Privacy and Security

Why we, MetroBank, need your personal information and how we use it

We process the personal information you provide to us to sign up you up for an account, to confirm the company you work, and for security, identity and verification purposes to provide access to our portal for API development purposes.

To enable us to process personal information for the above purposes we must share personal information with the FCA.

Metro Bank also processes personal information for our legitimate business interests, including promoting and advertising our products and services; managing and supporting our staff and maintaining our own accounts and records. We also process personal information in the course of selling, hiring or exchanging it. 

Processing & Transfers

The personal information we hold about you is limited to that which you have provided directly to us, that which we receive from trusted third parties during eligibility checks and the provision of our service to you, or occasionally that which is publicly available. 

We are not obliged to accept an application and you may contact us to reconsider our decision.

We may occasionally send your personal information to countries (or international organisations) which the European Commission has determined do not directly meet EU Data Privacy Requirements. In these instances we protect your information by only sending personal information once we have individually risk assessed the companies involved and by using model clause contracts that are accepted by the European Commission.

Your rights

You have the rights to request from us a free copy of the information MetroBank hold about you, to have corrected any inaccurate or incomplete information. You can also request to have erased any information we may still hold that is either no longer necessary to provide our service or must be retained for regulatory reasons. You also have the right to contest the legitimacy of our processing, request the restriction or object to our processing, or ask us to transfer personal information to another data controller.
You have the right to raise an objection to processing based on non-contractual but legitimate business interests, including where we use it for direct marketing purposes. You may at any time withdraw consent for any optional uses of your information to which you have previously consented.

Further information

We retain your information for as long as required to meet our statutory legal and regulatory requirements. Where retention is based on other reasons we will retain it for no more than 7 years.

If we determine that your personal information is to be used for a purpose not already notified to you we will provide you with further information prior to processing for that new purpose.

You can exercise your rights by contacting Metro Bank Data Protection at dataprotection@metrobank.plc.uk or to "The Data Protection Officer" at our registered address.

If you are ultimately dissatisfied with our management of your information you have the right to lodge a complaint with the UK Data Protection Supervisory Authority (the Information Commissioners Office).

Data Controller – Data Protection Statement - Metro Bank PLC. Registered in England and Wales. Company number: 6419578. Registered office: One Southampton Row, London, WC1B 5HA.