Your browser is no longer supported. Some features of this website might not work as intended. To avoid any difficulties, you may want to upgrade to a supported browser. Alternatively, switch to a different device.
Popular internet browsers include: Chrome Browser Icon Firefox Browser Icon

Privacy Notice

Privacy Notice

Looking after your personal information and making sure you can exercise your privacy rights is a priority for MBNA Limited. This notice explains how we do this and tells you about your rights.

 

Who we are

Your personal information will be held by MBNA Limited (‘MBNA’) which is part of the Lloyds Banking Group. References to ‘we’, ‘our’ and ‘us’ are references to MBNA. References to ‘Group’ are references to the Lloyds Banking Group. More information about the brands and companies that make up Lloyds Banking Group can be found at http://www.lloydsbankinggroup.com/our-brands/

 

What types of personal information we collect

In order to provide services to you, we need to collect certain personal information. We may also be required by law, or as a consequence of any contractual relationship we have, to collect your personal information. If you do not provide this information to us, it may prevent or delay us fulfilling our obligations or performing services.

When you use any of our services, apply for a product or have an agreement with us, we may use any of the following types of information about you:

  • information you give us, that we capture, or that we already hold about you, including your income, employment status, nationality, contact details and any phone number you call us from, which we may record and use, electronic details about you, your computer, smartphone or other electronic device or your internet protocol address or physical/geographical location and biometric, voice recognition or other information that is unique to you;
  • information we receive when making a decision about your application or agreement with MBNA or the Group, including information we receive from enquiries and searches made in your name with credit reference and fraud prevention agencies and insurance claim registers;
  • information about how you interact with us, our services, website and products including what technology/devices you use and how you manage your account;
  • information about other people with whom you have a financial relationship;
  • information relating to, or connected with, specific products, agreements or policies you or members of your household may have with or through MBNA or other members of the Group (including information about transactions, payments and insurance);
  • information available in public records, such as the Electoral Register and any information about you that is openly available on the internet.

We do not normally ask you for any special categories of personal data (also known as ‘sensitive personal data’), which include information revealing an individual's racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data, data concerning health or data concerning an individual's sex life or sexual orientation.

However, we may process information that includes special categories of personal data in the following circumstances:

  • if we use it as part of any biometric authentication, depending on the technology used, we may collect your biometric information. We will only collect this information to the extent required to perform the service; or
  • if you voluntarily provide us with any special categories of personal data (for example, details about your health), we may process this information as needed to assist you or carry out your requests. We will only process this information when we have your consent or we are otherwise allowed to by law.

We also receive personal information about you from a number of third parties which includes actual data (such as information about how you manage your finances and household data) and/or modelled data about you and your circumstances using demographic characteristics (such as affluence and life-stage). For more information, please refer to the section ‘Where we collect personal information from’.

 

What we use your personal information for

When we use your personal information the law says we have to be able to show that we have a lawful ground for doing so. Lawful grounds can include:

  • when we have a legal obligation
  • when it is necessary to carry out a contract with you or to take steps to enter into a contract with you
  • when it is in our legitimate interest.

When we process personal information on the basis that it is in our legitimate interests to do so we will have undertaken an assessment to ensure our processing is transparent, proportionate and does not unfairly prejudice your interests.

Below is a list of how we use your personal information and the lawful grounds we rely on. Where we process your personal information on the basis of our legitimate interests, we tell you what these interests are:

 

How we process your personal information when you complete an eligibility check on our website or apply for a credit card product

What we process your personal information for

  • To search your credit file with the credit reference agencies to assess eligibility for a product. We will use our agents to do this on our behalf. We may also use information we already hold about you, as a result of an existing or previous relationship, to assess your eligibility.
  • If we search your credit file during the eligibility check we will only undertake a quotation search.  A quotation search does not show on a credit report as an application for credit.
  • If you apply for a credit card product we will undertake a credit search and leave a record of this on your credit file.
  • If you apply for a credit card product, information at the credit reference agency may be linked to other people with whom you have financial associations, and we may look at their records when assessing your application. If you are a director or partner in a small business, we may also check that business.

Please see section below for more information about how we use credit reference agencies.

The lawful ground
Necessary for contract
Legal obligations
Our legitimate interests

What our legitimate interests are
- Responsible lending means we should only provide products that are affordable and suitable for the borrowers’ circumstances. Credit reference agencies help us to do this by sharing personal data about potential borrowers, their financial associates where applicable, and their financial history. A comprehensive range of measures exists to underpin the balance so the legitimate interests aren’t outweighed by the interests, fundamental rights and freedoms of data subjects.

  • We may use contact details you provide to us during an eligibility check or application to contact you about your eligibility check/application.

    The lawful ground
    Our legitimate interests

    What our legitimate interests are
    - To offer customers help when they complete an eligibility check/application form.
     
  • We may use the information obtained (even if you are not eligible for a product) to help us analyse our business and develop our products, services, marketing strategies, website, to improve advertising materials and to pay agents/third parties who place adverts on our behalf.

    The lawful ground
    Our legitimate interests

    What our legitimate interests are
    - To analyse our service in order to develop our products, services, marketing strategy, website and advertising materials so that we can provide the best services to our customers.
     
  • Investigate, detect, prevent and manage fraud and other financial crime. Please see the section on using fraud prevention agencies below.

    The lawful ground
    Our legitimate interests
    Legal obligations


    What our legitimate interests are
    - In order to meet our contractual and legal obligations we need to perform anti money laundering and other checks.
    - We also assess fraud and money laundering risks to protect our business, protect our customers and to ensure that we are acting as a responsible lender.

 

How we process your personal information when you are accepted for a credit card product

What we process your personal information for

  • Open and manage your account, including checking you meet qualifying criteria and to check your identity.
  • Your personal information will also be accessible by other members of the Group so the Group can manage its relationship with you.
  • Provide our credit card products and services.
  • Manage and make payments, and manage fees, charges and interest.
  • Make decisions about credit, including whether to make additional credit available, which may include searching your file with credit reference and fraud prevention agencies.

    The lawful ground
    Necessary for contract
    Our legitimate interests
    Legal obligations


    What our legitimate interests are
    - To provide the services.
    - Meeting our contractual and legal obligations in the most effective way we can.
    - We are also under a wide range of regulatory obligations. Complying with these regulations, and the associated processing of personal information, ensures our customers and our businesses are protected.
    - To enable us and the Group to better understand your needs and run your accounts in an efficient way.
    - To ensure that we are acting as a responsible lender.
     
  • We may use the information we have obtained from you, together with information we receive from third parties (for example credit reference agencies and fraud prevention agencies), to help us analyse our business, understand our customers and develop our products, services, website, credit risk and lending strategies, including things like what pricing you are eligible for, what credit limit you are eligible for, if you meet our card reissue criteria and any other circumstances we need to consider when making lending decisions.

    The lawful ground
    Necessary for contract
    Our legitimate interests


    What our legitimate interests are
    - To ensure that we only provide products that are affordable and suitable for your circumstances.
    - To analyse our business in order to develop our products, services, website and advertising materials so that we can provide the best services to our customers.
    - To ensure that we are acting as a responsible lender.
     
  • We may use the information we have obtained from you, together with information we receive from third parties, to help us develop strategies for marketing activities which may include analysing customer behaviour, including interactions with the MBNA websites and mobile banking services.
  • Manage the ways we talk to and contact people who use our products and services.
  • Understand customer behaviours, including how people use our products and services.
  • Develop and manage our brands, products and propositions, including testing new products and services.
  • Develop new ways to meet our customers’ needs.

    The lawful ground
    Our legitimate interests

    What our legitimate interests are
    - To identify products and services that may be of interest to you, or customers like you.
    - To help us develop our products and services and target audiences.
    - To help us develop strategies that allow us to operate our business in an efficient and effective way.
     
  • To contact you with marketing in relation to MBNA products and products offered by third parties which we think may be of interest to you, unless you have indicated that you would prefer not to receive direct marketing from us.
  • To contact you with marketing in relation to the products offered by other members of the Group. Where the law requires that we obtain your consent for our marketing activities, we will only carry on these activities with your consent.
  • You can ask us to stop sending you marketing communications at any time. See the section on ‘How you can opt out of direct marketing’.
  • If you ask us to stop marketing to you we will process your information in order to exclude you from marketing campaigns.

    The lawful ground
    Our legitimate interests (or consent, where certain marketing activities require us to obtain consent)

    What our legitimate interests are
    - To enable us, and other members of the Group, to market products and services.
    - To exclude customers from marketing campaigns where they have opted out or already have a product.
     
  • Where our services are supported by third party suppliers, to manage suppliers and to enable them to provide services to us and our customers, for example payment system providers under which your card is issued, organisations which back any of the products you hold, rewards providers, insurance providers, survey providers, advertising agencies, technology providers, payment clearing providers and fraud check service providers.

    The lawful ground
    Necessary for contract and, in some circumstances, our legitimate interests

    What our legitimate interests are
    - In order to meet our contractual obligations in the most effective way we can so that we can provide the services to you.
    - We use payment system providers in order to process our payments and where necessary to provide the level of service offered by us and third party suppliers.
    - To allow third parties to fulfil their contractual obligations.
     
  • Collect and recover any money owed to us, including tracing your whereabouts.

    The lawful ground
    Our legitimate interests

    What our legitimate interests are
    - In order to run our business in an effective way and to recover debts and, where necessary, find customers.
     
  • Ongoing investigation, detection, prevention and management of fraud and other financial crime.
  • Manage risk and ensure we comply with the laws and regulations that apply to us.
  • Respond to and manage complaints.

    The lawful ground
    Legal obligations and, in some circumstances, for our legitimate interests

    What our legitimate interests are
    - In order to meet our contractual and legal obligations we may need to perform anti money laundering and other checks.
    - We also assess fraud and money laundering risk to protect our business, protect our customers and to ensure that we are acting as a responsible lender.
    - We will only ever process personal information about criminal records and offences where we are allowed to by law.
    - We are under a wide range of regulatory obligations. Complying with these regulations, and the associated processing of personal information, ensures our customers and our businesses are protected.
    - Meeting our contractual and legal obligations in the most effective way we can.
     
  • Run our business in an effective way, including managing finance, business capability, planning, corporate governance, and communications and audit.

    The lawful ground
    Legal obligations
    Necessary for contract
    Our legitimate interests


    What our legitimate interests are
    - We are under a wide range of regulatory obligations. Complying with these regulations, and the associated processing of personal information, ensures our customers and our businesses are protected.
    - Meeting our contractual and legal obligations in the most effective way we can.
    - To ensure that we are acting as a responsible lender.

 

How we process your personal information when you use our websites, online card services and mobile banking services

What we process your personal information for

  • We may use the information gathered when you visit our websites/mobile banking services to improve the content, and identify service improvements, to make them more useful, as well as to monitor and/or record your activities for quality evaluation and training.
  • To analyse customer behaviour, including interactions with the MBNA websites and mobile banking services.
  • We may display personalised messages to you when you access Online Card Services.
  • We may use other technologies such as cookies, web beacons and similar online tracking. MBNA may capture personal information, including non-obvious personal information. We also use third parties to provide some of these services for us. Please see our cookie policy for further information.
  • We may collect your internet protocol address or physical/geographical location, such as cell tower or GPS location data.

    The lawful ground
    Our legitimate interests or consent (where we are required by law/regulation)

    What our legitimate interests are
    - To analyse our business in order to develop our products, services, websites and advertising materials so that we can provide the best services to our customers.
    - To contact you with messages about your account.
    - In order to track and evaluate how customers use our websites to help us to identify service improvements.
    - In order to advertise our products to you when you visit other websites.
    - To assess fraud and money laundering risks to protect our business, protect our customers and to ensure that we are acting as a responsible lender.
     
  • Calls and online sessions may be monitored and/or recorded for quality and training purposes and for compliance with laws and regulations. We may also monitor and/or record your activities/interactions when you use our websites in order to understand how customers interact with our websites/services. This may include recording mouse clicks, mouse movements, page scrolling and interaction with online forms.

    The lawful ground
    Legal obligations
    Our legitimate interests

    What our legitimate interests are
    - We are under a wide range of regulatory obligations. Complying with these regulations, and the associated processing of personal information, ensures our customers and our businesses are protected.
    - To analyse our business in order to develop our products, services, websites and advertising materials so that we can provide the best services to our customers.
     
  • We work with third parties to conduct analytics across our customer database to help us to reach the right audiences with our marketing on TV, social media and other channels.
    We engage third party advertising agencies and social media platforms to display advertisements on our behalf. These third parties may use cookies and similar technologies in order to display marketing to you. These companies help us to execute, optimise, and measure the effectiveness of our online advertising programmes. They use cookies and non-obvious personal information about your visit to the MBNA website, and other websites, to measure advertising effectiveness and to provide advertisements about goods and services that may interest you.
  • MBNA also helps other companies to execute, optimise, and measure the effectiveness of their advertising programmes, by allowing them to use cookies or similar technologies on our website.
    We will not provide personal information to any third parties for them to use for their own direct marketing purposes, unless we have obtained your prior consent to do so.

If you would like to learn more about these practices, view the privacy notices of these third party companies, or to opt out of their use of personal information, please visit the websites of the following third party advertising service providers:
https://www.google.com/policies/privacy/
https://www.facebook.com/ads/preferences/
https://www.quantcast.com/opt-out/
http://www.infectiousmedia.com/oba-cookie-opt-out/
https://www.sky.com/help/articles/sky-privacy-and-cookies-notice
Read about the Internet Advertising Bureau’s Online Behavioural Advertising Framework at: https://www.iabeurope.eu/files/9613/6984/1480/2012-12-11_iab_europe_oba_framework.pdf

To learn more about privacy and behavioural advertising, visit: http://www.youronlinechoices.com/uk/about-behavioural-advertising or http://youradchoices.com/

The lawful ground
Our legitimate interests

What our legitimate interests are
- To analyse our business and the use of our website in order to develop our products, services, marketing strategy, website and advertising materials so that we can make our advertising campaigns more effective.

 

Where we collect personal information from

We will collect personal information about you from the following sources:

Information you give us:

  • We collect personal information directly from you through applications, enquiries, eligibility checks, emails and letters, during telephone calls and conversations, when registering for services, in customer surveys, when you participate in competitions and promotions and when using MBNA websites (including mobile card services and webchat services) and any profiles you create to access our online services.

Information we collect when you use our services:

  • We generate information about you from your use of the services (for example, the amount, frequency, location, origin, and recipient of your payments and other transactions) and conducting analysis (including the creation of profiles used to uniquely identify you when you use our online, mobile and telephony services which are used to help us combat fraud and other illegal activity).
  • When you visit our website, we may also collect information about you from your online browsing, including your preferences, pages visited, technical information regarding your device and operating systems, such as your internet protocol address, domain name, system configuration and settings. We will also collect cell tower and GPS location data for the purposes of preventing and detecting fraud.
  • Information we gather from your use of, and interaction with, our internet and mobile banking services and the devices you use to access them.

Information we obtain from third parties:

  • Information from other members of the Group, such as the products you have with other members of the Group.
  • Information MBNA and/or other members of the Group receive from or through other organisations, whether in the course of providing products and services to you or otherwise.  These organisations include introducers, card associations, credit reference agencies, insurance companies, retailers, comparison websites, social networks, payment system providers, web analytics providers, advertising agencies, survey providers, fraud prevention agencies, public sources of information, such as the edited Electoral Register, government and law enforcement agencies, organisations that operate loyalty schemes, organisations which back any of the products you hold and our agents. The information we collect from these parties may include actual data (such as information about how you manage your finances and household data) and/or modelled data about you and your circumstances using demographic characteristics (such as affluence and life-stage).

 

Recipients of personal information

When we use your personal information in the ways detailed above we may need to share it with other organisations/individuals, as detailed below:

  • our agents, advisers or others involved in running accounts and services for you or collecting what you owe;
  • other companies within the Group for the purposes of managing our/the Group’s business efficiently. A list of the Lloyds Banking Group entities is available at http://www.lloydsbankinggroup.com/our-brands/;
  • service providers including technology providers, web analytics providers (e.g. Google Analytics), third party advertising agencies, social media platforms (for the purposes of advertising) and technology providers;
  • credit reference and fraud prevention agencies (see separate sections below for more details);
  • HM Revenue & Customs, or other government or regulatory authorities, when we are required or requested to disclose personal information to them. Some of these government or regulatory authorities may be located outside the UK;
  • market research companies to assist us in providing better products and services for you;
  • price comparison websites or other similar services to research or purchase financial products and services;
  • third parties that introduced you to us and/or have a relationship with you or are supporting one of our affinity groups or any organisations which back any product you hold;
  • to anyone to whom we or the Group sells or enters into negotiations to sell, transfer or merge part or all of their business or assets, or any associated rights or interests, or to acquire a business or enter into a merger with it. If so, your personal information may be disclosed to a potential buyer, transferee, or merger partner or seller and their advisers so long as they agree to keep it confidential and to use it only to consider the possible transaction. If the transaction goes ahead, the buyers, transferee or merger partner may use or disclose your personal information in the same way as set out in this notice;
  • to any payment system providers under which we issue your card (e.g. Visa, Mastercard or American Express);
  • digital wallet providers;
  • if you hold a product which has a loyalty scheme attached, we will share personal information with that scheme/rewards provider;
  • companies/organisations we introduce you to;
  • Where you use Direct Debits to make payments, we may share your details with the Direct Debit scheme;
  • if you have arranged insurance through us, we will pass your details to the insurer. If you make a claim, any information you give to us, or to the insurer, may be put onto a register of claims and shared with other insurers to prevent fraudulent claims. A list of the participants is available from the insurer. We may also disclose your information within the Group, to our agents and other insurers to investigate or prevent fraud;
  • if a payment is processed through a worldwide payment system, to certain authorities in order to detect and prevent terrorism, including to authorities outside of the European Economic Area (‘EEA’); and/or
  • to any other parties connected with your account, guarantors or any other third party you authorise us to give information about you or your account to, such as account information service providers, payment initiation service providers and third party providers.

Because we operate as part of a global business, the recipients referred to above may be located outside of the EEA (or the jurisdiction in which we provide the services). See the section on ‘Transfers to non-EEA countries and safeguards’ for more information.

Please note that recipients of your personal information may also use it for their own purposes where they have a lawful ground for doing so, for example any insurance provider, payment systems providers, rewards providers, affinity groups, clearing banks, credit reference and fraud prevention agencies. Please check the terms of their privacy policies to see how they will use your information.

 

When we will make automated decisions about you

MBNA will use technology to make decisions about you automatically. This allows us to give you decisions quickly, ensure they are fair and appropriate and made in an efficient manner.  We will use information we know about you and information we collect from third parties.

Some types of automated decision-making can produce legal effects or can otherwise significantly affect the individual. We only carry out this type of automated decision-making:

  • where the decision is taken in connection with entering or performing a contract with you;
  • where the decision is required or authorised by law; or
  • where you have given your consent.

The types of automated decisions we make are:

  • Pricing: to make automated decisions about how much we will charge you for our products and services.
  • Customer Segmentation: to make automated decisions that will place you in a group with other similar customers. This allows us to make sure we can develop strategies and approaches to manage our customer relationships, develop appropriate products and services and understand our customer base.
  • Fraud: to make automated decisions to help detect whether activity on your account is, or may be, fraudulent. This will include assessing whether you pose a fraud or money laundering risk, particularly if our processing reveals your behaviour to be consistent with that of known fraudsters or money launderers, is inconsistent with your previous submissions or you appear to have deliberately hidden your true identity. This may result in stopping any activity on our accounts or refusing you access to accounts and services. You can read more about how we share information with fraud prevention agencies below.
  • Account Opening: to make automated decisions about you, when you open a product with us, ensuring that the products we offer you are appropriate and that you meet any qualifying criteria. This could include ensuring you meet residence, nationality or financial requirements for accessing some of our products.
  • Account Management: to make automated decisions about you while you are in a contract with us, we use this to enable us to make decisions, such as what amount of credit is appropriate for your circumstances, whether you meet our criteria for card reissue and whether there are any other circumstances we need to consider when making lending decisions.
  • Marketing: to make automated decisions about you, including marketing decisions about which products you might be interested in and to check if you are eligible to receive marketing offers.
  • Credit Processes and Approval: When you apply for credit or an increase in existing credit limits, we use a system to decide whether to lend money to you. This is called credit scoring. It uses past information to assess how you’re likely to act while paying back any money you borrow. This includes information about similar accounts you may have had before. Credit scoring uses information from your application form, credit reference agencies and information we may already hold about you. It gives an overall assessment based on this. Lenders use this to help make responsible lending decisions that are fair and informed. Credit scoring methods are tested regularly to make sure they are fair and unbiased.

Your rights

You have rights in relation to automated decision making that produces legal or similarly significant effects on you. You can object to an automated decision and ask that a person reviews it. If you want to know more, please contact us at: https://www.mbna.co.uk/support/contact-us/ or go to mbna.co.uk/support/gdpr

 

Using Credit Reference Agencies

In order to process your application, we will perform credit and identity checks on you with one or more credit reference agencies (‘CRAs’). We may also make periodic searches at CRAs to manage your account with us.

We will share your personal information with CRAs and they will give us information about you. This will include information from your credit application, your financial situation and financial history. CRAs will supply to us both public (including the Electoral Register) and shared credit, financial situation and financial history information and fraud prevention information.

We will use this information to:

  • Assess your creditworthiness and affordability;
  • Verify the accuracy of the information you have provided to us (including your identity);
  • Help detect and prevent financial crime, fraud and money laundering;
  • Manage your account(s) (including making decisions about the amount of borrowing you are entitled to);
  • Trace and recover debts;
  • Carry out statistical analysis; and
  • Ensure any offers provided to you are appropriate to your circumstances.

We will continue to exchange information about you with CRAs while you have a relationship with us and, in some circumstances, we may continue to provide information to them for up to six years afterwards. We will also inform the CRAs about your settled accounts, missed payments, defaults and current balances. This information may be supplied to other organisations by CRAs.

If you make a quotation search this will not be visible to other lenders, but if you apply for credit with us we will undertake a credit search and the CRAs will place a search footprint on your credit file that may be seen by other lenders.

CRAs can hold your personal information for up to six years.

Information held by CRAs may be linked to other people with whom you have a financial association. These links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.

You can find out more about the CRAs, their roles as credit reference and fraud prevention agencies, the information they hold, the ways in which they use and share personal information, data retention periods and your data protection rights in more detail on the information notices set out on their websites:
Callcredit – https://www.callcredit.co.uk/crain
Equifax – https://www.equifax.co.uk/crain
Experian – http://www.experian.co.uk/crain/index.html

We may also purchase additional information from CRAs for statistical analysis and analytics purposes to assist us with marketing campaigns, analytics, risk and strategies, for example, to create scorecards, models and variables in connection with the assessment of credit, fraud, risk or to verify identities, to monitor and predict market trends, to refine lending and fraud strategies, and for analysis, such as loss forecasting. This may include personal information and modelled data based on expected behaviours, taking into account demographic and other information.

 

Using Fraud Prevention Agencies

In order to process your application and before we provide services to you, we undertake checks with one or more fraud prevention agencies (‘FPAs’) for the purposes of preventing fraud and money laundering, and to verify your identity. To do this, we will share your personal information to FPAs and they will give us information about you. This will include information from your credit application.

We will use this information to:

  • Confirm your identity; and
  • Help detect and prevent financial crime, fraud and money laundering.

We will continue to exchange information about you with FPAs while you have a relationship with us. This information may be supplied to other organisations by FPAs.

We, and FPAs, may also enable law enforcement agencies to access and use your personal information to detect, investigate and prevent crime.

Please contact us if you would like details of the FPAs we use.

FPAs can hold your personal information for different periods of time, and if you are considered to pose a fraud or money laundering risk, your information can be held for up to six years.

Consequences of processing

If, using the information provided by the FPAs, we determine that you pose a credit, fraud or money laundering risk, we may refuse to provide the financing you have requested, or we may stop providing existing services to you.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you.

Data transfers

Whenever fraud prevention agencies transfer your personal information outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal information to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.

 

Transfers to non-EEA countries and safeguards

We may transfer your personal information outside the European Economic Area (‘EEA’) including to the United States. If this is the case we will ensure appropriate safeguards are in place to protect your personal information in the same way as it would be if it was being processed in the EEA. These safeguards will include at least one of the following:

  • Transferring to a country that has been assessed as having a framework of privacy laws that give you the same level of data protection as the EEA;
  • We have a contract in place with the recipient of the information that requires your data is protected to the same standard as in the EEA; and/or
  • The recipient is Privacy Shield certified (relevant only where your personal information is transferred to an organisation in the United States). More information about Privacy Shield can be found at: https://www.privacyshield.gov/welcome

Please contact us if you would like more information on these safeguards or you can find out more about these safeguards on the European Justice website:
https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection_en

 

How long we will keep your personal information

The length of time we will retain your information will depend on how long our relationship lasts. We will retain your personal information whilst you have a relationship with us or whilst you hold a product with us. We will retain the information for up to 10 years after your relationship ends to allow us to respond to any questions or complaints, to maintain evidence we have treated you fairly and to maintain an effective records management approach.

We may also keep the information for longer than 10 years after our relationship ends, where necessary for legal or regulatory requirements, where the information is required in connection with any ongoing or outstanding claims or legal action, or if we can’t delete the information for technical reasons (in which case we will take appropriate measures to protect the information from further processing or use and will only process for those purposes).

 

How you can get a copy of your personal information

You have the right of access to your personal information. You can exercise this right by completing the form at the following link mbna.co.uk/support/gdpr or you can contact us (see the ‘how you can contact us’ section below).

 

Letting us know if your personal information is incorrect

If you believe that any information held by us about you is incorrect or incomplete, you have the right to challenge it. If you do this, we will take reasonable steps to check the information. If the information does turn out to be incorrect, we will update our records accordingly. If you want to let us know about information you think is incorrect or incomplete, please contact us (see the ‘how you can contact us’ section below) or go to mbna.co.uk/support/gdpr

 

What if you want us to stop processing your personal information?

The right to erasure, also known as ‘the right to be forgotten’ and the right to object to processing, means you can request that we delete, remove or stop using your information when there is no compelling reason for its continued processing.

As a financial services organisation there are a wide range of legal and regulatory reasons that require us to retain and use your information, however, if you think we are processing your information without a compelling reason please contact us (see the ‘how you can contact us’ section below) and we will consider your request.

In some circumstances, we can ‘restrict’ the use of your information. While the information is restricted, it can only be used for certain limited purposes, such as bringing or defending legal claims or to exercise legal rights. It cannot be processed and shared for other 'ordinary' purposes.

You can ask us to restrict the use of your personal information if:

  • It is inaccurate.
  • It has been used unlawfully and you do not want us to delete it.
  • It is no longer relevant and you want us to keep it for the purposes of legal claims.
  • You have objected as described above and are waiting for us to decide whether we are entitled to carry on using the information.

For more details please contact us (see the ‘how you can contact us’ section below) or go to mbna.co.uk/support/gdpr

 

Data portability

You have the right to receive personal data about you that you have provided to us where the processing is based on consent or is necessary for contract and where the processing we carry out is by automated means. If you choose to exercise this right we will send you the data in a machine-readable format. You can request that we send this data directly to another data controller. You can exercise this right by completing the form at the following link mbna.co.uk/support/gdpr or you can contact us (see the ‘how you can contact us’ section below).

 

How you can withdraw your consent

Where you have given us your consent for any processing we do, you can withdraw that consent at any time by contacting us (see the ‘how you can contact us’ section below).

 

How you can opt out of direct marketing

You have the right to opt out of direct marketing. If you are an existing customer, you can update your marketing preferences by logging into Online Card Services https://www.bankcardservices.co.uk/. If you are not a customer you can exercise this right using our no marketing request form at: https://apply.mbna.co.uk/UKNeoCCapp/nomail or you can contact us (see the ‘how you can contact us’ section below).

 

Complaints?

If you are unhappy with how we have used your personal information, please let us know by contacting us on: https://www.euapplyonlinenow.com/UKNeoCCapp/contact  You also have a legal right to complain to the Information Commissioner’s Office and can find out more about how you can do this on their website at: https://ico.org.uk/

 

How you can contact us

If you have any questions, or require more information about how we use your personal information, please contact us at https://www.mbna.co.uk/support/contact-us/
You can also call us on 03456 062 062. MBNA has a Data Protection Officer, who you can contact at dataprotectionofficer@mbna.com if you feel we have not answered your question.

 

Cookies

For more information about how we use cookies, please see our cookie policy: https://www.mbna.co.uk/cookies/

 

This Privacy Notice was last reviewed in May 2018.

This Privacy Notice is published by MBNA Limited. Registered Office: Stansfield House, Chester Business Park, Chester CH4 9QQ. Registered in England and Wales under company number 02783251.

CP0818_PRVNOT_PWS