Careers

Candidate & Employee Privacy Notice

What personal data we collect when you apply or work here, why we hold it, how long we keep it, who sees it, and the rights you have over it.

update Last updated 1 August 2026 list_alt 6 sections

This notice covers applicants, employees, contractors and agency workers. It sits alongside the main privacy notice, which covers customers and website visitors.

Section 01

What we collect

Only what the stage requires. We do not collect information we have no use for, and we say what each category is for.

CategoryExamplesWhen
Identity and contactName, email, telephone, address.At application.
Application contentCV, work history, qualifications, your written answers.At application.
Assessment recordsInterview notes, exercise results, scores against the criteria.During the process.
Right to workDocuments evidencing your right to work.At offer stage.
Background checksReferences, criminal records and financial probity checks where the role requires them.After you accept an offer.
Diversity dataOptional, anonymised, aggregated for reporting only.At application, entirely voluntary.
Employment recordsPayroll, tax, benefits, absence, performance.If you join us.
info

Diversity monitoring is genuinely optional

It is separated from your application before anyone assesses you, and no hiring decision has access to it. Declining to answer has no effect whatsoever.

Section 02

Why we hold it

To run the recruitment process
Assessing your application, arranging interviews, making a decision and telling you about it.
To meet legal obligations
Right-to-work checks, tax and payroll reporting, and the fitness and probity checks that regulated roles require.
To protect the institution and customers
Background screening proportionate to the role, particularly where it touches money or customer data.
To improve how we hire
Aggregate, anonymised analysis of where the process loses good candidates.
With your consent
Keeping your details for future roles, and any optional diversity data. Consent can be withdrawn at any time.
Section 03

Who sees it

  • The hiring team for the role: the recruiter, the hiring manager and the interviewers.
  • Our applicant tracking system provider, under a contract that restricts them to processing on our instructions.
  • Background screening providers, where the role requires checks, and only after you have accepted an offer.
  • Payroll, benefits and pension administrators, if you join us.
  • Regulators and law enforcement, where we are legally required to disclose.
warning

We never sell it

Your application data is not sold, rented, or shared with recruiters outside the process you applied through. It is not used for marketing.

Section 04

How long we keep it

SituationRetention
Unsuccessful applicant12 months from the decision, then deleted.
Unsuccessful applicant who consented to future contact24 months, then deleted unless you renew consent.
Withdrawn applicationDeleted within 3 months of withdrawal.
Successful applicantTransferred to your employment record.
Employment records after leavingFor the period required by employment, tax and regulatory law.
Diversity monitoring dataHeld in aggregate only; individual responses are not retained against your record.
Section 05

Your rights

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct anything inaccurate.
  • Ask us to delete your data, where we have no overriding legal obligation to keep it.
  • Withdraw consent where consent is what we relied on, including for future-role contact.
  • Object to processing, or ask us to restrict it, in the circumstances the law provides.
  • Ask for feedback on a decision, and for a human to review anything decided with automated assistance.
verified

How to exercise them

Contact us and say what you want. We do not require a special form or a particular phrase, and we will not make it difficult.

Section 06

Recruitment fraud

Fraudsters impersonate bank recruiters to harvest personal data or extract payments. Our process never includes any of the following.

  • A fee, at any stage, for an application, a visa, equipment or training.
  • A request for bank details before you have accepted a written offer through our own systems.
  • An offer made without any interview.
  • Contact only through a personal email address or a messaging app.
  • A request to buy equipment yourself and be reimbursed.
warning

If in doubt, verify

Contact us through the details on this website, not through the details in the message you received. Report anything suspicious to us — it helps protect the next candidate.

Related

Documents you may also need

This document was last updated on 1 August 2026. We publish the current version here at all times; superseded versions are available on request.

If anything on this page is unclear, write to us and we will explain it.