This website is for the use of FCA authorised mortgage intermediaries only.

Top of main content

Legal information

Terms of use

Website Terms and Conditions

This document sets out the terms and conditions (‘Terms’) governing your use of this website, including portal.intermediaries.hsbc.co.uk (the 'Portal') (together the 'Site'). Use of the Site includes accessing, browsing or registering to use the Site.

This Site is operated by HSBC Bank plc, which is owned by HSBC Holdings plc. You should read these Terms carefully, as well as our Cookie Policy ('Cookie Policy') and Privacy Notice and the terms of the introducer agreement entered into between you and us, which governs the relationship between us ('Introducer Agreement') as by accessing this Site, you agree to be bound by these Terms and our Cookie Policy. If you do not agree to be bound by these Terms, you must not use the Site. In event of any conflict between these Terms, the Cookie Policy and the Introducer Agreement, the order of precedence will be as follows: 1) Introducer Agreement; 2) these Terms; 3) Privacy Statement and 4) Cookie Policy.

The information provided on the Site is for the exclusive use of FCA authorised mortgage intermediaries.

The Site is operated by and has been approved for issue in the UK by HSBC Bank plc, which is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. It is listed with the registration number 114216. HSBC Bank plc is a company incorporated under the laws of England and Wales with company registration number 14259 and its registered office at 8 Canada Square, London E14 5HQ. HSBC Bank plc's registered VAT Number is GB 365684514.

HSBC Bank plc is a member of the Financial Ombudsman Scheme and subscribes to the Standards of Lending Practice. More detail about this is available on the Lending Standards Board website. For information about accounts and other products you can refer to the Money Advice Service section on the Financial Conduct Authority (‘FCA’) website.

In these Terms:

‘applicant(s)’ means any potential or actual applicant applying for a mortgage offered by us through you, as the intermediary

'content' means all pages, screens, information and materials included in or accessible through this Site (including any content available on any email or SMS services);

'HSBC Group' means HSBC Holdings plc, its subsidiaries and associated companies from time to time;

'Terms' means these site terms and privacy statement as updated from time to time under clause 1.2;

'we', 'us' and 'our' means HSBC Bank plc

'you', 'your' and 'yours' means you, the person(s) accessing this Site as the intermediary

  1. Site Terms
    • 1.11These Terms, together with the Introducer Agreement, cover your use of this Site and explain how you may use this Site. All products and services provided by members of the HSBC Group have their own terms and conditions (the 'Product Terms'). You must ensure that applicants read the relevant Product Terms, as well as our privacy notice before you submit their application.
    • 1.2We may amend these Terms, the Website Privacy Notice and the Cookie Policy at any time without notice. Your use of the Site after such amendment will be subject to these Terms, Privacy Notice and the Cookie Policy as amended. We therefore recommend that you check the relevant pages of this Site from time to time to take notice of such changes, as any changes will be binding immediately once made.
    • 1.3The products and services advertised on this Site are subject to availability and may be withdrawn or amended at any time without notice.
    • 1.4The Site is available only to registered intermediaries.
  2. Privacy
    • 2.1You are responsible for providing applicants with an appropriate privacy notice and for obtaining any relevant consents prior to collecting their information for submission on the Portal.
    • 2.2You are responsible for advising applicants that data will be transmitted electronically and that you may track progress of their application electronically, and for ensuring that the applicants receive the privacy notice that contains information about how their personal information will be processed and shared by us and the HSBC Group.
    • 2.3You confirm that you have collected (and uploaded to the Portal) any applicant data, fairly and lawfully and otherwise in accordance with data protection laws.
  3. Information not recommendation
    • 3.1Information or opinions contained on this Site do not constitute an offer to sell or a solicitation, or offer to buy, any securities or financial instruments or investment advice or any advice or recommendation in respect of such securities or other financial instruments.
    • 3.2You are responsible for your actions and for providing proper advice to applicants in accordance with applicable law and the terms of the Introducer Agreement, including (but not limited to) in relation to the suitability of our products and services and any other advice you give about their application. We do not guarantee that the products and services advertised on the Site will be suitable for any applicant.
    • 3.3We reserve the right to reject any application submitted by you on behalf of the applicants without any explanation.
  4. Users of the site
    • 4.1The Site is currently intended for use by FCA authorised mortgage intermediaries within the United Kingdom only. Because of this we cannot guarantee that the Site or the information thereon complies with law or regulation outside of the United Kingdom, or is appropriate for use in other places or by applicants. If you choose to enter the Site from outside your country of residence, you are advised that it may not be legal in that jurisdiction for you to access or use the facilities available on the Site and the legal requirements of that jurisdiction may prohibit you from dealing or otherwise transacting in that jurisdiction. No member of the HSBC Group will be liable for any breach of local law or regulation that you may commit as a result of using and accessing the Site from a country in which you are not resident.
    • 4.2You are wholly responsible for use of the Site by any person using your computer and you must ensure that any such person complies with these Terms. You must treat your Portal login details as confidential and tell us immediately if you know or suspect that anyone knows your details or your details are being (or have been) used fraudulently. We reserve the right to disable your Portal login details if, in our reasonable opinion, you fail to comply with these Terms. You will be liable for any losses arising as a result of the misuse of your Portal login details.
    • 4.3Products or services on this Site do not constitute an offer or recommendation of any products or services provided by any of the HSBC Group members. The information provided on this Site is not intended for distribution to, or use by, any person in any jurisdiction where such distribution or use would be contrary to law or regulation. This Site should not be considered as communicating any invitation or inducement to engage in banking or investment activity or any offer to buy or sell any securities or other instruments outside any jurisdictions where HSBC Bank plc is licensed or authorised to perform such activities (the 'Authorised Countries').
    • 4.4Not all the products and services that you may be able to view via this Site may be available in all geographical locations served by HSBC Group members. You should access only the local site(s) associated with your country of residence ('Your Local Site'). Products and services discussed outside Your Local Site may not be available in your jurisdiction of residence or in the Authorised Countries and may not be appropriate for the applicants. Your use of this Site is subject to the applicable laws and regulations of any relevant jurisdiction. HSBC Group members may decline to provide applicants with products and services subject to status.
    • 4.5Products discussed on this Site may not have been registered or authorised by any central bank, governmental or regulatory authority in the Authorised Countries or in the country of the applicant's residence. Accordingly, they may not have the benefit of protection from the securities laws, banking laws and other relevant laws and regulations of their country of residence with respect to products or services referred to on or through this Site.
    • 4.6No representation is given that any securities, products, or services discussed in or accessible through this Site are suitable for any applicant. You acknowledge that your use of this Site and any requests for information you or the applicant have made as a result of visiting this Site are not the result of an offer made by HSBC Bank plc or another HSBC Group company and that the provision of any information through this Site shall not constitute or be considered investment or financial advice.
  5. Availability of Site
    • 5.1The content, including layout, of this Site, the Portal or services available via this Site may be wholly or partially suspended, withdrawn or changed at any time.
    • 5.2We also reserve the right to suspend the provision of all or any part of the Portal to you immediately and/or block your access to the Portal in any of the following situations:
      • 5.2.1If you have seriously or persistently breached or failed to observe any of these Terms or any provision of the Introducer Agreement including where:
        • 5.2.1.1you are, or we reasonably suspect that you may be, using or obtaining or allowing someone else to use or obtain an account, service or money illegally;
        • 5.2.1.2you are using, or we reasonably suspect that you are using, the Portal for an illegal purpose;
        • 5.2.1.3you are, or we reasonably suspect you may be, acting fraudulently; or
        • 5.2.1.4we suspect that an unauthorised person is attempting to access the Portal using your security details such as your Portal username and password;
      • 5.2.2If we reasonably consider that by continuing to provide you with access to the Portal:
        • 5.2.2.1we may break a law, regulation, code, court order or other duty; or
        • 5.2.2.2we, or another HSBC Group company, may be exposed to action or censure from any government regulatory or law enforcement agency; or
      • 5.2.3Where we have, or a member of the HSBC Group has, suspicions regarding financial crime or an associated risk.
  6. Your obligations
    • 6.1In accessing and using the Portal you will:
      • 6.1.1Comply with the terms of the Introducer Agreement;
      • 6.1.2Comply with all laws, regulations, rules, duties, and obligations (whether or not originating in the United Kingdom) which apply from time to time to, or are relevant in connection with, these Terms and the operation of your business;
      • 6.1.3Comply with all relevant requirements and provisions of any present or future legislation, regulations, or codes of practice;
      • 6.1.4Cooperate in any audit of us by the FCA, the Prudential Regulation Authority ('PRA'), Her Majesty's Revenue and Customs, or any other body that regulates us or supervises compliance with any voluntary code of practice. This includes producing to us (or anybody authorised by us or any regulatory body) on demand any information in a format we or they require and within such time and at such place as they may require and giving them such assistance in connection with any investigation or audit as you are reasonably able to give; and
      • 6.1.5Hold all necessary authorisations, permissions, registrations, licences and similar instruments required under applicable law to carry out all activities under these Terms and the Introducer Agreement.
    • 6.2You must not do, or omit to do, anything which will or may:
      • 6.2.1Affect any authorisation, licence, consent or permission necessary or desirable for the conduct of our business or your business; or
      • 6.2.2Cause us to breach any laws, regulations, rules, codes of practice, duties, obligations or other requirements which may from time to time be relevant.
    • 6.3We may undertake such monitoring as we consider appropriate to satisfy any obligations imposed on us by the FCA, PRA or any other regulator.
    • 6.4Security - it is your sole responsibility adequately to:
      • 6.4.1protect and back up your data and equipment;
      • 6.4.2undertake reasonable and appropriate precautions against any computer virus or other destructive materials or elements; and
      • 6.4.2ensure that your devices and your access to the Portal are adequately secured against any unauthorised users.
    • 6.5Your use of this Site - you may not use this Site or permit others to use this Site:
      • 6.5.1for any purpose which is unlawful, defamatory or libelous, offensive, abusive, indecent, menacing or threatening or in any way that infringes any intellectual property rights or breaches any obligations of confidence;
      • 6.5.2to cause annoyance, inconvenience or needless anxiety to any other person or in any other way which is in violation of any applicable law or regulation in any jurisdiction in the world;
      • 6.5.3to introduce a virus or malware or other disruptive material or element or otherwise disrupt or impair this Site or any communication service;
      • 6.5.4to commit any act of fraud;
      • 6.5.5for purposes of promoting unsolicited advertising or sending spam;
      • 6.5.6to disrupt the operation of this Site or the business of HSBC Group;
      • 6.5.7to represent or suggest that we endorse any other business, product or service unless we have separately agreed to do so in writing; or
      • 6.5.8to gain unauthorised access to or use of computers, data, systems, accounts or networks.
  7. No warranties
    • 7.1The following clauses exclude or limit our legal liability for the Site. You should read them carefully. They all apply only as far as the law permits, and in particular we do not exclude or restrict our duties and liabilities to you or any applicant under the Financial Services Act 2012 (the 'Act'), or the rules of the FCA for the conduct of business.
    • 7.2While we have taken reasonable steps to ensure the accuracy, currency, availability correctness and completeness of the information contained on the Site, information is provided on an 'as is', 'as available' basis and we do not give or make any warranty or representation of any kind, whether express or implied. The use of the Site is at your sole risk. To the extent permitted by law and subject to clause 7.14, we shall not be liable for any loss or damage whatsoever and howsoever arising (whether in tort, contract, negligence or otherwise and whether direct, indirect or consequential) as a result of your or any applicant's use of the Site, or use of or reliance on the information contained on the Site to the maximum extent permitted by law.
    • 7.3We do not represent or warrant that the Site will be available and meet your or any applicant's requirements, that access will be uninterrupted, that there will be no delays, failures, errors or omissions or loss of transmitted information, that no viruses or other contaminating or destructive properties will be transmitted or that no damage will occur to your computer system. You have sole responsibility for adequate protection and back up of data and/or equipment and for undertaking reasonable and appropriate precautions to scan for computer viruses or other destructive properties.
    • 7.4We make no representations or warranties regarding the accuracy, functionality or performance of any third party software that may be used in connection with the Site.
    • 7.5You agree to indemnify us for all direct and indirect losses we incur as a result of your use of the Site other than in accordance with these Terms.
    • 7.6To the extent permitted by law and notwithstanding the other sub-clauses within this clause 7, neither we nor any member of the HSBC Group shall be liable for any damage, loss or liability (whether arising in contract, tort, including negligence, or otherwise) arising out of or in connection with:
      • 7.6.1your use of this Site;
      • 7.6.2your reliance on or your inability to use the information, products or services on this Site; or
      • 7.6.3any failure or performance, error, omission, interruption, defect, delay in operation or transmission, computer virus or line or system failure to this Site or your use or attempted use of it.
    • 7.7The above exclusions apply to any damage which is direct, indirect, special, incidental or consequential or consists of loss of profits, business, opportunity or data.
    • 7.8All of the above exclusions apply even if you have advised us or any other member of the HSBC Group of the possibility of the above types of damage, loss or liability.
    • 7.9We will take reasonable care to ensure that any information provided to you by the Site is an accurate reflection of the information contained in our computer systems or, where the information is provided by a third party, accurately reflects the information we receive from that third party. Where information provided via the Site is beyond our reasonable control (for example, it is provided by a third party), we cannot guarantee that it is accurate or error free. We also may explain in the Site's screens that certain information is provided subject to certain restrictions, or on a specific basis (for example, it is only accurate as at a certain date). If we do this and you rely on the information, you do so subject to those restrictions or the basis on which the information is provided.
    • 7.10We will not be responsible for any loss of or damage to your data, software, computer, telecommunications or other equipment caused by you using the Site unless such loss or damage is directly and solely caused by our negligence or deliberate default.
    • 7.11Unless we have specifically agreed with you otherwise, we shall have no liability for:
      • 7.11.1any equipment, software or associated user documentation which any person other than us produces at any time for use, or which can be used, in connection with the Site; and
      • 7.11.2any services through which you access the Site or which you access through the Site which are not controlled by us.
    • 7.12We shall not be responsible to you if we fail to comply with any of these Terms or you suffer any loss:
      • 7.12.1due to abnormal and unforeseen circumstances beyond our control, the consequences of which would have been unavoidable despite all efforts to the contrary; or
      • 7.12.2where this is due to our obligations under European or national law.
    • 7.13We shall have no liability to you for any breach of these Terms caused by any event or circumstance beyond our reasonable control including, but not limited to, breakdown of systems or network access.
    • 7.14Nothing in this clause 7 shall serve to limit or exclude our liability for fraudulent misrepresentation or death or personal injury, in each case caused by our negligence.
  8. Passwords and security
    • 8.1In order to use the Portal, you may be required to become a registered user. In order to become a registered user we will issue you with one or more of the following, namely, registered username, password, security device, other security identifier in accordance with our procedures in place from time to time.
    • 8.2You must take all reasonable precautions to keep safe and prevent fraudulent use of your security details (this will include your username, PINs, password and other security information) to access the Portal. You will keep your password secret and confidential at all times. Your password will allow you to access personal and confidential account and/or financial information. These precautions include, but are not limited to the following:
      • 8.2.1never writing down or otherwise recording your password or security information in a way that can be understood by someone else;
      • 8.2.2not choosing security details that may be easy to guess;
      • 8.2.3taking care to ensure that no one hears or sees your security details when you use them;
      • 8.2.4keeping your security details unique to the Portal;
      • 8.2.5never telling your security details to anyone else including our staff;
      • 8.2.6changing your security details immediately and telling us as soon as possible if you know, or even suspect, that someone else knows any of those details, or if we ask you to;
      • 8.2.7complying with all reasonable instructions we issue regarding keeping your security details safe;
      • 8.2.8never recording your password on any software which retains it automatically (for example any computer screen prompts or 'save password' feature or the like on your internet browser);
      • 8.2.9keeping your computer or other device secure by using anti-virus and anti-spyware software and a personal firewall;
      • 8.2.10never going to website login page directly from a link in an email and entering security or other details - always access the Portal by typing in the address to your web browser, unless retaining your password or security details is a specific function of a banking service provided by us;
      • 8.2.11never accessing the Portal from any device connected to any public internet access device or access point (for example, at an internet cafe);
      • 8.2.12once you have logged on to the Portal, not leaving the device from which you have accessed it unattended or letting anyone else use that device until you have logged off;
      • 8.2.13following all security measures recommended by the manufacturer of the device you use to access the Portal; and
      • 8.2.14keeping your password in a safe place at all times.
    • 8.3You agree to tell us immediately of any unauthorised access to the Portal using your password or any unauthorised transaction or instruction which you know of or suspect of if you suspect someone else knows your password. We will need you to help us and any law enforcement agency in trying to recover any losses or otherwise deal with the result of such access. We may disclose information about you or your Portal account to a law enforcement agency or other third parties if we think it will help prevent or recover losses, including the loss or unauthorised access to personal data.
    • 8.4You are wholly responsible for use of the Portal by any person using your password.
    • 8.5If asked, you must confirm in writing the loss or theft of your security details.
    • 8.6We will ask you to co-operate with us and the police in relation to any investigation into the actual or suspected misuse of your passwords, PIN(s), security details and/ or accounts.
  9. Third party sites and endorsements
    • 9.1Where we provide hypertext links to other locations on the Internet, we do so for information purposes only. We are not responsible for the content of any other websites or pages linked from or linking to this Site. We have not verified the content of any such websites. Following links to any other websites or pages shall be at your own risk and we shall not be responsible or liable for any damages or in other way in connection with linking. When you access or link to any other website, please read the terms and privacy notice issued by such other website to determine the policies that apply to information or data maintained by that website.
    • 9.2Links to downloadable software sites are for convenience only and we are not responsible or liable for any difficulties or consequences associated with downloading the software. Use of any downloaded software is governed by the terms of the license agreement, if any, which accompanies or is provided with the software.
    • 9.3No endorsement or approval of any third parties or their advice, opinions, information, products or services is expressed or implied by any information on our Site.
  10. Trade marks and copyright
    • 10.1Copyright in the pages screens, information and material in their arrangement included in this Site and all intellectual property rights in it including but not limited to any content are owned by us, our licensors or both (as applicable). Intellectual property rights means rights such as: copyright, trade marks, domain names, design rights, database rights, patents and all other intellectual property rights of any kind whether or not they are registered or unregistered (anywhere in the world). We and our licensors reserve all of our and their rights in any intellectual property in connection with these Terms. This means, for example, that we and they remain owners of them and free to use them as we and they see fit.
    • 10.2Nothing in these Terms grants you any legal rights in the Site other than as necessary to enable you to access the Site. You may imprint, copy, download or temporarily store extracts from our Site for your information or when you discuss our products and services with applicants. You must not alter anything, and agree not to adjust to try to circumvent or delete any notices contained on the Site (including any intellectual property notices) and in particular in any digital rights or other security technology embedded or contained within the Site.
    • 10.3Any other use is prohibited unless you first get our written permission. In particular no one may use a part of our Site on any other website, or link any other website to our Site, without our prior written permission.
    • 10.4The use of any trade marks on the Site is strictly prohibited unless you have our prior written permission.
  11. Links to our site
    • 11.1Neither you nor any other party may use any part of this Site on any other website, or link any other website to this Site, without our prior written permission.
    • 11.2We are not responsible for the set up of any link from a third party website to our Site.
    • 11.3Neither you nor any other party may deep link to, frame, spider, harvest or scrape the Content or otherwise access the Content for any purposes, or use any machine, electronic, web based or similar device to read or extract the content by machine based or automated means, without our prior written permission.
  12. Internet e-mail
  13. Messages sent over the Internet cannot be guaranteed to be completely secure as they are subject to possible interception or loss or possible alteration. We are not responsible for them and will not be liable to you, an applicant or anyone else for any damages or otherwise in connection with any message sent by you to us or any message sent by us to you over the internet.

  14. Governing law
  15. The Terms are governed by and interpreted in accordance with the laws of England and Wales and the courts of the above jurisdiction will have non-exclusive jurisdiction in respect of any dispute, which may arise.

  16. General
    • 14.1No delay by either party in enforcing the provisions of these Terms will prejudice or restrict the rights of that party nor will any waiver of its right operate as a waiver of any subsequent breach and no right, power or remedy conferred on or reserved for either party is exclusive of any other right, power or remedy available to that party and each such right, power or remedy will be cumulative.
    • 14.2The illegality, invalidity or unenforceability of any of these Terms will not affect the legality, validity or enforceability of the other Terms.
    • 14.3Headings are used in these Terms for convenience only and will not affect their enforceability.
    • 14.4No one other than a party to these Terms has any right to enforce any of these Terms
  17. Your queries
  18. If you wish to contact us, please refer to the Contact Us link which can be found on each page of the site.

Accessibility

Accessibility

  • We only use strong colour contrasts
  • Headings are used correctly to make them readable through screen readers
  • Links do what they say. We don't use 'click here'
  • Tables are laid out in tabular form with headings and summaries
  • We use style sheets to determine the presentation of our web site - this assists those using screen reading devices
  • Where we use images, we use alternative text so that those people who cannot see the image can read the text. These can be read by screen reading devices.

System requirement

Personal Internet Banking is available to both PC and Apple Mac users with modern internet enabled machines.
Range of browsers and operating systems that we support:

Browsers

  • Internet Explorer 11
  • Safari 6 and above
  • Google Chrome latest
  • We are accessible in various smart phone browsers

Operating systems

  • Windows 7, 10
  • Mac OS X 10.10 and above

Browser updates are available free of charge from each browser provider. Operating systems can be purchased from software vendors.

We will update our list of supported browsers and operating systems from time to time as the software used by our customers changes.

The details are correct as of 1 October 2015.

Reasons to upgrade your browser

  • New versions are more secure
  • New versions are faster
  • Improved browsing experience

Browser updates are available from Microsoft, Firefox, Safari, Google.

Cookie policy

Cookie policy

Understanding how and why we use cookies

We use cookies to give you the best possible experience on our website. Cookies allow you to do many things such as, log on to the [portal], have us 'remember' your log-in preferences, apply for products and services online on behalf of your customers and use financial tools like our affordability and repayment calculators.
To find out more about how we use cookies and what benefits they bring, please take a few moments to read this Cookie Policy.

Frequently asked questions

Do cookies mean I could get cold calls or junk mail?

We never use the data gathered through cookies to contact you via post, email or phone.

What are cookies?

Cookies are small text files that are sent to and stored on your computer, smartphone or other device for accessing the internet, whenever you visit a website. Cookies are useful because they allow a website to recognise a user's device.
At HSBC, we use cookies for a variety of reasons,  such as to let users navigate between pages efficiently, verify the user and carry out other essential security checks. Some of the functions that cookies perform can also be achieved using similar technologies. This policy refers to ‘cookies’ throughout, however it also covers these alternate mechanisms.
More information about cookies can be found on allaboutcookies.org.

How do HSBC use cookies?

We use ‘analytics’ cookies to help us make our website and information better for those who visit it regularly. They help us work out what users like and don't like and how we can improve things for you. Any information that we store in cookies for this purpose is anonymous and will not contain any personal information.

How do other sites use cookies?

When we include links to other websites, please bear in mind they will have their own privacy and cookie policies that will govern the use of any information you submit. We recommend you read their policies as HSBC is not responsible or liable for their privacy practices.

Does HSBC use cookies from third parties?

HSBC does use third parties but only those that are trusted suppliers to HSBC. They include our partners who help us improve our website, such as Webtrends, who provide analytics about our site usage.

Where can I find more information about HSBC’s privacy policy?

To find out more about how HSBC protects your (and your customers’) privacy when using our website, see our Website Terms and Privacy Statement.

Do HSBC cookies contain personal information?

Our cookies do not store personal information such as your (or your customer’s) name, address, telephone or email, we only use “analytics” cookies.

Do cookies compromise my security?

The cookies we use are completely safe. In fact, they are only being used to improve the site functionality and content.

Can cookies allow others access to my computer's hard drive?

The cookies we use cannot look into your computer, smartphone or web-enabled device and obtain information about you or your business or read any material kept on your hard drive.

If I use a public computer, will someone be able to get my details from the cookies?

Our cookies cannot be used by anyone else who has access to the computer to find out anything about you, other than the fact that someone using the computer may have visited a certain website. Our cookies do not in any way compromise the security of [the portal].

Can I opt-out of all cookies?

If you wish to opt out of all cookies for this website and any other website, you can do this through your browser settings. Your browser's 'help' function will tell you how to do this.

However, please remember that cookies are often used to enable and improve certain functions on our website

More information about how to disable cookies, visit allaboutcookies.org

Where can I find out more about cookies?

More information about cookies can be found on allaboutcookies.org

Cookie information

The following cookies are used on this website:

Cookie Name Description
WT_FPC
ACOOKIE
These Webtrends cookies identify if you come back to our site, how often, and what your preferences are. No personal information is stored in the cookie and no data is extracted from your computer/device. To read more about this cookie, including the provider's privacy policy, please visit www.webtrends.com.
ViewCount Tracks the number of visits made by a user on each page. It is used for the cookie banner for example.

The following cookies are additionally used on [the portal]:

Cookie Name Description
PHPSESSID This cookie is used by the server to keep track of the user and allows us to hold values against that user’s session (on the server). It uniquely identifies your user session, but no personal information is stored in the cookie.
Accessibility

Privacy Notice

Before we begin

This notice (Privacy Notice) applies to personal information held by members of the HSBC Group as data controllers, as described below. It explains what information we collect about you, as a mortgage intermediary, and any applicant/s, how we’ll use that information, who we’ll share it with, the circumstances when we’ll share it and what steps we’ll take to make sure it stays private and secure. It continues to apply even if your use of the Mortgage Intermediary Portal (Portal) or our Introducer Agreement with you comes to an end.

In this Notice, Mortgage Intermediary means the individual registered as a Mortgage intermediary and who has signed an Introducer Agreement with us.

Applicant means any potential or actual applicant applying for a mortgage offered by us through you, as the mortgage intermediary.

This Privacy Notice applies to your use of the Mortgage Intermediary Portal (the Portal). When we say ‘we’, we mean HSBC Bank plc and any other HSBC Group companies which act as a data controller in respect of your personal data. For the purposes of this notice, the relevant data controller is HSBC Bank plc, as the operator of the Portal in connection with the provision of these services. You can find the contact details of this entity and its data protection officer (where relevant) by [clicking here and selecting the relevant country]. If you also have a relationship with us a customer or with other parts of the HSBC Group or (e.g. HSBC business banking, first direct, M&S Bank or HSBC in any other countries), they’ll provide you with information separately where required.

The Mortgage Intermediary acts as data controller in respect of any information collected from the applicant before it is submitted to the Portal. As such, you are responsible for providing a privacy notice to your applicants and for obtaining any relevant consents prior to collecting their information for submission on the Portal.

You must also advise applicants that their data will be transmitted electronically and that you may track the progress of their application electronically, and you must ensure that the applicants receive our Privacy Notice prior to their information being entered into the Portal.

The information we collect from you (as described below) is required to provide you with access to the Portal, to fulfil our agreement with you, and to enable us to fulfil our legal and regulatory compliance obligations, as described below. Failure to provide your information, (or if all personal data submitted to us is not complete, accurate, true and correct) may mean it will not be possible to provide you with access to the Portal.

The information you submit on the Portal about applicants is required to process their request for a mortgage and provide them with decision. Details of how we will use applicants’ information can be found in our Privacy Notice. You must provide the applicant with our Privacy Notice prior to entering their information on the Portal. A different Privacy Notice may

What information we collect

We’ll only collect your information in line with relevant regulations and law. The information we collect may include:

Information that you, or your employer /the profile owner you represent /administrator, provide to us, e.g:

  • personal details, e.g. name, previous names, gender, date of birth, occupation;
  • information concerning your identity (e.g. passport information or other photo ID, National Insurance number);
  • contact details, e.g. home and work address, email address and phone numbers;
  • user login and subscription data, e.g. login credentials for the Portal ;
  • other information about you that you give us by filling in forms, surveys, or by communicating with us, whether face-to-face, by phone, email, online, or otherwise.

Information we collect or generate about you, e.g:

  • information about you or those you represent and their relationship with us, including the channels you use and your ways of interacting with us and the Portal as well information concerning complaints and disputes;
  • authentication information (e.g. your biometric information, such as your voice for voice ID, or fingerprint);
  • information included in customer documentation (e.g. a record of advice that we may have given you);
  • cookies, and similar technologies we use to recognise you, remember your preferences and tailor the content we provide to you - our cookie policy available at [http://www.intermediaries.hsbc.co.uk/legal-information.html#0] contains more details about how we use cookies;
  • investigations data, e.g. due diligence checks, sanctions and anti-money laundering checks, external intelligence reports, content and metadata related to relevant exchanges of information between and among individuals, organisations, including emails, voicemail, live chat;
  • records of correspondence and other communications between us, including email, telephone conversations, live chat, instant messages and social media communications;
  • information that we need to support our regulatory obligations, e.g. information about transaction details, purpose of payment, ordering customer information, counterparty/beneficiary information, identification documents, detection of any suspicious and unusual activity and information about parties connected to you or these activities.
  • information about the devices you use to access the Mortgage Intermediary portal, e.g. software and IP address.

Information we collect from other sources, e.g:

  • information from third party providers, e.g. client user information collected through 3rd party application service providers that we have a mutual relationship with e.g. accounting software providers who provide you with a service and you have separately agreed with can share information with.

How we’ll use your information

We’ll only use your information where we have your consent or we have another lawful reason for using it. These reasons include where we:

  • need to pursue our legitimate interests or that of the profile owner you represent (for example, as part of our provision of the Mortgage Intermediary services);
  • need to process the information to carry out an agreement we have with you or the profile owner you represent (as part of our provision of the Mortgage Intermediary services);
  • need to process the information to comply with a legal obligation;
  • believe the use of your information as described is in the public interest e.g. for the purpose of preventing or detecting crime.

The reasons we use your information include to:

  • provide you with access to the Portal, including identifying you and carrying out your instructions, sending alerts, service messaging and notification of activities;
  • carrying out credit checks
  • manage and maintain our relationship with you or the profile owner you represent
  • prevent or detect crime including fraud and financial crime, e.g. financing for terrorism and human trafficking;
  • security and business continuity and risk management;
  • product and service improvement, including data analytics to better understand how you use our services, and to respond to any service issues you may have;
  • protect our legal rights and comply with our legal obligations;
  • marketing relevant products or services, where permitted;
  • system or product development and planning, audit and administrative purposes.

Tracking or recording what you say or do

We may record details of your interactions with us, including emails, telephone conversations, live chats, video chats and any other kinds of communication. We may use these recordings to check your instructions to us, assess, analyse and improve our service, train our people, manage risk or to prevent and detect fraud and other crimes. We may also capture additional information about these interactions, such as information about the devices or software that you use.

Compliance with laws and regulatory compliance obligations

We’ll use your information to meet our compliance obligations, to comply with other laws and regulations and to share with regulators and other authorities that HSBC Group companies are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes). We’ll only do this on the basis that it’s needed to comply with a legal obligation or it’s in our legitimate interests and that of others.

Who we might share your information with

We may share your information with others where lawful to do so including where we or they:

  • need to in order to provide you with products or services you’ve requested, e.g. fulfilling a payment request, sharing information with third party vendors who we may utilise;
  • have a public or legal duty to do so, e.g. to assist with detecting and preventing fraud, tax evasion and financial crime;
  • need to in connection with regulatory reporting, litigation or asserting or defending legal rights and interests;
  • have a legitimate business reason for doing so, e.g. sharing your information and information about your use of your account with the profile owner you represent as part of our provision of the Mortgage Intermediary services;
  • to manage risk, verify your identity, enable another company to provide you with services you’ve requested, or assess your suitability for products and services;
  • have asked you for your permission to share it, and you’ve agreed.

We may share your information for these purposes with others including the profile owner you represent, any other HSBC group companies and any sub-contractors, agents or service providers who work for us or provide services to us or other HSBC Group companies (including their employees, sub-contractors, service providers, directors and officers). This includes sharing your information with third party information providers operating in financial markets where required in connection with their services.

How long we’ll keep your information

We keep your information in line with our data retention policy, for example, we’ll normally keep core banking data for a period of seven years from the end of our relationship with you.

This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise. We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes e.g. to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc. If we don’t need to retain information for this period of time, we may destroy, delete or anonymise it more promptly.

Transferring your information overseas

Your information may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful. We may need to transfer your information in this way to carry out our contract with you, to fulfil a legal obligation, to protect the public interest and / or for our legitimate interests. In some countries the law might compel us to share certain information, e.g. with tax authorities. Even in these cases, we’ll only share your information with people who have the right to see it. You can obtain more details of the protection given to your information when it is transferred outside the EEA by contacting us using the details in the ‘More details about your information’ section below.

Your rights

You have a number of rights in relation to the information that we hold about you. These rights include:

  • the right to access information we hold about you and to obtain information about how we process it;
  • in some circumstances, the right to withdraw your consent to our processing of your information, which you can do at any time. We may continue to process your information if we have another legitimate reason for doing so, although this may impact your ability to continue to have access to our products and services;
  • in some circumstances, the right to receive certain information in an electronic format and/or request we transmit it to a third party where this is technically feasible. The right only applies to information provided to us.
  • the right to request that we rectify your information if it’s inaccurate or incomplete;
  • in some circumstances, the right to request that we erase your information. We may continue to retain your information if we are entitled or required to retain it; and
  • the right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we are entitled to continue processing your information and / or to refuse that request.

You can exercise your rights by contacting us using the details set out below. You may also have a right to complain to the relevant data protection regulator in the country in which you live or work.

How we keep your information secure

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

More details about your information

If you’d like further information on anything we’ve said in this notice, or to contact our Data Protection Officer where applicable, please contact your usual HSBC representative. This Privacy Notice may be updated from time to time. We will post any updates on this page.

Our Privacy Notice

Our Privacy Notice

Before we begin

This notice (Privacy Notice) applies to personal information held by members of the HSBC Group as data controllers, as described below. It explains what information we collect about you, how we’ll use that information, who we’ll share it with, the circumstances when we’ll share it and what steps we’ll take to make sure it stays private and secure. It continues to apply even if your agreement for banking or other products and services with us ends. It should also be read alongside your banking terms and conditions, as these include sections relating to the use and disclosure of information.

This Privacy Notice covers any personal products or services you have with us, including savings, loans, credit cards, mortgages, investments and insurance. Sometimes we may need to provide you with separate or further information about specific products and services. This information will also apply. If you also have a relationship with other parts of the HSBC Group (e.g. HSBC business banking, first direct, M&S Bank or HSBC in any other countries), they’ll provide you with information separately where required.

Some of the links on our websites lead to other HSBC or non-HSBC websites with their own privacy notices, which may be different to this notice. You’ll need to make sure you’re happy with their privacy notices when using those other sites.

Wherever we’ve said ‘you’ or ‘your’, this means you, any authorised person on your account, anyone who does your banking or deals with us for you (e.g. trustees or executors, attorneys under a Power of Attorney) and other related people (including authorised signatories, partners, members and trustees).

When we say ‘we’, we mean HSBC Group companies which act as a data controller in respect of your personal data. Unless otherwise stated below, the data controller for the purposes of this notice will be HSBC Bank plc until 30 June 2018 and, from 1 July 2018, HSBC UK Bank plc. This is because we’re proposing to transfer your accounts, products and services to a new part of our bank, HSBC UK, from 1 July 2018. You shouldn’t notice any change to your accounts, product, services or relationship with us. However if we’ve had to make changes to your accounts, we’ll have written to you separately detailing how you’re affected.

The following HSBC Group companies will act as a data controller where you hold a product or service with them: HSBC Life (UK) Limited; HSBC Trust Company (UK) Limited; HSBC Executor and Trustee Company (UK) Limited; B&Q Financial Services Limited; Trustees of The HSBC Self-Invested Personal Pension; and HSBC Finance Limited.

The address for the HSBC Group companies set out in this notice is 8 Canada Square, London E14 5HQ. If you’d like to get in touch with us, you can also find contact details below.

What information we collect

We’ll only collect your information in line with relevant regulations and law. We may collect it from a range of sources and it may relate to any of our products or services you apply for, currently hold or have held in the past. We may also collect information about you when you interact with us, e.g. visit our websites or mobile channels, call us or visit one of our branches, or ask about any of our products and services.

Some of it will come directly from you, e.g. when you provide ID to open an account. It can also come from your financial advisor, broker or mortgage intermediary, other HSBC companies, or other sources you’ve asked us to obtain information from. We might also get some of it from publicly available sources. The information we collect may include:

What information we collect
  • personal details, e.g. name, previous names, gender, date and place of birth;
  • contact details, e.g. address, email address, landline and mobile numbers;
  • information concerning your identity e.g. photo ID, passport information, National Insurance number, National ID card and nationality;
  • market research, e.g. information and opinions expressed when participating in market research;
  • user login and subscription data, e.g. login credentials for phone and online banking and mobile banking apps;
  • other information about you that you give us by filling in forms or by communicating with us, whether face-to-face, by phone, email, online, or otherwise.
Information we collect or generate about you, e.g. :
  • your financial information and information about your relationship with us, including the products and services you hold, the channels you use and your ways of interacting with us, your ability to get and manage your credit, your payment history, transactions records, market trades, payments into your account including salary details and information concerning complaints and disputes;
  • information we use to identify and authenticate you, e.g. your signature and your biometric information, such as your voice for voice ID, additional information that we receive from external sources that we need for compliance purposes;
  • geographic information, e.g. about which branches or ATMs you use;
  • information included in customer documentation, e.g. a record of advice that we may have given you;
  • marketing and sales information, e.g. details of the services you receive and your preferences;
  • cookies and similar technologies we use to recognise you, remember your preferences and tailor the content we provide to you – our cookie policy contains more details about how we use cookies and can be found at www.hsbc.co.uk/1/2/cookie-policy;
  • risk rating information, e.g. credit risk rating, transactional behaviour and underwriting information;
  • investigations data, e.g. due diligence checks, sanctions and anti-money laundering checks, external intelligence reports, content and metadata related to relevant exchanges of information between and among individuals, organisations, including emails, voicemail, live chat;
  • records of correspondence and other communications between us, including email, live chat, instant messages and social media communications;
  • information that we need to support our regulatory obligations, e.g. information about transaction details, detection of any suspicious and unusual activity and information about parties connected to you or these activities.
Information we collect from other sources, e.g. :
  • information you’ve asked us to collect for you, e.g. information about your accounts or holdings with other companies including transaction information;
  • information from third party providers, e.g. information that helps us to combat fraud or that relates to your social interactions (including your communications via social media, between individuals, organisations, prospects and other stakeholders acquired from companies that collect combined information).

How we’ll use your information

We’ll only use your information where we have your consent or we have another lawful reason for using it. These reasons include where we:

  • need to pursue our legitimate interests;
  • need to process the information to carry out an agreement we have with you;
  • need to process the information to comply with a legal obligation; /li>
  • believe the use of your information as described is in the public interest, e.g. for the purpose of preventing or detecting crime.

The reasons we use your information include to:

  • deliver our products and services;
  • carry out your instructions, e.g. to fulfil a payment request;
  • manage our relationship with you, including (unless you tell us otherwise) telling you about products and services we think may be relevant for you;
  • understand how you use your accounts and services;
  • banking operations support;
  • prevent or detect crime including fraud and financial crime, e.g. financing for terrorism and human trafficking;
  • security and business continuity;
  • risk management;
  • online banking, mobile apps and other online product platforms;
  • product and service improvement;
  • data analytics to better understand your circumstances and preferences so we can make sure we can provide you with the best advice and offer you a tailored service;
  • protect our legal rights and comply with our legal obligations;
  • correspond with solicitors, surveyors, valuers, other lenders, conveyancers and third party intermediaries;
  • system or product development and planning, insurance, audit and administrative purposes.

Further details of how we’ll use your information can be found in the Appendix below.

How we make decisions about you

We may use automated systems to help us make decisions, e.g. when you apply for products and services, to make credit decisions and to carry out fraud and money laundering checks. We may use technology that helps us identify the level of risk involved in customer or account activity, e.g. for credit, fraud or financial crime reasons, or to identify if someone else is using your card without your permission.

You may have a right to certain information about how we make these decisions. You may also have a right to request human intervention and to challenge the decision. More details can be found in the ‘Your rights’ section below.

Tracking or recording what you say or do

To help keep you and your money safe, we may record details of your interactions with us. We may record and keep track of conversations you have with us including phone calls, face-to-face meetings, letters, emails, live chats, video chats and any other kinds of communication. We may use these recordings to check your instructions to us, assess, analyse and improve our service, train our people, manage risk or to prevent and detect fraud and other crimes. We may also capture additional information about these interactions, e.g. telephone numbers that you call us from and information about the devices or software that you use. We use closed circuit television (CCTV) in and around our sites and these may collect photos or videos of you, or record your voice.

Compliance with laws and regulatory compliance obligations

We’ll use your information to meet our compliance obligations, to comply with other laws and regulations and to share with regulators and other authorities that HSBC Group companies are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes). We’ll only do this on the basis that it’s needed to comply with a legal obligation or it’s in our legitimate interests and that of others.

Marketing and market research

We may use your information to provide you with details about HSBC products and services, and also products and services from our partners and other relevant third parties. We may send you marketing messages by post, email, telephone, text or secure messages. You can change your mind on how you receive marketing messages or choose to stop receiving them at any time. To make that change, please contact us in the usual way.

If you ask us not to send you marketing, it may take us a short period of time to update our systems and records to reflect your request, during which time you may continue to receive marketing messages. Even if you tell us not to send you marketing messages, we’ll continue to use your contact details to provide you with important information, such as changes to your terms and conditions or if we need to tell you something to comply with our regulatory obligations.

We may use your information for market research and to identify trends. Market research agencies acting on our behalf may get in touch with you by post, telephone, email or other methods of communication to invite you to take part in research. We won’t invite you to take part in research using a communication method if you’ve asked us not to get in touch that way. Any responses that you provide whilst participating in market research will be reported back to us anonymously unless you give us permission for your details to be shared.

Who we might share your information with

We may share your information with others where lawful to do so including where we or they:

  • need to in order to provide you with products or services you’ve requested, e.g. fulfilling a payment request;
  • have a public or legal duty to do so, e.g. to assist with detecting and preventing fraud, tax evasion and financial crime;
  • need to in connection with regulatory reporting, litigation or asserting or defending legal rights and interests;
  • have a legitimate business reason for doing so, e.g. to manage risk, verify your identity, enable another company to provide you with services you’ve requested, or assess your suitability for products and services;
  • have asked you for your permission to share it, and you’ve agreed.

We may share your information for these purposes with others including:

  • other HSBC group companies and any sub-contractors, agents or service providers who work for us or provide services to us or other HSBC Group companies (including their employees, sub-contractors, service providers, directors and officers);
  • any joint account holders, trustees, beneficiaries or executors;
  • people who give guarantees or other security for any amounts you owe us;
  • people you make payments to and receive payments from;
  • your beneficiaries, intermediaries, correspondent and agent banks, clearing houses, clearing or settlement systems, market counterparties and any companies you hold securities in through us, e.g. stocks, bonds or options;
  • other financial institutions, lenders and holders of security over any property you charge to us, tax authorities, trade associations, credit reference agencies, payment service providers and debt recovery agents;
  • any fund managers who provide asset management services to you and any brokers who introduce you to us or deal with us for you;
  • any entity that has an interest in the products or services that we provide to you, including if they take on the risk related to them;
  • any people or companies where required in connection with potential or actual corporate restructuring, merger, acquisition or takeover, including any transfer or potential transfer of any of our rights or duties under our agreement with you;
  • law enforcement, government, courts, dispute resolution bodies, our regulators, auditors and any party appointed or requested by our regulators to carry out investigations or audits of our activities;
  • other parties involved in any disputes, including disputed transactions;
  • fraud prevention agencies who’ll also use it to detect and prevent fraud and other financial crime and to verify your identity;
  • anyone who provides instructions or operates any of your accounts on your behalf, e.g. Power of Attorney, solicitors, intermediaries, etc;
  • anybody else that we’ve been instructed to share your information with by either you, a joint account holder or anybody else who provides instructions or operates any of your accounts on your behalf;
  • our card processing supplier(s) to carry out credit, fraud and risk checks, process your payments, issue and manage your card;
  • insurers so they can provide you with a quote or cover. For further details please refer to your policy documentation. You can also refer to hsbc.co.uk for more information.
Sharing aggregated or anonymised information

We may share aggregated or anonymised information within and outside of the HSBC Group with partners such as research groups, universities or advertisers. You won’t be able to be identified from this information, e.g. we may share information about general spending trends in the UK to assist in research.

How long we’ll keep your information

We keep your information in line with our data retention policy. For example we’ll normally keep your core banking data for a period of seven years from the end of our relationship with you. This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise.

We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, e.g. to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc.

If we don’t need to retain information for this period of time, we may destroy, delete or anonymise it more promptly.

Transferring your information overseas

Your information may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful. We may need to transfer your information in this way to carry out our contract with you, to fulfil a legal obligation, to protect the public interest and / or for our legitimate interests. In some countries the law might compel us to share certain information, e.g. with tax authorities. Even in these cases, we’ll only share your information with people who have the right to see it.

You can obtain more details of the protection given to your information when it’s transferred outside the EEA by contacting us using the details in the ‘More details about your information’ section below.

Your rights

You have a number of rights in relation to the information that we hold about you. These rights include:

  • the right to access information we hold about you and to obtain information about how we process it;
  • in some circumstances, the right to withdraw your consent to our processing of your information, which you can do at any time. We may continue to process your information if we have another legitimate reason for doing so;
  • in some circumstances, the right to receive certain information you have provided to us in an electronic format and / or request that we transmit it to a third party;
  • the right to request that we rectify your information if it’s inaccurate or incomplete;
  • in some circumstances, the right to request that we erase your information. We may continue to retain your information if we’re entitled or required to retain it;
  • the right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we’re entitled to continue processing your information and / or to refuse that request.

You can exercise your rights by contacting us using the details set out in the ‘More details about your information’ section below. You also have a right to complain to the UK Information Commissioner’s Office by visiting www.ico.org.uk, or to the data protection regulator in the country where you live or work.

Credit Reference Checks, Fraud and Money Laundering

Credit Reference Checks

If you apply for new products or services (including credit like a mortgage, personal loan or credit card), we may perform credit and identity checks on you with one or more credit reference agencies (CRAs). When you use our banking services, we may also make periodic searches at CRAs to manage your account with us.

To do this, we’ll supply your personal information to CRAs and they’ll give us information about you. This will include information from your credit application and about your financial situation and financial history. CRAs will supply us with both public (including the electoral register) and shared credit information, financial situation, history and fraud prevention information.

We may use this information to:

  • assess if we can offer you credit and whether you can afford to take the product you applied for;
  • verify the accuracy of the data you’ve provided to us;
  • prevent criminal activity, fraud and money laundering;
  • manage your account(s);
  • trace and recover debts;
  • ensure any offers provided to you are appropriate to your circumstances.

We’ll continue to exchange information about you with CRAs while you have a relationship with us. We’ll also inform the CRAs about your repayment history. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.

When CRAs receive a search request from us they’ll place a search footprint on your credit file that may be seen by other lenders. If you apply for a bank account or credit (such as where you apply for a mortgage, loan or credit card), we’ll get details of your credit history from a CRA (and share information about you with the CRA) and use this information to work out how much you can afford to borrow or pay back. We may also carry out further credit checks on you while you’re a customer to maintain an accurate and up-to-date record of your credit history. We may use your information to verify the accuracy of the information you’ve provided to us, prevent criminal activity, fraud and money laundering, manage your account(s), trace and recover debts and ensure any offers provided to you are appropriate to your circumstances.

If you’re making a joint application, or tell us that you have a spouse or financial associate, we’ll link your records together. You should discuss this with them, and share this information with them before submitting the application. CRAs will also link your records together and these links will remain on your and their files until you or your partner successfully files for a disassociation with the CRAs to break that link.

The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail on their websites. They’ve created a joint document called the Credit Reference Agency Information Notice (CRAIN) which is accessible from each of the three CRAs – clicking on any of these three links will also take you to the same CRAIN document:

Credit reference agencies:

To comply with the law and for our own legitimate interest to enable us to assess and manage risk, we can share details about your financial situation and financial history with CRAs, fraud prevention agencies, etc. This includes information on any bank accounts or credit you have with us, including:

  • how you manage your bank accounts or credit;
  • if you owe us money;
  • if we have concerns about financial crime;
  • if you haven’t kept up with your payments or paid off what you owe us (unless there’s a genuine dispute over how much you owe us), or if you’ve agreed and stuck to a repayment plan.
Fraud Prevention Agencies

We’ll carry out checks with fraud prevention agencies for the purposes of preventing fraud and money laundering, and to verify your identity before we provide products and services to you. These checks require us to process personal information about you.

The personal information you provide or which we’ve collected from you, or received from third parties, will be used to carry out these checks in order to prevent fraud and money laundering, and to verify your identity.

We’ll process personal information, such as your name, address, date of birth, contact details, financial information, employment details, and device identifiers e.g. IP address.

We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.

We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering and to verify your identity. This enables us to protect our business and to comply with laws that apply to us. This processing is also a contractual requirement of any of our products or services you use.

Fraud prevention agencies can hold your personal data for different periods of time. If they’re concerned about a possible fraud or money laundering risk, your data can be held by them for up to six years.

Consequences of Processing

If we, or a fraud prevention agency, have reason to believe there’s a fraud or money laundering risk, we may refuse to provide the services and credit you’ve requested. We may also stop providing existing products and services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services to you. The information we hold about you could make it easier or harder for you to get credit in the future.

To find out more about credit and fraud checks, read our ‘Guide to Credit Scoring, Credit Reference and Fraud Prevention Agencies’ leaflet. You can get it from our website, in any of our branches or you can request a paper copy by contacting us in your preferred way. To find out more about fraud prevention agencies and how they manage your information, please visit https://www.cifas.org.uk/privacy-notice.

What we need from you

You’re responsible for making sure the information you give us is accurate and up to date, and you must tell us if anything changes as soon as possible. If you provide information for another person on your account, you’ll need to direct them to this notice and make sure they agree to us using their information as described in it.

How we keep your information secure

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

How we keep your information secure

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

How we keep your information secure

If you’d like further information on anything we’ve said in this Privacy Notice, or to contact our Data Protection Officer, contact us at P.O. Box 6201, Coventry CV3 9HW addressed ‘for the attention of the DPO’.

This Privacy Notice may be updated from time to time and the most recent version can be found at hsbc.co.uk/privacy-notice

Appendix – How we process your information

We’ll use your information for purposes including:

  • To deliver our products and services (including insurance): administer your accounts, or process your transactions. We’ll do this in order to perform our contract with you;
  • Banking operations support: we’ll use your information to enable the provision and function of our banking services in line with regulation, laws and customer rights and interests, e.g. complaints management and exit management. The lawful reasons for processing these are legitimate interest, legal obligation and in order to perform our contract with you;
  • To prevent and detect crime including, e.g. fraud, terrorist financing and money laundering: this will include monitoring, mitigation and risk management, carrying out customer due diligence, name screening, transaction screening and customer risk identification. We do this to comply with our legal obligations and because it’s in our legitimate interest. We may share your information with relevant agencies, law enforcement and other third parties where the law allows us to for the purpose of preventing or detecting crime. Additionally we and other financial institutions may take steps to help prevent financial crime and manage risk. We’ll do this because we have a legitimate interest, a legal obligation to prevent or detect crime or it’s in the public interest. We may be required to use your information to do this, even if you’ve asked us to stop using your information. That could include (among other things):
    • screening, intercepting and investigating any payments, instructions or communications you send or receive (including drawdown requests and application forms);
    • investigating who you’re paying or who’s paying you, e.g. checks on payments into and out of your account and other parties related to those payments;
    • passing information to relevant agencies if we think you’ve given us false or inaccurate information, or we suspect criminal activity;
    • combining the information we have about you with information from other HSBC companies to help us better understand any potential risk;
    • checking whether the people or organisations you’re paying or receiving payments from are who they say they are, and aren’t subject to any sanctions.
    >
  • Risk management: we’ll use your information to measure, detect and prevent the likelihood of financial, reputational, legal, compliance or customer risk. This includes credit risk, traded risk, operational risk and insurance risk (e.g. for underwriting or claims management purposes). We’ll do this because we have a legitimate interest in ensuring that we carry out a proper risk assessment prior to providing credit, insurance or other finance;
  • Online Banking, Mobile Apps and other online product platforms: we’ll use your information to allow us to provide you with access to HSBC online platforms and mobile apps (e.g. the HSBC UK Mobile Banking App and Connected Money from HSBC). The platform may allow you to directly or indirectly communicate with us through mobile apps, such as using Online Banking, or applying for products and services online. The lawful basis for using your information for this purpose is to perform our contract with you or that processing for this purpose is in our legitimate interest;
  • Product and service improvement: we’ll analyse your information to identify possible service and product improvements. Where we provide you with aggregated information services (e.g. Connected Money), we’ll use your information to understand how you use these products which may include your transactional information from other financial institutions to help improve our products and services. The lawful basis for processing your information for this purpose is our legitimate interest. We do this to improve our products and services to best meet the need of our customers;
  • Data analytics for tailored services: we’ll analyse your information to identify relevant opportunities to promote products and services to existing or prospective customers. This may include reviewing historical customer transactional behaviour, comparison of customer activity or (if you use Connected Money) it may include an analysis of your transactional information from other financial institutions. We do this to help us provide you with products and services we think will be of most relevance to you. The lawful basis for using your information in this way is our legitimate interest;
  • Marketing: we’ll use your information to provide you with information about HSBC products and services, and also products and services from our partners and other relevant third parties. The lawful basis for this is our legitimate interest. We may need your consent to communicate by certain channels and we’ll always make sure we get this where we need to. You can change your mind on how you receive marketing messages or choose to stop receiving them at any time. To make that change, contact us in the usual way;
  • Protecting our legal rights: we may need to use your information to protect our legal rights, e.g. in the case of defending or the protection of legal rights and interests (e.g. collecting money owed, enforcing or protecting our security or defending rights of intellectual property); court action; managing complaints or disputes; in the event of a restructuring of companies or other mergers or acquisition. This may be in connection with action taken against you or other persons, e.g. joint borrowers or persons who give a guarantee or other security for your obligations to us. We’d do this on the basis that it’s in our legitimate interest.

This website is for the use of FCA authorised mortgage intermediaries only.

If you reproduce any information contained in this website, to be used with or advise clients, you must ensure it follows the FCA's advising and selling standards.

HSBC use cookies to give you the best possible experience on our websites. View our Cookie Policy.