Old couple playing in a wheat field with a young girl

Data Protection and Privacy Policy

Website Privacy Notice

  1. INTRODUCTION

Blumont Annuity Company UK Ltd is committed to compliance with applicable legal and regulatory requirements relating to data protection and privacy. This privacy notice provides details on how BAC UK uses or processes your personal data when you use this website and as otherwise described below.

BAC UK acts as a controller in respect of your personal data.

“BAC UK”, “we”, “us” and “our” means Blumont Annuity Company UK Ltd being the entity to which this website relates.

  1. THE TYPES OF PERSONAL DATA WE COLLECT

BAC UK may collect and process the following categories of personal data about you including from the sources identified as follows:

  1. Website Data. When you browse our website, depending on how you interact with the website, we may collect:
    • Technical information including device-specific information such internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices used to access the website; and
    • Usage data concerning your navigation throughout the website, and other technical and browsing preferences including your location and entry point to the website. We use cookies and similar technologies and further detail s provided below.
  2. Communications Data. We may collect personal data that you provide when you contact BAC UK for any reason, such as to express an interest in obtaining additional information about our services, direct questions or concerns about our services, or if you download certain content. Such information may include contact information such as name, phone number, location and email address.

 

  1. HOW WE COLLECT YOUR PERSONAL DATA

BAC UK may collect personal data:

  1. Directly from you, including, for example, through your use of the website, when you send us an email, visit our premises, or otherwise contact or communicate with us;
  2. From automated tracking technology and monitoring tools, for example, cookies and similar technologies, that track your access and use of our website and other online services. Please refer to our Cookie Policy for further information, which can be found here;
  3. From within BAC UK and from our affiliates;
  4. From publicly available sources; and
  5. From other organisations, for example pension administrators and other service providers.

 

  1. HOW WE USE YOUR PERSONAL DATA

Your personal data may be collected, stored, disclosed and processed by BAC UK to the extent necessary for the following purposes and to the extent one or more of the legal bases below applies:

Use of Data

Legal bases

To understand your needs and interests and to respond to your enquiries

Legitimate interests

To comply with, and in order to assess compliance with, applicable laws, rules and regulations, industry codes, voluntary codes we decide to adopt, or good practice, and internal policies and procedures including the website’s terms of use;

Compliance with a legal obligation

Legitimate interests

Performance of a contract

For ongoing review and improvement of the information, content and services provided on the website to ensure it is user-friendly and to prevent any potential disruptions such as cyber-attacks;

Legitimate interests

For the operation and management of our business including: (i) to effectively and efficiently administer and manage the operation of the business; (ii) to maintain compliance with internal policies and procedures; (iii) to offer optimal, up-to-date security solutions for mobile devices and IT systems; or (iv) for internal research purposes;

Legitimate interests

For the use of cookies or similar technologies to process your personal data in relation to the use of our website;

Consent

Legitimate interests

To analyse and report on the website traffic and usage trends;

Consent

Legitimate interests

To enable you to use and access functionality provided by the website;

Consent

Legitimate interests

To conduct analysis required to detect malicious data and understand how this may affect your IT system;

Consent

Legitimate interests

For statistical monitoring and analysis of current attacks on devices and systems for the on-going adaption of the solutions provided to secure systems and devices against current attacks, or in-depth threat analysis; and

Consent

Legitimate interests

For purposes otherwise set out in this privacy notice.

Legitimate interests

BAC UK will only rely on the legal basis of legitimate interests if the use of your personal data is necessary for our legitimate interests or the legitimate interests of a third party and such interests are not overridden by your rights or interests.

  1. DISCLOSURE OF YOUR PERSONAL DATA TO THIRD PARTIES

BAC UK may share or provide access to your personal data among its affiliates and business units and third party agents, service providers and contractors outside of BAC UK including in the following cases:

  1. Database Management. For the purpose of the administration and maintenance of the databases storing personal data (for example, BAC UK’s cloud hosting providers and system development and support providers);
  2. System Protection. For the purpose of detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and pursuing legal action against those responsible; debugging to identify and repair errors that impair intended functionality; or
  3. Compliance with Legal and Regulatory Obligations. To the extent such processing is necessary to comply with any legal obligation, rule, regulation or internal BAC UK policies and procedures, including (without limitation) in order to comply with statutory reporting requirements and disclosures to regulatory authorities, or to establish, exercise or defend its legal rights. Personal data may be disclosed to third parties including: regulatory bodies; government agencies; law enforcement agencies; or courts.

 

  1. LINKS TO OTHER WEBSITES

The website may contain links to other third party websites. Linked sites may have their own privacy notices or policies, which you should review. BAC UK is not responsible for the content of third party websites and your use of such third party websites is at your own risk.

  1. TRANSFERS OF PERSONAL DATA

Where personal data is transferred to and processed in a country outside of the UK, we take steps to provide appropriate safeguards to protect your personal data, including by entering into approved standard contractual clauses obliging recipients to protect your personal data and only transferring personal data to the extent that an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data is ensured in compliance with data protection laws.

If you want further information on the specific mechanisms used by us when transferring your personal data outside of the UK, please contact us using the contact details contained in this privacy notice.

  1. RETENTION AND DESTRUCTION OF PERSONAL DATA

We will only keep your personal data for so long as it is necessary for our purposes of processing, such as to fulfil:

  1. our business purposes of processing; or
  2. legal and regulatory obligations.

Once it is no longer necessary for BAC UK to retain your personal data, we will take reasonable steps using appropriate technical methods in the circumstances to delete or destroy your personal data or to ensure that the information is anonymised.

  1. YOUR RIGHTS

To the extent BAC UK processes your personal data, you have certain legal rights. These rights may, depending on the circumstances, include the following:

  1. Right of Access: the right to confirm whether we process your personal data, to obtain information regarding the processing of your personal data and access to the personal data;
  2. Right to Rectification: the right to ask us to rectify information you think is inaccurate or incomplete;
  3. Right to Erasure: the right to ask us to delete your personal data in certain cases;
  4. Right to Restriction of Processing: the right to ask us to restrict the processing of your personal data in certain cases;
  5. Right to Object to Processing: the right to object to processing in certain cases;
  6. Right to Data Portability: in the case that you have given us personal data, the right to ask us to transfer it to another entity or to give it to you; and
  7. Right to withdraw consent: where you provided consent for certain processing activities, you have the right to withdraw your consent at any time. Please note, however, that this will not affect the lawfulness of any collection, processing, use or disclosure undertaken before your withdrawal of consent.

You can enquire about your rights by contacting BAC UK using the contact details listed below.

  1. CHILDREN

The website is intended for use by those over 18. We do not knowingly solicit or collect personal data on the website from children under the age of 18.

  1. CONTACT US

You may want to contact us to:

  • Ask any questions you have in relation to the information contained in this privacy notice.
  • Exercise any of your rights under data protection laws.
  • Request a printed copy of this privacy notice.
  • Request a version of this privacy notice printed in large print or braille.
  • Request an audio version of this privacy notice.
  • Make a complaint (see below).

To contact us you can:

  • Call us on 0207 7076 6802; or
  • Email our Data Protection Officer at DPO@blumontannuity.co.uk ; or
  • Write to us at the following address: BAC UK Data Protection Officer, Level 26, One Canada Square, Canary Wharf, London, E14 5AB.

How to make a complaint

If you believe there is a problem or have a concern relating to how we process your personal data or the contents of this privacy notice, please contact us in the first instance. We hope that we will be able to address the problem or concern to your satisfaction. However, you also have the right to make a complaint to the Information Commissioner’s Office (“ICO”). The process for making a complaint to the ICO is available here: https://ico.org.uk/ make-a-complaint

The ICO’s contact details are as follows:

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone: 0303 123 1113

Web: https://ico.org.uk

  1. Updates

This Notice may change from time to time, and you should review it periodically. This Notice was last updated on 21 February 2025.