UK GDPR & Security Standards

Privacy & Data Protection

Comprehensive information on how personal information, digital security, and user rights are safeguarded in our banking platform.

Digital Banking Privacy Notice

While UK GDPR standards, cryptographic controls, and database Row-Level Security (RLS) are strictly enforced in our systems, this platform operates under digital banking terms. For statutory accounts and traditional branch services, please refer to B Bank S.A. guidelines.

1. How Your Data is Used

At B Bank Digital Banking, we collect and process information strictly necessary to provide and operate our digital banking platform. Data is processed for the following lawful purposes:

  • Account Administration: Maintaining your digital GBP account, issuing sort codes, account numbers, and statement records.
  • Payment Execution: Processing domestic and international transfers via atomic ledger transactions with full audit logging.
  • Identity Verification & KYC: Verifying user profiles and document numbers to meet compliance standards.
  • Security & Fraud Prevention: Detecting anomalous activity, enforcing idempotency checks, and maintaining judicial hold capabilities.

2. Protection of Personal Information

We adhere to rigorous technical and organisational measures to ensure a level of security appropriate to the risks of data processing:

Cryptographic Controls

24-character cryptographically random passwords, secure salting, and TLS 1.3 transport layer encryption.

Row-Level Security (RLS)

Database-level partition policies ensuring customers can only query and mutate their own financial records.

3. Your Rights Under UK GDPR

Under the United Kingdom General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, you have comprehensive rights over your personal data:

  • Right of Access: Request a complete copy of the data we hold regarding your account and transactions.
  • Right to Rectification: Update or rectify incomplete or inaccurate personal information through your profile or our support channel.
  • Right to Erasure ('Right to be Forgotten'): Request deletion of your personal account data where statutory retention does not apply.
  • Right to Data Portability: Obtain your transaction history and account statements in structured, machine-readable formats.

4. Cookie Policy

Our platform uses cookies and similar local storage techniques solely to guarantee a seamless and secure digital banking session:

  • Strictly Necessary Cookies: Essential for user authentication, maintaining your active session, and preventing cross-site request forgery.
  • Preference Cookies: Remembering your chosen language (English, Portuguese, Spanish, French, German, Polish) and interface theme settings.
  • Zero Third-Party Advertising Trackers: We do not sell your personal data or host third-party marketing trackers.

5. Digital Security Guidelines for Customers

Protecting your banking credentials requires joint vigilance. Follow these essential security rules:

  • Never disclose your login credentials or one-time codes to anyone—B Bank will never ask for your password via telephone or SMS.
  • Always verify the browser address bar before signing in.
  • Immediately notify our complaints or support desk if you detect unexpected transfers or unauthorised attempts.

Need to submit a Data Protection Request?

For inquiries regarding data handled in this environment, submit a request via our support desk. For statutory requests regarding B Bank S.A. accounts, visit bbank.com/privacy.

Contact Desk