Bury Investment Bank

Respecting your privacy rights is important to us. Please click on the appropriate link below to understand the purposes for which we process your personal data and who it may be shared with:

Privacy Statement for all parties to a Retail Banking account

This Privacy Statement relates to the collection, use and disclosure of personal data, including special or sensitive personal data, by any member of the Bury Investment Bank (“BIB”, “we” or “our”). Personal Data is information relating to an individual (“you” or “your”).

The data controller of your personal data is the BIB entity you have or may have a relationship with or with whom an account is maintained that you are a security provider for. Our Head Office functions may also be the controller of your Personal Data. A list of BIB entities can be found here.

Personal data comprises all the details BIB holds or collects about you, directly or indirectly, your transactions, transactions you effect, financial information, interactions and dealings with BIB, including information received from third parties, the public domain, collected through use of our website, cookies, and our electronic banking services.

If you have or are party to more than one account with BIB, including to a Corporate and Institutional Banking relationship, we will link all your accounts and personal data to enable us to have an overall picture of your relationship with us.

If you do not provide us with personal data we need to meet our legal and regulatory obligations or to enter into an agreement with you we may not be able to provide you with the products or services you have requested.

Purposes for which we may process your Personal Data

To enable us to fulfil the contract between us for the products or services you have requested, we need to process your personal data for purposes including the following:

i. processing applications for products and services, effecting payments, transactions and completing instructions or requests;
ii. providing products and services (including electronic banking services);
iii. assessing suitability for products and services;
iv. credit assessment, including conducting credit checks and setting credit limits;
v. operational purposes;
vi. statistical purposes;
vii. establishment, continuation and management of banking relationships and accounts;
viii. surveillance of premises and ATMs.

For some purposes in connection with the service you have requested, we have a legal or regulatory obligation to process your Personal Data. These purposes include:

i. the prevention, detection, investigation and prosecution of crime in any jurisdiction (including, without limitation, money laundering, terrorism, fraud and other financial crime);
ii. identity verification, government sanctions screening and due diligence checks;
iii. to comply with local or foreign law, regulations, directives, judgments or court orders, government sanctions or embargoes, reporting requirements under financial transactions legislation, and demands of any authority, regulator, tribunal, enforcement agency, or exchange body.

We may also process your Personal Data in line with any voluntary codes; to effect agreements between any member of the Standard Chartered Group and any authority, regulator, or enforcement agency; to comply with policies (including the Standard Chartered Group’s policies) and good practice standards where it is in our legitimate interest to do so.

We may also process your Personal Data where it is in our legitimate interests to seek professional advice, including, in connection with any legal proceedings (including any prospective legal proceedings), for obtaining legal advice or for establishing, exercising or defending legal rights.

Security

Personal Data may be transferred to, or stored at, a location outside of your country of residence, which may not have data protection law. The security of your personal data is important to us. BIB has technical and organisational security measures in place to safeguard your personal data. When using external service providers, we require that they adhere to security standards mandated by BIB. We may do this through contractual provisions, including any required by a privacy regulator, and oversight of the service provider. Regardless of where personal data is transferred, we take all steps reasonably necessary to ensure that personal data is kept securely.

You should be aware that the Internet is not a secure form of communication and sending us any personal data over the Internet carries with it risks including the risk of access and interference by unauthorised third parties. Information passing over the Internet may be transmitted internationally (even when sender and recipient are located in the same country) via countries with weaker privacy and data protection laws than in your country of residence.

Other Terms and Conditions

There may be specific terms and conditions in our banking and product agreements that govern the collection, use and disclosure of your personal data. Such other terms and conditions must be read in conjunction with this Privacy Statement.

Retention

We retain your personal data in line with our legal and regulatory obligations and for business and operational purposes. In the majority of cases this will be for seven years from the end of your relationship with us.

Automated decisions and profiling

We may use profiling, including behavioural analysis, to assist us to provide you with better services, to make decisions and to prevent money laundering, terrorism, fraud and other financial crime, for example using profiling may help us to try and detect whether use of your credit card may be fraudulent. If any profiling will result in an automated decision relating to you, we will let you know and you will have the right to discuss the decision with us.

Applying to work for the Standard Chartered Group

Please see our separate Group Recruitment Privacy Statement.

Cookies

Please see our separate Cookie Policy.

Linked Websites

Our Privacy Policy does not apply to third-party websites where our online advertisements are displayed or to linked third-party websites which we do not operate or control.

Privacy Statement for all parties to a Private Banking account

This Privacy Statement relates to the collection, use and disclosure of personal data, including special or sensitive personal data, by any member of the Bury Investment Bank (“BIB”, “we” or “our”). Personal Data is information relating to an individual (“you” or “your”).

The data controller of your personal data is the BIB entity you have or may have a relationship with or with whom an account is maintained that you are a security provider for. Our Head Office functions may also be the controller of your Personal Data. A list of BIB entities can be found here.

Personal data comprises all the details BIB holds or collects about you, directly or indirectly, your transactions, transactions you effect, financial information, interactions and dealings with BIB, including information received from third parties, the public domain, collected through use of our website, cookies, and our electronic banking services.

If you have or are party to more than one account with BIB, including to a Corporate and Institutional Banking relationship, we will link all your accounts and personal data to enable us to have an overall picture of your relationship with us.

If you do not provide us with personal data we need to meet our legal and regulatory obligations or to enter into an agreement with you we may not be able to provide you with the products or services you have requested.

Security

Personal Data may be transferred to, or stored at, a location outside of your country of residence, which may not have data protection law. The security of your personal data is important to us. BIB has technical and organisational security measures in place to safeguard your personal data. When using external service providers, we require that they adhere to security standards mandated by BIB. We may do this through contractual provisions, including any required by a privacy regulator, and oversight of the service provider. Regardless of where personal data is transferred, we take all steps reasonably necessary to ensure that personal data is kept securely.

You should be aware that the Internet is not a secure form of communication and sending us any personal data over the Internet carries with it risks including the risk of access and interference by unauthorised third parties. Information passing over the Internet may be transmitted internationally (even when sender and recipient are located in the same country) via countries with weaker privacy and data protection laws than in your country of residence.

Other Terms and Conditions

There may be specific terms and conditions in our banking and product agreements that govern the collection, use and disclosure of your personal data. Such other terms and conditions must be read in conjunction with this Privacy Statement.

Retention

We retain your personal data in line with our legal and regulatory obligations and for business and operational purposes. In the majority of cases this will be for seven years from the end of your relationship with us.

Automated decisions and profiling

We may use profiling, including behavioural analysis, to assist us to provide you with better services, to make decisions and to prevent money laundering, terrorism, fraud and other financial crime, for example using profiling may help us to try and detect whether use of your credit card may be fraudulent. If any profiling will result in an automated decision relating to you, we will let you know and you will have the right to discuss the decision with us.

Marketing

We may use your Personal Data:
i. to conduct market research and surveys with the aim of improving our products and services;
ii. for marketing purposes, promotional events, competitions and lucky draws.

We process your Personal Data for these purposes because it is in the interest of our business to do so with the intention of improving our products and services and generating business. We will not send you marketing material if you have specifically asked us not to do so. You have the right to opt out of receiving marketing material at any time. To do so please contact your branch or relationship manager. 
If you change your mind and ask us not to send you marketing material or other promotional or research material you have subscribed to receive, we may need to retain a record that you have asked us not to do so to ensure that you do not receive anything further.

Monitoring

To the extent permitted by law, we may record and monitor your electronic communications with us to ensure compliance with our legal and regulatory obligations and internal policies for the purposes outlined above.

Your Rights

Subject to applicable law, regulations and/or banking industry guidelines, you may have the following rights:

  • Access
    To request a copy of the personal data processed in relation to you. BIB may be allowed by law to charge a fee for this.
  • Correction
    To request that we correct your personal data. You can do this at your branch or through your relationship manager.
  • Erasure
    To ask us to delete your personal data, for example if we no longer have a valid reason to process it.
  • Object
    To object to how we process your personal data. This does not mean you can decide or choose how we process your personal data other than in relation to marketing. If you have any concerns about how we process your personal data, please discuss this at your branch or with your Relationship Manager. We may not be able to offer you services if you do not want us to process the personal data we consider it necessary to process to provide the services.
  • Restriction
    To restrict how your personal data is processed in certain cases, such as when the accuracy of your Personal Data is contested. If you have any concerns about how we process your Personal Data, please discuss this at your branch or with your Relationship Manager.
  • Portability
    To request a copy of the personal data you have given to us in a machine readable format.