How can we help you?

**We aim to meet the relevant timescales. Unfortunately, however, there may be unavoidable delays as the bank makes provision to deal with the coronavirus pandemic in accordance with Government guidelines.

Please note that since the implementation of GDPR there is no longer any charge for responding to data subject access requests. Please do not send any payment.

Providing your Email address and mobile number when submitting your request will allow us to provide your personal data via encrypted Email, avoiding reliance on postal services that may be impacted during this time. If your preference is still to receive a physical copy via post, then we must make you aware that this may delay receipt of your Subject Access Request.**

A Subject Access Request (SAR) is the right of an individual to request any 'personal data' we hold for them. This right is a principle of the General Data Protection Regulation, designed to regulate the processing of information from which a living individual can be identified or singled out either from the information on its own or when combined with other information.

As part of a SAR, individuals have a right to:

  • a description of the information held about them
  • be informed of the purposes the information is used for
  • be informed of the disclosures that are made or might be made
  • be informed of the source of the information,
  • Be informed of the envisaged retention period for the data
  • Be informed if their data is transferred internationally, who the recipients are, and what the adequacy mechanisms for those transfers are
  • Receive a copy of their personal information.

Examples of Personal Information you can request

The following are examples of personal information (assuming that the information in question can be linked to an identifiable, living individual):

  • contact details
  • CCTV footage
  • Complaints or customer service notes
  • Customer bank statements or related static data (e.g. the content of application forms)
  • Customer medical history
  • Customer spending preferences
  • Customer work experience history (e.g. we may hold evidence of qualifications referenced in a CV submitted to support a business lending application)
  • Employee salary details
  • Notes of meetings from employee disciplinary/grievance hearings
  • Telephone call recordings
  • Please note: The bank has a tight regulatory deadline of 30 days to meet so identifying these requests within business as usual processes and is vital in assisting us in meeting this timeframe. If you require more information about the Act and their rights, you can contact the Data Protection Office (DPO).
  • Below is a timeline to highlight the process of how a SAR is dealt with till you, the customer will receive their final outcome.

You can submit a SAR via the link below

Ask Cora

Cora can help you with a wide range of queries and show you how to do your banking.

Available 24/7

Find Cora in the mobile app, Anytime Banking or our website