Your Information and Your Rights

We understand how important information privacy is to our customers. We also know that you might like to change the information we hold about you and to have a say in what we do with from time to time. You have rights over your personal information. Take a look at details of these rights below. If an option interests you, please read the details carefully to make sure it’s right for you and your circumstances.

Our Privacy Policy covers our commitment to keeping your personal information secure, and explains how we collect and use your personal information. We meet the requirements of the General Data Protection Regulation (GDPR) in the provision of these rights.

To exercise a right, please choose a contact option on the right. GDPR allows us a month to respond to these requests, but we aim to respond sooner. We would keep you updated on progress.

Can I request that the personal information the Principality holds about me is deleted?

Yes. This right is sometimes called the right of erasure or right to be forgotten. If you chose to exercise this right, we would consider your request and the circumstances first because the right is not always available and we sometimes need to keep your information.

Before making a request, please consider the following:

  • If you have an open, active account or mortgage with us, we need to keep your information because we need to manage your account, provide a service, keep you updated and monitor communications.
  • If you had an open, active account or mortgage with us:
    • In the last 6 years, we generally keep your information to help us investigate any issues that might arise in connection with your relationship with us. This might help us to resolve any concerns you may raise with us or
    • Over 6 years ago, we might keep your information for a longer period if this is necessary in connection with your or our right to establish, start or defend legal claims, to investigate complaints, or to protect our business.
  • If you applied for a mortgage with us we may securely keep information about credit applications for up to four years. This helps us to manage our lending criteria so we can continue to lend responsibly.
  • • If you only enquired about our services and don’t open an account, we may securely keep your information for 12 months to monitor our services and respond to any concerns you may raise with us.

More information about this can be found in our Privacy Policy. If you have any doubts or you would still like to exercise this right, please contact us using the details given below.

Can I request Principality correct information held about me if I feel it’s inaccurate or add additional information I feel it’s incomplete?

Yes. This is called the right to rectification. If you feel some of the information we hold about you is inaccurate or incomplete, by contacting us you can find out if you can get it corrected or add further information and how to go about it. We might ask you to provide official documentation to show the correct information before we change our records.

If you have any questions or you would like to exercise this right, please contact us using the details below.

Can I see the information Principality holds about me?

Yes. There are two options available that the GDPR calls 1) the right of access and 2) the right to data portability:

  • The right of access allows you to request Principality provide the information held about you. This is called a subject access request. If you choose this option, please contact us. We will securely send you paper copies of this information in the post.
  • The right to data portability allows you to request your information in a machine readable format. This means the information may not be easy for you to read because it’s designed specifically for computers to read. If you want information displayed in a readable format, you should contact us about a subject access request. If you choose the right to data portability we will send the information you have provided us (only) on a compact disc. This option is sometimes suggested by lenders when you’re considering making an application. At Principality, we won’t ask for this information when you’re making an application for our services and we do not accept information about you from other lenders in this format.

If you have any questions or you would like to exercise one of these rights, please contact us using the details below.

Can I ask Principality to change how my information is used or processed?

Yes. The GDPR calls these rights:

  • The right to restrict processing. If you’ve made a request for your information to be corrected, you can ask us to stop using your data or contacting you whilst your request is investigated. It’s important to note that we will still need to contact you with important information such as statements or if we identify unusual activity on your account, but we will endeavour to resolve your request before further using your information wherever possible. If you usually receive direct marketing we’ll stop sending you this. If you want to start receiving this again after we’ve resolved your request, you’ll need to tell us.
  • The right to object. If you feel we’re using or processing your information inappropriately you can ask us to address this. This might be if you want us to stop sending you direct marketing in which case we can meet your request. If your request was about something else, we would consider the circumstances of your request.

If you have any questions or you would like to exercise one of these rights, please contact us using the details below.

Can I find out who you have shared my information with?

Yes. Our privacy policy provides details of who we’re likely to share your information with. Alternatively, you might be interested to know who we’ve told about a recent change you’ve made to your personal information as part of a rectification request. You can exercise this right of notification by contacting us.

If you have any questions or you would like to exercise this right, please contact us using the details below.

Can I ask Principality to stop contacting me?

Yes. You have the right to:

  • Restrict processing; if you’ve made a request for your information to be corrected, you can ask us to stop contacting you whilst your request is investigated.
  • You can choose not to receive direct marketing from us at any time .

If you have an active account or mortgage with us, we will still need to contact you to manage your account, provide a service, to keep you updated and to meet your regulatory obligations such as send you statements.

More information about this can be found in our Privacy Policy. If you have any questions or you want to exercise one of these rights please contact us using the details below.

  • Telephone: 0330 333 4000
  • E-mail: SMEnhancedRightsSupp@principality.co.uk
  • Post: FREEPOST PRINCIPALITY BUILDING SOCIETY
    If you have a query for our Data Protection Officer responsible for our Privacy Policy, please address the letter to the DPO.
  • If you feel the need, you have the right to complain by contacting us so we can investigate your concerns. Alternatively you can contact the Information Commissioner (ICO) which is the regulator for data protection legislation. The ICO’s contact details can be found at https://ico.org.uk/concerns or by calling 0303 123 1113.
  • If you have any questions or comments, or want more information, you can call us. See our Contact Us page for more details.

    Or you can contact our Data Protection Officer as follows.

    Email: DPO@principality.co.uk

    Post: Principality Data Protection Officer
    Principality Building Society
    PO Box 89
    Principality Buildings
    Queen Street
    Cardiff CF10 1UA

Principality. Lle mae cartref yn bwysig.