-
Corporate
- Customers
Last updated: April 2024
Protecting your personal information is extremely important to us at Legal & General. It’s especially important for a large financial company like ours, as our customers trust us to look after a huge amount of sensitive information on everything from their business affairs to their medical history.
The way we collect, use, store and share your information is equally important. Our customers expect us to manage their information privately and securely. If we don’t, they’ll lose their trust in us.
This privacy notice tells you how we collect and process your personal information. Please take a few minutes to read it and show it to anyone else connected to your product(s) or whose data you have shared with us (including but not limited to joint policyholders, grantees, trustees, and beneficiaries). This privacy notice may be subject to future change.
This privacy notice relates to retail customers and/ or any individual consumers of our goods and/ or services, including users of our application-based technology and those individuals who request financial advice, obtain quotes, utilise our services, purchase our products, enter into agreements with us, individuals that we cover under employer sponsored schemes and/ or individuals that we may otherwise interact with us in the course of our business.
For some individuals who do not have a direct relationship with us, the Pension Risk Transfer privacy notice may apply. We also have a separate privacy notice for professional business clients, which can be found on our website
When we talk about personal information, we mean information about an individual that can identify them, like their name, address, e-mail address, telephone number and financial details. It can relate to customers (including prospective customers), their appointed representatives (e.g. individuals with power of attorney), employees, shareholders, business contacts and suppliers. Any reference to “information” or “data” in this privacy notice is a reference to personal information about a living individual.
We may collect and process the following personal information about you:
Type of data | Description | Examples of how we use it |
---|---|---|
Contact |
|
|
Personal Details |
|
|
Vulnerability Details |
|
|
Transactional |
|
|
Contractual |
|
|
Consent and preferences |
|
|
Technical |
|
|
Open data and public records |
|
|
Documentary data and national identifiers |
|
|
Location data |
|
|
If you have turned on persistent background location services on your device, we may obtain your device’s location even while you are not using the services or products on your device. The persistent background location services use various technologies to determine your precise location, such as the location services of your operating system or browser, sensor data from your device (e.g. magnetometer, barometer, gyroscopes, accelerometers, compasses, Bluetooth data, beacon data, Wi-Fi access points, GPS data, and cell tower data). If you have opted-in to sharing your background location with us as part of using our services or products, you can opt- out at any time by going into your device settings and switching off background sharing / location services. |
We use personal information that we hold about you:
When you apply for a product or to receive a service from us, the application form you fill out or the resulting contract may contain additional conditions relating to the way we use and process your personal information. These will apply in addition to the uses described in this document.
In some cases, we may use software or systems to make automated decisions (including profiling) based on the personal information we hold or collect from others. These may include:
Where a whole of market comparison quote is offered, we may share your details, (including any relevant medical information) with a trusted business partner in order to obtain this quotation.
For mortgage purposes the factors may include your creditworthiness, assessment of mortgage affordability, property value and checks against records held by credit referencing and fraud prevention agencies.
We are also exploring whether AI technologies can help in other scenarios, for example to summarise long, technical or complex documents (such as medical reports). This may include using your data to help train the AI, however, this will not result in any decisions being applied against you.
Data protection laws require us to meet certain conditions before we’re allowed to use your personal information in the way we describe in this privacy notice. We take these responsibilities extremely seriously. To use your personal information, we’ll rely on the following conditions, depending on the activities we’re carrying out:
We may also provide you with the opportunity to consent to certain optional processes, such as responding to surveys or participating in focus groups.
We may provide you with marketing information about our services or products where you’ve provided your consent for us to do so. You may opt out of marketing at any time by e-mailing or telephoning your customer services team, details of which can also be found using the relevant Contact Us section of our website. You can also manage your marketing preferences on our customer self-service system, My Account.
To use legitimate interest, we must carry out an assessment of our interests in using your personal data against the interests you have as a citizen and the rights you have under data protection laws.
The outcome of this assessment will determine whether we can rely on legitimate interest in order to process your personal data. We’ll always act reasonably and give full and proper consideration to your interests in carrying out this assessment.
Please be aware that the personal information you provide to us, and which we collect about you, is required for us to be able to provide our services to you and without it we may not be able to do so.
We’ll keep your personal information in accordance with our internal retention policies. We’ll determine the length of time we keep it for, based on the minimum retention periods required by law or regulation. We’ll only keep your personal information after this period if there’s a legitimate and provable business reason to do so.
For pension products, we may retain your personal information indefinitely using the legitimate interests condition in order to support future enquires or claims from you, your family or financial adviser and our regulators.
For certain research and statistical activities, we may indefinitely retain minimised personal information about you, including medical information, solely to define our actuarial, underwriting and pricing risk strategies. These activities will not be used to make a decision, or take measures, against you.
Occasionally, it may be impossible to delete data, due to technical limitations. In these cases, we will take steps to put the data beyond use. This means that your data will not be accessed or shared, and your rights and freedoms will not be affected.
We’ll only disclose your information to:
Additionally, we may disclose your personal information to third parties:
In order to process your mortgage application, we will supply your personal information to credit reference agencies (CRAs) and they will give us information about you, such as about your financial history. We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity.
Dependent on the type of mortgage, a hard footprint may be left on your credit file, which may affect your credit score when an application has been submitted. This may or may not affect your ability to obtain credit from other providers.
Legal & General will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organisations. Your data will also be linked to the data of your spouse, any joint applicants or other financial associates.
The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at:
The personal information Legal & General collects from you may be shared with fraud prevention agencies who will use it to prevent fraud and money laundering and to verify your identity.
If we identify that false or inaccurate information has been provided and fraud is identified, we will pass to fraud prevention agencies. Law enforcement agencies may access and use this information. We may also share information about you with other organisations and public bodies, including the police and we may check and/ or file your details with fraud prevention agencies and databases.
If fraud is detected, you could be refused certain services, finance or employment. Further details of how your information will be used by us and these fraud prevention agencies can be found by accessing these links:
Legal & General and other organisations may also access and use this information to prevent fraud and money laundering, for example, when:
Legal & General and other organisations may access and use the information recorded by fraud prevention agencies. Please contact our Group Financial Crime department if you wish to receive the relevant details of the fraud prevention agencies:
Email: financial.crime@landg.com
Address: Legal & General Group Financial Crime, Four Central Square, Cardiff, CF10 1FS
Legal & General may also check the details of other parties related to your contract, including verification of identity. This includes beneficiaries, trustees, settlors, third party premium payers, executors or administrators of your estate, parties with power of attorney and any other beneficial owner.
The data that we collect from you may be transferred to, and stored at, a destination outside the UK, to third-party suppliers, delegates or agents. We’ll take all reasonably necessary steps to make sure that your data is treated securely and in accordance with this privacy notice, to ensure your personal information is handled with the same protections that we apply ourselves.
We’ll only transfer your data to a recipient outside the UK where we’re permitted to do so by law, for instance: (a) where the transfer is based on standard data protection clauses adopted or approved by the UK’s Information Commissioner’s Office; (b) where the transfer is to a territory that is deemed ‘adequate’ by the UK; or (c) where the recipient is subject to an approved certification mechanism and the personal information is subject to appropriate safeguards, etc.
You have rights under data protection law that relate to the way we process your personal data. More information on these rights can be found on the Information Commissioner’s website. If you wish to exercise any of these rights, please get in touch with your customer services team. Alternatively, you can also use the relevant Contact Us section of our website.
Your rights | ||
---|---|---|
1. |
The right to be informed about how we process your personal information. This right is met by the provision of this document. |
|
2. |
The right to access the personal data that we hold about you. For medical data that we have obtained from a health professional, we may need to seek their opinion before releasing the information to you. This is a legal requirement to ensure that the disclosure of the medical data will not seriously harm you or anyone else. |
|
3. |
The right to make us correct any inaccurate personal data we hold about you. |
|
4. |
The right to ask us to erase any personal data we hold about you. This right will only apply where for example:
|
|
5. |
The right to restrict our processing of the personal data we hold about you. This right will only apply where for example:
Where we no longer need to use the personal data to achieve the purpose we collected it for, but you need the data for legal claims. |
|
6. |
The right to object to our processing of personal data we hold about you (including for the purposes of sending marketing materials to you or using your personal information for profiling purposes). |
|
7. |
The right to receive personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to make us transfer this personal data to another organisation. |
|
8. |
The right to withdraw your consent. This only applies where we’re relying on your consent in order to use your personal data (for example, to provide you with marketing information about our services or products). |
|
9. |
For automated decisions (including profiling), you have right to:
|
If you have any questions about this privacy policy or wish to exercise any of your rights, including changing your marketing preferences, please get in touch with your usual Legal & General contact or your customer services team. Alternatively, you can also use the relevant Contact Us section of our website.
If you have any concerns about the way we process your personal data, or are not happy with the way we’ve handled a request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner's Office. Their address is:
First Contact Team
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Legal & General has appointed a Data Protection Officer to provide independent expert advice and monitor compliance with data protection laws:
Name: Liz Bradley
Email address: Data.Protection@landg.com
Address: One Coleman Street, London, EC2R 5AA