Adult woman visiting her parents in the city

Our Privacy Notices

We’re committed to protecting your privacy and being transparent about how your data is handled across our website and services.

Our privacy notice describes how Harpenden Building Society (the Society, us, we) will deal with your personal data. Your personal data is data from which you can be identified and that relates to you. Under UK data protection law we are considered to be the Data Controller of your personal data, because when you deal with us, we decide how and why it is processed.

The term ‘processing’ means everything we do with your personal data from its collection, right through to its destruction or deletion when we no longer need it. This includes, for instance, collecting your personal data from you, or obtaining it from other organisations, using, sharing, storing, retaining, deleting, destroying, and transferring it to third parties, possibly overseas. We explain in this privacy notice how and why we process your personal data, and how we protect it.

We have a separate privacy notice for children that provides this information in a more child-friendly way.

This privacy notice may be updated from time to time so please check for updates on this website to make sure you are aware of how we currently process your personal data.

View our privacy notice here

View our children’s privacy notice here

View our candidate privacy notice here

View our broker privacy notice here

View our cookie policy here

Key facts personal information

As of the 25th May 2018, a new data privacy law was introduced in the UK. As a result, we have published a new Privacy Notice to make it easier for you to find out how we use and protect your information.  When you make the decision to apply for a savings or mortgage product with us, you are entrusting us with your personal information and it is important that we keep this safe.  It is also important that you understand what rights you have when it comes to how we use your information.

This short notice is intended to outline some key facts about the handling of your information.  We do have a longer form Privacy Notice which is accessible on request or on our website.

Whilst this notice will give you key facts, you should read the other documents which we refer to in this short notice. Our notices may be changed from time to time so please check for updates on our website to make sure you are aware of how we currently process your personal information.

View the download here for more information

Credit Reference Agency Information

The PDF document below describes how the three main credit reference agencies Callcredit, Equifax and Experian, (also called “credit reference agencies” or “CRAs” in this document) each use and share personal data (also called ‘bureau data’) they receive about you and/or your business that is part of or derived from or used in credit activity.

Please note:  you shouldn’t think of this document as a complete record of all the personal data each CRA may hold and process, as each has a number of different business functions running through it. To find out more about each CRA’s other businesses, services and personal data processing, go to the website links provided at Section 14 below.

This document answers these questions:

  1. Who are the credit reference agencies and how can I contact them?
  2. What do credit reference agencies use personal data for?
  3. What are the credit reference agencies’ legal grounds for handling personal data?
  4. What kinds of personal data do credit reference agencies use, and where do they get it?
  5. Who do credit reference agencies share personal data with?
  6. Where is personal data stored and sent?
  7. How long is personal data kept for?
  8. Do the credit reference agencies make decisions about me or profile me?
  9. What can I do if I want to see the personal data held about me? Do I have a ‘data portability’ right in connection with my bureau data?
  10. What can I do if my personal data is wrong?
  11. Can I object to the use of my personal data and have it deleted?
  12. Can I restrict what the credit reference agencies do with my personal data?
  13. Who can I complain to if I’m unhappy about the use of my personal data?
  14. Where can I find out more?

View the download here for Credit Reference Agency Information