Your privacy is important to us. This Privacy Policy explains how Everthrive Bank (“we”, “our”, “us”) collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We may collect the following categories of personal data:
- Identity Data: Full name, date of birth, national ID, passport, or driving licence
- Contact Data: Address, phone number, email
- Financial Data: Bank account numbers, transaction records, credit score
- Technical Data: IP address, browser type, login activity
- Communication Data: Emails, chat records, feedback
2. How We Use Your Information
We use your data for the following purposes:
- To verify your identity and open bank accounts
- To process transactions and payments
- To comply with legal and regulatory obligations (e.g. AML/KYC)
- To provide customer service and account support
- To send notifications and service updates
- For fraud prevention, risk analysis, and security
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual necessity: To provide banking services you request
- Legal obligation: To comply with financial laws and regulations
- Legitimate interests: To ensure the security of our systems and customers
- Consent: Where required, such as for marketing purposes
4. Sharing of Data
We may share your data with:
- Regulatory bodies (e.g., FCA, HMRC)
- Credit reference agencies
- Payment processors and correspondent banks
- IT and cybersecurity service providers
- Law enforcement (where legally required)
We do not sell your personal data to third parties.
5. Data Security
We implement strong technical and organizational measures to protect your data, including:
- SSL encryption
- Multi-factor authentication
- Encrypted storage
- Secure access controls
6. Data Retention
We retain personal data only as long as necessary to:
- Provide services
- Meet legal and regulatory requirements
- Resolve disputes and enforce our agreements
Typical retention period is 6–7 years after account closure, unless extended by law.
7. Your Rights
You have the right to:
- Access your personal data
- Request correction or deletion
- Object to processing
- Request data portability
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
8. Cookies
We use cookies to enhance your experience, analyse usage, and improve our website. You can manage your cookie preferences via your browser settings.
9. International Data Transfers
In some cases, your data may be processed outside the UK. Where this happens, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website and take effect immediately upon publication.
11. Contact Us
For privacy-related queries or to exercise your data rights:
📧 privacy@everthrivebank.com
🏢 Trafalgar Square, Westminster, London WC2N 5DN, United Kingdom