Skip to main content

1. Introduction

We take your privacy seriously. Here, you can learn more about your data protection rights and how we collect, use, share and store your personal info.

That includes info we already hold about you now and further personal info we might collect about you, either from you or someone else.

Our Data Protection Officer (DPO) provides help and guidance to make sure we protect your personal info and we use it in the right way. If you have any questions, you can contact our DPO (see section 10 “Getting in touch”).

This Privacy Notice will replace any previous notice we’ve given you. If we make any important changes to it we’ll get in touch to let you know.

2. About Virgin Money

When we say ‘we’ or ‘us’ in this notice we are referring to Clydesdale Bank PLC (trading as Virgin Money), who are the ‘data controllers’ that collect and use personal info.

We only collect information that we know we will need in order to provide the Programme and introduce initiatives your school may be interested in from Virgin Money or the Virgin Group.

3. What info we will keep

By ’info’ we mean all of the personal and financial details we collect, use, share and store. It can include but isn't limited to:

  • Where a school is participating in the Programme, the teacher's name, school name, school address, school contact and fax number, teacher's work email, teacher's contact number at school, number of children taking part, if they require funds or not;
  • Where a loan is requested: school bank account name and details;
  • Where a home educator is participating in the Programme on behalf of children who are educated outside of a school, the home educator's name, address, contact number and email, number of children taking part and whether the home educator is the parent, guardian or employed tutor of the children taking part.

4. Where we get the info from

We collect information directly from you and others.

We get info:

  • By filling in forms, for example when you sign up to the Programme.
  • By providing us with ongoing information in relation to the Programme.
  • By interacting with us on social media platforms such as Facebook or X (formerly Twitter). This information can include posts and comments, pictures and video footage on sites such as YouTube, Facebook and X (formerly Twitter). You should always review the terms and conditions and privacy policies of the social media that you use to make sure you understand what kind of information relating to you may be out there in the public domain and how you can stop or limit it from happening.
  • Via Third Party directory services that contains points of contact for schools that you may have subscribed to.

Important: If you submit details to us of any other person (e.g. a pupil) you must ensure you have their permission or that of their parent/guardian first.

5. Why we need the info and what we use it for

Data Protection law means we need to have one or more of the following reasons for using your info:

  1. ’Contract performance’ – where we’ll use the info to deliver participation in the Make £5 Grow programme in accordance with our terms.
  2. ’Legitimate interest’ – we're allowed to use your info where, on balance, the benefits are reasonable and not outweighed by your interests or legal rights.
  3. ’Consent’ – sometimes, we may ask you for your consent or permission to use info in a certain way or where the law states we must get your permission. Whenever permission is the only reason for us using the info, you have the right to change your mind. To do this, just contact us – head to section 10 to find out how.

Using your info

These are the main ways we'll use your info and the reasons for doing so.

To provide the Programme, including administration; receiving feedback; and responding to any suggestions, issues or complaints you have contacted us about (Contract Performance; Legitimate Interest)

To validate your Programme registration when you first register for the Programme and validate your profile (Contract Performance)

To respond to any social media posts or other public comments you might make, whether they are directly to us or about us, our products, websites, mobile apps, services or other activities (Legitimate Interest)

To enable us (and our third-party service providers) to plan and manage our day-to-day business as effectively as possible (Legitimate Interest)

To administer marketing & promotion from us to let you know about other initiatives linked to school activities or curriculum/charity activities aimed at young people or schools. This may also include prize draws, competitions and free giveaways (Legitimate Interest; Consent)

Manage the programme and your relationship with us, analyse performance of the scheme, and make improvements (Legitimate Interest)

6. Who we share info with

We treat all the info we hold as confidential and will only share it when required. We may share your info with other people or organisations, who are also required to keep the info confidential, safe and secure:

  • Organisations who help us provide the Programme and related services to you – for example, market research companies, marketing, design as well as general service companies such as printers, mailing houses and form-scanning service providers.
  • Virgin Money Group to allow other companies in the Virgin Money Group to make you aware of any initiatives that may be of interest to a school, including Virgin Money Foundation.

7. How long we hold info for

Just so you know, we won’t keep info any longer than we need to (see section 5 Why we need the info and what we use it).

This means we will not continue to hold info for longer than three years from the end of our relationship.

If you’d like more info, you can contact our Data Protection Office (see section 13. Getting in touch).

8. What you do online

We use cookies to track how you use our website. If you’ve given us permission, we may also use cookies to tailor marketing messages. For more info about how we use cookies visit our cookie notice.

9. Your Data Protection Rights

The law guarantees you rights about how we use your info.

If you don't want us to use your info

You can object to how we use your info. When this happens, we have up to one month to get back to you.

We’ll stop using the info unless there’s a good legal reason to do so (we’ll always tell you what that reason is).

Remember, you can stop getting marketing communications at any time. Just get in touch in the usual way to let us know.

Access to info

You always have the right to ask whether we hold info about you. If we do, you have the right to know:

  • What the info is.
  • Why we’ve got it.
  • The ways it’s used.
  • Who we share it with.
  • How long we keep it for.
  • Whether it’s been used for any automated decision making.

You’re also allowed a free copy of the info. We can give it to you in person, online, over the phone, by email or by post.

Getting your info right

We always want the info we have for you to be absolutely spot on (up to date and accurate). If any of it is wrong or out of date, let us know and we’ll fix it.

Deleting info

You can ask us to delete your info if you think we don’t need it anymore. This might be because:

  • It’s not needed for the reason we collected it (see section 5 Why we need the info and what we use it for and section 6 Why we need special categories info and what we use it for).
  • We held and used the info because we had your permission, which you’ve now taken back.
  • You’ve already objected to the way we’re using your info.
  • We’ve been using the info unlawfully.
  • There’s a legal requirement for us to delete the info.

When you ask for info to be deleted, we have up to one month to get back to you. If we don’t go ahead and do it, we’ll tell you why.

Portability of info

You have the right to get some of the info you gave us in a machine-readable format.

Restricting some uses of info

In certain situations, you can block or limit the use of info by us. This may happen where:

  • You’ve challenged the accuracy of the info is and we’re checking it.
  • You’ve objected to how we use your info and we’re considering whether you’re right.
  • We’ve been using your info unlawfully but you want us to continue to hold the info rather than delete it (see “Deleting info” above).
  • We no longer need to keep the info but you’ve asked us to keep it because of legal claims you’re involved in.

Who can I complain to?

If you’re unhappy with how we’re using your info, please contact us at:

Phone: 0191 279 8001

Address: Virgin Money, Jubilee House, Gosforth, Newcastle upon Tyne, NE3 4PL

Email: Make5Grow@virginmoney.com

If we can’t fix the issue, you can complain to the Info Commissioners Office (ICO). The ICO is the UK’s independent body set up to uphold your rights. You can find out more at www.ico.org.uk.

You can exercise any of your data protection rights by contacting us – see Section 10. Getting in touch.

10. Getting in touch

Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information and comply with our responsibilities for data protection. Our DPO can be reached by post at Virgin Money, Data Protection Office, Sunderland, SR43 4JB

Data Protection Rights Requests

If you wish to make a Rights Request, you can do so by emailing DSARCCA.Queries@cybg.com or writing to the team at: Rights Request Team, Virgin Money, Sunderland SR43 4JB. The team will respond within a month and there is no need to send a reminder during that period.

If you have any further questions please contact us at:

Phone: 0191 279 8001

Address: Virgin Money, Jubilee House, Gosforth, Newcastle upon Tyne, NE3 4PL

Email: Make5Grow@virginmoney.com