Privacy Policy

The Habitat Bank Limited External Privacy Policy

Version 1.0b

Who We Are

For the purpose of Data Protection Requirements, the Data Controller is The Habitat Bank Limited, registered in England & Wales (company no. 14253254), registered office: Eden House, 8 St. John’s Business Park, Lutterworth, Leicestershire, England, LE17 4HB.

We are registered as a Data Controller with the ICO: Ref ZB606182.

Our Commitment To You

The Habitat Bank is committed to protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR). We process your data transparently, securely, and only for legitimate purposes as outlined in this policy. We respect your legal rights and continually strive to meet the highest standards of data protection.

This Privacy Policy explains how we collect, use, and protect your personal data, and outlines the rights you have under data protection law. It applies to data relating to customers, suppliers, prospective and former customers, and suppliers.

Contact Information

Name: The Habitat Bank Limited

Address: Eden House, 8 St. John’s Business Park, Lutterworth, Leicestershire, England, LE17 4HB.

E-mail: info@thehabitat-bank.co.uk

Your Data Protection Rights

You have a number of rights under data protection law. For full details, visit www.ico.org.uk.

To exercise any of these rights, please contact our Data Protection Officer using the contact details above.

Your rights include:

Right to be informed
You have the right to know how and why your personal data is being processed.
Right of access
You can request access to the personal data we hold about you and related information. We may ask for additional details to verify your identity. You will receive a response within one month, or within three months if the request is complex.
Right to rectification
You can ask us to correct inaccurate or incomplete personal data. We will update any third parties where feasible.
Right to erasure ("right to be forgotten")
You can request deletion of your data in certain circumstances (e.g. no longer necessary, withdrawn consent, or unlawful processing). We will comply unless there are overriding legal grounds.
Right to restrict processing
You may request limited processing of your data under certain circumstances. We will notify you if and when a restriction is lifted.
Right to object
You can object to processing based on our legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds to continue.
Right to data portability
You can request your data in a structured, commonly used, machine-readable format, and transfer it to another controller where processing is based on consent or contract.

What Personal Information We Collect

The information collected and obtained about you will vary depending on our relationship with yourself, the products or services you are requesting and your chosen method of contacting us.

We may collect and process different types of personal data, including (but not limited to):

Name
Address
Email address
Phone/ mobile number
Job title
Business name
Profession
Bank details
Site details
Records of communication

We need all the types of personal information listed above to enable us to work together and comply with our legal obligations.

We do not collect or process any Special Categories of Personal Data, such as the following:

race or ethnicity
Religious or philosophical beliefs
Sexual orientation
Political opinions
Trade union membership
Information about your health, genetic and biometric data.
Criminal convictions and offences

How We Collect Personal Data

We collect data:

Directly from you (e.g. through forms, phone calls, emails, or meetings)
Through our website, including cookies and contact forms
During events, via photographs or video (with notice and consent where required)
From third-party contractors (e.g. drone footage with site owner consent)

Event filming/photography:
Where photography or filming takes place, signage will be displayed. If you do not wish to be captured, please notify the designated officer.

All media files are securely stored, and consent forms are retained.

Why We Store and Process Personal Data

We store personal data to:

Fulfil our contractual obligations
Provide services and respond to enquiries
Meet legal and regulatory obligations
Support our legitimate business interests (e.g. promoting Biodiversity Net Gain initiatives)

Our primary lawful basis is UK GDPR Article 6(1)(f) – processing is necessary for our legitimate interests.

We may also process your data under:

Consent (Article 6(1)(a)) – which you may withdraw at any time
Contractual necessity (Article 6(1)(b))
Legal obligations (Article 6(1)(c))

How We Store Your Information

We store personal data securely using:

Encrypted digital systems
Access control protocols
Secure physical storage for paper-based records

Only authorised staff have access to personal data. We regularly review our data security measures to remain compliant with GDPR.

We may disclose your data without notification if required by law or for legal/regulatory investigations.

Sharing Your Data with Third Parties

We only share your personal data with trusted third parties when necessary, such as:

Service providers
Business partners
Legal/regulatory bodies

All third parties are required to process your data in accordance with our instructions and applicable laws. We do not sell or rent your data to third parties.

Complaints

If you have concerns about our use of your data, contact us at info@thehabitat-bank.co.uk.

You can also contact the Information Commissioner’s Office (ICO):

Address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF

Phone: 0303 123 1113
Website: www.ico.org.uk

Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via our website or other appropriate channels.

By continuing to use our services, you agree to the latest version of this Privacy Policy.

Last updated May 2025