Candidate Privacy Notice
Please note, local law (and in certain circumstances, local language) versions of this notice are in the process of being finalised and will be available shortly. Local language versions will be available if you are based in Czech Republic, France, Germany, Italy, Lithuania, Portugal or Spain. If you have any queries in relation to local versions of this notice in the meantime, please contact your recruiter.
Barclays Bank (referred to in this notice as “we”) is committed to protecting the personal data we hold about you. For the purposes of this notice, you are a “candidate”.
This notice explains what personal data we collect about you, why we need it, what we do with it and how long we keep it. We will only collect personal data about you, which is required for specific purposes and where there is a legal basis for processing it.
“Personal data” is information, or a combination of pieces of information that could reasonably allow an individual to be identified. Certain types of personal data are known as “special categories of data”. These are types of personal data which are considered particularly sensitive (including personal data relating to race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual orientation, genetic, biometric or health data). We do not collect special categories of personal data in countries where the collection is prohibited.
“Data controller” is the Barclays entity that decides how and why your personal data is used. The data controller in relation to your personal data is likely to be Barclays Services Limited (“Barclays”), 1 Churchill Place, Canary Wharf, London, E14 5HP. There may be some local variations to this in certain jurisdictions. If your application is successful, your recruiter will provide details of the Barclays entity with which you will have a work relationship (the Barclays entity with which you have a work relationship will be the data controller in relation to your personal data once you have commenced your role at Barclays).
1. What information do we collect about you?
Barclays collects personal data from you during the recruitment process. We also collect personal data about you from our service providers and agents (such as third party recruitment agencies (this may include details of your qualifications and experience) and providers who assist us with candidate screening (this may include details of special categories of personal data)).
Examples of personal data we may collect are:
- identity and contact details (including basic personal details, identification data, and to the extent permitted by applicable law, diversity monitoring data);
- details of your previous experience (including information relating to your previous roles and experience);
- special categories of personal data (to the extent permitted by applicable law, in the context of diversity monitoring and candidate screening).
A full list of personal data we collect can be found
HERE.
We may also check publicly available sources such as LinkedIn or similar sites for information regarding your skills, experience or qualifications.
2. How do we use your personal data?
To the extent necessary and as permitted by applicable law, we may use your personal data for the purposes of recruitment administration (including profiling) and compliance with our legal/regulatory obligations.
A full list of our processing activities and the legal grounds we have for our processing activities can be found
HERE.
3. What are our legal grounds for processing your personal data?
We will only collect and process your data where there is a legal basis for doing so. The most common bases for processing personal data are:
- to comply with legal / regulatory requirements;
- where we have a legitimate interest in processing your personal data.
A full list of our processing activities and the legal grounds we have for our processing activities can be found
HERE.
4. With whom might we share your personal data?
All the personal data we hold about you will be processed by our staff and where required, we share your personal data with other Barclays companies, regulators, public authorities, vendors and service providers, for the purposes mentioned. For more details on the different categories of recipients with whom we might share your personal data please click
HERE.
Barclays shares personal data with recipients in countries with different data protection laws where required by law or where we put in place contracts or other arrangements to ensure adequate protection of your personal data. For more information on our data transfer arrangements please click
HERE.
5. How long do we keep hold of your personal data?
Barclays will only retain your personal data following your application for a period of time, depending on the type of personal data, and the purposes for which we hold it. Barclays will only retain your personal data to enable us to:
• maintain business records for analysis and/or audit purposes;
• comply with legal record retention requirements;
• comply with requests of regulators and authorities in connection with their duties;
• defend or bring any existing or potential legal claims; or
• deal with any complaints regarding your application.
The retention period is often linked to the amount of time available to bring a legal claim. We will retain your personal data after this time if we are required to do so to comply with the law, if there are outstanding claims or complaints that will reasonably require your personal data to be retained, or for regulatory or technical reasons. If we retain your personal data, we will continue to make sure your privacy is protected.
If you are unsuccessful in your application, we may retain your personal data in our talent pool in order to contact you in the future in relation to other roles at Barclays which we think may be of interest. Please let your recruiter know if you do not wish to be contacted in relation to other roles at Barclays.
6. What rights do you have in relation to the personal data we hold?
Barclays use of your personal data is subject to an extensive framework of safeguards that help make sure that your rights in relation to your personal data are protected. These include the information given to you about how your personal data will be used and how you can exercise your rights to obtain your personal data, have it corrected, restricted or deleted, object to it being processed, to obtain and reuse your personal data and complain.
You have the right not to be subject to a decision made by automated processing without human intervention, including profiling, which significantly affects you.
As part of the application process, we will ask you certain qualifying questions (such as whether you have the right to work in the UK). If your response to our questions means that you do not meet certain qualifying criteria (such as if you do not have the right to work in the UK), we will not be able to proceed with your application. As set out above, you have the right not to be subject to this automated processing without human intervention.
At Barclays, when we recruit for certain roles, our candidates undertake online tests, including situational judgement tests, psychometric and competency-based tests during the assessment stage. You will be informed if you are required to complete an online test as part of the application process. Online testing scores are used to determine whether candidates are automatically shortlisted through to interview stage. If you wish to have your test marked manually by an assessor, we can put such arrangements in place. A manual assessment will extend the duration of the recruitment process but will not have a bearing on whether or not your application is successful.
We may also carry out an initial assessment of your application on an automated basis and may make decisions about whether or not to take your application forward without human intervention. This assessment will include an analysis (based on the qualifications, experience and competencies set out in your application) of whether you are suitable for the role in relation to which you have applied. As set out above, you have the right not to be subject to this automated processing without human intervention.
Your rights in relation to your personal data (as well as details of who to contact in relation to those rights) are further explained
HERE.
7. Acknowledgement
By choosing 'I accept' below, you acknowledge your personal data will be held and used as described above.
8. Chinese nationals
If you are a Chinese national, the information we are required to provide under the Personal Data Protection Act can be found
HERE.
9. For California residents, please also review the California Residency Privacy Notice, in addition to the Candidate Privacy Notice
The Privacy Notice can be found
HERE.
10. Applicants to roles in Frankfurt
Local addendum to candidate notice -Frankfurt
The local variations for Barclays in Frankfurt are as follows:
In respect of Section 1 (What personal data do we collect about you?):
The following applies in Frankfurt:
• Only limited diversity monitoring is conducted, for example to assess numbers of male and female candidates, but not to monitor race/ethnicity.
• We do not ask contextual questions about your background for sharing with Rare Recruitment
In respect of Section 2 (How do we use your personal data?),
• The Workers Council will be informed about candidates and their potential jobs.
In respect of Section 3 (With whom might we share your personal data?):
• Where necessary, Barclays may provide your personal data to the Workers Council as well, if required by law
The table below provides a list of personal data that we may collect about you, to the extent this is permitted by applicable law. Please contact the corresponding email address set out in the table below if you have any queries in relation to any of the below (including whether a particular purpose is relevant in your country).
| Personal data processed |
We will process the following categories of personal data about you:
- basic personal details including name, gender, title, marital status, address, country of residence, telephone/fax number, email address, date and place of birth, emergency contacts, country of birth; IP address
- identification information including passport and national insurance/identification number);
- information contained in recruitment application and assessment forms (e.g. CV information (including previous roles, education details, qualifications, hobbies/interests, references), interview feedback, academic/professional qualifications, results of psychometric tests etc.);
- credit reference information (where permitted by applicable law and where strictly relevant to the role);
- screening information (including in relation to sanction screening, politically exposed persons and specially designated nationals screening, references, work visas etc. (to the extent permitted by applicable law)).
We will process the following special categories of personal data about you (to the extent permitted by applicable law):
- special categories of personal data related to diversity monitoring (including nationality, race/ethnicity, religion/beliefs and sexual orientation, immigration status (including status as a refugee/asylum seeker), only to the extent permitted by applicable law and only to the extent you are happy to provide us with this data;
- special categories of personal data related to screening (including criminal convictions, nationality and race);
- details of any disability, in order to assess whether reasonable adjustments are required. |
If you are successful in your application, we may also request additional personal data from you in order to set up your payroll record (such as details of your next of kin, tax information, student loans, visa details, bank account and pension funds).
To the extent permitted by applicable law, during the application process we may ask some contextual questions about your background which we share with Rare Recruitment (a third party). Using this system helps us to ensure our assessments are fair to everyone by comparing the economic and social circumstances of candidates. Please note the questions are optional and you do not have to disclose this information if you do not wish to. The information you provide will be used for monitoring purposes only and it will not impact your progression in the process.
If you are based in the UK, the personal data we have collected from you will be shared with Cifas (a not-for-profit fraud prevention membership organisation) who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice, and other seriously improper conduct. If any of these are detected, you may not be offered a position at Barclays and you may also be refused certain services. Your personal data will also be used to verify your identity. Further details of how your personal data will be used by us and Cifas, and your data protection rights, can be found by contacting
ResourcingDataPrivacyqueries@barclays.com.
The table below provides a detailed list of the purposes for which we will process your personal data, as well as our legal bases for doing so.
| How we use your personal data |
Legal Bases |
We will use your personal data for the following purposes:
- recruitment and job applications (including both internal and external recruitment);
- candidate screening (including in relation to sanction screening, politically exposed persons and specially designated nationals screening, references, work visas etc. (to the extent permitted by applicable law));
- equality and diversity monitoring (to the extent permitted by applicable law).
|
- It is in our legitimate interests (for example, in order to ensure the effective functioning of our business, to carry out HR administrative functions or to protect our business
- We are required to do this by law or regulation.
- It is necessary in order to enter into your staff contract.
- There is a Substantial Public Interest to conduct the processing (to the extent permitted by applicable local law)
- You have provided your explicit consent for your data to be processed
|
Data protection law allows us to use personal data for our genuine and legitimate reasons, provided we do not unfairly infringe your rights and freedoms. This lawful basis for using your personal data is called “legitimate interests.” When we rely on our legitimate interests as the legal basis for processing your personal data for the purposes set out above, we will carefully consider and balance any potential impact on your rights in relation to your personal data.
During the recruitment and assessment process Barclays utilised a tool called eightfold.ai. This web-based platform utilizes an underlying mathematical model built using machine learning techniques. The underlying model produces a Match Score to predict the match between a candidate profile and a job position. This Match Score is used to display candidates for a given job position in a rank-list manner. The job position contains information such as the job description, desired skills, expected experience, expected education, and desired location. The candidate profile contains information such as the individual’s skills, work experience, education, and desired location.
The model is a tool for human-centric use; it is not an automated decision-making tool. The Eightfold model does not prevent any examination order by the human recruiter and does not auto-reject or auto-advance any candidate in the hiring process. Every decision to reject, review, interview, offer or hire a candidate for a specific role, and all related employment decisions, is taken by a human, exercising human judgment to make decisions. The model does not process biometrics, health records, credit card numbers, or social security numbers.
The underlying model produces an Eightfold Match Score to predict the match of a profile to a job position.
3. With whom might we share your personal data?
Where necessary Barclays may provide personal data about you:
- to other Barclays Group companies, including internal service companies;
- to its suppliers and agents (for example, third parties who assist with candidate screening, diversity monitoring and contextualised recruitment and cloud and technical support service providers). Where Barclays engages with a supplier or agent to process your personal data on its behalf, it will undertake due diligence, monitoring and assurance activities to ensure that your personal data is appropriately protected, and contractual clauses will be agreed between the parties to ensure that data protection and confidentiality is maintained;
- if Barclays is required, requested or permitted to do so by law, regulation, court order, or supervisory, regulatory or similar authority;
- for international payments where Barclays is required to send details of the payee and the beneficiary with the payment, and to overseas regulators and authorities in connection with their legitimate duties.
Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on “Transfers outside the EEA including safeguards” below for more information.
Barclays has staff within the following locations outside the EEA: Canada, China, Guernsey, Hong Kong, India, the Isle of Man, Japan, Jersey, Mexico, Monaco, Singapore, South Korea, Switzerland, UAE and the USA. Therefore, Barclays may transmit personal data through, and store personal data within, systems operated or controlled by Barclays or third parties in, and outside, the EEA. Further, many of the third parties referred to in the “Categories of recipients” section above are located (or have systems which are located) outside the EEA. It is therefore likely that your personal data may be transferred outside the EEA (for example, where there is a business requirement to do so, where globally accessible systems are used, and/or where internal data processors are used). The key locations outside the EEA for centralised services and internal data processors are India, Singapore and the USA.
Where Barclays transfers personal data to locations outside the EEA (in the operation of its business or for example to its suppliers, agents or affiliates) it will ensure that appropriate safeguards are provided in order to ensure that the data transfers are subject to an adequate level of protection. These safeguards may include the use of contractual terms approved by the European data protection authorities. Further information about the safeguards used by Barclays can be obtained from the Barclays Data Protection Officer.
You have the "right to access to your personal data, which means that you can ask us whether we are processing your personal data, what personal data we are processing, where we are processing it (including what safeguards are in place to the extent we are transferring your personal data outside the EEA), who has received it, the purpose of us processing it and for how long your personal data will be retained. You can also request an electronic copy of your personal data free of charge.
If any information about you is incomplete or inaccurate, you may also request the rectification of your personal data.
You also have the right to have your personal data erased where there is no longer a compelling reason for Barclays to continue processing your data in certain circumstances. For example:
- where your personal data is no longer necessary in relation to the purpose for which it was originally collected/processed;
- where you withdraw consent for Barclays to continue processing your personal data;
- if you object to the processing and there is no overriding legitimate interest for Barclays to continue the processing;
- where the personal data has been unlawfully processed;
- where your personal data has to be erased in order to comply with a legal obligation.
To the extent we have a compelling reason to continue processing your personal data, we may not be able to delete it.
You have the right to ask Barclays to restrict the processing of your personal data in certain circumstances. For example:
- where you contest the accuracy of your personal data;
- where you object to the processing because it is unlawful and you prefer restriction instead of erasure of your personal data;
- where you have objected to our processing of your personal data.
Barclays will confirm the outcome of your request or actions that have been taken in relation to your request.
We will inform recipients of your personal data of the requirement to erase, restrict or rectify your personal data.
You have the right to obtain and reuse your personal data for your own purposes across different services. Your right to data portability only applies to personal data that you have supplied to Barclays, where the processing is based on your consent or for the performance of a contract with you and where we are processing the personal data by automated means. We will provide your data in a commonly used electronic format.
You have the right to object to us processing your personal data (including profiling) where our processing is necessary for the performance of a task carried out in the public interest or carried out for our legitimate business interests. Upon receiving your request, we will cease processing your personal data (unless we have compelling legitimate grounds for such processing).
You also have the right to object to processing which results in a decision based solely on automated decision-making (including profiling), which significantly affects you.
Subject Access Request Team, HR Operations, Floor 5B, Barclays House, 1 Wimborne Road, Poole, BH15 2BB
If you wish to exercise any of the rights outlined above and are not based in the UK, please email your request to the appropriate EU country HR mailbox, as follows:
Complaint process
At Barclays we take data privacy and protection seriously but if you are not happy with anything relating to this, our Data Protection Officer can be contacted at: The Data Protection Officer, Leicester, LE87 2BB or
DPO@barclays.com. You also have the right to make a complaint to the local data protection regulator.
This section only applies to you to the extent you are a Chinese national.
In compliance with the Personal Information Protection Act of the Republic of China (the "PIPA"), we would like to notify you, as a data subject, of the following:
| |
Items |
Notification |
| 1 |
Purposes of Collection |
Your personal information may be collected, processed, used and transmitted internationally by us for the following purposes:
1. processing your application for employment; and
2. purposes as defined by the Ministry of Justice of the Republic of China ("MOJ") in Schedule 1 of this letter. |
| 2 |
Categories of Personal Information |
The categories of your personal information which may be collected, processed, used and transmitted internationally, as defined by the MOJ, are specified in Schedule 2 of this letter. |
| 3 |
Location |
Your personal information may be collected, processed, used and transmitted internationally within or outside the Republic of China in the jurisdictions where the relevant Barclays affiliate is located, or to such other locations as may in the future be notified to you. |
| 4 |
Relevant Entities |
Your personal information may be collected, processed, used and transmitted nationally or internationally by the relevant Barclays affiliate, its employees, agents, professional advisors, third party service provider who provides administrative, management, human resources support and management services, or other services to the relevant Barclays affiliate, and any other party which is not restricted by the competent authority for international transmission of the personal information. Some of the recipients of your personal information listed above may be located in countries with legislation containing a different level of protection of personal information as your country of residence. |
| 5 |
Method |
Your personal information may be collected, processed, used and transmitted internationally by automatic machines or other non-automatic means in compliance with the applicable laws and regulations on personal information protection (including but not limited to electronic documents, physical documents or any other appropriate means under the then existing scientific techniques). |
| 6 |
Your Rights |
Under and in accordance with the PIPA, any data subject has the rights:
1. to access or to request for review or copy of his personal information, in which case we have the right to charge a reasonable fee in accordance with the laws;
2. to request for supplement or correction of his personal information upon appropriate justification by the data subject; and
3. to request for discontinuance of collection, processing, use or international transmission, and deletion, of his personal information; provided that we may refuse such request to the extent such collection, processing, use or international transmission of personal information is necessary for our business operation.
If you wish to exercise any of the above rights, you may submit a written request together with the supporting documents to us. We will notify you of our decision on your request within fifteen (15) days after the next day following receipt of your written request. If necessary, such fifteen (15) days period may be extended for another fifteen (15) days in which case we will notify you in writing. In connection with a request to access or review the personal information, you shall, upon receiving our response, arrive at the location specified by us within the specified period to access or review the documents. Failing which you will need to submit a new written request to us. |
| 7 |
Consequences of Not Providing Your Personal Information |
You have the sole discretion to decide whether you wish to provide your personal information to us, unless required by law. If you refuse to provide your personal information, we may in our sole discretion decide whether we will proceed with your application for employment. |
| 8 |
Other Matters |
You agree that we have the right to revise this letter from time to time. In the event this letter is revised, we will provide you with the hyperlink to the website containing the revised notification letter. If applicable, please review the contents of the designated website carefully and follow the instructions thereon to indicate your acceptance if necessary. |
Schedule 1: The Specific Purposes as Defined by the MOJ
(002) human resources management; (003) arrival, departure and immigration; (059) the collection, process and use by financial service enterprises according laws and regulations and for the need of financial supervision; (060) financial dispute resolution; (061) financial supervision, management and examination; (063) the collection, process and use of personal information by non-government agency for fulfillment of regulatory obligations; (064) health and medical services; (068) trust business; (069) contractual, quasi-contractual or other legal relationship affairs; (090) consumer and customer management and services; (104) billing management and credit transaction business; (114) labor administration; (120) tax administration; (129) accounting and relevant services; (136) information (tele-) communication and database management; (137) information (tele-) communication security and management; (150) auxiliary and back-office supporting management; (154) credit checks; (157) investigation, statistics and research analysis; (166) securities, futures, securities investment trust and consulting relevant business; (168) passport, visa, and verification documents processing; (177) other financial management business; (181) other business conducted under the business registration items or organizational articles of incorporation; (182) other advisory and consulting services.
Schedule 2: The Specific Categories of Personal Information as Defined by the MOJ
1. Identification category
(C001) for identification of individual; (C002) for identification of finance; (C003) for identification in government documents;
2. Characteristic category
(C011) individual description; (C012) description of bodies;
3. Household status
(C021) household status; (C023) details of other members in the family;
4. Social status
(C031) residence and facilities; (C032) properties; (C033) immigration status; (C034) travel and other transportation details; (C038) occupation;
5. Education, examination and election, techniques or other professions
(C051) academic records; (C052) qualification or techniques; (C053) occupational group member qualification; (C054) occupational expertise; (C057) record of students (members) and examination takers;
6. Employment status
(C061) current employment status; (C062) employment history; (C063) jobs leaving history; (C064) work experiences; (C065) work, travel and attendance records; (C066) health and security records, (C068) salaries and withholding amount; (C070) details of work management; (C071) evaluation details of work; (C072) training records; (C073) security details;
7. Financial details
(C083) credit ratings; (C086) note credit; (C087) allowances, benefits, gifts; (C088) insurance details; (C089) social security payment, home care payment and other retirement payment; (C091) properties or services provided by the subject of the personal information; (C093) financial transactions; (C094) indemnification;
8. Business information
(C102) arrangement or agreement; (C103) licenses related to business; (C111) health records; (C116) criminal suspicion information;
9. Other categories of information
(C131) search of written documents; (C132) non-categorized information.
Note: Schedules 1 and 2 may be amended in accordance with the specific purposes and categories of personal information as promulgated by the MOJ from time to time.
Last modified November 2022
1. Purpose
Barclays Bank PLC (“Barclays” or “We”) provides this Privacy Notice for California Residents to explain our practices regarding the collection, use and other processing of certain individually identifiable information about members of the Barclays workforce in California (“Personal Information”), as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, as amended (“California Privacy Law”). This notice supplements our Global Personal Data Privacy Notice and Candidate Privacy Notice. Please note that your use of Barclays’ systems, including but not limited to any and all telephone conversations or transmissions, electronic mail or transmissions, or internet access or usage, may be monitored or intercepted by Barclays as permitted by law at any and all times and by any lawful means.
We do not sell your Personal Information or share it for cross‐context behavioral advertising. Barclays does not engage in providing financial incentives for the disclosure of California personal information. We do not engage in any use or disclosure of sensitive personal information except as necessary to provide benefit services or as otherwise permitted by California Privacy Law to comply with federal, state, or local laws.
To the extent you are not a current Barclays employee but are applying for a role within Barclays, please note that some of the Personal Information described below would not be collected from you unless you are employed by Barclays. To learn about the personal data that is collected from non-employees who are applying for roles within Barclays, please review the Candidate Privacy Notice.
2. Categories of Personal Information
Barclays may collect, use, or otherwise process the following categories of Personal Information (and any other categories of Personal Information reasonably necessary for us to carry out our legal or regulatory obligations). Some of the following categories of Personal Information may be supplied by you voluntarily in your sole discretion (for example, certain characteristics of protected classifications).
2.1.Identifiers, such as name, postal address, unique personal identifier such as BRID number, email address, telephone number, social security number, driver’s license number, passport or other government identification number
2.2.Professional and employment-related information, including but not limited to staff information such as job title, cost center and attendance; work authorization documentation (e.g., permits, visas); photos/images of you taken or obtained for business-related purposes or during events organized or sponsored by Barclays; information contained in recruitment application and assessment forms (e.g., CV information, interview feedback, academic/professional qualifications); payroll information; performance management details (such as appraisals, objectives and learning/training records); entry and exit times at Barclays premises; and emergency contact information.
2.3.Internet and other electronic network activity information , relating to the use of and access to Barclays’ IT system/hardware, including but not limited to IP address.
2.4.Geolocation data, only when you voluntarily enable geolocation tracking via a Barclays-provided mobile app.
2.5.Education information, as contained in your recruitment application and assessment forms, including education details, academic qualifications and professional certifications.
2.6.Characteristics of protected classifications including, for example, race, gender, ethnicity, national origin, gender identity, sexual orientation, date of birth, medical condition, and personal status (e.g., marital status, maternity leave information). As noted above, some of these characteristics may be provided voluntarily by you in your sole discretion.
2.7.Biometric information, consisting of imagery of your fingerprints (this only applies to specific teams, and you’ll be made aware if this is applicable to you).
3. Purposes and Basis for Processing Personal Information
Barclays may process Personal Information for the following purposes:
- Administering the employment relationship and providing compensation
- Administering and providing benefits and other work-related allowances
- Administering the workforce
- Complying with labor-related laws and requirements
- Monitoring and ensuring compliance with applicable laws, regulatory requirements, and Barclays policies or procedures
- Fraud prevention
- Communicating with you, other Barclays workforce members, and third parties
- Communicating with your designated contacts in case of an emergency
- Initiating legal action, and responding to and complying with requests and legal demands
- Complying with corporate financial responsibilities
- Managing corporate information technology and security
- Conducting security screenings
- Using precise geolocation of devices assigned to you, only when you voluntarily enable geolocation tracking via a Barclays-provided mobile app, for purposes of providing you with security assistance that you request
- Fingerprint images for security purposes and where required by law or regulation; these may be shared with our regulators where required
- Conducting other activities needed for legitimate business purposes
4. Security
The security and confidentiality of your Personal Information matters to us. That’s why we have technical, administrative, and physical controls in place to protect your Personal Information from unauthorized access, use, and disclosure. Our outside service providers must also protect your Personal Information and use it only to meet our business needs. We also take steps to protect our systems from unauthorized access. And we comply with all laws that apply to us.
5. Retention Periods
We store your Personal Information strictly and to the extent necessary for the performance of our obligations, and for the time necessary to achieve the purposes for which the Personal Information was collected, in accordance with our record retention obligations, legal holds, or any applicable laws. When we no longer need to use your Personal Information, we will remove it from our systems and records and/or take steps to properly render it unintelligible, unless a legal reason exists to retain it.
6. California Rights
Under California Privacy Law, individuals who are residents of California have rights to request access (right to know), correct, and delete their own Personal Information to the extent required by applicable law. To exercise these rights, or for any questions, please call 1-800-368-4021 or email the Subject Access Request team at subjectaccessrequestshroperations@barclays.com and include in the subject line “CPRA Request.”
In general, Barclays will not provide access (right to know) to Personal Information in internal investigations files, legal files, ethics files, and audit work papers that are protected as Barclays proprietary Information, Attorney-Client and/or Attorney Work Product Privileged Information. Barclays may apply any exceptions or other conditions available under law when responding to any access (right to know) requests, including exceptions to protect against full disclosure of sensitive personal information (e.g., only providing last 4 digits of social security number); to limit productions in response to requests that are manifestly unfounded or excessive, would compromise Barclays' ability to comply with law, would interfere with legal privilege/evidentiary rights, or otherwise interfere with the ability to exercise or defend legal claims.
Additionally, on receipt of an access request, Barclays is not required to search and provide Personal Information that is not maintained in a searchable or readily accessible format; is maintained solely for legal or compliance purposes; and is not sold or used for any commercial purpose (we do not sell your Personal Information or use it for any commercial purpose). If you submit a request to access your Personal Information, and we determine that these conditions are met as to any category of Personal Information, we will let you know in our response to your request.
Barclays may rely on any exceptions, preemptions or other conditions available under law when responding to correction, deletion or other requests. Barclays will generally fulfill requests for access, correction and deletion within 45 days of receiving a valid request. Barclays may extend the response time by another 45 days by notifying you of the time extension.
