|
- working out financial risks by credit scoring;
- verifying your identity and eligibility for products, and the identities of joint applicants;
- assessing your creditworthiness;
- managing your accounts, including contacting you by phone, post, email, SMS and via our apps through push notifications (messages that pop up on your device) to give you information about your account;
- awarding Clubcard points.
We use algorithms and computer programs to make decisions about whether you are eligible for a product and what terms we can offer you. You can find out more information here.
|
Because we have a contract with you, we have to use your data in this way as a necessary part of that contract.
Once you no longer have the product, we keep your data for a period of time afterwards as part of our legitimate interests in case needed for a complaint or regulatory enquiry and to help us to lend responsibly.
If you want to ask us to review a decision which we have made based on an algorithm, you can ask us any time.
|
|
We carry out fraud checks to protect our customers and prevent crime. We use algorithms and computer programs to analyse transactions and data in applications to check for fraud. You can read more about our fraud prevention checks here.
|
The law requires us to do this as we have
responsibilities to prevent financial crime. We
also act in our legitimate interests to protect
our business and customers. If you want to ask us to review a decision which we have made based on an algorithm, you can ask us any time.
|
|
To keep to laws and regulations that apply to us and to co-operate with regulators, government bodies and law enforcement organisations.
|
In most cases, we do this because the law requires us to. We may also do this acting in our legitimate interests to protect our business and customers.
|
|
We may access information from third parties
such as credit reference agencies to get up
to date contact details where we need these
to recover money owed to us. If you are ever
concerned about paying your debts, please
contact us.
|
We act in our legitimate interests as we need
to recover money owed to us to enable us to operate our business.
|
|
We use call recordings to prevent fraud, for staff training and to manage customer complaints.
|
We act in our legitimate interests as call recordings help us to meet our responsibilities to combat fraud, provide good customer service and respond to complaints.
|
|
We use algorithms and computer programs to analyse customer data by creating customer segments and scoring. We use customer data from our products, Clubcard data and data from declined applications. We sometimes combine your data with data from our partners to help us in our analysis. This will only happen where those partners have ensured that passing your personal data to us is permitted by data protection laws – this means that they must ensure that you have been informed that your data will be used in this way. When we analyse data as part of our product development, we don’t use it to identify individual customers.
Analysing customer data allows us to understand our customers better and explore possibilities for how we might serve our customers better and improve our products.
|
We act in our legitimate interests as these activities allow us to improve our products and serve our customers better.
|
|
We use customer data when carrying out internal audits and in financial analysis.
|
We act in our legitimate interests to monitor the performance of our business and make improvements.
|
|
We use cookies and similar technologies on our website and apps to improve your customer experience. You can switch off non-essential cookies using the toggles. You can find more information in the Cookie Policy
|
Essential cookies: We act in our legitimate interests to enable our website to function securely. Non-essential cookies (measurement, experience and advertising): We obtain customer consent. You can change your preferences at any time by visiting manage my cookies.
|
|
We want to ensure that the marketing we send you or show you online is relevant to you. To help us to do this, we:
- use your data, including details of which Tesco products you hold, your Clubcard data, your transactional data from accounts you hold with us, data about how you manage your account, and your online browsing behaviour to help us better understand you as a customer and provide you with personalised offers and relevant marketing communications (including by email, post, online advertising or at the tills in store). We use algorithms and computer programs to analyse data by creating customer segments and scores which we use to help us select which offers to send you.
- use data about how you manage your account or policy, including your credit history, combined with your Clubcard data to provide you with pre-approved offers. We use algorithms and computer programs to assess whether we can make a pre-approved offer to you. When we make you a pre-approved offer, we do not do external credit checks. We will only ever use your personal data in this way so that we can offer you better deals than you would get if we didn’t use that information.
- measure your responses to marketing communications, which also means we can offer you products and services that better meet your needs.
- sometimes combine your data with data from our partners, such as price comparison websites and credit reference agencies. For example, we use credit reference agency data to try to ensure that we don’t advertise credit products to those who might be declined. This will only happen where those partners have ensured that passing your personal data to us is permitted by data protection laws – this means that they must ensure that you have been informed that your data will be used in this way.
We use personal data to tailor the adverts we show to you online on Tesco websites, social media sites and other sites that sell advertising space. Personalised adverts show the AdChoices logo. You can find out more in the Cookie Policy.
|
We act in our legitimate interests. Looking at your browsing behaviour and purchases allows us to personalise our offers and services for you. This helps us give you better and more relevant offers.
You can change your marketing choices for email, SMS, post and phone marketing when you register with us and at any time after that. To opt out, just let us know in one of these ways:
On emails: by clicking ‘opt out’ or ‘unsubscribe’ (usually at the bottom of the email).
Online:
- Credit cards customers: by logging in to your Tesco Bank Online Banking, selecting your credit card and going to ‘Manage account > Manage your account > Manage marketing and credit limit increase preferences’.
- For customers who do not have a credit card: by logging in to your Tesco Bank Online Banking, selecting your account and going to ‘Manage account > Your preferences > Change marketing preferences’
Via our unsubscribe site: Enter your email address here and click unsubscribe if you no longer wish to receive Marketing from Tesco Bank. Please note it might take up to ten working days for your preferences to be updated. When necessary Tesco Bank will send you non-marketing communications from time to time, about important updates to your account or services.
By phone: by calling us on one of the numbers for your product(s) here and asking the customer service representative to opt you out of marketing.
In our Mobile Banking App: you can opt out of personalised offers in our app by going to the settings menu, selecting ‘Personalised Offers’ and switching it off. If you choose to opt out you might still see some offers, but they won’t be personalised.
You also have choices when it comes to online advertising. You can change your online advertising preferences at any time by visiting manage my cookies
|
|
Clubcard data includes your shopping habits and the types of purchases you or your household make.
We use Clubcard data to try to bring you better terms, deals, offers or support than you would get if we didn’t use the data. We do this by looking at the data using algorithms and computer programs to create customer segments and scores. This includes how likely we think you are to pay back money we lend you, how often you use other Tesco products and services, and how you prefer to shop. This helps us to create a number of scores, which we can then use as one of the factors in our automated decision-making process. We also take into account whether or not you are a Clubcard customer or have an existing Tesco Bank product.
Clubcard data enables us to improve the likelihood of us being able to accept a customer’s application for a loan or a credit card.
Clubcard is a loyalty scheme and customers trust us to use their Clubcard data to reward them with offers. We only use Clubcard data to give better prices or offers and never to increase prices or decline an application.
We use data that you provide, such as your name and address, to find any Clubcards that are linked to your surname and address. That might be your Clubcard, or that of a family member living in the same house as you. When we do this, we aim to use the Clubcard linked to your address which gives you the best terms, deals or offers.
|
This is in our legitimate interests as it allows us to offer better deals to our customers.
|
|
We process your data if we need to manage complaints, data subject access requests or legal claim. We also sometimes receive
requests from regulators for information which might require us to process and share your data with regulators.
|
When we do this, it is because we are bringing or defending legal claims, or because the law requires us to do this, as we have regulatory responsibilities to manage complaints to support our customers and respond to data subject rights requests and regulatory requests for information.
|
|
Sometimes we ask for sensitive or “special category personal data”, such as medical information, to allow us to help vulnerable
customers. We only collect the minimum amount of information required.
|
Where possible, we will ask for your consent to use this data. Where we have asked for your consent, you can change your mind at any time by contacting us and asking us to stop processing this information. Where it is not possible to get your consent (for example if you are not able to give consent), we will only use or share your information where we believe that it is in your best interests and there are substantial
public interests in us helping our customers in this way.
We are also required by law to collect some sensitive data to help our customers as we have responsibilities to support our vulnerable customers.
|
|
Biometric data is data which relates to physical or behavioural characteristics used to try to identify a person, for example facial recognition or fingerprint verification. We use biometric data where this helps us to meet our responsibilities to prevent or detect financial crime. For example, we use algorithms and computer programs to look at images to assess certain features to identify the individual in the image as part of some of our application processes.
|
Where possible, we will ask for your consent to use this data and offer an alternative way of carrying out our checks. If we have asked for your consent, you can change your mind at any time by contacting us.
Where the use of biometric data forms an integral part of our financial crime and security checks which we must have in place to meet our regulatory responsibilities, we won’t offer a choice if there are substantial public interests in the use of biometrics and it is in our legitimate interests. We will explain on product applications or other screens if you have a choice as to the use of biometric data for that product or service.
|
|
When you shop online, you will occasionally be asked to authenticate your payment. If you don’t currently use our Mobile App to do this, we will use behavioural biometrics to help confirm it’s you making the payment. Within the payments (authentication) screen we will collect behavioural biometrics data. This looks at various behaviours such as how you move your mouse and keystroke analysis e.g. how you type and the speed at which you type. A profile is built up over time that enables us to identify you and provides a stronger way of checking it is you making the payment online.
|
Behavioural biometrics for card payments online is performed in the substantial public interest as it provides protection from social engineering (fraudsters tricking customers into giving their security details to them). Whilst passwords can be stolen from customers by fraudsters, the unique ways you interact with your devices cannot be duplicated. As our legal basis is substantial public interest to prevent and detect unlawful acts (in this case, fraud), you cannot opt out of this use as it is in place to protect you.
|
|
If you enable location services within our app, we will collect data which is used in our assessment of whether a transaction is unusual and may be fraudulent. We use algorithms and computer programs to make these assessments. This is done for your security and may be shared with fraud prevention agencies. We also collect location data for analysis purposes to help us to improve our service.
|
We ask for your consent. If you don’t want us to collect and use your location data, you can turn off the location service within our app. You can control access to location services at any time through your phone settings.
|
|
We like to hear your views to help us improve our services, so we may contact you for market research purposes. You will always
have the choice about whether to take part in market research.
|
This is in our legitimate interests as market research helps us to improve our services to customers.
|
|
If you request that your data is transferred to a third party payment initiation or account information service, we will share your information as requested by you. The third party will be responsible for your information once we have transferred it to them and we recommend that you check the privacy policy of the third party before asking for your information to be transferred to them.
|
The law requires us to do this.
|
|
If a person or organisation pays you money by mistake, we will contact you to ask you to return the money. If you do not return the money, the law says we must give your name and address to the account providers of the person or organisation who sent you the money so they can recover the money from you.
When someone pays money into your account, we share your name with them if we need to confirm the payment is being made to the right account.
|
The law requires us to do this.
|
|
If you buy something online or over the phone, this is known as a Card Not Present transaction (CNP) which requires additional authentication for security reasons.
If you make an CNP payment to someone else and we are your card issuer, the organisation you are making the payment to will send us some of your information so we can confirm it is you making the payment.
Similarly, if you are making a CNP payment to us, we share some of your information with your card issuer so they can confirm that it is you making the payment.
|
This is in our legitimate interests as it enables us to detect and prevent fraud, for example if your card was stolen and a fraudster tried to buy something using incorrect details about you.
|