Introduction

This privacy notice sets out how Yorkshire Building Society (YBS) will collect and use your personal data and your information rights when you apply for a job or role with us. We are committed to taking good care your personal data and ensuring the highest standards of privacy. If you have any questions about this notice, don’t hesitate to get in touch with us. We’ll be more than happy to help.

Within this privacy notice, ‘YBS’ includes the trading names under which we operate (Chelsea Building Society, the Chelsea, Norwich and Peterborough Building Society, N&P and Egg) and its subsidiary companies. Any references to ‘us’, ‘our’ and ‘we’ means ‘YBS’.

When appropriate, we will provide a ‘just in time’ notice to cover any additional processing activities not mentioned in this notice.

Sometimes, we will use third parties to assist us with the recruitment process and they may also provide you with a separate privacy notice.

Data Controller

An organisation that decides how the personal data it collects and holds is used is called a ‘data controller’. We call this use of personal data ‘processing’ – this includes the collection, storage, analysis, sharing, retention and disposal of personal data.

Where YBS are responsible for determining how your personal data is used, we will be the data controller and are registered with the Information Commissioner’s Office (ICO) – the organisation in the UK that oversees that an organisation is acting accordingly when processing personal data. Our registration numbers are:

  • Z9006086
  • Z5217596

Data Processors

When you apply for a job or a role with us, we sometimes use data processors to act on our behalf. A Data processor is someone who processes personal data on our behalf and are obliged to process your personal data only according to our instructions, keep it safe and not use your details for any other purposes. We have provided details of organisation with which we have a relationship within this notice.

Why do we need your personal data?

When you apply for a role or job with us we require personal data in order to assess your suitability for a role or job, to manage any assessments as part of the recruitment process and to manage our relationship with you. Without this information, we will be able to process any applications you may make or communicate with you.

What if you do not provide personal data?

You are under no statutory or contractual obligation to provide any personal data to us during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all. We will be also be unable communicate with you effectively.

What personal data do we collect?

We collect and use a variety of personal data to effectively manage our recruitment processes and our relationship with you. The table below shows the typical categories of personal data we ask you for and why we may ask for it. You will find more specific information in the ‘how do we use your personal data’ section:

What will we collect? How we may use it
Bank account details We use this to allow us to pay your salary and any other payments due to you.
County Court Judgments (CCJ) and insolvency data We collect information in relation to any insolvency proceedings about you, including CCJs in order to assess your suitability for certain roles with us.
Criminal convictions (including unspent convictions) In limited circumstances, we may ask if you have any criminal convictions. This is to allow us to assess your suitability for certain roles with us.
CVs Sometime we ask for a copy of your CV as part of an application you make to us for a role or job. We use this in order to assess your skills and experience and suitability for a job or role.
Date of birth and/or age We use this to identify you to confirm your age.
Driving licence We use this to verify your identity and to check your authorization to drive where you are entitled to a Company Vehicle.
Educational history We ask you for your educational history in order to assess your skills and experience and suitability for a job or role.
Email address and phone number We use your email address and phone number to apply for a job or role online, to contact you about your application and to communicate with you.
Employee performance data We may ask for this and use this information to assess our suitability for role and jobs which you apply.
Employment history (including reasons for leaving and any dismissals) We ask you for your employment history in order to assess your skills and experience and in order to obtain references.
Health and vulnerability data In order for us to provide you with the best possible service and with additional and specialist support as part of the recruitment process, we may occasionally ask you for information relating to your health or other vulnerability and may record this when you contact or inform us.
We will collect and use this type of personal data where we have your consent. You can find further detail in Special Category Data.
How you interact with us We record how you interact with us currently or in the past in order to give you the best service and prevent fraud. This can include whether you have applied for a role or job with us in the past and how you did this.
Name, title, sex, address We use this to identify you, to process your application for any job you apply for with us (including undertaking any credit and background checks) and to manage our ongoing relationship with you.
National insurance number, passport and other national identifiers We use this to verify your identity when you apply for a job with us and to carry out fraud and other recruitment checks.
Passport We use this to verify your identity and to confirm your entitlement to work in the UK.
Salary information (current and desired) We use this as part of our recruitment process to understand your salary requirements.

Special Category Data

From time to time, we may need to ask for personal data that might seem sensitive. For example, a question about your health, vulnerabilities or whether you have any previous criminal convictions. This is known as ‘special category data’.

In general we do not collect special category data about you, but sometimes the personal data we collect may reveal this. This, will however, be limited to the minimum required. As an equal opportunities employer we will collect the following information to monitor and report on equality and diversity for our recruitment:

  • race or ethnicity
  • religious or philosophical beliefs
  • trade union membership (only where you have mentioned this in your application e.g. where you list being a union representative in “positions of responsibility”)
  • health, including any disability, medical condition, health and sickness including pre-employment screening
  • criminal convictions and offences.

How do we collect personal data?

At YBS, we obtain your personal data in the following ways:

Who from? Details
Directly from you We will obtain personal data directly from you:

  • When you apply for a job or role with us via a Job Board or via our website.
  • When you attend a job fair and speak to us.
  • When you complete any surveys run by us.
  • When update your information online, in branch or over the phone (such as when you change your address).
  • When you speak to us on the phone (we may record some calls for training and quality purposes).
  • When using our websites, online web chat services and any digital or mobile app we may offer now or in the future.
  • When you send us in letters, emails or other documents such as your CV.
  • When we use information that you’ve made public, such as social media content or when you interact with our social media profiles.
From other third parties As part of our relationship with you, we collect or receive personal data relating to you from certain third parties in order to facilitate our decision making including:

  • Current and former employers (e.g. refer a friend scheme).
  • Referees.
  • Your nominated representative.
  • Local Authorities (electoral roll).
  • The Insolvency Service.
  • Court and tribunal Service.
  • Credit reference agencies.
  • HM Revenue and Customs and other tax authorities.
  • Fraud prevention agencies.
  • Job Train.
  • Recruitment Agencies.
  • Online Job Boards.
  • Credit Reference Agencies.
From publicly available sources
  • This includes public registers, Social Media sites such as LinkedIn, job boards, etc., where we collect your full name, email, work history, and other data included on your profile.

How do we collect special category data?

In almost all cases, we’ll ask for your explicit consent before collecting special category data unless we are required to by law (for example, for employment law purposes), there is an overriding public interest, or where we believe you or someone else may be at risk.

If you contact us containing this type of information, then we’ll assume that you’re happy for us to record it – unless you tell us not to. If someone acting on your behalf provides this information, we’ll record what’s been provided and who gave it to us.

Where we have relied on your consent, you have the right to withdraw your consent to us recording and using special category data at any time. This will not affect any use we have made of the information before you withdrew your consent.

Lawful basis for processing personal data

We process your personal data for a number of different purposes. When we collect, use, share or hold your personal data, we must have a valid reason to do so (known as a ‘lawful basis’). The table below sets out the different lawful basis we may rely on. You can find out more in the how we use your personal data section.

Lawful basis Description
Consent You have given free and clear consent for us to process your personal data for a specific purpose.
Contract The processing is necessary for a contract we have with you, or because we have asked you to take specific steps before entering into a contract.
Explicit consent You have given explicit consent for us to process your sensitive personal data for a specific purpose.
Legal obligation The processing is necessary for us to comply with the law or legal requirement.
Legitimate interests The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Lawful basis for processing Special category data

We will only process your special category personal data where we have an additional lawful basis. This includes:

  • Where we need to carry out our legal obligations or exercise rights in connection your application for an account with us.
  • Where it is needed in the public interest: for example, we will use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equality and diversity monitoring and reporting.
  • With your explicit written consent. In limited circumstances, we may approach you for your written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent.
  • Where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Who has access to your personal data?

We will share your personal data internally for the purposes of recruitment. This includes members of the HR team, hiring managers and interviewers involved in the recruitment process. We will also share your personal data with third parties who we use to assist us in the recruitment process (for example, Job Train and SHL)

Where your application for employment is successful and we make you an offer of employment, we will share your data with former employers to obtain references for you and, where appropriate, employment background check providers to obtain necessary background checks and the Disclosure and Barring Service to obtain necessary criminal records checks.

How do we use your personal data?

We use your personal data stated above for a whole host of reasons. This includes:

If the table below is partially obscured, you may need to scroll right to see more.

Purpose Why we use your personal data this way Lawful basis we rely on to process your personal data
Managing your enquiries We will collect, use, share and keep personal data needed for us to deal with your enquiries and this includes keeping your records up to date and contacting you when needed.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
CCTV We use CCTV for the safety and security of our customers and employees throughout our branch network and offices. This may capture personal data such as your image, likeness and voice.

Using CCTV in our offices and branches is necessary for our legitimate business interests. It helps us provide a safe and secure environment for people who visit us or carry out business in our premises. It also supports us in detecting and deterring any criminal activity.

Footage may be reviewed by ourselves, or passed to police or law enforcement agencies upon request following any incidents relating to the security and/or safety of individuals and to assist with any ongoing crime investigations.

You have the right to object to us processing your personal data in this way.

Legitimate interests
Communicating with you via our various channels We will use your personal data to communicate with you and keep you up to date on the progress of your application(s). This includes via the telephone, email, live chat and social media.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Competitions, prize draws and interactive features We use personal data to manage and run competitions/prize draws for customers and the wider public.

When we collect personal data for this reason, we use it to administer the competition/draw and notify the winner. If we wish to use the data for any other purpose this information will be provided at the time.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Informing you of our community events and initiatives We will use your personal data to enable you to register to receive updates about our community activities or other events we are involved in. Consent
Making checks regarding your financial status Sometimes, we’ll need to share your personal data with a credit reference agency (CRA) to verify your identity as part of an application for a job or role with us for compliance with our legal or regulatory requirements.

We do this to:

    • Verify your identity as part of the application process for a job or role with us.
    • Assess your creditworthiness.
    • Check the information you’ve provided to us is accurate.
    • Prevent criminal activity and financial crime including fraud and money laundering.

When we ask a credit reference agency to do a search on our behalf, this may leave a search footprint on your credit file that may be seen by other lenders.

Information about any financial associations will be shared with other lenders if either of you make a credit application in the future – whether it’s in just your name or together with someone else. We also receive and use information about your existing financial associations as part of our decision-making process.

There are three key credit reference agencies that we use. Take a look at their Credit Reference Agency Information Notices (CRAINs) to find out more about them, the data they hold (and for how long), the way they use and share your information, how they prevent fraud and your data protection rights.

You can find out more about CRAs below:

Contract
Managing your applications for a job or role with us We will collect, use, and keep personal data needed for us to process any applications for a job or role that you make with us. This allows us to keep you informed of progress and whether you have been successful.

You have the right to object to us using your personal data for legitimate interests.

Contract, Legitimate interests
Meeting our legal and regulatory obligations We’re required to collect and use your personal data in a number of circumstances to meet our legal and regulatory obligations.

These include using your personal data to carry out a range of activities that ensure we comply with the requirements set out by our regulators (e.g. Financial Conduct Authority – FCA – and Prudential Regulation Authority – PRA) and in relevant legislation (e.g. Data Protection Legislation and Anti-Money Laundering Regulations). We also disclose information to HMRC and other government bodies when we are required or permitted to do so.

Legal obligation
Preventing and detecting fraud and financial crime We use and share your personal data with fraud prevention agencies to help prevent financial crime. If required for fraud or criminal investigation reasons, we (and the fraud prevention agencies) may also allow law enforcement agencies to access and use your personal data.

We have a legal obligation and legitimate interest to check people’s identity, and identify and prevent financial crime including fraud and money laundering. Sharing your personal data in this way, when necessary, allows us to protect your financial security as well as that of our other members and customers. It also makes sure that we’re complying with the law.

You have the right to object to us using your personal data for legitimate interests.

Legal obligation, legitimate interests
Profiling There may be some circumstances where we use your personal data for profiling.

Profiling is used to make automated decisions. This is where we combine your personal data with information about others so that we can:

  • Understand trends, traits and behaviours.
  • Make predictions about how you might use our products and services in the future.
  • Analyse data to improve our service and generate alerts (e.g. where we suspect that you may be the victim of financial crime).

Profiling your personal data alongside other members and customers also helps us to ensure that we’re providing a consistent service and giving people the best products and advice at the right times.

We’ll always make sure the way we process your information is safe and not unfair to you. Where possible, we’ll keep your details anonymous and use your information only to produce statistical reports. This way, you will not be identifiable from the data.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Social media We want you to get the most out of your relationship with us so we use social media and websites to let you know about jobs and roles we may offer and to communicate with you if you contact us through this method.

We will never agree to social media companies or websites sharing or selling your information to third parties

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Statistical analysis and reporting We use personal data as in order to carry out Data Analysis, Trends and Statistical Reporting. We will only do this using personal data where necessary and if we are unable to use anonymous data.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Statistical analysis and reporting We use personal data as in order to carry out Data Analysis, Trends and Statistical Reporting. We will only do this using personal data where necessary and if we are unable to use anonymous data.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Testing our systems and processes In order to improve our services and systems, we may use your personal data for testing our systems so that we can make them even better.

Using your personal data for testing is necessary for our legitimate business interests as it allows us to maintain and improve the security, integrity and performance of our systems.

We have stringent processes in place to keep your personal data safe and we won’t use it in a way that’s unfair to you. When we are unable to use ‘masked’ or anonymous data (i.e. that which doesn’t identify you), we will aim to :

  • Always do this in a secure and controlled environment.
  • Only use the minimum amount of data necessary for the testing required.
  • Only use carefully selected specialist service providers, where necessary.
  • Only hold your information in this way for as long as needed to carry out testing.

You have the right to object to us using your personal data for legitimate interests.

Legitimate interests
Verifying your identify We have a regulatory requirement to confirm the identity of anyone applying for a job or role with us. This upholds our legal obligation to complete necessary due diligence checks to make sure we know our potential employees, helps prevent and detect fraud, prevents identity theft and protects our business. Contract, legitimate interests

How do we use special category data?

We’ll only ask for this type of personal data when we absolutely need to and use it for limited circumstances as set out below. You should be aware that it is not a condition of any offer of employment with us that you agree to any request for consent from us.

What Why
Criminal convictions (spent or unspent) and offences We will only use information relating to criminal convictions or alleged criminal behaviour where the law allows us to do so.

This can arise when it is necessary for us to comply with the law or for another reason where there is a substantial public interest in us doing so.

Less commonly, we will, if necessary, use information relating to criminal convictions or alleged criminal behaviour where it is necessary in relation to legal claims, where it is necessary to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.

Physical or mental health or disability status To to consider whether we need to provide appropriate adjustments during the recruitment process, for example whether adjustments need to be made during a test or interview.

To assess whether a work permit and a visa will be necessary for the role and for equality monitoring and reporting.

We will not use your data for any purpose other than the recruitment exercise for which you have applied.

Race or national or ethnic origin, religion or beliefs, sexual orientation, etc. To ensure meaningful equal opportunity monitoring and reporting.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance where this is required or permitted by law.

Automated decision making

Recruitment processes are not based solely on automated decision-making. However, there may be circumstances where we use automated decision making using your personal data. We use automated decision making to carry out background and financial crime checks on applicants for roles with us and for new employees in order to meet our legal and regulatory obligations.

This process involves reviewing your personal data against that held by Credit Reference Agencies (CRAs). When we do this the CRAs will keep a record of our search, whether or not you are successful with the application. This is known as a credit footprint. They do this so that you can see who has looked at your credit report, when it was looked at and why. This record may also be seen by other lenders and could affect your ability to obtain future credit.

We will use automated decision making:

  • To confirm and verify your identity
  • To check your details against financial crime databases and fraud databases
  • To determine your financial status and suitability for a role or job with us.

We also use automated decision making to:

  • Understand trends, traits and behaviours.
  • Analyse data to improve our organisation.

What information do we use to make these decisions?

For automated decision making, we use information that we’ve collected or hold about you from your applications. Sometimes, we might also use information from other sources such as credit reference or fraud prevention agencies – but we check this against the information you give us.

Who has access to your personal data?

There may be occasions where we need to share your personal data with external partners or organisations. The table below provides details on who we share personal data with and the reasons why:

Who Reason
Credit reference agencies
  • To verify your identity and combat fraud and financial crime.
Employers (past and present)
  • To confirm your employment history and obtain references.
Employment agencies
  • To inform them of the progress of your application, including if a position has been offered and accepted if the application came from them.
Fraud prevention agencies (e.g. CIFAS and National Hunter)
  • To carry out checks for the purposes of preventing fraud and money laundering
  • To verify your identity.
  • To prevent fraud and meet our regulatory obligations.
HM Treasury’s Office of Financial Sanctions Implementation (OFSI)
  • To assess your suitability for roles and jobs with us.
  • To prevent fraud and meet our regulatory obligations.
Job Train
  • To process your online applications for roles and jobs with us.
Law enforcement Agencies
  • To assist with any ongoing investigations relating to the security and/or safety of individuals.
  • For financial crime and fraud prevention purposes.
Medical professionals or representatives
  • To obtain and verify any information or confirm a pre-existing medical condition you have informed us of where this is a requirement for your role which you have applied. We will only do this where we have you your explicit consent to do so.
  • To manage occupational health referrals.
Referees
  • To obtain a reference as part of the recruitment process.
SHL Ability Testing
  • To conduct online psychometric assessments and online testing on our behalf as part of the recruitment process.
Social Media providers
  • To communicate with you and answer your queries submitted via social media.
  • To show you targeted advertising, where applicable.
Yorkshire Building Society and its subsidiary companies
  • For fraud prevention, administration and for legitimate business purposes (e.g. updating personal records, handling queries and complaints).
  • To deal with your enquiries, requests and further applications.
  • To manage our ongoing relationship with you as an applicant.
VST To provide documents in alternative formats.

Transfers of personal data outside the EEA

There may be some circumstances where we may transfer your personal data to countries outside the UK when:

  • We’re required or permitted to by law or regulatory requirements.
  • We’re sharing data with a third party to support us in the management of your account.

When working with our suppliers and/or transferring personal data to countries outside the UK, we take appropriate steps to ensure that there is adequate protection and controls are in place and that data protection legislation is followed.

This could be by:

  • Ensuring that we transfer personal data to countries that we believe have comparable data protection legislation to the UK.
  • Putting suitable clauses in our contracts to ensure that organisations take appropriate steps to comply with UK data protection laws or the equivalent.

If you would like more information on this, please contact us

How do we protect your personal data?

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How long do we keep your personal data?

Our aim is to keep your personal data only for as long as we need to, in order to manage your relationship with us and comply with legal and regulatory requirements. When determining retention periods, we consider the following:

  • The maximum or minimum retention periods identified by the law or regulatory guidance
  • Our contractual rights and obligations
  • Customer expectations, the nature of your relationship with us and the types of accounts and services you have with us.
  • Current or future operational requirements
  • Forensic requirements, for example, the potential need to access data no longer actively used in order to manage or respond to complaints and disputes
  • The risks involved in retention, deletion and removal
  • The cost of maintaining, storing, archiving and retrieving data
  • The capability or restraints of our systems and technology.

The table below provides details on how long we will retain your personal data for:

Category Retention Period
CCTV We will retain CCTV footage for up to 3 months from the date taken in relation to CCTV images at our Head Office sites and branch network for crime prevention and public safety purposes.
Competitions/Prize Draws We will keep details of the competitions and/or prize draws you enter for up to 6 months after the end of the competition and/or prize draw, unless otherwise stated in the competition/prize draw information we provide at the time.
Complaints If you make a complaint to us, we will retain your personal data in relation to the complaint for up to 6 years after the closure of a complaint to meet our legal and regulatory obligations.
Employee Records (Successful applicants) If you apply for a role or job with us and are successful and accept an offer, we will retain employee records (References, Credit Checks Qualifications, Contract, Changes to Contract, Training, Assessments, Disciplinary, Redundancy, Resignation, etc.) for up to 6 years from the date our relationship ends.
Fraud prevention data Fraud Prevention Agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held by us for up to 6 years from the end of our relationship with you.
General enquiries If you contact us with a general enquiry, via email, phone, post or in personal (e.g. in Branch), we will retain your personal data for up to 6 months from the date the information was obtained in order to allow time for us to respond to further queries from you.

If you have provided consent to receiving marketing from us, we will retain your personal data for up to 3 years from date the information was received.

Job Applications (unsuccessful applicants) If you apply for a job or role with us, but are unsuccessful, we will retain any job applications for up to 1 year from the date the unsuccessful candidate is notified to allow us to deal with any queries.
Marketing preferences If you have opted to receive marketing information from us, we will retain your preferences for up to 3 years in relation to the methods you have chosen to be contacted unless you tell us otherwise.

 

We may keep your personal data for longer than indicated if we cannot delete it for legal, regulatory or technical reasons. We may also keep it for research or statistical purposes. If we do, we’ll make sure that your privacy is protected and only use it for those specified purposes.

What rights do you have in relation to your personal data?

You have a number of rights in relation to the personal data we hold about you. These rights are not always absolute and certain conditions may apply.

If the table below is partially obscured, you may need to scroll right to see more.

Right Description
Request to be informed about how we process your personal data. You have the right to be informed about the collection and use of your personal data.
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request rectification/correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object.
Object to processing of your personal data. You can object to us using your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal data to another party. In certain circumstances, you have the right to ask us to transfer a copy of some of your personal data to you or to a new data controller (e.g. another financial provider or comparison website).
Right to withdraw your consent Where we rely on your consent to process any of your personal data, you have a right to withdraw that consent at any time. This will not affect any use we have made of the information before you withdrew your consent.
Object to automated decision making /Profiling In certain circumstances, you have the right to ask for an automated decision (such as a lending decision made by a machine) to be reviewed by a human.
Complain to the Regulator You have the right to make a complaint to the Supervisory Authority. In the UK, this is the Information Commissioner’s Office (ICO). You can find out how to contact the ICO below.

 

You can request any of these rights by writing to us at the address at end of this notice, emailing us at HRServices@ybs.co.uk or calling us on 0345 1200 100.

Accuracy of your personal data

Whilst we make every effort to ensure your data is correct, we kindly request that you help us by reporting any inaccuracies or discrepancies at the earliest opportunity. It your responsibility to keep us informed of any change of your circumstances including any name changes, alternative contact details or change of address.

Changing your marketing preferences

If you have informed us that you wish to receive marketing information from us, you can change your marketing preferences and how we contact you in relation to new products and services by calling 0345 1200 100, by calling into our branches or agencies, or by email – HRServices@ybs.co.uk

We will not sell your details to other companies, but we may use marketing agents to act on our behalf if you have opted to receive marketing information from us.

Cookies

In order to improve your online experience with us, we use cookies on our website. To find out more about cookies, the types of cookies we use, how we use them and how to manage your preferences, please see our cookies section at https://www.ybs.co.uk/cookies/index.html

Data Protection Officer (DPO) details

If you have any concerns about how we collect, use, share or keep your personal data, you think there has been a breach, or you have a question or concern about anything in this notice, you may contact our Data Protection Officer (DPO) using the details below:

Data Protection Officer
Yorkshire House
Yorkshire Drive
Bradford
West Yorkshire
BD5 8LJ

dpo@ybs.co.uk

Contacting the Information Commissioner’s Office (ICO)

You have a right to complain to the Information Commissioner’s Office (ICO) if you have any concerns about how we collect, use, share or keep your personal data. You may contact them at:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Web: ico.org.uk

Updating this notice

We regularly review and, where necessary, update our privacy information contained within this notice. This was last updated on 9 September 2020.

This notice is available in alternative formats. Please call us on 0345 1200 100.

Want to join the team?

Apply Join Our Talent Community