Search
Register
Log in
Bureaux portal privacy statement

Bureaux portal privacy statement

​Last updated: 21 May 2018

Privacy statement for the https://bureaux.bacs.co.uk (the portal).

Your personal information – how we use it

In order to assess accreditation and inspection questionnaires on the portal, Bacs Payment Schemes Limited (Bacs), collects, processes, shares and keeps your personal information. This privacy statement sets out everything you need to know about what happens to your personal information when you are registered as a user of the portal.

Acting as a data controller, our contact details are:

Bacs Payments Scheme Limited

Registered office: 2 Thomas More Square, London E1W 1YN

Company number: 4961302

Web: https://bureaux.bacs.co.uk

If you need any further details, have a query or complaint about our use of your personal information, please contact our Data Protection Officer: by email at DPO@wearepay.uk or by post at 2 Thomas More Square, London, E1W 1YN.

Information Bacs processes and why

Bacs collects your name, role, contact details and employer details and any other personal information you provide (personal information) by completing the online accreditation and inspection questionnaire and by uploading supporting documents to the portal for the following purposes:

  • To send you your login detailsTo deal with any logging in difficultiesTo deal with queries relating to the accreditation and inspection questionnaire
  • To review the information you have provided by completing the accreditation and inspection questionnaire and any supporting documents you have provided
  • To communicate with you through user notifications and individual emails where necessaryTo create reports in respect of your accreditation application and our inspections
  • To place cookies on your device to ensure that the information is displayed correctly, to make moving through the questionnaire easy and to record your progress during your session so that you can continue where you left off next time you log in to the portal. More information on the cookies we use to do this is set out below.

We do all of these things for the following reasons:

  • Registration on the portal, whether this is by you or on your behalf, is a request for access to the portal for the purpose of accreditation and / or inspection
  • Ensuring the portal is user friendly so that we can ensure we update and improve it where necessary.

Sharing and retaining your personal information

Where our inspection reports include your personal information, we share your personal information with your authorising payment services provider in accordance with the legally binding terms and conditions you have entered into with your authorising payment services provider. We also share your personal information with our portal software suppliers who provide development and availability support.

Where required by law or competent authority we may also share your personal information with regulators, courts, government departments and law enforcement agencies. We will inform you of this before we share your personal information unless we are legally prevented from doing so.We keep your personal information whilst you are registered to use the portal and for a further 2 years thereafter.

Cookies

We place the following cookies on your device to make sure the portal functions and performs correctly and intuitively:​

Cookie Name​ Purpose​ More Information
ASPXAUTH ​Used when you log into the site. It recognises you have logged in allowing you access to ‘restricted’ areas of the site without asking you to login again as you move around. Where you have entered details in the questionnaire, the information is remembered as you progress or when you return to the questionnaire to complete it​ First party session cookie which exists for the duration of your visit​
ASP.NET_SessionId​ Used to ensure that the data being served is specific to you​ First party session cookie which exists for the duration of  your visit

 

Your information rights

You have a number of rights in relation to your personal information. You can:

  • Ask for a copy of all your personal information that Bacs has collected and is processing
  • Ask for errors or omissions in your personal information to be corrected. If Bacs makes any corrections it will share these with the other organisations it has shared your personal information with
  • Ask for your personal information to be permanently deleted as long as it is no longer necessary for Bacs to process it. Where Bacs deletes your personal information in accordance with your request, it will inform the other organisations it has shared your personal information with
  • Request that Bacs restricts its use of your personal information where it no longer needs to process it. Where you have exercised a right of restriction Bacs will inform the other organisations it has shared your personal information with
  • To object to processing of your personal information by Bacs. Where Bacs can demonstrate that it needs to continue processing your personal information, this will override your objectionIn some circumstances, request that we transfer your personal information to a third party.

If you believe that Bacs has not complied with its data protection obligations, you have a right to make a complaint to the Information Commissioner, the data protection regulator in the UK by post, email or by telephone on 0303 123 1113.