This notice explains how the trustees of the Scheme use and protect the personal information that they hold about members and other beneficiaries of the Scheme. Contact details for the trustees are set out at the end of this notice. The trustees change from time to time, but you can find out the names of the current trustees by using the contact details at the end of this notice.
The trustees are a "controller" for the purposes of the data protection laws. The current data protection laws are set out in the Data Protection Act 1998. This will be replaced by new data protection laws with effect from 25 May 2018. We refer to both the current and the new data protection laws as the “Data Protection Laws” in this privacy notice.
You should share this notice with your family and dependants where you have provided us with personal information about them.
Personal information broadly means information that identifies (or which could, with other information that we hold or are likely to hold, identify) a living individual.
This includes any information provided to us by or on behalf of you, your employer or HM Revenue & Customs in relation to your membership of the Scheme.
We will collect and process the information about you that you provide by filling in forms and by corresponding with us and our service providers by telephone, email or otherwise. We will also collect and process information about you that is provided to us by your employer or by HM Revenue & Customs.
We may hold and process any or all of the following personal information about you:
We hold this information because we need it to administer the Scheme. Without your personal information, we cannot provide you and your dependants with the correct benefits, at the right time. For example, we may need this information to verify your membership of the Scheme, to calculate your pension or to assess whether you are entitled to a specific benefit or how the tax rules apply to you.
We may use unique identifier information, such as your National Insurance number, passport number, pension or member reference number and employee number (where applicable) for the purposes of sending communications to you and verifying your identity.
In some instances, we may need to hold and process information relating to your physical or mental health, for example if you are applying for a pension on grounds of ill-health. We will ask for your explicit consent to this, unless there is an alternative legal basis for processing this information under the Data Protection Laws. Once you have given your consent, you can withdraw it at any time by writing to us using the contact details below.
Data Protection Laws require us to meet certain conditions before we are allowed to use your personal information in the way described in this privacy notice.
Data Protection Laws require us to meet certain conditions before we are allowed to use your personal information in the way described in this privacy notice.
We will keep the amount of personal information collected and the extent of any processing to a minimum.
We will only process ‘sensitive’ or ‘special categories' of personal information under the Data Protection Laws (e.g. information about your health) where you have explicitly consented to this or where there is an alternative legal basis for processing this information under the Data Protection Laws. This may mean that you will be asked to sign consent forms in the future. If you don't consent to our processing this information when asked to do so, it may mean that we are unable to pay benefits to you or your dependants. Once you have given your consent, you can withdraw it at any time by writing to us using the contact details below.
We will only process ‘sensitive’ or ‘special categories' of personal information under the Data Protection Laws (e.g. information about your health) where you have explicitly consented to this or where there is an alternative legal basis for processing this information under the Data Protection Laws. This may mean that you will be asked to sign consent forms in the future. If you don't consent to our processing this information when asked to do so, it may mean that we are unable to pay benefits to you or your dependants. Once you have given your consent, you can withdraw it at any time by writing to us using the contact details below.
We may use your personal information for a number of purposes relating to the administration of the Scheme, including the following:
We will hold your personal information on our systems for as long as is necessary for the Scheme to provide benefits to you or your dependants.
So, for example, if your pension is paid from the Scheme when you retire, we will hold your information for the rest of your life, until your pension ceases on your death. If a pension is payable to any of your dependants after your death, we will continue to hold your information for an indefinite period after all benefits payable in respect of you or to your dependants have ceased, in case there are any further queries about your membership of the Scheme.
If you cease to be a member of the Scheme (e.g. because you transfer your benefits to another pension arrangement), we will hold your information for as long as you are a member and then for an indefinite period after you cease to be a member, in case any further queries arise about your membership of the Scheme.
Where appropriate for the purposes of administering the Scheme, we may share your information with:
The entities listed above may also share personal data with their own business suppliers, for example in relation to the operation of IT systems or where they outsource part of their services.
Some of these entities may also be controllers under the Data Protection Laws. The trustee board is currently made up of individual trustees and a corporate trustee, Zedra Inside Pensions Limited, who are collectively a data controller. In the first instance you should contact the trustees using the contact details below if you have any queries.
A similar notice is available from Isio at the following web address:
Aon also has a notice available at the following web address:
Please note that some of the Scheme's former service providers may continue to hold information about you for their own record keeping purposes once they have ceased to be involved with the Scheme.
The data that we collect from you will usually be stored inside the UK.
However, if you live or work outside of the UK, we may need to transfer your personal data outside of the UK to respond to any queries that you may have. Where this applies, we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.
Data may also be transferred outside the UK where the Scheme's service providers host data outside the UK. These transfers will be governed by the Data Protection Laws.
We may transfer your data outside the UK to a country which the UK government considers ensures an adequate level of protection of personal data. These “adequacy regulations” currently apply to a number of countries, including countries within the European Economic Area (EEA). If there are no adequacy regulations in place, we may only transfer your data if there are adequate safeguards and if you would have enforceable legal rights and effective legal remedies in respect of your data. You can contact us if you would like more information about these safeguards.
The accuracy of the information that we hold about you is important to us. If any of the information that we hold is inaccurate or out of date, please let us know using the contact details set out at the end of this notice.
You have a number of rights under the Data Protection Laws in relation to the way we process your personal data, namely:
If you wish to exercise any of these rights, please contact the Scheme Secretary, Hazel Bloomfield at Isio, 22-24 Queen Square, Bristol, BS1 4ND.
We will aim to respond to any request received from you within one month from your request. Access to your data will usually be provided free of charge, although in certain circumstances we may make a small charge where entitled to do so under the Data Protection Laws.
Please note that we may be unable to delete or remove your data whilst we still need this to administer the Scheme – see the section 'How long do we keep information for?' above.
If you are not happy with the way in which your personal information is held or processed, please contact us using the details below. You also have the right to complain about data protection matters to the Information Commissioner's Office (ICO).
The ICO is the UK's independent body set up to uphold information rights. You can find out more about the ICO on its website (https://ico.org.uk/). The ICO can be contacted by calling 0303 123 1113.
This privacy notice is current as at November 2022.
We keep our privacy notice under regular review, and may change it at any time. We will tell you about any significant changes
If you have any queries about this privacy notice, or wish to exercise any of the rights above, please contact the Scheme Secretary, Hazel Bloomfield at Isio, 22-24 Queen Square, Bristol, BS1 4ND.
If you have any other questions about the Scheme, please contact: Hazel Bloomfield, Isio, 22-24 Queen Square Bristol, BS1 4ND.
Please click here to download a copy of this notice.