Please read this information carefully. By accessing this website you agree to be bound by all of the following terms and conditions of use. If you do not accept these terms and conditions of use and do not intend to be bound by them you must not use the website and you should exit immediately.
Copyright in the whole and every part of this website belongs to Castle Trust Bank, unless otherwise indicated, and may not be used, sold, licensed, copied or reproduced in whole or in part in any manner or form or in or on any media to any person without the prior written consent of Castle Trust Bank.
Castle Trust Bank and the Castle Trust Bank logo are registered trademarks of companies within the Castle Trust Group. Castle Trust Bank may also claim rights in other trademarks, service marks, logos and icons contained on this website.
Back to top
The information, including any financial information, contained on this website or in any document on this website is provided for information only, and does not constitute a public offer under any applicable legislation or an offer to sell (or the solicitation of an offer to purchase) any services, security or financial instrument of Castle Trust Bank and/or any of its subsidiaries in any country, nor does it constitute investment, tax, legal or any other form of advice or recommendation with respect to any such services, security or financial instrument. Information on this website relating to the price or income from securities or investments may change and go down as well as up, and past performance is not a guide to future performance. Potential investors should seek independent financial advice prior to any investment decision.
While the information contained on this website has been compiled in good faith, no representation is made as to its completeness, reliability or accuracy. Any financial reports contained on the website are only current as of the respective date contained in the particular report.
Castle Trust Bank makes no commitment, and disclaims any duty, to update or correct or to provide notice as to any error or omission in any report or other information contained on the website. Castle Trust Bank reserves the right to add, modify or delete information on this website at any time without notice. These terms and conditions of use may change from time to time and those changes will be posted on this website, and will be deemed to be accepted by continued use of the website.
All information and content on the website are subject to applicable statutes and regulations, and are furnished “as is”, without warranty of any kind, express or implied, including but not limited to implied warranties of quality, fitness for a particular purpose, or non-infringement.
Castle Trust Bank shall not be liable (whether in negligence or otherwise) to any person for any error, omission or incompleteness in the information, or reliance on the information, on the website, nor shall Castle Trust Bank be under any obligation to advise any person of any error in the information.
In no event shall Castle Trust Bank, nor any of its directors, officers or other representatives, be liable (whether under contract, tort, statute or otherwise) howsoever for any damages, losses, costs, claims, liabilities or expenses arising out of or in connection with the use of or inability to use the website or the information contained in it, even if Castle Trust Bank has been advised of the possibility of such damages.
This limitation of liability shall apply to all damages, losses, costs, claims, liabilities and expenses of any kind, whether direct or indirect and consequential, including (but without limitation) legal costs or expenses, loss of profits, loss of anticipated savings, loss of data, loss of revenue, loss of business, loss of use of money, loss of opportunity, loss of or damage to property and any third party claims. Because some jurisdictions prohibit the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you.
Please note that there is no guarantee that any e-mail sent to Castle Trust Bank will be received by us, or that the contents of the e-mail will remain confidential during internet transmission.
Back to top
Other important information
If for any reason any part of the terms and conditions of use is deemed to be unenforceable, then the validity of the remaining part shall not be affected. Any waiver by Castle Trust Bank of a breach of any provision of these terms and conditions of use shall not be deemed to be a waiver of any subsequent breach of any provision.
These terms and conditions of use and your use of the website shall be governed by and construed in accordance with English law. By using this website you accept that any dispute under these terms and conditions of use or arising out of use of this website shall be subject to the exclusive jurisdiction of the English courts to which you submit. You are responsible for compliance with any applicable laws of the country from which you are accessing the website.
Back to top
3. Information we collect
We collect the following kinds of information about you:
Information you provide to us
You provide us with certain information when you apply for one of our
mortgage, investment or consumer credit products. This includes:
- Your name, address, date of birth, email address and telephone number;
- Previous address details;
- Information about your employment;
- Credit or debit card details, bank account details;
- Personal information such as nationality and country of residence, and national insurance number;
Special categories of personal information such as
health information, but only where it is relevant to our handling of your
about any criminal convictions;
- In certain circumstances, utility bills, bank statements or copies of official identity records such as passports, driving licences or birth and marriage certificates; and
- The same details as above of other people with whom you are financially associated.
3.2 Information obtained from
credit reference agencies
We obtain your credit file from credit reference agencies TransUnion (formally known as CallCredit
Limited) (OCRF customers only), Experian and Equifax. For detailed information on the information
obtained and how it is used, see section 6.2.
3.3 Combining data
The information you give us
may be combined with other information about you that is obtained from other
sources. The combination is usually undertaken with a view to enhancing an
existing database with more information. This will include:
If you are already a
customer of a third party, that third party might wish to add contact details
you give us to the customer records that it holds about you and use that to
maintain their relationship with you or vice versa. For example, if you are
unhappy with the product you purchased we can ask the
third party (where you bought your product from) to contact you to maintain
their relationship with you and resolve your concerns. To do this, it means we must
supply them with your current contact details, so they can reach you.
- The information you give
us may be compared with data available elsewhere in the public domain such as
social media profiles or electoral role information to verify your identity or
validate the information you have provided (for example, if you make a joint
application or need to rely on a guarantor or in the context of anti-fraud
3.4 Information provided from
your use of our website
information about how often you and other users access the website, the way in
which you navigate around it, and how long you spend on particular pages.
3.5 Information from your
devices when you use our website
We gather information
about the devices that you use to access the website, such as the operating
system, hardware, software versions, browser configuration, display size,
browser configuration and connection information such as IP addresses.
recognise when you return to our site and to compile anonymous, aggregated
statistics that allow us to understand how users use our site and to help us
performance of our web server and, via a third party, allow you to leave
comments on our blog pages. You can find more information about the types of
3.6 Other information
We monitor or record your communications with us to meet our regulatory
obligations and to improve our services.
If you provide us with information about another
person, it is important you ask them if it's ok and tell them what information
you are providing and why, for example, if you make a joint application for one
of our products or services. If they do not want their information given to us,
then you should not provide it. If they would like to know more, they can have
using the contact details in section 9.
4. How we use that information
We collect information
about you for the following purposes:
Verifying your identity
The information you provide will help us to verify your identity so that
we know we are dealing with the correct person. We do this by checking the
information you give us against external databases such as the electoral roll
and your credit file.
Providing you with our services
We will use the information that we hold about you in order to enter or
look to enter into a contract with you for our services and to fulfil our
obligations under such contract. This includes contacting you to communicate
with you in connection with our services and to deal with any queries
concerning the data that we hold.
Fraud prevention and other legitimate interests
We will use the information in order to detect or prevent fraud and to
comply with our legal obligations (for example, to ensure that no-one has
fraudulently used your details or to confirm you have only entered information
about yourself). Information can be used to corroborate your details (including
using third parties to undertake those checks on our behalf).
Information is also being used, by us or third parties (see section 6),
for credit and risk assessment and management, identification, debt collection
and returning assets to you.
4.4 Securing and monitoring the relevance of our services
Information about your devices and your use of the website is used to
ensure that our service is user-friendly and to help improve the content and
user experience of the website. It also allows us to tailor the website to
match your interests and preferences better and understand who has visited
which pages to determine the most popular areas of the website.
We use your information to identify
and services that we think may be of interest to you. We will only
send you marketing messages where you have consented to
such contact, or in the case of products and services, where these are like
those that we have already provided to you.
You have the right
to ask us not to not send
you marketing messages by post, telephone or e-mail or any
combination of these at any time.
You can also do
this by contacting us (see section 9) and via the following methods:
You can withdraw your consent
for postal marketing from anyone by adding your details to the Mail Preference
Service. For more details please go to www.mpsonline.org.uk.
4.5.2 E-mail or SMS (text message)
You can unsubscribe from
receiving e-mail or SMS marketing communications by using the instructions in
any email or SMS communication we send you.
4.5.3 Telephone calls
To withdraw your consent for
live or automated calls from anyone you can add your name to the Telephone
Preference Service which is maintained at this website address:
4.5.4 Social media and online
You can configure your
advertising preferences on social media such as Facebook, Twitter, Instagram or
Pinterest by accessing your settings or preference options on the relevant
Automated decision making and
decisions made based on Profiling
We use your information for making automated decisions about you and
profiling you in order to determine your eligibility for our products and
When you apply for
credit via OCRF for the purchase of goods, the information we use to
support our automated decision is taken from information you give us about your
identity and from your credit report. Our decisions involve the use of systems,
such as our underwriting and acceptability tools to help us decide your ability to meet your financial commitments. The
decision to offer credit is automatically delivered to you without any prior
and meaningful assessment by any person.
When you apply for a mortgage loan, we decide whether to agree the loan
using information from a profile automatically produced from your credit
report. We may also make an automated
decision about the outcome of your application based on the the information you
or your broker gives us. Otherwise, we personally
review your application using the information provided to us and make a
decision regarding whether to lend and the affordability of the payments.
These decisions help us
make fair and responsible lending decisions. Where we choose to lend or offer
credit, we will notify Credit Reference Agencies (CRAs) of our decisions and
this will be noted in your credit report. If we decide not to lend, a record of
our search will be left in your credit report. These searches may affect your
eligibility for future financial service related products.
If you object to an automated decision that is
required to determine your eligibility for our services, then we will be unable
to provide you with them.
4.7 Statistical analysis
Your data may be used for any legal or general statistical analysis. This usually will not include personally identifiable information and will be used on an anonymous basis. The data used within our business helps us to judge performance of our products and services and to make improvements to how we operate.
6. Who we share information with
We will not pass your information on to
third parties except in accordance with this notice.
We will provide your information to our service
providers to allow them to assist us with delivering the products or services
that you have requested, under the following categories:
- credit reference agencies;
- crime prevention agencies;
- fraud prevention agencies;
- payment service providers;
- ID verification providers;
- debt collection agencies;
- retailers or brokers;
- business consultants;
- information technology and information security providers and
- market research and analytics companies.
We share your personal information with these service providers for the purposes of:
- providing our services to you;
- complying with our legal and regulatory obligations;
- market research;
- analytical and statistical purposes;
- maintaining a record of our relationship;
- tracing and recovery of debts.
We may also share your personal information if there is a potential or
actual change to the Castle Trust Group in the future:
- We may choose to sell, transfer, or
merge all or parts of our business, or our assets. Or we may seek to acquire
other businesses or merge with them. It is within our legitimate interests
to share your personal information in order to run, manage and/or reorganise
our business, assets and operations (including in anticipation of the same)
- During any such process, we may share
your personal information with other parties. We’ll only do this if they agree to
protect your personal information in accordance with UK data protection law
If you would like further information regarding the specific named
recipients that we share data with, please contact us by writing to the Data
6.2 Credit Reference Agencies
In order to process your application, we will perform
credit and identity checks on you with one or more credit reference agencies
(“CRAs”). We will also perform these checks periodically while you have a relationship with us.
To do this, we
will supply your personal information to CRAs and they will give us information
about you. This will include information from your credit application and about
your financial situation and financial history. CRAs will supply to us both
public (including the electoral register) and shared credit, financial
situation and financial history information and fraud prevention information.
We will use
this information to:
- Verify your identity and address;
- Assess your creditworthiness and whether you
can afford to take the product;
- Verify the accuracy of the data you have
provided to us;
- Prevent criminal activity, fraud and money
- Manage your account(s);
- Trace and recover debts; and
- Ensure any offers provided to you are
appropriate to your circumstances.
continue to exchange information about you with CRAs while you have a
relationship with us. We will also inform the CRAs about your settled accounts.
If you borrow and do not repay in full and on time, CRAs will record the
outstanding debt. This information may be supplied to other organisations by
receive a search from us they will place a search footprint on your credit file
that may be seen by other lenders.
If you are
making a joint application or tell us that you have a spouse or financial associate,
we will link your records together, so you should make sure you discuss this
with them, and share with them this information, before lodging the
application. CRAs will also link your records together and these links will
remain on your and their files until such time as you or your partner
successfully files for a disassociation with the CRAs to break that link.
The identities of the CRAs, their role also as fraud
prevention agencies, the data they hold, the ways in which they use and share
personal information, data retention periods and your data protection rights
with the CRAs are explained in more detail at www.experian.co.uk/crain. CRAIN is also accessible from
each of the three CRAs – clicking on any of these three links will also take
you to the same CRAIN document:
6.3 Fraud prevention agencies, law enforcement agencies and other non-marketing users
information we have collected for you will be shared with fraud prevention
agencies who will use it to prevent fraud, money-laundering and to verify your
we, or a fraud prevention agency, determine that you pose a fraud or money
laundering risk, we may refuse to provide the services or financing you have
requested, or to employ you, or we may stop providing existing services to you.
A record of any fraud or
money laundering risk will be retained by the fraud prevention agencies, and
may result in others refusing to provide services, financing, or employment to
you. If you have any questions about this, please contact us on the details
Your personal data can be held by fraud prevention agencies for up to six years where there is considered to be a risk of fraud or money laundering. The reports may result in other companies refusing to provide services, financing, or employment.
We share personal information with CIFAS, National Hunter, RiskNarrative and Veriff. Further details of how your information will be used by us and these fraud prevention agencies, and your data protection rights, can be found via their websites.
The personal information you provide (including your email and internet
protocol (IP) addresses) may also be copied, stored, used and licensed to
assist with identity verification, prevention of fraud and money laundering,
service delivery and process implementation.
We may share your information if we are under a duty to disclose or
share your information with HM Revenue & Customs (HMRC), who may transfer
it to the government or the tax authorities in another country where you may be
subject to tax.
may also share your personal information with any other third parties where we are required to do so by law.
The results of your identity check may also be disclosed to authorised
third parties through credit referencing, fraud prevention, risk assessment and
6.4 International transfers
We transfer, use and/or store your personal information outside of the
European Economic Area (“EEA”) and the laws of some of these destination
countries may not offer the same standard of protection for personal
information as in the UK.
We currently transfer data outside of the EEA, to:
- India for the purposes
of managing the software used to administer our products
- United States of America for the purposes of workflow management and data analytics
We may update this list from time to time and any changes will be
communicated to you via an update to this privacy notice.
Transfers to our third-party service providers
are to enable them use and store your personal information on our behalf. We will, however, put in place appropriate
security procedures in order to protect your personal information. We also
ensure that, where your information is transferred to any country outside the
EEA this is done using specific legally-approved safeguards. You can request further details and a copy of
these by contacting the Data Protection Officer (see section 9).