Privacy policy

Lloyds Merchant Bank ("we", "us", "our") is the data controller for personal information processed through our website, apps, branches and banking services. Our registered address is 25 Gresham Street, London, EC2V 7HN.

For data protection enquiries contact helpdesk@lloydsmerchantbank.com with "Data protection" in the subject line.

We may collect and process:

• ✓ Identity and contact details — name, address, date of birth, email, phone
• ✓ Financial information — account numbers, transaction history, income and credit information
• ✓ Credentials — User ID, encrypted passwords and authentication records
• ✓ Technical data — IP address, browser type, device identifiers and log files
• ✓ Communications — messages, complaints and call recordings where permitted
• ✓ Special category data — only where necessary and with appropriate safeguards (e.g. accessibility needs)

We process personal data to:

• ✓ Provide banking products and services you request
• ✓ Verify identity and prevent fraud, money laundering and financial crime
• ✓ Meet legal and regulatory obligations, including record-keeping and reporting
• ✓ Manage our relationship with you, including service messages and account updates
• ✓ Improve our website, apps and customer experience through analytics
• ✓ Market products to you where you have consented or we have a legitimate interest permitted by law

Under UK GDPR we rely on one or more of: performance of a contract; legal obligation; legitimate interests (balanced against your rights); and consent where required (e.g. certain marketing cookies or optional communications).

We may share data with:

• ✓ Regulators and law enforcement when required by law
• ✓ Credit reference and fraud prevention agencies
• ✓ Payment networks, card processors and banking partners
• ✓ IT, cloud hosting and professional advisers under strict confidentiality
• ✓ Group companies where necessary to deliver services

We do not sell your personal information to third parties.

Where data is transferred outside the UK, we ensure appropriate safeguards such as UK adequacy regulations, standard contractual clauses, or binding corporate rules.

We keep personal data only as long as necessary for the purposes above, including periods required by financial services regulations (often six years after a relationship ends, or longer where disputes arise).

We use technical and organisational measures including encryption in transit, access controls, staff training and monitoring to protect your information. No system is completely secure; please use strong credentials and report suspected incidents promptly.

You have rights to access, rectify, erase, restrict and port your data, and to object to certain processing. You may withdraw consent at any time where processing is consent-based. You also have the right to complain to the Information Commissioner\'s Office (ico.org.uk).

To exercise rights, email helpdesk@lloydsmerchantbank.com. We may need to verify your identity before responding.

See our cookie policy for details of cookies used on this website and how to manage preferences.

We may update this policy periodically. Material changes will be posted here with a new date and, where appropriate, notified to you directly.