Data controller: FirstBank UK – This privacy policy applies to all processing activities involving personal data carried out by FirstBank UK .
Our registered officen is 28 Finsbury Circus, London, EC2M 7DT.
Our UK registered company number is 04459383.
We are a member of FirstHoldco Plc (the Group). More information about the Group can be found at https://www.fbnholdings.com.
FirstBank UK collects data when you visit our website, when you enrol for our services, when you use our online or offline products/services, or when you otherwise contact us, that identifies, or is associated with, you (either by itself or when combined with other information). Such information shall be referred to as “personal information” or “personal data”. We may use this personal information along with other information collected or generated during our relationship with you for the reasons explained in this notice
It is important that you read this privacy notice carefully to ensure you are fully aware of how and why we are using your data.
If you have any questions about this privacy notice, our approach to data protection generally or you wish to exercise your legal rights please contact our Data Protection Officer (DPO) using the details set out in “Your rights” section below.
FirstBank UK is committed to protecting and respecting your privacy by being transparent about how it collects and uses your personal data and to meeting its data protection obligations. The purpose of this notice is to clarify:
- What information does FirstBank UK collect?
- How we collect personal data?
- Why does FirstBank UK process personal data?
- How and why we share your personal data
- Transferring personal data overseas
- How does FirstBank UK protect personal data?
- For how long does FirstBank UK keep personal data?
- Your rights
- Links to other websites
- Changes to the privacy policy
- What information does FirstBank UK collect?
We may collect, use, store and/or transfer different kinds of personal information.
We will limit the collection and processing of personal data to what is necessary to achieve one or more purpose(s) as identified in this notice. The personal information we collect may include:
- Basic personal data to identify you such as your first name, maiden name, last name, username or similar identifier, marital status, title, date of birth;
- Your contact information including your email address, address and telephone numbers;
- Financial information – including bank account details, card payment details and transactional information and history;
- Products and services provided to you;
- Online information and online activity based on your interaction with us, our websites and applications for example your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types, searches, site visits and versions, operating system and platform, and other technology on the devices you use to access this website;
- Images and personal appearance such as copies of your passport or driver’s licence or CCTV images;
- Profile Data which may include your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses; and
- Usage Data including statistical data including information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
- How we collect personal data?
FirstBank UK collects this information in a variety of ways. For example:
- through application forms, CVs or biographies;
- obtained from your passport or other identity documents;
- from forms completed by you;
- from correspondence with you;
- or through calls, meetings or other types of exchange;
- while providing customer support, consultation, live chat, or other interaction;
- through the process of maintaining and upgrading our services; through means such as communications protocols and e-mail communications;
- through our mobile applications;
- when information is provided to us from third parties authorized under applicable law to initiate transactions or perform account-related services on your behalf, such as account information service providers or payment initiation service providers.
- Why does FirstBank UK process personal data?
FirstBank UK may need to process your personal information you provide and that we collect from other entities for the following legal bases and legitimate business purposes:
Providing our services to you
FirstBank UK may need to process your personal information to perform its contractual obligations with you or provide our services to you.
For example, to conduct a payment or money transfer, or to enter into a foreign exchange derivative contract with us and thus enable you to become a client, you must provide certain information required by us to execute the transaction and to enable us to comply with our legal obligations associated with providing such services.
Failure to provide some of your personal information may affect our ability to provide the requested services to you. We will inform you when personal information is required in order to use our services.
Legal and compliance purposes
This includes processing your personal information to comply with legal and regulatory requirements, such as: anti-money laundering and counter-terrorist financing; detection, prevention and prosecution of fraud and theft; as well as preventing illegitimate or prohibited use of our services. This may also include establishing, exercising, or defending legal rights and claims, monitoring and reporting compliance issues, or responding to legal due process. Additionally, this includes using your details to validate and authenticate your identity and using relevant third parties to help us do this, as well as retaining records containing your personal information as required under applicable law.
Legitimate business purposes
We use your personal information to analyse and improve our products, services, operations, the running of our websites and your customer experience. We also use your personal information to: provide appropriate customer services; to conduct other administrative tasks necessary to provide our services; to help manage risks related to security, fraud and identity; and to protect the security and integrity of our technology, systems, and services. We conduct analysis of the information we hold to better understand our customers. We may also conduct credit checks on you and your business using a licensed credit reference agency.
- Who we share your personal data with
FirstBank UK may from time to time share your personal data with the following bodies who are also required to keep your information confidential, safe and secure:
- Our parent company and any member of the Group;
- Third parties, commercial partners (which may include without limitation credit reference agencies), agents, professional advisors and subcontractors who provide products, services and administrative support to the Group, or who may be engaged on your behalf;
- Detailed information about the use of your personal data by credit reference agencies are outlined here.:
https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
- Where we are required by law and/or law enforcement agencies: banking regulators, judicial bodies, statutory auditors, credit reference agencies, fraud prevention agencies, governmental entities, tax authorities or regulatory bodies around the world;
- Prospective transferees where required as part of any proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or business assets; or
- Anyone else with your express permission.
- Transferring personal data overseas
From time to time, we may share your personal data with organisations in other countries including organisations within the Group.
Additionally, when you send or receive money to or from another country, we may send some of your personal information to such country as required and permitted by law. The privacy law in countries to which personal information is transferred may not provide the same level of data protection as is in force within the EEA.
- How does FirstBank UK protect data?
FirstBank UK takes the security of your data seriously. FirstBank UK has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees (or other permitted recipients as set out in this notice) in the performance of their duties.
Where FirstBank UK engages third parties to process personal data on its behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
- For how long does FirstBank UK keep data?
We will not retain your personal data longer than is necessary. The retention periods for which FirstBank UK will hold your personal data will vary depending on its category including but not limited to the nature and type of record, the nature of the activity, the product or service and any applicable legal or regulatory requirements. Your personal information will be retained in accordance with defined statutory periods applicable to providing financial services, including those in anti-money laundering, anti-terrorist financing and other laws applicable to FirstBank UK. For the most part, your personal data will be retained for no longer than seven years after the end of our relationship, unless compelled to do so pursuant to a legal requirement or in accordance with our regulatory obligations.
- Your rights
You have the right to know if we are processing your personal information, and to ask us for a copy of your information free of charge. You have the right to request a structured and machine-readable copy of the information you have provided to us. We may charge you a reasonable fee for providing the information, or not act upon your request, if the request is manifestly unfounded or excessive. You have the right to request us to stop sending you marketing communications. You have the right to ask us to correct information about you that is incomplete, inaccurate or out-of-date. You have the right to ask us to erase certain information about you, to restrict certain uses of your information, and also to object to certain uses of it. You also have the right to lodge a complaint with a supervisory authority about our processing of personal information. When we receive a request, we may ask for additional information from you to verify your identity.
To exercise these rights, please contact our data protection officer (DPO) at FirstBank UK through the following channels:
Data Protection Officer
FirstBank UK Limited
28 Finsbury Circus,
London,
EC2M 7DT
Email: dpo@fbnbank.co.uk
Telephone: 02035951173
- Links to other websites
Within our website we may have links to third party websites, plug-ins and applications. Clicking those links may enable third parties to share or collect your personal data. FirstBank UK do not control such third-party websites and is not responsible for their privacy statements or the contents of those websites. We would encourage you to read the privacy statements of every website you visit.
- Changes to the privacy notice
We keep our privacy notice under regular review. Any changes to our privacy notice in the future will be posted on this page. We encourage you to review this page regularly to identify any updates or changes to our privacy notice.
February 2025