Legal
Privacy, terms and regulatory information
How Greenfield Bank plc handles your data, the terms that apply to this website, and the protections you have as a UK banking customer.
Privacy Notice
Last updated: 1 September 2026
Who we are
Greenfield Bank plc (company no. 12345678), registered office 1 Greenfield Square, Canary Wharf, London E14 5AB, is the data controller for the personal data we hold about you. We are registered with the Information Commissioner's Office (ICO). Our Data Protection Officer can be contacted at dataprotection@greenfieldbank.co.uk.
The law that protects you
We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Information we collect
Identity and contact details (name, date of birth, address, National Insurance number where required), financial information (income, transactions, credit history), identity documents, device and usage data, and recordings of calls to our contact centre for training, quality and regulatory purposes.
Why we use it and our lawful basis
To enter into and perform your account agreement (contract); to meet our legal and regulatory obligations under the Money Laundering Regulations 2017, the Financial Services and Markets Act 2000 and HMRC reporting rules (legal obligation); to prevent fraud and financial crime and to improve our services (legitimate interests); and, where you have agreed, to send you marketing (consent).
Credit reference and fraud prevention agencies
When you apply for an account or credit we share your information with credit reference agencies (Experian, Equifax and TransUnion) and fraud prevention agencies such as Cifas. They will record our searches, which may affect your ability to obtain credit. Their privacy notices explain how they use your data.
Who we share it with
Payment schemes (Visa, Faster Payments, Bacs, CHAPS), the Financial Conduct Authority and Prudential Regulation Authority, HMRC, law-enforcement agencies where required, the Financial Ombudsman Service and FSCS, and carefully selected service providers acting under contract. We do not sell your data.
International transfers
Your data is stored in the United Kingdom. Where a supplier processes data outside the UK we rely on UK adequacy regulations or the International Data Transfer Agreement to keep it protected.
How long we keep it
We generally keep records for 6 years after your relationship with us ends, or longer where required by anti-money-laundering, tax or regulatory rules or ongoing legal proceedings.
Your rights
You have the right to access your data, have inaccuracies corrected, request erasure or restriction, object to processing, receive your data in a portable format and withdraw consent at any time. To exercise these rights, contact our Data Protection Officer. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.