Last updated: 20th March 2026
The Newcastle Building Society respects your privacy rights and takes its data protection obligations very seriously. Whenever you see “we”, “us” or “our” in this Privacy Notice it means Newcastle Building Society. We collect and use personal data when captured on CCTV inside and outside of our premises.
For further information, please see the Customer Privacy Notice on our website.
We may collect, use, store and transfer different kinds of personal data through use of the CCTV system, such as static and moving images of people.
We do not deliberately capture any special category personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). However, CCTV cameras may incidentally record information which falls within these categories. In addition, CCTV footage may be used as evidence regarding criminal convictions, criminal offences or related security measures.
We have 24/7 CCTV surveillance in operation in our branches and outside of our offices (including in our ‘Community Rooms’). We record video images of the premises which may include public areas outside of our premises.
CCTV will capture images in real time wherever the CCTV cameras are pointed. These cameras may capture footage of you whilst you are on (or nearby) the premises. There are clear signs in place to inform you where cameras are in use.
We process your personal data for many different purposes. Data protection law only allows us to use your personal data if we have a lawful reason. Most commonly, we will use your personal data in the following circumstances:
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests – for example, we have a legitimate interest to operate CCTV surveillance to ensure the safety of our staff and customers and the security of our premises; and/or
- where we need to comply with a legal obligation – for example, to prevent and assist with the investigation of crime.
We may share your personal data with the parties below for the purposes set out above:
- third parties appointed to process your personal data (for example, suppliers of CCTV systems);
- third parties such as insurance companies or organisations we work with for crime prevention purposes; and/or
- third parties such as police forces, regulatory bodies and authorities, courts and tribunals and localised Crime Reduction Partnerships, where such partnerships exist.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We do not transfer personal data captured on CCTV outside of the UK.
Where we collect personal data via the use of CCTV, the CCTV images are kept for no longer than one month. However, sometimes due to legal and regulatory obligations, or for technical reasons, we’ll need to keep your personal information for longer periods of time than set out above. For example, when required for the purposes of an official investigation.
For further information about your data protection rights and how to enforce them, please see the Customer Privacy Notice on our website
We may change this Privacy Notice from time to time. We encourage you to periodically review this Privacy Notice for the latest information on our privacy practices.
We have appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Notice. If you have any questions about this Privacy Notice or how we handle your personal data, please contact the DPO by sending an email to NBSDPO@newcastle.co.uk.