Common use of HOW WE USE YOUR PERSONAL INFORMATION Clause in Contracts

HOW WE USE YOUR PERSONAL INFORMATION. 26. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 2642. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, other administrators, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 1200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 2630. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s It is necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 2625. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-money- laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 2628. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - • It’s necessary for the performance of a contract you have or have requested to enter into, - • If we have a legal obligation, - • If we have a legitimate business interest where it does not have an unfair impact on you, - • If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - • Where we believe you or another person is at risk and we need to protect your or their vital interest, - • Where it's ’s in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, market research agencies and providers of information technology services. You have the right to: - • be informed about processing of your personal information, - • have your personal information corrected if it is inaccurate or incomplete, - • object or restrict the processing of your personal information, - information,- have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - • request access to your personal information and details about how we process it, - • move, copy or transfer your personal information also known as '‘data portability'’, - • challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - • complain to the Information Commissioner's ’s Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 26We will use your information in a way that is consistent with the data protection rules. Yorkshire Building Society decides what As set out in our customer terms and conditions we use your personal details to supply electricity to your site(s). We will process your information for a number of reasons: • For the purpose of supplying you with electricity and to ensure that the correct supply is provided • To enable us to comply with our contractual, legal and regulatory obligations • For law enforcement purposes, where it is necessary • To prevent and detect energy theft • To process payments and financial transactions • To collect bill payments and collect money owed to us • To enable us to investigate any complaints fully • To protect individuals and sites from harm and injury, where necessary • To allow us to communicate and provide services and supply relevant to your needs • For research and statistical analysis so we can plan our services and complaints monitoring Sharing Information In order to supply you with electricity or due to legal or regulatory reasons, we need to collect pass relevant information about you, how we use it, who we share it with you to other people and how long we keep itorganisations. This makes us Under the data controller of protection rules these providers are obliged to use your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details safely for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do soyour request. The protectionkey third party organisations that could have access to your information are Data Network Operators (DNOs), security Data Aggregators, Data Collectors, Meter Operator Providers (MOPs), Local Network Operators, Data Collection Company (DCC), National Grid, Elexon, Meter Repair, installation and confidentiality of maintenance companies, brokers, your old or future supplier, Police and TRAS (the energy theft detection agency), debt management agencies, direct debit scheme providers, where requested the Citizens Advice and the Energy Ombudsman, the Information Commissioner, ECOES, Government Departments, Ofgem. Your personal information are important will not be disclosed to us third parties unless there is a valid and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detectedlegitimate, you could be refused certain serviceslegal, finance contractual or employment in regulatory reason for the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at alldisclosure. We will share information with one or more Credit Reference Agencies, now and in the future, do not sell personal data to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money launderingthird parties. Transferring Information outside European Union/ Overseas We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability'overseas where we are required to do so by the law or regulatory requirement. However, - challenge automated decision making including profilingif there are other non-legal, which regulatory or contractual situations where there is the automated processing of a specific requirement to transfer your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store details your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can consent will be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 300. Please quote your account numbersought first.

HOW WE USE YOUR PERSONAL INFORMATION. 2624. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-money- laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, other administrators, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 1200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 2636. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, other administrators, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 1200 300. Please quote your account number.

HOW WE USE YOUR PERSONAL INFORMATION. 2621. Yorkshire Building Society decides what personal information we need to collect about you, how we use it, who we share it with and how long we keep it. This makes us the data controller of your personal information for data protection purposes. We will use the personal information obtained from you and additional information obtained in the course of opening and managing your account. This includes, but is not limited to, name, address, identification, account transactions and communications and where relevant sensitive information, credit reference data, financial crime data, health details, nationality and legal proceedings. We and your employer or their agent may share personal information for the purposes of administering this Plan, including your bank details for the purpose of transferring funds electronically. If we sell or transfer all or part of our business, we may share or transfer our customer records as part of the proposed/actual sale or transfer. However, we will only do so under a contract or where we have a legal obligation to do so. The protection, security and confidentiality of your personal information are important to us and we put in place appropriate safeguards to manage this. The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment in the future. Yorkshire Building Society and its subsidiary companies may disclose information for fraud prevention, lawful purposes, account administration and for general business purposes (e.g. updating customer records, handling customer queries and complaints). If you are not listed on the electoral roll or you have recently moved house, we may need further proof of your identity. Failure to obtain proof may lead to a delay in processing your instruction, or not being able to carry out an instruction at all. We will share information with one or more Credit Reference Agencies, now and in the future, to check your identity, verify the accuracy of the information you have provided, manage your account(s)/relationships with us, process your application, ensure any offers we send are appropriate to you, and prevent criminal activity fraud and money laundering. We will only use, keep and share your personal information for as long as required to meet our legal and regulatory obligations or to deal with your enquiry, administer, and manage your accounts, products, and relationship with us. After this time, we will delete your personal information in line with the requirements of the Financial Conduct Authority, Prudential Regulation Authority, Money Laundering regulations, Financial Ombudsman Service, HMRC and any other regulatory bodies. We will respect your rights to privacy and will only collect, use, store and share your personal information where a lawful purpose applies: - It’s necessary for the performance of a contract you have or have requested to enter into, - If we have a legal obligation, - If we have a legitimate business interest where it does not have an unfair impact on you, - If you have given your consent where the collection, use, storage or sharing involves special category (sensitive) personal information (e.g. health, race and religion), - Where we believe you or another person is at risk and we need to protect your or their vital interest, - Where it's in the public interest or we have been given official authority to do so. Where we transfer personal information to countries outside the European Economic Area (EEA) this is always done under a contract which includes appropriate safeguards for the security and confidentiality of your personal information, with your consent, or where permitted by the Data Protection laws. We may share your Personal information to (i) our external auditors and regulatory bodies including the Financial Ombudsman Service, Prudential Regulation Authority and the Financial Conduct Authority, and (ii) associate companies, tracing agents, brokers, printers, market research agencies and providers of information technology services. You have the right to: - be informed about processing of your personal information, - have your personal information corrected if it is inaccurate or incomplete, - object or restrict the processing of your personal information, - have your personal information erased subject to conditions (e.g. where the processing fails to satisfy the legal requirements), - request access to your personal information and details about how we process it, - move, copy or transfer your personal information also known as 'data portability', - challenge automated decision making including profiling, which is the automated processing of your personal information to evaluate certain things about you, - complain to the Information Commissioner's Office xxx.xxx.xx which enforces data protection laws. For more information on how we collect, use and store your information and the rights you have, please see our ‘How We Use Your Personal Information’ and ‘Your Rights and Data Protection’ booklets. These can be obtained from our website xxx.xxx.xx.xx or from one of our branches. Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email at xxx@xxx.xx.xx or by post at DPO, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx, XX0 0XX. If we have your employer’s approval, and your consent, from time to time Yorkshire Building Society may notify you of additional products and services from us, our subsidiaries, or other organisations that may be of interest to you, using any of the contact details available (mail, telephone, email, SMS). You may update your marketing preferences at any time by writing to Customer Administration, Yorkshire Building Society, Xxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxx, Xxxxxxxx XX0 0XX or by telephoning 0345 1 200 300. Please quote your account number.