Your Privacy

Introduction

This privacy notice sets out how Accord Mortgages Limited (‘Accord’) will collect and use your personal data and your information rights. We are committed to taking good care your personal data and ensuring the highest standards of privacy. If you have any questions about this notice, don’t hesitate to get in touch with us. We’ll be more than happy to help.

Accord is part of the Yorkshire Building Society Group (Accord’s parent). The Yorkshire Building Society Group consists of:

Yorkshire Building Society (sometimes referred to as The Yorkshire, YBS)
Chelsea Building Society(sometimes referred to as The Chelsea, CBS)
Norwich and Peterborough (sometimes referred to as N&P)

You can find full details of how Yorkshire Building Society (of which Accord is part) use your personal information in our booklet 'How we use your personal information'.

Within this privacy notice, any references to ‘us’, ‘our’ and ‘we’ means ‘Accord’.

When appropriate we will provide a ‘just in time’ notice to cover any additional processing activities not mentioned in this notice.

This notice does not extend to other organisations, such as any external websites you may access from our website. Other organisations will inform you how they use your personal data.

Data Controller

An organisation that decides how the personal data it collects and holds is used is called a ‘data controller’. We call this use of personal data ‘processing’ – this includes the collection, storage, analysis, sharing, retention and disposal of personal data. If you’re a customer of Accord, the data controller of your personal data is Accord Mortgages Limited.

As a Data Controller, we are registered with the Information Commissioner's Office (ICO) - the organisation in the UK that oversees that an organisation is acting accordingly when processing personal data. Our registration number is:

Z7788844

Why do we need your personal data?

In order that we can provide you with a high quality service, deal with your queries, make an assessment on the suitability of our products or services and to enter into a relationship with you, we will need to obtain and use personal data. We also use personal data to communicate with you.

If we already hold some of your personal data, for example, if you are already a customer, we may not need to collect it again and in such cases, we will make this clear.

What if you do not provide personal data?

You are under no statutory or contractual obligation to provide any personal data to us. However, if you do not provide the information, we may not be able to provide you with our products or services. We will be also be unable communicate with you effectively.

What personal data do we collect?

We collect and use a variety of personal data to run our business and manage our relationship with you. The table below shows the typical categories of personal data we ask you for and why we may ask for it. You will find more specific information in the ‘how do we use your personal data’ section:

What will we collect?	How we may use it
Call recordings	It is important that we provide the best possible service to you. This might mean that we log and record calls you make to us to resolve any discrepancies or issues that inevitably crop up from time to time. We may also record calls for training and monitoring purposes, including meeting our legal obligations.
County Court Judgments (CCJ) and insolvency data	We collect information in relation to any insolvency proceedings about you, including CCJs in order to inform our lending decision making and provide you with appropriate advice and support.
Criminal convictions (spent or unspent) and offences	We will only use information relating to criminal convictions or alleged criminal behaviour where the law allows us to do so. This can arise when it is necessary for us to comply with the law or for another reason where there is a substantial public interest in us doing so. Less commonly, we will, if necessary, use information relating to criminal convictions or alleged criminal behaviour where it is necessary in relation to legal claims, where it is necessary to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.
Current landlord	If you are a tenant, we will use this information to understand and confirm your relationship with them, confirm your residency status and payment history. This will be used to inform our lending decisions.
Date of birth and/or age	We use this to identify you and: To open and manage your accounts and relationship with us. To confirm your age. To meet our legal and regulatory obligations. To process your application for any job you apply for with us.
Direct marketing preferences	We ask you if you wish to receive notifications from us about our products and services that may be of interest to you. We will only do this where we have your explicit consent and will only contact you by methods you have chosen (e.g. phone, text, email).
Earnings, income and spending habits	When you apply for a mortgage with us, we use this to determine your earnings so that any lending or access to credit is appropriate and affordable to you. We also ask you about your other sources of income including pension payments or benefits you may receive. We use this to assess how you manage account payments and credit.
Email address and phone number	We use your email address and phone number to: Enable you to register for an online account (‘e-enable’) Contact you about your account. Inform you of any meetings such as the Annual General Meeting (AGM) and facilitate voting. Send you marketing information (where you have consented). Enable you to register your interests for new product or service updates that we may offer. Enable you to register to receive updates about our community activities or other events we are involved in. Process any job applications you have with us. Run and administer competitions/prize draws which you have entered and to notify the winner.
Employment details	We will ask for your employer’s details and your employee/staff number to verify your employment status.
Employment status	We will ask you for your profession or occupation, whether you are employed, self-employed or perhaps retired. This helps us determine the eligibility for some products and services and ensures you get the right information when contacting us.
Family details, for example, marital status, next of kin, dependents	We will use this to understand your circumstances and needs and assess the suitability of products and services you apply for with us or one of our partners.
Health and vulnerability data	In order for us to provide you with the best possible service and with additional and specialist support, we may occasionally ask you for information relating to your health or other vulnerability and may record this when you contact or inform us. We will collect and use this type of personal data where we have your consent. You can find further detail below in Special Category Data.
How you interact with us	We record how you interact with us currently or in the past in order to give you the best service and prevent fraud. This can include whether you have carried out a transaction over the phone, over the internet or even a visit to your Branch.
Location data	If you use a digital or mobile app that we offer, we may capture your location data when using this. This will be used so that we can provide you with relevant services and to prevent fraud.
Name, title, sex, address	We use this to identify you and: To open and manage your accounts and relationship with us. To provide products and services of our partners. To provide you with support and for debt recovery purposes. To enhance your experience and our products and services. To share relevant marketing about our products and services. To meet our legal and regulatory obligations. To process your application for any job you apply for with us. Inform you of any meetings such as the Annual General Meeting (AGM) and facilitate voting.
National insurance number, passport, driving licence and other national identifiers	We use this to verify your identity when you apply for a product with us and to meet our requirements with Her Majesty’s Revenue and Customs (HMRC) for tax reporting regulations.
Residential status, property details and occupancy status	When you apply for a mortgage with us, we use this information to understand the current and previous properties you have lived at, other properties you own, whether you are an owner, tenant or living with parents. This helps us to provide you with appropriate advice and to inform our lending decisions.
Smartphone applications and online banking	In order for you to get the best experience from any digital or mobile app that we may offer, we may ask you for details of your Operating System your phone runs on (e.g. IOS or Android).
Tax status	Where applicable, we will use this for identifying your tax status. If you are a tax resident overseas or a US citizen, you are required to complete a declaration and we are obliged to report the information relating to you and your account(s) to HM Revenue and Customs (HMRC). HMRC may share the information with the relevant tax authorities.
Transaction history and source of funds	We need to ask you the source of your income or perhaps an amount of cash that you wish to put down as a deposit or paying into (or withdrawing) from an account. Gaining an insight into your spending patterns may also help us to detect fraudulent activity on your account and to comply with our regulatory requirements.

Special Category Data

From time to time, we may need to ask for personal data that might seem sensitive. For example, a question about your health, vulnerabilities or whether you have any previous criminal convictions. This is known as ‘special category data’

In general we do not collect special category data about you, but sometimes the personal data we collect may reveal this. This, will however, be limited to the minimum required. This can include personal data relating to your:

health, including any medical condition, health and sickness including pre-employment screening

Where do we obtain personal data from?

We obtain your personal data in the following ways:

Who from?	Details
Directly from you	We will obtain personal data directly from you: When you apply for our products or services online or on the phone. When update your information online, in branch or over the phone (such as when you change your address). When you speak to us on the phone (we may record some calls for training and quality purposes). When using our websites, online web chat services and any digital or mobile app we may offer now or in the future. When you send us in letters, emails or other documents. When we use information that you’ve made public, such as social media content or when you interact with our social media profiles.
From a third party acting on your behalf	We will obtain personal data relating to you from third parties as part of the application process for one of our products or services. This can include individuals who are: a joint applicant on an account you hold or are applying for a trustee on an account acting under a Power of Attorney or similar authority a mortgage broker or mortgage intermediary who is acting on your behalf. If someone acting on your behalf provides this information, we’ll record what’s been provided and who gave it to us. In the event that you’re providing personal data about another individual, we’ll assume that you have told them that you are sharing their details and where they can find more information on how we may process their personal data.
From other third parties	As part of our relationship with you, we collect or receive personal data relating to you from certain third parties in order to facilitate our decision making including: Current and former employers. Referees. Royal Mail (UK postal addresses). Local Authorities (electoral roll). The Insolvency Service. Companies’ House. Housing associations and landlords Court and tribunal Service Credit reference agencies. Government bodies and agencies. HM Revenue and Customs and other tax authorities. Regulators. Law enforcement agencies. Fraud prevention agencies. Insurers. Financial advisers. Land agents. Card associations. Retailers. Comparison websites. Market research providers. Tracing and debt recovery agents. Organisations providing data services to support us in managing our relationship with you and operating our business.

How do we collect special category data?

In almost all cases, we’ll ask for your explicit consent before collecting special category data unless we are required to by law, there is an overriding public interest, or where we believe you or someone else may be at risk.

If you contact us containing this type of information, then we’ll assume that you’re happy for us to record it – unless you tell us not to. If someone acting on your behalf provides this information, we’ll record what’s been provided and who gave it to us.

You have the right to withdraw your consent to us recording and using special category data at any time. This will not affect any use we have made of the information before you withdrew your consent.

Collecting personal data about individuals who are not a customer

From time to time, we might need to collect or use personal data about individuals who aren’t our customers. This could include individuals who are:

Who	Why
Brokers and financial advisers, Solicitors, licensed conveyancers and other professional advisers.	To identify them and to manage our business relationship with them and you.
Employers (current, past or prospective).	To confirm your employment status and income received and to obtain data about your relationship with them.
Guarantors.	To identify them and to manage our business relationship with them and you.
Introducers.	To identify them and to manage our business relationship with them and you.
Lenders and landlords.	To obtain data about your relationship with them and confirm your residency status and payment history. This will be used to inform our lending decisions.
Other adults living in your mortgaged property.	To contact them to inform them of mortgage or additional borrowing application applications and ask them to confirm that they have no claim on the property.
Sellers/Vendors or their agent.	To identify them and contact them where applicable in relation to the sale of a property.

Lawful basis for processing personal data

We process your personal data for a number of different purposes. When we collect, use, share or hold your personal data, we must have a valid reason to do so (known as a ‘lawful basis’). The table below sets out the different lawful basis we may rely on. You can find out more in the how we use your personal data section.

Lawful basis	Description
Consent	You have given free and clear consent for us to process your personal data for a specific purpose.
Contract	The processing is necessary for a contract we have with you, or because we have asked you to take specific steps before entering into a contract.
Explicit consent	You have given explicit consent for us to process your sensitive personal data for a specific purpose.
Legal obligation	The processing is necessary for us to comply with the law or legal requirement.
Legitimate interests	The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Lawful basis for processing Special category data

We will only process your special category personal data where we have an additional lawful basis. This includes:

Where we need to carry out our legal obligations or exercise rights in connection your application for an account with us.
Where it is needed in the public interest: for example, we will use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equality and diversity monitoring and reporting.
With your explicit written consent. In limited circumstances, we may approach you for your written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent.
Where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

How do we use your personal data?

We use your personal data stated above for a whole host of reasons. This includes:

Purpose	Why we use your personal data this way	Lawful basis we rely on to process your personal data
Managing your enquiry, application and ongoing account management	We will collect, use, share and keep personal data needed for us to deal with your enquiries, process your applications, provide any illustrations you require, and manage the ongoing administration of your accounts, products and services. This includes keeping your account records up to date and contacting you when needed. You have the right to object to us processing your personal data for our legitimate interests.	Contract, legitimate interests
CCTV	We use CCTV for the safety and security of our customers and employees throughout our offices. This may capture personal data such as your image, likeness and voice. Using CCTV in our offices is necessary for our legitimate business interests. It helps us provide a safe and secure environment for people who visit us or carry out business in our premises. It also supports us in detecting and deterring any criminal activity. Footage may be reviewed by ourselves, or passed to police or law enforcement agencies upon request following any incidents relating to the security and/or safety of individuals and to assist with any ongoing crime investigations. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Communicating with you via our various channels	We will use your personal data to communicate with you. This includes via the telephone, email, live chat and social media. You have the right to object to us processing your personal data for our legitimate interests.	legitimate interests
Competitions, prize draws and interactive features	We use personal data to manage and run competitions/prize draws for customers and the wider public. When we collect personal data for this reason, we use it to administer the competition/draw and notify the winner. If we wish to use the data for any other purpose this information will be provided at the time. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Debt recovery purposes	We collect and use your personal data to: Assess the likelihood that your circumstances have changed. Work with you through challenging times, by understanding and supporting your needs. Recover any outstanding money owed to us (this could include trying to locate you). Help us decide on any further action we may need to take in order to recover money owed (e.g. whether we need to consider legal action or using a debt recovery agent). We’ll process your personal data in this way when it’s necessary to meet the promises we’ve made in the terms and conditions of your product or service, and also when you ask us to carry out activities that need your authorisation (e.g. when you’ve requested for someone to act on your behalf or if you choose to give us information about your health or any criminal convictions). When necessary, we’ll share your personal data with individuals and organisations that you’ve asked to act on your behalf (e.g. Citizens Advice and Debt Advice Charities) as well as credit reference agencies, solicitors, tracing and debt collection agents, home visit agents and debt purchasers. To carry out these activities, we may need to use profiling (where we use your information to categorise groups of members and customers together based on their behaviours and interactions). This helps us make sure that we’re being fair and consistent in the way we treat our members and customers and also to support those who may be experiencing financial difficulty. We may also use your personal data for our legitimate business interests. Rest assured, we’ll always ensure that the way we process your information is safe and not unfair to you. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Enhancing your experience and our products and services	We collect and use your personal data to help us make our business better, improve products and services and enhance how we engage with members. We use your personal data in this way when it is in our legitimate business interests. Your information and views help us understand the changing needs of our members and customers. We look at you and how you engage with us (e.g. how long you’ve been a member or whether you open our emails), your transactions and how you use our products and services (e.g. the types of accounts you have and how you use our online banking and any digital or mobile app we may offer). Sometimes, we’ll collect personal data you from organisations carrying out market research on our behalf to make sure you had a positive experience with us or to ask your opinion on our products and services, or trends in our industry. Then, we structure and analyse this information to consider how you might use our products and services in the future. We may also use your information to categorise groups of members who interact and engage with us in similar ways. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Informing you of our community events and initiatives	We will use your personal data to enable you to register to receive updates about our community activities or other events we are involved in.	Consent
Making checks regarding your financial status	Sometimes, we’ll need to share your personal data with a credit reference agency (CRA). We do this to: Assess your creditworthiness and consider whether we believe you can afford to take out a product with us. Confirm your income and outgoings. Check the information you’ve provided to us is accurate. Prevent criminal activity and financial crime including fraud and money laundering. Manage your ongoing relationship with us. Trace and recover debts. Make sure any offers we propose are appropriate (when we have the right to do so). When we ask a credit reference agency to do a search on our behalf, this may leave a search footprint on your credit file that may be seen by other lenders. This happens whether or not you, or us choose to proceed with the application. If you’re making a joint application, your credit records will be linked together. This creates what’s known as a ‘financial association’ at credit reference agencies. So, you should always discuss and agree this with other applicants before disclosing their information to check that they’re happy to proceed. Information about any financial associations will be shared with other lenders if either of you make a credit application in the future – whether it’s in just your name or together with someone else. There are three key credit reference agencies that we use. Take a look at their Credit Reference Agency Information Notices (CRAINs) to find out more about them, the data they hold (and for how long), the way they use and share your information, how they prevent fraud and your data protection rights. You can find out more about CRAs below: Equifax - equifax.co.uk/crain TransUnion - transunion.co.uk/crain Experian - experian.co.uk/crain	Contract
Marketing our products and services	We understand that you may wish to hear from us from time to time about our products or services that we think you’ll find interesting or to keep up to date with the latest developments and news. If you have consented to receiving such communications, we may use the contact details you’ve supplied us to send you marketing information. You can, of course, change your mind at any time and can change your marketing preferences. We’ll never pass on your details to anyone else for their marketing purposes.	Consent
Meeting our legal and regulatory obligations	We’re required to collect and use your personal data in a number of circumstances to meet our legal and regulatory obligations. These include using your personal data to carry out a range of activities that ensure we comply with the requirements set out by our regulators (e.g. Financial Conduct Authority – FCA) and in relevant legislation (e.g. Data Protection Legislation and Anti-Money Laundering Regulations). We also disclose information to HMRC and other government bodies when we are required or permitted to do so.	Legal obligation
Preventing and detecting fraud and financial crime	We use and share your personal data with fraud prevention agencies to help prevent financial crime. If required for fraud or criminal investigation reasons, we (and the fraud prevention agencies) may also allow law enforcement agencies to access and use your personal data. We have a legal obligation and legitimate interest to check people’s identity, and identify and prevent financial crime including fraud and money laundering. Sharing your personal data in this way, when necessary, allows us to protect your financial security as well as that of our other members and customers. It also makes sure that we’re complying with the law. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services and financing you have requested, or to employ you, or we may stop providing existing services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us on the details below. You have the right to object to us processing your personal data for our legitimate interests.	Legal obligation, legitimate interests
Processing a Decision in Principle	We will collect, use, share and keep personal data to provide you with a Decision in Principle and to assess, review and process your application. This process involves reviewing your application with the use of financial models and automated systems provided by Credit Reference Agencies and against our lending criteria. This will help us to understand your mortgage application and to assess the affordability of the products and services you apply for.	Contract
Profiling	There may be some circumstances where we use your personal data for profiling. Profiling is used to make automated decisions. This is where we combine your personal data with information about others so that we can: Understand trends, traits and behaviours. Make predictions about how you might use our products and services in the future. Analyse data to improve our service and generate alerts (e.g. where we suspect that you may be the victim of financial crime). Profiling your personal data alongside other members and customers also helps us to ensure that we’re providing a consistent service and giving people the best products and advice at the right times. We’ll always make sure the way we process your information is safe and not unfair to you. Where possible, we’ll keep your details anonymous and use your information only to produce statistical reports. This way, you will not be identifiable from the data. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Providing products and services of our partners	We use your personal data to provide, introduce or distribute products and services from our partners. Our partners will also collect and use your information to manage the products and services that you have with them. As this then makes them the ‘data controller’, they’ll provide more details on how they process your information at the time when it’s collected by them or shared by us. When selecting our partners, we take appropriate steps to make sure that they have adequate protection in place and that they follow data protection legislation. You have the right to object to us processing your personal data for our legitimate interests.	Contract, legitimate interests
Social media	We want you to get the most out of e want you to get the most out of your relationship with us so we use social media and websites to let you know about the products and services we offer that might be of interest to you and to communicate with you if you contact us through this method. We may also use social media services to enhance our services, presence and your customer experience. Your comments, opinions and messages may be used so that we can better understand our customers and improve our products, services and overall customer offering. We may do this by matching the personal details we hold about you, such as your email address, with the details social media companies or websites hold about you. This is done in a controlled, anonymous way so your identity is never revealed. By doing this, social media and websites can share tailored marketing messages with you about our products and services. We will never agree to social media companies or websites sharing or selling your information to third parties You have the right to object to us processing your personal data for our legitimate interests. If you submit a request, we will stop sending you marketing messages tailored to you. However, you might still receive some general marketing messages from us, but these won’t be targeted to you. If you want to control the adverts you see on social media platforms, you can manage your marketing preferences (including receiving targeted marketing ad) through their settings and privacy pages. You may still see adverts, but these won’t be tailored to you.	Legitimate interests
Statistical analysis and reporting	We use personal data as in order to carry out Data Analysis, Trends and Statistical Reporting. We will only do this using personal data where necessary and if we are unable to use anonymous data. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Testing our systems and processes	In order to improve our services and systems, we may use your personal data for testing our systems so that we can make them even better. Using your personal data for testing is necessary for our legitimate business interests as it allows us to maintain and improve the security, integrity and performance of our systems. We have stringent processes in place to keep your personal data safe and we won’t use it in a way that’s unfair to you. When we are unable to use 'masked' or anonymous data (i.e. that which doesn’t identify you), we will aim to: Always do this in a secure and controlled environment. Only use the minimum amount of data necessary for the testing required. Only use carefully selected specialist service providers, where necessary. Only hold your information in this way for as long as needed to carry out testing. You have the right to object to us processing your personal data for our legitimate interests.	Legitimate interests
Verifying your identify	We have a regulatory requirement to confirm the identity of anyone opening an account with us or when they apply for a job or role with us. This upholds our legal obligation to complete necessary due diligence checks to make sure we know our customers and potential employees, helps prevent and detect fraud, prevents identity theft and protects our business. You have the right to object to us processing your personal data for our legitimate interests.	Legal obligation, contract, legitimate interests

How do we use special category data?

We’ll only ask for this type of personal data when we absolutely need to and use it for limited circumstances to:

Understand and accommodate any additional needs or requirements that you might have. For example, to help with any issues around your health, memory, caring responsibilities or any challenges you’re facing in life.
Understand any details about your health that we need to know for the purpose of insurance policies or investment products.

Change of purpose

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance where this is required or permitted by law.

Automated decision making

There may be circumstances where we use automated decision making using your personal data. We use automated decision making to check that we can enter into an agreement with you, and also carry out our legal and regulatory obligations. Sometimes, it’s required by law (e.g. when complying with UK money laundering regulations).

When you request a Decision in Principle and/or apply for a mortgage with us, you will be taking the steps necessary to enter into a contract with us.

This process involves reviewing your application with the use of financial models, automated systems provided by Credit Reference Agencies (CRAs) and against our full lending criteria. This is to help us better understand your mortgage application and to assess the affordability of the products and services you apply for. When we do this the CRAs will keep a record of our search, whether or not you proceed with a full mortgage application. This is known as a credit footprint. They do this so that you can see who has looked at your credit report, when it was looked at and why. This record may also be seen by other lenders and could affect your ability to obtain future credit.

We will use automated decision making to:

To assess your application and check if we can approve you for credit, to make sure that we’re lending responsibility.
To assess if we can offer you a financial product and work out the level of interest that you’ll pay.
To check if someone’s making a fraudulent application or if there’s activity on your account that needs further review. This is so we can protect your money and protect you from financial crime.
To decide if you are, or continue to be, eligible for the product or service you’ve chosen.

What information do we use to make these decisions?

For automated decision making, we use information that we’ve collected or hold about you from your applications. Sometimes, we might also use information from other sources such as credit reference or fraud prevention agencies – but we check this against the information you give us.

Who has access to your personal data?

There may be occasions where we need to share your personal data with external partners or organisations. The table below provides details on who we share personal data with and the reasons why:

Who	Reason
Adult occupiers (for mortgages)	To contact them to inform them of mortgage or additional borrowing application applications and ask them to confirm that they have no claim on the property.
Claims Management Companies	To assist with enquiries and the assessment of claims.
Courts and tribunals	To respond to court and tribunal requests To manage and resolve complaints, disputes and/or legal claims.
Credit reference agencies (CRAs)	To verify your identity and to help trace your whereabouts if we have been unable to contact you. To review and assess your suitability, and application for products and services
Data processors	To carry out processing activities on our behalf under contract and after we have assessed their suitability.
Debt recovery agencies	To assist with debt collection activities and to locate you if we have been unable to contact you via our usual communication channels.
Direct marketing providers	To provide marketing services on our behalf. To provide you targeted adverts based on your previous web browsing history.
Employers (past and present)	To confirm your employment and employment status and income received.
Financial advisers	To provide you with financial advice and assistance.
Fraud prevention agencies (e.g. CIFAS and National Hunter)	To carry out checks for the purposes of preventing fraud and money laundering To verify your identity. To assess your suitability for products and services. For fraud prevention and tracing activity.
Government bodies, e.g. Homes England or Help to Buy (Wales) Limited	To process any application or account information in which that body has a legitimate interest such as an unauthorised letting or property alteration or any identified false or inaccurate information.
HM Revenue and Customs (HMRC) and other tax authorities	To confirm your tax status and provide information for tax reporting purposes To assist with enquiries, investigations, complaints and assessments To assist with financial crime and fraud prevention.
Insurers and reinsurers	To provide you with insurance services.
Joint account holders, including former, current and/or future account holders	To respond to enquiries, requests and further applications. To allow ongoing administration of your joint account, products and services To processing transactions.
Law enforcement agencies	To assist with any ongoing investigations relating to the security and/or safety of individuals. For financial crime and fraud prevention purposes.
Market research providers	To provide market research services on our behalf. To gain better understand our customers and members including their experiences, circumstances, needs and responses to our current and potential products, services and wider initiatives. To gain a range of insights, for example market trends; consumer behaviour; competitors; technological change To support a wide range of business decision making such as product development. For data for profiling and customer segmentation to create a broad understanding of our customers, to help shape our communications, products and the overall customer experience from what our branches look like, to how we handle phone calls and other customer contacts.
Mortgage guarantors or potential guarantors and their legal representatives	To deal with their enquiries, requests and further applications To manage the ongoing administration of your accounts, products and services To process transactions
Other financial institutions	To review and assess your suitability and application for products and services To manage payments (including the use of payment services involving the transfer of electronic payments into or out of your account). To respond to requests for the postponement of a charge on your property. To financial crime and fraud prevention purposes. To assist with enquiries and investigations.
Referees	To obtain a reference for any product or service you apply for (where applicable).
Regulators e.g. Financial Conduct Authority (FCA) and the Information Commissioner’s Office (ICO)	To comply with our regulatory requirements and to resolve complaints.
Social Media providers	To communicate with you and answer your queries submitted via social media. To show you targeted advertising.
Solicitors, licensed conveyancers, valuers, panel managers and other professional advisers	To provide professional services To review and assess your suitability and application for products and services To manage your ongoing relationships To administer and manage disputes and/or legal claims.
UK Financial Services Compensation Scheme Financial Ombudsman Scheme	To provide our regulatory and governing bodies with data about our business To assist with enquiries, investigations, complaints and assessments.
Yorkshire Building Society Group	To comply with our regulatory, legal and compliance requirements. To provide products and services.

Our relationship with other organisations

We have a relationship or partnership with the following organisations and may share your personal data with the companies listed below associated purposes. All companies we work with are assessed for adequacy of their security controls, so you know your personal data is safe.

Organisation	Purpose
CIFAS	To provide fraud prevention and tracing activity.
First Complete Ltd	To allow payment of procuration fees.
ICR Speech Solutions and Services Limited	To provide text messaging services (SMS)
Intrinsic	To allow payment of procuration fees.
Legal & General	To provide mortgage-linked life insurance.
LMS Conveyancing	To provide conveyancing services for fees assisted products.
London and Country Openwork	To allow payment of procuration fees.
National Hunter Limited	To provide fraud prevention and tracing activity.
Paradigm Mortgage Services	To allow payment of procuration fees.
Paragon Customer Communications (London) Ltd	To provide printing and communications services.
Personal Touch Insurance	To allow payment of procuration fees.
Premier Mortgage Services (PMS)	To allow payment of procuration fees.
Primis	To allow payment of procuration fees.
Sesame Mortgage Network	To allow payment of procuration fees.
Sign Live	To provide British Sign Language interpreter services.
Simply Biz Mortgages	To allow payment of procuration fees.
Target Servicing Limited	To provide servicing for some BTL accounts.
Tenet	To allow payment of procuration fees.
The Buy to Let Club	To allow payment of procuration fees.
TMA	To allow payment of procuration fees.
VST	To provide documents in alternative formats.

Sale or purchase of all or part of our business

If we sell or transfer all or part of our business, we may share or transfer customer records and data as part of the proposed/actual sale or transfer. Before we do this we will ensure there is adequate protection in place by imposing contractual obligations on the buyer/seller to ensure the security and confidentiality of your data.

Transfers of personal data outside the EEA

There may be some circumstances where we may transfer your personal data to countries outside the UK when:

We’re required or permitted to by law or regulatory requirements.
We’re sharing data with a third party to support us in the management of your account.

When working with our suppliers and/or transferring personal data to countries outside the UK, we take appropriate steps to ensure that there is adequate protection and controls are in place and that data protection legislation is followed.

This could be by:

Ensuring that we transfer personal data to countries that we believe have comparable data protection legislation to the UK.
Putting suitable clauses in our contracts to ensure that organisations take appropriate steps to comply with UK data protection laws or the equivalent.

If you would like more information on this, please contact us.

How do we protect your personal data?

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How long do we keep your personal data?

Our aim is to keep your personal data only for as long as we need to, in order to manage your relationship with us and comply with legal and regulatory requirements. When determining retention periods, we consider the following:

the maximum or minimum retention periods identified by the law or regulatory guidance
our contractual rights and obligations
customer expectations, the nature of your relationship with us and the types of accounts, products and services you have with us
current or future operational requirements
forensic requirements, for example, the potential need to access data no longer actively used in order to manage or respond to complaints and disputes
the risks involved in retention, deletion and removal
the cost of maintaining, storing, archiving and retrieving data
the capability or restraints of our systems and technology.

The table below provides details on how long we will retain your personal data for:

Category	Retention Period
Broker information	We will retain data relating to Brokers indefinitely unless requested to remove this.
Competitions/Prize Draws	We will keep details of the competitions and/or prize draws you enter for up to 6 months after the end of the competition and/or prize draw, unless otherwise stated in the competition/prize draw information we provide at the time.
Complaints	If you make a complaint to us, we will retain your personal data in relation to the complaint for up to 6 years after the closure of a complaint to meet our legal and regulatory obligations and to manage any escalation to the Financial Ombudsman Service (FOS).
Fraud prevention data	Fraud Prevention Agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held by us for up to 6 years from the end of our relationship with you.
General enquiries	If you contact us with a general enquiry, via email, phone, post or in personal (e.g. in Branch), we will retain your personal data for up to 6 months from the date the information was obtained in order to allow time for you to open an account, product or service and for us to respond to further queries from you. If you have provided consent to receiving marketing from us, we will retain your personal data for up to 3 years from date the information was received.
Marketing preferences	If you have opted to receive marketing information from us, we will retain your preferences for up to 3 years in relation to the methods you have chosen to be contacted unless you tell us otherwise.
Mortgage Account - where potential customer has applied for a product, but the application does not complete	If you apply for a mortgage product, but the application does not progress to opening, we will keep details of your application, including results of any credit search for up to 10 years from the date the application was received to help us better understand your mortgage application, to assess the affordability of the products and services you apply for and deal with your queries.
Mortgage Account - where potential customer has applied for a product and the application completes	Where you apply for a mortgage product and the application completes, we will keep details of your application, including results of any credit search for up to 10 years from the date the from the end of the relationship with you to meet our legal and regulatory obligations and deal with your queries.
Mortgage Account - general enquiries where potential customer has not applied for a product	If you make a general enquiry in relation to a mortgage account, but do not apply for a product, we will keep your personal data for up to 6 months from the date the information was obtained to deal with your queries. If you have provided consent to receiving marketing from us, we will retain your personal data for up to 3 years from date the information was received unless you withdraw your consent.
Power of Attorney information	We will retain this indefinitely to deal with your queries or concerns.

We may keep your personal data for longer than indicated if we cannot delete it for legal, regulatory or technical reasons. We may also keep it for research or statistical purposes. If we do, we’ll make sure that your privacy is protected and only use it for those specified purposes.

How can I request a copy of the information you hold on me?

The simplest and quickest way to request this information is by completing our simple Online Request Form.

Alternatively you can:

Visit us in a YBS branch or agency
Call us on: 0345 848 0224
Write to us at the address below:
Data Subject Request
Yorkshire House
Yorkshire Drive
Bradford
West Yorkshire
BD5 8LJ

There are a number of rights you have in regard to the personal information we hold about you. You can submit an information request on any of the rights listed below.

Right	Description
Request to be informed about how we process your personal data.	You have the right to be informed about the collection and use of your personal data.
Request access to your personal data (commonly known as a “data subject access request”).	This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request rectification/correction of the personal data that we hold about you.	This enables you to have any incomplete or inaccurate data corrected.
Request erasure of your personal data.	This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object.
Object to processing of your personal data.	You can object to us using your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
Request the restriction of processing of your personal data.	This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal data to another party.	In certain circumstances, you have the right to ask us to transfer a copy of some of your personal data to you or to a new data controller (e.g. another financial provider or comparison website).
Right to withdraw your consent	Where we rely on your consent to process any of your personal data, you have a right to withdraw that consent at any time. This will not affect any use we have made of the information before you withdrew your consent.
Object to automated decision making /Profiling	In certain circumstances, you have the right to ask for an automated decision (such as a lending decision made by a machine) to be reviewed by a human.
Complain to the Regulator	You have the right to make a complaint to the Supervisory Authority. In the UK, this is the Information Commissioner’s Office (ICO). You can find out how to contact the ICO below.

You can make a subject access request by emailing DSAR@ybs.co.uk, calling us or writing to us. You can request other rights above by:

Accuracy of your personal data

Whilst we make every effort to ensure your data is correct, we kindly request that you help us by reporting any inaccuracies or discrepancies at the earliest opportunity. It your responsibility to keep us informed of any change of your circumstances including any name changes, alternative contact details or change of address.

If you have an online account, you can make changes to your address, telephone and email in the account area. Alternatively, you may write to us at:

Accord Mortgages
Yorkshire House
Yorkshire Drive
Bradford
West Yorkshire
BD5 8LJ

You can call us:

0345 1200 891 (for overseas customers (+44) 1633 717632)

For Buy to Let Customers

0345 848 0224 (Overseas customers (+44) 1633 717632)

Changing your marketing preferences

You can change your marketing preferences and how we contact you in relation to new products and services by logging onto your online account, by calling us on the numbers above. We will not sell your details to other companies, but we may use marketing agents to act on our behalf.

Cookies

In order to improve your online experience with us, we use cookies. To find out more about cookies, the types of cookies we use, how we use them and how to manage your preferences, please see our cookies section.

Data Protection Officer (DPO) details

If you have any concerns about how we collect, use, share or keep your personal data, you think there has been a breach, or you have a question or concern about anything in this notice, you may contact our Data Protection Officer (DPO) using the details below:

Data Protection Officer
Yorkshire House
Yorkshire Drive
Bradford
West Yorkshire
BD5 8LJ
dpo@ybs.co.uk

Contacting the Information Commissioner’s Office (ICO)

You have a right to complain to the Information Commissioner’s Office (ICO) if you have any concerns about how we collect, use, share or keep your personal data. You may contact them at:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Web: ico.org.uk

Updating this notice

We regularly review and, where necessary, update our privacy information contained within this notice. This was last updated on 21 April 2021.

Bank of England base rate change

We've got your back

Product transfers

Grow your business

It's quicker to click than call

Your Privacy

Introduction

Data Controller

Why do we need your personal data?

What if you do not provide personal data?

What personal data do we collect?

Special Category Data

Where do we obtain personal data from?

How do we collect special category data?

Collecting personal data about individuals who are not a customer

Lawful basis for processing personal data

Lawful basis for processing Special category data

How do we use your personal data?

How do we use special category data?

Change of purpose

Automated decision making

What information do we use to make these decisions?

Who has access to your personal data?

Our relationship with other organisations

Sale or purchase of all or part of our business

Transfers of personal data outside the EEA

How do we protect your personal data?

How long do we keep your personal data?

How can I request a copy of the information you hold on me?

Accuracy of your personal data

Changing your marketing preferences

Cookies

Data Protection Officer (DPO) details

Contacting the Information Commissioner’s Office (ICO)

Updating this notice

Bank of England base rate change

We've got your back

Product transfers

Grow your business

It's quicker to click than call

Manage preferences

Cookies strictly necessary

Performance (analytics) cookies

Advertising cookies

Your Privacy

Introduction

Data Controller

Why do we need your personal data?

What if you do not provide personal data?

What personal data do we collect?

Special Category Data

Where do we obtain personal data from?

How do we collect special category data?

Collecting personal data about individuals who are not a customer

Lawful basis for processing personal data

Lawful basis for processing Special category data

How do we use your personal data?

How do we use special category data?

Change of purpose

Automated decision making

What information do we use to make these decisions?

Who has access to your personal data?

Our relationship with other organisations

Sale or purchase of all or part of our business

Transfers of personal data outside the EEA

How do we protect your personal data?

How long do we keep your personal data?

How can I request a copy of the information you hold on me?

Accuracy of your personal data

Changing your marketing preferences

Cookies

Data Protection Officer (DPO) details

Contacting the Information Commissioner’s Office (ICO)

Updating this notice

COOKIES

This policy is written to help you understand how and why Accord Mortgages use cookies.

Managing / Blocking cookies