Privacy Policy

Co-operative Bank ("we", "our", "us") is committed to handling personal data with care and clarity. This Privacy Policy explains how we collect, use, share, and protect information about identified or identifiable individuals in connection with our products, services, websites, and applications in the United Kingdom. It should be read together with internal Legal materials available via the Legal section.

Data we collect. We may collect information that you provide directly, such as contact details, identification data, financial information, and communications. We may also collect data automatically through cookies, device identifiers, and usage analytics to support security, performance, and service improvements. Certain information may be obtained from third-party sources where lawful, including credit reference agencies and fraud prevention bodies.

How we use data. We use personal data to deliver and manage accounts, authenticate access, process payments, communicate with you, respond to enquiries, personalise experiences, meet regulatory obligations, and maintain security. Aggregated or de-identified information may be used for reporting and service development where it does not identify individuals.

Lawful bases. Processing is carried out where necessary for a contract, to comply with legal duties, to pursue legitimate interests that are balanced against your rights, or with consent where required. When consent is used, you can withdraw it at any time using provided controls or by contacting us.

Sharing. We may share data with service providers that act on our instructions under appropriate safeguards, with payment networks, banking partners, professional advisors, and authorities when legally required. Where transfers occur outside the UK, we rely on adequacy decisions or standard contractual clauses together with technical and organisational measures designed to protect information.

Retention. We keep personal data only for as long as reasonably necessary for the purposes described, including to meet legal, accounting, or reporting requirements. Specific retention periods depend on the nature of the information and applicable regulation in the UK.

Your rights. Subject to conditions and exemptions, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You can also object to certain direct marketing activities. To exercise rights, contact us using the details provided below. We will respond in accordance with applicable timelines and guidance.

Security. We apply layered safeguards, including encryption in transit, authentication controls, monitoring, and staff training. While we work to protect information, you should also use strong passwords, keep devices updated, and review alerts. See our internal resources for safe usage guidance.

Cookies and similar technologies. We use cookies and similar tools to remember preferences, maintain sessions, measure traffic, and support security. You can adjust browser settings or preferences provided in our services. For more information, visit the cookie section within this policy and related materials.

Children. Our services are primarily intended for adults. Where services relate to younger users, additional steps are taken to ensure appropriate permissions and safeguards according to UK requirements.

Changes. We may update this policy to reflect developments in law, guidance, or our practices. Material updates will be posted with a revised date. Continued use of our services indicates that you have reviewed the latest version.

Contact. Questions about this policy or privacy requests can be directed to our team. Write to Co-operative Bank, 27 Highfield Road, Manchester, M13 9PL, United Kingdom. Phone: +447915382671. Email: cooperative.bank@outlook.com. For additional governance materials, please refer to the internal Legal section.

Supervision. If you are dissatisfied with how we handle personal data, please contact us first so we can seek to resolve concerns. You may also raise matters with the UK Information Commissioner’s Office. Guidance for contacting the regulator is available on the regulator’s official channels.