Privacy policy | Silver Crest Trust Bank - Savings. Mortgages. Business Loans.

Last updated: 10 June 2026 | Version 2.4

1. Who We Are

Silver Crest Trust Bank plc ("Silver Crest Trust Bank", "we", "us", "our") is a company registered in England and Wales. We are authorised by the Prudential Regulation Authority (PRA) and regulated by the Financial Conduct Authority (FCA) and the PRA. Our registered office is Europe.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website, mobile app, and banking services. We are the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, contact our Data Protection Officer at support@silvercrestrust.com.

2. Personal Data We Collect

2.1 Information You Provide Directly

Identity data: Full name, date of birth, national insurance number, passport or driving licence number.
Contact data: Email address, mobile number, postal address.
Financial data: Bank account details, payment card details, credit history, income and employment details.
Application data: Information provided when applying for products including savings accounts, mortgages, loans, or credit cards.
Communications: Messages, emails, chat logs, and call recordings when you contact us.

2.2 Information We Collect Automatically

Technical data: IP address, browser type and version, operating system, device identifiers.
Usage data: Pages visited, time spent, links clicked, app feature usage, login times and frequency.
Location data: Approximate location data where you have permitted this on your device (used for fraud prevention).
Transaction data: Details of all transactions on your account including amounts, counterparties, dates, and categories.

2.3 Information from Third Parties

Credit reference agencies (Experian, Equifax, TransUnion) for credit checks and fraud prevention.
HM Revenue & Customs (HMRC) for tax compliance and ISA eligibility verification.
Identity verification providers for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
Open Banking providers where you have given explicit consent.

3. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

Contract performance: To open and manage your accounts, process transactions, and provide the banking services you've requested.
Legal obligation: To comply with anti-money laundering laws, tax reporting obligations, PRA/FCA regulatory requirements, and court orders.
Legitimate interests: Fraud detection and prevention, improving our services, internal analytics, credit risk management, and IT security.
Consent: Marketing communications (where you've opted in), personalised offers, and cookie-based advertising.

4. Marketing Communications

We will only send you marketing messages where you have given your explicit consent. You can withdraw your consent at any time by:

Clicking "Unsubscribe" in any marketing email.
Adjusting your notification preferences in the Silver Crest Trust Bank app under Settings → Notifications.
Contacting us directly at support@silvercrestrust.com.

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew consent.

5. Data Sharing

We share your personal data only where necessary:

Regulatory bodies: FCA, PRA, HMRC, and law enforcement agencies where required by law.
Credit reference agencies: To assess creditworthiness and detect fraud. This may affect your credit file.
Service providers: Third-party suppliers who process data on our behalf under strict data processing agreements (e.g., cloud hosting, payment processors, identity verification).
Group companies: Other entities within the Silver Crest Trust Bank group where necessary to deliver services.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We do not sell your personal data to third parties for their own marketing purposes.

6. Data Retention

We retain your personal data for as long as you remain a customer and for the periods required by law thereafter. In general:

Account and transaction records: 6 years after account closure (required by HMRC and FCA).
AML and KYC records: 5 years after the end of the business relationship.
Marketing consent records: Until consent is withdrawn plus 3 years.
CCTV footage: 30 days unless required for investigation.

7. Your Rights

Under UK GDPR, you have the following rights. To exercise any of them, contact us at support@silvercrestrust.com. We will respond within 30 days.

Right of access: Request a copy of all personal data we hold about you (Subject Access Request).
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your data where we no longer have a lawful basis to hold it.
Right to restriction: Request that we restrict processing in certain circumstances.
Right to portability: Receive your data in a structured, machine-readable format to transfer to another provider.
Right to object: Object to processing based on legitimate interests, or to direct marketing at any time.
Automated decision-making: Request human review of any automated decision that significantly affects you (e.g., loan decisions).

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including 256-bit TLS encryption for data in transit, AES-256 encryption at rest, multi-factor authentication, regular penetration testing, ISO 27001-aligned information security practices, and continuous security monitoring. Despite these measures, no method of electronic transmission or storage is 100% secure. We will notify you and the ICO promptly in the event of a data breach that poses a risk to your rights and freedoms.

9. Cookies

Our website uses cookies to improve your experience. For full details of the cookies we set and how to manage them, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published at this URL with the updated date at the top. For material changes, we will notify you directly via email or an in-app notification.