Bacs cookie policy

We use cookies on our website to provide you with the best possible online experience. By continuing to use this site, you give consent for cookies to be used. Please read our cookie policy for more information and details on how to change your preferences. Cookie Policy.

Privacy statement

 

Last updated: 21 May 2018

Bacs Payment Schemes Limited (Bacs) understands the importance of protecting your personal information.

This privacy policy sets out how and why we collect and use your personal information and your rights in relation to your personal information, when you interact with us via the Bacs website only.

If you need any further details, have a query or complaint about our use of your personal information, please contact our Data Protection Officer:

  • by email at privacyaware@bacs.co.uk or
  • by post at 2 Thomas More Square, London, E1W 1YN.

We review our privacy policy regularly. Where the policy has been updated this will be clearly identified by reference to the date of the policy above.

Where we provide a link to a third party website, Bacs accepts no liability for the privacy practices or content of that website.

Where your personal information is collected by us (e.g. by completing the online registration form) it will be stored on our servers located in the UK.

    How we obtain and collect your personal information

  • Visiting our website

    When you visit our website, we place cookies on your device (e.g. computer hard drive, mobile phone) which collect unique identifiers relating to your device automatically. We do this so that we can improve our website’s functionality and performance. For example, enabling the site to load quickly, making it easier to move between different pages in the password protected area and remembering you have been shown a one off message. We also place tracking code on some of our microsites, as we are required to monitor usage as part of our commitment to support the  payment service provider that sponsor individual users, enabling them to comply with the Bacs Codes of Conduct.


    Our cookie policy has more detail.


    Registration with Bacs and subsequent login

    If you are a Bacs service user, Bacs Participant, Agency bank, Cash ISA Transfer Service Participant, Bacs Approved Software Supplier, Bacs Approved Bureau  (each a Stakeholder), you can register with us online so that we can send you a unique login enabling you to access certain sections of our website that contain Stakeholder relevant information only. Registration requires you to provide your name, email address and employer organisation.  You can also subscribe to receive email communications from Bacs using the registration form, this is optional. We may also use your registration information to send you surveys. For more details on subscribing and unsubscribing and surveys see the sections below.


    Subscribing and unsubscribing for email communications

    We issue email communications about changes to our guide and rules, service updates, operational and product information, and payments industry news. To receive these email communications you need to subscribe via our website choosing which communications you would like to receive as part of that process. Subscription requires you to provide as a minimum, your name, email address and Stakeholder type. We will only send you the email communications you have registered for.

    If you wish to unsubscribe at any time you can do so via the unsubscribe form on our website or using the unsubscribe link at the bottom of each email communication. You can either unsubscribe from all email communications or individual email communications that you no longer wish to receive.


    Request forms

    You can request information and help from Bacs depending on your interests or needs using our request forms. Each form captures the personal information needed to send you the information you have requested.  These are:


    Direct Debit for Dummies

    Bacs supports organisations who use its Direct Debit service by offering training aids about the service. If you wish to receive a copy / copies of Direct Debit for Dummies you may do so by using the relevant form on our website.


    Becoming a Bacs Participant, Electronic Payments Affiliate, Bacs Approved Software Supplier, Bacs Accredited Training Provider

    If you are interested in becoming any of the above you can find out more by contacting us using the relevant online form and providing your contact information so that we can send you information to help you understand the process and requirements.


    Marketing help

    Bacs supports organisations wishing to increase the take up of its Direct Debit and Bacs Direct Credit services by providing a free online marketing toolkit and email access to our marketing specialists.


    If you wish to access the marketing toolkit you are required to provide your contact details on the online registration form.


    Separately there is an online form so you can provide your contact details and a brief description of the support you need.  Once submitted the form is received directly by Bacs marketing team individuals. This enables them to contact you directly to provide guidance.


    Request a call

    When you complete the request a call form, the contact information provided in the form is captured on the server for this website and emailed to our Service Desk so they can contact you in respect to your request.


    Contact us

    Any individual can contact Bacs by using our contact us form. If you wish to get in touch with us in this way, we ask you to provide as a minimum, your name, email address and information about your enquiry so that we can help you.


    The Service User’s Guide and Rules to the Direct Debit Scheme microsite

    We have a password protected areas of our website available to eligible registered users only via their login provided on registration. It contains user specific guide and rules to the Direct Debit Scheme. Bacs is required to monitor the use of the guide and rules as part of its commitment to support the payment service provider that sponsor individual users, enabling them to comply with the Bacs Codes of Conduct.


    Recruitment

    We advertise opportunities to work for Bacs on our website and ask that if you are interested, to send your CV and a covering letter to us by email. We use the personal information you send us to evaluate your suitability for the advertised role and communicate with you about possible next steps. If your application is successful we will use this personal information to make an offer of employment and commence engaging you to work for us.


    Event registration

    From time to time Bacs holds events relevant to specific audiences. The registration form captures your name personal information, which is stored on our website server. We use event registration information to secure a place, send information relating to the event and to survey attendees to obtain feedback to improve future events.


    Surveys

    From time to time we survey different groups of individuals to help develop new products and services as well as improve delivery of our existing products and services, and our website. We do this in different ways: if you are a Stakeholder, by using your personal information you provided when registering with us or requesting information using one of our online forms; and by publishing a link on our website which we encourage website visitors to click on. Completing the survey is optional. When we contact you in relation to a survey, we provide all the information you need to make a decision whether or not to complete the survey, including information about sharing your personal information with our third party survey provider and a link to their privacy policy which governs the collection and processing of your personal information collected through the survey.

    ​Who do we share your personal information with?

  • ​So that we may offer all the services available via our website, we share your personal information with the following:

    • Individual sponsoring payment service provider
    • Our key infrastructure supplier
    • Our third party service suppliers who support the delivery of these services in accordance with the contractual arrangements we have in place with them. These include:
      • ​Our website hosting supplier
      • Our website development and maintenance agency
      • Consultants who provide website management support
      • Agencies who support our communications and event activities
      • Survey service providers.

    Where required by law or competent authority we may also share your personal information with regulators, courts, government departments and law enforcement agencies. We will inform you of this before we share your personal information unless we are legally prevented from doing so.


    Bacs does not, nor do any of the third party service suppliers with whom your personal information is shared by us, transfer any of your personal information outside the European Economic Area.​​​​

    How long do we keep your personal information for?

  • ​Your personal information is kept in accordance with our data retention policy which categorises personal data and applies retention periods according to use. Retention periods are determined by reference to applicable data protection laws and the purpose for which the personal information was collected and is used. Legal and regulatory retention requirements, contractual obligations and limitation periods are also part of the retention period determination process.

    ​How we protect your personal information

  • ​Bacs understands the importance of ensuring its systems are secure from unauthorised access, use or disclosure so that emails and forms that contain your personal information are safe. It has internal policies, procedures and controls in place to ensure this.

    ​Your rights

  • ​The law entitles you:

    • To receive a copy of any of your personal information which we have collected
    • To request that we correct and / or complete personal information we have collected
    • To request that we permanently delete, stop using or storing any of your and / or restrict our use of your personal information when we no longer need it for the purpose you provided it to us
    • To object to the processing of your personal information by us unless we can demonstrate that we need to continue processing it
    •  In some circumstances to request that we transfer your personal information to a third party.

​If you would like to exercise any of these choices, please get in touch via our Data Protection Officer or use the contact us form on our website. Where we have shared your personal information with other companies, we will let them know if you exercise any of these choices.

If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner who can be contacted at www.ico.org.uk or by telephone on 0303 123 1113.