Privacy

We want you to feel extra safe and secure when using our services and we know how important privacy is to you. Policies and terms can be difficult to digest and understand which is why we've broken ours down so you know exactly how we do things here.

This page is also available in Welsh (Cymraeg)

 

1.0 About CitizenSafe®

CitizenSafe® is a trading name of GB Group Plc, a public company which is listed on the London Stock Exchange. GB Group Plc has its registered head office at The Foundation, Herons Way, Chester Business Park, Chester CH4 9GB and has other offices throughout the UK. For further information visit the GBG website at http://www.gbgplc.com.

Our Data Protection Officer is Kate Lewis, please contact us if you have any questions about how your personal information is used by GB Group plc at compliance@gbgplc.com or 01244 657277.

GB Group Plc is committed to protecting the privacy of its service users and it is registered for the purposes of the General Data Protection Regulation (GDPR) with the Information Commissioner’s Office in the UK (ICO).

Any reference to “CitizenSafe®”, "we", “our” or "us" in this Privacy Policy is to GB Group Plc. Any reference to "You", "Your" or “Yourself” is to the person wishing to access and/or use the CitizenSafe® Service.

Our CitizenSafe® Service is an identity verification service. Individuals use this service in order to verify their identity, so that they can access products and services provided by a third party (the “Relying Party”), such as the DVLA or HMRC.

You will have been directed to CitizenSafe® by a Relying Party’s website. CitizenSafe® does not control the content of any third party websites and is not responsible for their data policies, content or processing of data.

 

2.0 Purpose of the Policy

This Privacy Policy, together with the CitizenSafe® Terms and Conditions (to be found at: https://citizensafe.co.uk/terms-and-conditions), sets out how the personal data which is provided by, or collected about, You, as a result of Your use of the CitizenSafe® Service will be used. Please read this Privacy Policy carefully so that you understand how Your personal data will be used.

Any personal information which You provide or which we collect about You as a result of Your use of the CitizenSafe® Service will be used and protected in accordance with GDPR, this Privacy Policy and the CitizenSafe® Terms and Conditions.

Please familiarise Yourself with our Privacy Policy. By using our CitizenSafe® Service, You agree to the processing of Your personal data as described in this Privacy Policy and the CitizenSafe® Terms and Conditions. We will ask You to confirm this when You register for the CitizenSafe® Service.

 

3.0 Links

This Privacy Policy only describes the processing of Your personal data that will take place as a result of Your use of the CitizenSafe® Service. Our website may contain links to other websites and/or services provided by third parties. The use of Your personal data by such third parties will be governed by their own privacy policies. We would encourage the familiarisation of those third party privacy policies. We are not responsible for the data policies or procedures or the content of linked sites or services that are not hosted and/or provided by us.

 

4.0 What Information do we collect about You and how do we use it?

We will only collect personal data about You that is necessary for us to provide the CitizenSafe® Service and for the related purposes which we describe in this Privacy Policy.

 

How we use Your information which is necessary for You to enter into a contract with us and the ongoing performance of Your contract

In order to verify Your identity, we will collect the following personal data about You: Your title, forename, middle name or initial, surname, date of birth, any other names You are known by, gender (optional), Your current address, previous addresses and the time spent at those addresses, plus Your home telephone number, mobile telephone number and email address.

We will verify Your identity by checking the personal data which You supply against the details held about You on other databases which we have access to, such as those held by the Credit Reference Agencies Equifax and TransUnion.

Each CRA has produced its own version of this notice. The notice developed by TransUnion (formerly Callcredit) is called the TransUnion Bureau Privacy Notice, and the adoption of this will ensure that the financial services industry delivers standardised, clear and consistent information to consumers to explain how we use and share personal information, the type of information we hold, where it comes from and the legalities of how it is handled. The notice can be found at the following address: https://www.callcredit.co.uk/legal-information/bureau-privacy-notice

We will also check with Government data suppliers, for example; the DVLA, the HMPO and any other relevant HMG department in connection with the provision of the Evidence Checking Services. 

We will share the results of Your identity verification, and other information you have supplied to us including; Name, Previous Name(s), Address, Previous Address(es), date of birth (DoB) and Gender (if supplied), with the Government Digital Services who provided You with the option to select the CitizenSafe® Service. The Government Digital Service will then match up Your original request with the result of verification from CitizenSafe® and return You to the requesting Government Department You are trying to access who will then decide if they can provide access to the service You have requested from them. More information is provided on GOV.UK Verify

If Your use of the CitizenSafe® Service is ongoing, then we may periodically need to revalidate Your identity due to the time which has passed since Your identity was last verified by us, if You have not accessed your CitizenSafe® account recently, or if You have changed Your name or address. If this is required, the identity verification checks that are referred to above will be carried out again and a record of this search will also be retained by us.

It is Your responsibility to ensure that You update the details which You have provided to us if they change. You can do this at any time by logging on to your CitizenSafe Account Manager and updating Your profile.

  • Your rights under GDPR

You have the right to ask us to assist and allow You to transfer Your personal data to another Identification Provider (IDP) under Your right to data portability. Please note that the receiving IDP is under no obligation to receive Your personal data that is covered under this right.

Please contact our CitizenSafe® customer services helpdesk on 0333 566 8000 for further information.

 

How we use Your information with Your consent

We may wish to tell You, via email or SMS, about other services which we provide and we will ask You whether You agree to us providing You with this information at the point at which You register for the CitizenSafe® Service.

  • Your rights under GDPR

You have the right to ask us to stop using Your personal data for marketing purposes at any time.

You have the right to require us to delete Your personal data if the continued processing is not justified. Your personal data will be deleted except where we have another lawful basis to continue processing it.

Please contact our CitizenSafe® customer services helpdesk on 0333 566 8000 for further information.

 

How we use Your information where we have a legitimate interest in processing Your information

In addition to using Your personal data to verify Your identity, we may also use the information we collect about You for the following purposes:

  • Dealing with inquiries You may make;
  • Maintaining our records, for audit and other administrative purposes;
  • Protecting our service and websites against unauthorised access; and
  • For fraud prevention.

We may also use Your personal data and information, this data will be anonymised, to carry out market and customer research and to track Your activity in relation to our CitizenSafe® Service in order to improve the user journey.

We may use aggregated data from the CitizenSafe® Service to enable us to understand and share with third parties, information about the volume of people passing through the service, to provide information relating to our demographic data classifications and to review our cover of the UK population against the levels of assurance provided. This aggregated data will not contain personally identifiable information about You.

 

We share Your information with the following third parties

In order to verify Your identity, Your personal data will be shared with:

•the providers of the software and the databases which we use to verify Your identity, but only to the extent necessary for the provision of the CitizenSafe® Service and for any of the related purposes described in this Privacy Policy; and

•We will also share Your personal data with certain selected third party organisations including credit reference and fraud prevention agencies. Such credit reference or fraud prevention agencies may keep a record of that information and may also disclose the fact that a search of its records was made to its other customers for the purposes of assessing the risk of giving credit, to prevent fraud and to trace debtors.

•Our Data suppliers, such as Equifax, CallCredit and Government data suppliers, for example the DVLA, HMPO and any other relevant Department in connection with the provision of the Evidence Checking Services.

We will share the results of Your identity verification with the Relying Party who directed You to the CitizenSafe® Service, in order that they can assess whether they can provide the product or service which You have requested from them.

If, in the future You use your CitizenSafe® account to verify Your identity to a different Relying Party, You acknowledge and agree that we will pass the results of Your identity verification to that Relying Party.

We (or a Relying Party) may report any suspicious activities which we/they become aware of as a result of or in connection with Your use of the CitizenSafe® Service to appropriate agencies, or other relevant bodies, such as the Police and/or other relevant authorities who will use that information to investigate and deal with the issue, as appropriate.

In order to provide the CitizenSafe® Service, we will also disclose or share Your information with:

•Business partners, suppliers and sub-contractors engaged in relation to the provision of the CitizenSafe® Service in order to prevent and detect fraud including impersonation fraud. These checks involve checking deceased records, PEPs and Sanctions information, and forwarding address information which assists in preventing previous address fraud; and

•Analytics and search engine providers that assist us in the improvement and optimisation of our website. For further information please see our Cookie Policy 

We may also disclose or share Your information with:

•Any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries (as defined in section 1159 of the UK Companies Act 2006);

•The providers of the software and the databases which we use to verify Your identity, only to the extent necessary for the provision of the CitizenSafe® Service and for any of the related purposes described in this Privacy Policy

We may disclose Your personal information to third parties if we are under a duty to disclose or share Your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

 

How long we hold Your personal data

We will hold Your personal information obtained in connection with the CitizenSafe® Service for as long as You have an account with the CitizenSafe® Service, if you should close Your account then Your personal data retained is for audit purposes only and then for no longer than is necessary for the purpose described below.

Under the security and retention requirements of the CitizenSafe® contract with Government Digital Services, records should be kept for a period that You are registered with CitizenSafe® and for a further period of 7 years after that point.  Once You close Your account Your details will be deleted from the CitizenSafe® front end system which means Your details cannot be accessed by You or any other third party using or attempting to use the CitizenSafe® service.  

•Your rights under GDPR

You have the right to object to the processing of Your personal data where we have a legitimate interest in the processing of Your personal data.

You have the right to require us to delete Your personal data if the continued processing is not justified. Your personal data will be deleted except where we have another lawful basis to continue processing it.

Please contact our CitizenSafe® customer services helpdesk on 0333 566 8000 for further information.

 

Cookies

Our website uses cookies to distinguish You from other users of our website. This helps us to provide You with a good experience when You browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

 

5.0 Where we store Your personal data

All data will be stored and processed within the UK. Personal data that we collect from and/or about You will not be transferred, processed or stored in any destination outside of the European Economic Area.

 

6.0 How we protect Your personal information?

We endeavour to take all reasonable and appropriate steps to protect Your personal data. We restrict access to Your personal data to those of our employees, and third parties, who need to know that information to provide the CitizenSafe® Service and for the related purposes described in this Privacy Policy. We protect Your personal data from unauthorised access, use and loss by maintaining physical, electronic, and procedural safeguards to protect Your personal data.

CitizenSafe® protects Your personal data when it transferred over the Internet by using secure technologies, which allows Your web browser to interact with us via an encrypted session, for example; CitizenSafe® employs a Secure Sockets Layer (SSL) connection that provides an encrypted connection between Your computer and the CitizenSafe® Service. The information is decrypted, or put back into a readable format, when it reaches its intended destination.

 

7.0 Your rights

We have provided You with information relating to Your rights for processing Your data in section 4 above. In addition to these rights, you have the right to receive information about and a copy of the personal data we hold about You. 

Please write to Compliance, CitizenSafe®, The Foundation, Herons Way, Chester Business Park, Chester, CH4 9GB.

Within one month of receiving a request made by You under any of those rights we have told You about within this Privacy Policy, we must provide any requested information in relation to any of the rights of data subjects.

 

8.0 Changes to this Privacy policy

Our Privacy Policy may be reviewed and enhanced from time to time. Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to You by e-mail. We encourage You to check this policy regularly to ensure that You see our most up to date policy. You can see from the top of this Privacy Policy the date of when it was last amended.

 

9.0 Dispute Resolution

In the event that You have a complaint regarding the CitizenSafe® Service, please write to Compliance, CitizenSafe®, The Foundation, Herons Way, Chester Business Park, Chester, CH4 9GB.

For further information please see our Complaints Policy on our FAQ page in the Privacy and Security section.

We review our Privacy Policy on an annual basis, or sooner if changes to regulation require it or we change the way we processes personal information.

This policy was last updated on 22 May 2018.