Legal
Privacy Policy
Last updated: 24 June 2026
1. Overview
Beckham Brown Clark plc ("BBC", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you use our websites, mobile applications, and banking services.
This Privacy Policy applies to all individuals who open an account with us, use our digital services, or interact with us in connection with any of our financial products. It does not apply to information processed by third parties under their own privacy notices.
Beckham Brown Clark is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority (FCA Register number: 119278). We are registered with the Information Commissioner's Office (ICO) as a data controller.
We may revise this Privacy Policy from time to time. If changes materially affect your rights, we will notify you 30 days in advance by posting notice on our website or by email.
2. Information We Collect
We collect personal information from you directly, from third parties, and automatically through your use of our services. Categories include:
- Identity information: Full name, date of birth, government-issued ID, National Insurance number or equivalent tax identification number, signature, and photographs for identity verification.
- Contact information: Home address, email address, telephone number, and correspondence history.
- Financial information: Bank account and sort code details, card numbers, balances, transaction history, income, credit history, and funding source information.
- Transaction data: Details of payments you make and receive, account statements, dates and amounts, merchant information, and order tracking data.
- Technical data: IP address, browser type and version, device identifiers, time zone, operating system, and data collected via cookies and similar technologies.
- Usage data: Information about how you navigate our website and app, including pages visited, search queries, and interaction logs.
- Communications: Records of your correspondence with us, including call recordings, chat logs, and email exchanges with our support team.
- Verification data: Credit reference checks, fraud screening results, sanctions list checks, and politically exposed person (PEP) checks as required by law.
- Inferred data: Risk and credit assessments, fraud scores, and preferences inferred from your use of our services.
3. How We Use Your Information
We use your personal information for the following purposes:
- To provide and manage your account: Processing transactions, maintaining your account, and providing you with statements and records.
- To verify your identity: Complying with Know Your Customer (KYC), Anti-Money Laundering (AML) regulations, and fraud prevention obligations.
- To communicate with you: Sending service notifications, security alerts, account updates, and responding to your enquiries.
- To personalise your experience: Tailoring product recommendations and marketing offers based on your profile and history (where you have consented).
- To improve our services: Conducting research, analysis, and testing to improve our products and digital platforms.
- To comply with legal obligations: Meeting regulatory requirements, responding to legal processes, and fulfilling our obligations to the FCA, PRA, and other regulators.
- To detect and prevent fraud: Protecting you and BBC from unauthorised transactions and financial crime.
- To manage risk: Assessing creditworthiness, managing our exposure, and performing stress testing.
Our Lawful Basis
We process your data on the following legal bases under UK GDPR:
- Contract: Processing necessary to perform our contract with you.
- Legal obligation: Processing required by applicable law or regulation.
- Legitimate interests: Processing for our legitimate business interests (e.g., fraud prevention, improving services) where not overridden by your rights.
- Consent: Where we have obtained your explicit consent (e.g., marketing emails).
5. How Long We Store Your Information
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:
- Account data: For the duration of your account plus 7 years after closure (as required by financial regulations).
- Transaction records: Minimum 6 years under the Financial Services and Markets Act 2000.
- Identity verification documents: 5 years from the end of the business relationship (AML regulations).
- Marketing data: Until you withdraw consent or 3 years of inactivity, whichever is sooner.
- Technical and usage logs: Up to 12 months.
When we no longer need your data, we will securely delete or anonymise it.
7. Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access
Request a copy of all personal data we hold about you (Subject Access Request).
Right to rectification
Ask us to correct inaccurate or incomplete personal data.
Right to erasure
Request deletion of your data where we no longer have a legal basis to hold it.
Right to restriction
Ask us to suspend processing your data in certain circumstances.
Right to portability
Receive your personal data in a structured, machine-readable format and transfer it to another organisation.
Right to object
Object to processing based on legitimate interests or direct marketing.
Rights re: automated decisions
Not be subject to solely automated decisions that significantly affect you without human review.
Right to withdraw consent
Withdraw consent at any time where we rely on it as our legal basis.
To exercise any of these rights, contact our Data Protection Officer at dpo@bbclark.com or in writing to: Data Protection Officer, Beckham Brown Clark plc, 1 Clark Square, London EC1A 2BB.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at Support@bbclark.com and we will promptly delete it.
9. International Transfers of Personal Information
Your personal data is primarily stored and processed within the United Kingdom. Where we transfer data outside the UK, we ensure adequate safeguards are in place, including:
- UK adequacy regulations recognising the destination country's data protection standards.
- Standard contractual clauses approved by the ICO.
- Binding corporate rules within the BBC group.
10. How We Protect Your Information
We implement industry-standard technical and organisational security measures, including:
- AES-256 encryption for data at rest and TLS 1.3 for data in transit.
- Multi-factor authentication and role-based access controls.
- Regular penetration testing and vulnerability assessments.
- 24/7 security operations monitoring and incident response.
- Annual staff data protection training.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.
11. Contact Us
Data Protection Officer
Beckham Brown Clark plc
1 Clark Square, London EC1A 2BB
Email: dpo@bbclark.com
Phone: 0800 096 9779