After you are a customer of ours
When your account with Zempler is closed we need to keep some of your information for regulatory and business purposes.
Retention
After your account has been closed, we are legally obliged to retain the information about your account for up to 6 years after the date of closure.
After this time your data will be automatically and securely deleted.
There are legal and regulatory requirements for us to retain certain data, usually for a specified amount of time. We also retain data to help our business operate and to have information available when we need it. However, we do not need to retain all data indefinitely.
We will retain the following information about your account indefinitely:
Minimum storage
Zempler Bank Retention Period
Relevant legal basis
Minimum storage
5 years after end of relationship
Zempler Bank Retention Period
Remove Personal Data 5 years after end of relationship, then retain indefinitely
Relevant legal basis
Regulation 19 of the Money Laundering Regulations 2007
Minimum storage
5 years after end of relationship
Zempler Bank Retention Period
Remove Personal Data 5 years after end of relationship, then retain indefinitely
Relevant legal basis
Regulation 19 of the Money Laundering Regulations 2007
Minimum storage
5 years after end of relationship
Zempler Bank Retention Period
Remove Personal Data after 1 year and then retain indefinitely
Relevant legal basis
Legitimate Interest
Upon request we will immediately remove your information from any of our marketing lists.
Security
As a bank, we take the security of your data extremely seriously. We use the latest technical and organisational measures, in line with industry best practice, to safeguard the information we collect against unauthorised access, disclosure, or misuse.
For more detailed information on how we keep your data safe, and what steps you can take to do the same, please visit our security page.
Third Parties
We may share this information with third parties where required to do so by law.
Your Rights
You have several rights regarding your personal data. These rights are not always absolute, but generally include:
You have the right to be informed about how your personal data is collected, used, shared and stored. This includes clear, accessible information about:
- The types of data we collect
- How long it is stored
- Why we collect it
- How we use it
- Who we may share it with
- Your rights under data protection law
We are committed to transparency and will provide this information at the time we collect your data or as soon as possible thereafter.
You have the right to ask us whether we are processing your personal data, and if so, to request a copy of the data, along with relevant details about how and why we use it.
If the personal data we hold about you is inaccurate or incomplete, you are entitled to ask us to correct or complete it.
In certain circumstances, you can request that we erase your personal data. This might apply if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent (where our processing relies on your consent).
You can ask us to limit the use of your personal data in certain situations – for example if you believe the data we hold is incorrect or if you have objected to our processing.
You have the right to object to the processing of your personal data, for example, when our lawful basis for processing your personal data is our Legitimate Interests, or if you have previously consented to direct marketing.
You have the right to receive your personal data in a way that is accessible and machine-readable, for example as a csv file if our lawful basis for processing that data is based on your consent, or contractual obligation.
This right only applies if the data:
- is held electronically, and
- you have provided it to us, such as your registration details.
In certain circumstances, you have the right not to be subject to a decision based solely on automated processing (including profiling) if it produces legal or similarly significant effects, you can request human intervention or challenge any automated decision that affects you in such a way.
If you have any concerns about how we handle your personal data, please contact us first using the details in the ‘contact’ section of this notice so that we can address your concerns. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent authority set up to uphold information rights. For more information, visit: https://ico.org.uk/make-a-complaint/
Fees for Access Requests
You have the right to request access to your personal data. In most cases, we will provide this information free of charge. However, in accordance with the Data Use and Access Act 2025, we may charge a reasonable fee if your request is manifestly unfounded, excessive, or repetitive, or if it involves significant administrative effort. Any applicable fees will be clearly communicated in advance and will reflect the actual cost of processing your request. You will have the opportunity to revise or narrow your request to avoid incurring a fee.
Your right to complain
Under the Data Use and Access Act 2025, you have a statutory right to complain if you believe your personal data has been mishandled or your rights under UK data protection law have been infringed. We are committed to handling complaints fairly, transparently and promptly. If you wish to raise a concern about how we process your personal data, please follow the steps below.
You can submit a complaint to us using any of the following methods:
- Email: [email protected]
- Post: Cottons Centre, Cottons Lane, London, SE1 2QG
- Telephone: Zempler - Contact us
We will acknowledge your complaint within 30 days of receipt, and:
- Take appropriate steps to investigate your complaint without undue delay
- Keep you informed of the progress of the investigation
- Notify you of the outcome once the investigation is complete
If you are not satisfied with our response, you may escalate your complaint to the information commissioner's office. You can contact the Information Commission via their website: https://ico.org.uk