8. How we use your personal data

Purpose / ActivityData TypeLawful Basis for processing
Administering and managing your mortgage, savings product or core capital deferred shares and related services.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
Necessary to perform our contract with you.
Updating your records.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
Necessary to perform our contract with you.
Tracing your whereabouts to contact you about your account.• Identifying details.
• Contact details.
• Profile data.
• Identification data.
Necessary to perform our contract with you.
Processing your application for a product or service including assessing creditworthiness.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
Necessary to perform our contract with you.
Supporting you through arrears and collections processes.• Identifying details.
• Contact details.
• Financial data.
• Profile data.
• Identification data.
Necessary to perform our contract with you.
Managing third party access, such as power of attorney.• Identifying details.
• Contact details.
• Financial data.
• Profile data.
• Identification data.
Necessary to perform our contract with you.
To manage your membership with Ecology Building Society.• Identifying details.
• Contact details.
Legal Obligation.
Establishment, defence and enforcement of our legal rights.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
Legal Obligation.
Prevention, detection and investigation of crime.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
• Criminal Data.
Legal Obligation.

Additional basis for Criminal Data.
Substantial Public Interest (preventing fraud, preventing money laundering and terrorist financing).
Identity checks, anti-money laundering checks, and checks with fraud prevention agencies.
• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
• Criminal Data.
Legal Obligation.

Additional basis for Criminal Data.
Substantial Public Interest (preventing fraud, preventing money laundering and terrorist financing).
Monitoring and record keeping.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
• Criminal Data.
• Health Data.
Legal Obligation.

Additional basis for Criminal Data.
Substantial Public Interest (preventing money laundering and terrorist financing).
Additional basis for Health Data.
Explicit Consent.
Handling data subject requests.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
• Criminal Data.
• Health Data.
Legal Obligation.

Additional basis for Criminal Data.
Substantial Public Interest (preventing money laundering and terrorist financing).
Additional basis for Health Data.
Explicit Consent.
Meeting our legal and regulatory obligations.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
Legal Obligation.
When we have to provide your information to them because some money paid to you by them should not be in your account.• Identifying details.
• Contact details.
• Financial data.
Legal Obligation.
Whistleblowing processing.• Identifying details.
• Contact details.
• Profile data.
Legal Obligation.
To test the performance of our products, services and internal processes.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
Legitimate Interest.
Management and audit of our business operations.• Identifying details.
• Contact details.
• Financial data.
• Personal information about your family.
• Profile data.
• Identification data.
Legitimate Interest.
Searches at credit reference agencies as part of applications• Identifying details.
• Contact details.
• Financial data.
• Personal information. about your family.
• Profile data.
Legitimate Interest.
market research, analysis and developing statistics in relation to understanding our customers’ needs and circumstances in order to improve our service/products.• Financial data.
• Personal information. about your family.
• Profile data.
Legitimate Interest.
Buyers and their professional representatives as part of any restructuring or sale of our business or assets.• Identifying details.
• Contact details.
• Financial data.
• Personal information. about your family
• Profile data.
• Identification data.
• How you interact with us.
• Technical data.
Legitimate Interest.
When you request that we share your personal information with someone else.• Identifying details.
• Contact details.
Consent.
When agree to a referral to a trusted third party (eg insurance).• Identifying details.
• Contact details.
Consent.
When you agree to share details about you, your property or project, including images, as part of a case study.• Identifying details.
• Contact details.
• How you interact with us.
Consent.
Direct marketing communications.• Identifying details
• Contact details
• How you interact with us.
Consent.
When it is necessary to provide additional support due to health or other circumstance, or to meet our regulatory requirements around this.• Identifying details.
• Contact details.
• Personal information about your family.
• How you interact with us.
• Health Data.
Consent.