skip to main content

Privacy and the Bank of England

This Privacy Notice explains how The Bank of England (‘we’ or the ‘Bank’) (the Data Controller) collects, stores and uses your personal information in accordance with data protection legislation, including the General Data Protection Regulation and Data Protection Act 2018.

The Bank is a "data controller" with regard to the personal information we hold about you by virtue of your involvement in our recruitment processes. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection law to notify you of the information contained in this privacy notice.

This privacy notice does not form part of any contract of employment or other contract to provide services offered to candidates hired by us.

It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using this information.

What data we process and why

We collect personal information provided directly from you in the following ways, when you:

  • Visit our website;
  • Apply for a job; 
  • Deal with us as a representative of an organisation that has a business relationship with us;
  • Visit our premises;
  • Have entered into a contract with us to supply goods and services;
  • Have contacted us with a general enquiry or complaint.

Our legal basis for processing personal data

We only use your personal information when the law allows us, such as:

  • Where processing is necessary to perform a contract or take steps at your request, before entering a contract;
  • To comply with a legal obligation to which we are subject;
  • For the purposes of the legitimate interest pursued by us, for example, to ensure the safety and security of our estate.
  • Where you have consented to us using your personal data.

Visitors to our website

When you visit www.boe-assessment.co.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to track web traffic to our site and collect this information in a way which does not identify anyone.

We collect certain information by automated means through the use of Cookies. Cookies are small text files placed on your computer by websites that you visit and are useful as they can enhance your online experience. For further information please see our Cookie Policy.

Data retention

We retain personal information for only as long as it is necessary for us to do so for the purpose for which is it being processed.

Sharing your personal data

As the data controller we use third parties to provide services for us: they are known as data processors. We ensure we only use data processors who comply with the data protection legislation and they can process personal data for us only as we have instructed them to do. They will hold it securely and retain it for the period we instruct. We will not share your information with any third parties for the purposes of direct marketing.

Your data protection rights

Under the Data Protection Act, you have certain rights over your personal data. These are:

  • Right of access - You have the right to ask us to see copies of your personal information.
  • Right to rectification – You have the right to ask us to rectify information which you think is inaccurate.
  • Right to erasure – You have the right to ask us to erase your personal information in certain circumstances
  • Right to object to processing – You have the right to ask us to restrict the processing of your information in certain circumstance
  • Right to object to automated decision making – You have the right to object to any decisions which have affected them significantly, if you consider these decisions have been made without meaningful human input.

Contacting us about your rights

To request a copy of the personal data the Bank holds about you, please contact us at:

Information Access Team
Bank of England
Threadneedle Street
London, EC2R 8AH
Email: data-protection@bankofengland.co.uk

To contact us about any other individual rights, including requesting an amendment to, or deletion of, your personal data, please contact us at:

Privacy Team
Bank of England
Threadneedle Street
London, EC2R 8AH
Email: data-protection@bankofengland.co.uk

We will try to deal with your request as soon as practical. We will sometimes need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

For further information or if you wish to follow up your request or report a concern around how your personal data has been processed, you can contact the Bank’s Data Protection Officer.

The Bank’s Data Protection Officer

The Bank has appointed a Data Protection Officer, who is supported by the Privacy Team in the Bank’s Compliance Division and whose role includes acting as a point of contact for individuals in relation to concerns around how their data is processed. You can contact the Bank’s Data Protection Officer using the details below:

Data Protection Officer
Bank of England
Threadneedle Street
London, EC2R 8AH
Email: data-protection@bankofengland.co.uk

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator of compliance with the data protection legislation. Their address is:

The Office of the Information Commissioner
Wycliffe House
Water Lane
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
Online: https://ico.org.uk/global/contact-us/

Changes to our privacy information

The Bank will update this page with important changes, or otherwise update specific privacy notices relevant to how we process your data. This page was last updated in September 2022.