a subject access request. If you choose this option, please contact us. We will securely send you paper copies of this information in the post.
  • The right to data portability allows you to request your information in a machine readable format. This means the information may not be easy for you to read because it’s designed specifically for computers to read. If you want information displayed in a readable format, you should contact us about a subject access request. If you choose the right to data portability we will send the information you have provided us (only) on a compact disc. This option is sometimes suggested by lenders when you’re considering making an application. At Principality, we won’t ask for this information when you’re making an application for our services and we do not accept information about you from other lenders in this format.

Can I ask Principality to change how my information is used or processed?

Yes. These rights are as follows:

  • The right to restrict processing. If you’ve made a request for your information to be corrected, you can ask us to stop using your data or contacting you whilst your request is investigated. It’s important to note that we will still need to contact you with important information such as statements or if we identify unusual activity on your account, but we will endeavour to resolve your request before further using your information wherever possible. If you usually receive direct marketing we’ll stop sending you this. If you want to start receiving this again after we’ve resolved your request, you’ll need to tell us.
  • The right to object. If you feel we’re using or processing your information inappropriately you can ask us to address this. This might be if you want us to stop sending you direct marketing in which case we can meet your request. If your request was about something else, we would consider the circumstances of your request.

Can I find out who you have shared my information with?

Yes. Our privacy policy provides details of who we’re likely to share your information with. Alternatively, you might be interested to know who we’ve told about a recent change you’ve made to your personal information as part of a rectification request. You can exercise this right of notification by contacting us.

Can I ask Principality to stop contacting me?

Yes. You have the right to:

  • Restrict processing; if you’ve made a request for your information to be corrected, you can ask us to stop contacting you whilst your request is investigated.
  • You can choose not to receive direct marketing from us at any time. You can do this online through Your Account, at a branch or by contacting us. It can take 6 weeks to update changes so you may continue to receive marketing information during this time.

If you have an active account or mortgage with us, we will still need to contact you to manage your account, provide a service, to keep you updated and to meet your regulatory obligations such as send you statements.

More information about this can be found in our Privacy Policy.

  • Telephone: 0330 333 4000
  • E-mail:
    If you have a query for our Data Protection Officer responsible for our Privacy Policy, please address the letter to the DPO.
  • If you feel the need, you have the right to complain by contacting us so we can investigate your concerns. Alternatively you can contact the Information Commissioner (ICO) which is the regulator for data protection legislation. The ICO’s contact details can be found at or by calling 0303 123 1113.
  • If you have any questions or comments, or want more information, you can call us. See our Contact Us page for more details. Or you can contact our Data Protection Officer as follows. Email: or Post: Principality Data Protection Officer, Principality Building Society, Principality House, The Friary, Cardiff, CF10 3FA.

Cysylltwch â ni
X logo Instagram logo Facebook logo LinkedIn logo YouTube logo