Privacy Policy

Last Updated: 20 February 2026

1. Our Commitment to Your Privacy

At Westerncresthorizon, we take the privacy and security of your personal information seriously. As a mutual building society, we answer to our members, not shareholders, and protecting your data is a fundamental part of that responsibility. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.

2. What Information We Collect

We may collect the following types of information about you:

• Personal Details: Your full name, date of birth, home address, email address, phone number, and National Insurance number.
• Identification Documents: Passport, driving licence, or other government-issued ID that we're required to verify by law.
• Financial Information: Account numbers, transaction history, income details, credit history, and information about your other financial arrangements.
• Technical Information: IP address, browser type, device information, and how you interact with our website and mobile app.
• Location Data: With your permission, we may collect location information from your phone to help prevent fraud.

3. How We Collect Your Information

We gather information in the following ways:

• When you open an account or apply for a product with us
• When you use our website, mobile app, or online banking
• When you speak to our customer service team by phone, email, or secure message
• When you take part in surveys or give us feedback
• From credit reference agencies and fraud prevention organisations, where appropriate

4. Why We Process Your Information

We use your information for the following reasons:

• To provide the banking services you've asked for, including processing payments and managing your accounts
• To verify your identity and comply with anti-money laundering regulations and other legal requirements
• To detect and prevent fraud, and to keep your accounts secure
• To comply with our legal and regulatory obligations as an FCA-authorised firm
• To improve our products, services, and the way we communicate with you
• To send you information about your accounts and, where you've agreed, to tell you about products that might interest you

5. Who We Share Your Information With

We do not sell your personal information to anyone. We may share your data with:

• Service Providers: Trusted companies who help us run our business — like payment processors, statement printers, and IT providers. They're bound by strict contracts and can only use your data for the service we've asked them to provide.
• Other Financial Institutions: When needed to complete payments or transactions you've asked us to make, including Faster Payments and international transfers.
• Regulators and Law Enforcement: When we're legally required to do so, such as to the Financial Conduct Authority, HM Revenue & Customs, or the police.
• Credit Reference Agencies: To assess applications, manage accounts, and prevent fraud.
• With Your Consent: In any other circumstances where you've given us clear permission to share your information.

6. How We Protect Your Information

Keeping your data safe is a priority. We have a range of security measures in place, including:

• Strong encryption to protect data when it's being transmitted and when it's stored
• Multi-factor authentication to make sure it's really you logging in
• 24/7 monitoring of our systems to detect and respond to suspicious activity
• Strict access controls so only authorised staff can see your information
• Regular independent security audits and testing

7. Cookies

Our website and mobile app use cookies and similar technologies to function properly, understand how you use our services, and improve your experience. You can manage your cookie preferences through your browser settings, though some features may not work correctly if you disable essential cookies.

8. Your Rights

Under data protection law, you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct any information that's wrong or incomplete
• Ask us to delete your information in certain circumstances (though we may need to keep some data to meet legal requirements)
• Object to certain types of processing, including direct marketing
• Withdraw your consent at any time where we're relying on it
• Ask us to transfer your data to another provider in a machine-readable format

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We'll respond within one month. There's no charge for making a request.

9. How Long We Keep Your Information

We keep your personal and financial information for as long as you're a member and for a period afterwards as required by law and our regulatory obligations. How long we keep specific types of data depends on what it is and the legal rules that apply. Once we no longer need your information, we'll delete it securely.

10. Children's Privacy

Our services are intended for people aged 18 and over. We do not knowingly collect personal information from children. If we become aware that a child has provided us with information, we will delete it promptly.

11. International Data Transfers

Most of your information is stored and processed within the UK. On the rare occasions we need to transfer data outside the UK, we make sure appropriate safeguards are in place to protect your information to the same standard required by UK law.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. If we make significant changes, we'll let you know by posting a notice on our website, through our app, or by email. Continuing to use our services after a change means you accept the updated policy.

13. How to Contact Us

If you have questions about this policy or how we handle your data, please get in touch:

Westerncresthorizon
Data Protection Officer
Email: [email protected]
Address: 1 Victoria Road, Leeds, LS1 5AA, West Yorkshire

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.