The Self Build Wales scheme has expanded to now cater for applicants who either own their own land, or who have found land available to build on. Find out more here

Privacy policy

Whenever you provide personal information to Self Build Wales, or we collect personal information about you, we will only use it in accordance with this privacy notice. Please read this carefully.  

This privacy notice applies to Self Build Wales, a subsidiary of the Development Bank of Wales. Whenever the terms ‘SBW’, ‘we’, ‘us’ or ‘our’ are used in this notice, it means Self Build Wales.  

For our full list of privacy documentation click here. 

Find out more about our governance structure on our governance page. 

Our principles  

We take your privacy seriously and are committed to protecting your personal information. This means: 

  • We will only ask you to provide us with your personal information that helps us to help you. 

  • We will hold your personal information securely and responsibly. We use safeguards including electronic encryption, to prevent unauthorised access to your personal information. 

  • We will only share your personal information with other companies in the DBW Group, with suppliers who perform services on our behalf, and as otherwise set out in this notice. 

  • We will never sell your personal information. 

Why we collect and use your personal information  

We will collect and use personal information about you for the following reasons:  

1. In connection with our loan products. 

2. Because you would like us to contact you in response to a specific enquiry. 

3. To keep you informed of our products and services. 

4. In connection with the products or services that you provide to us. 

We may contact you by mediums such as post, telephone, email, text messages or other digital methods of communication. We may send communications for the purposes of: 

  • Ongoing management of self-build development loans we have provided to you. 

  • Meeting our regulatory obligations. 

  • Keeping you informed about our products and services, including marketing, if you opted for this on your application. If you opted in on the application forms, you may opt-out of this at any time by emailing [email protected] or clicking the ‘unsubscribe’ option in any of our marketing emails. 

More information about how we use your information in connection with each of these purposes can be found below. This website also uses cookies, more details of which can be found in our cookies policy. 

See also gov.walescookie policy. 

 

1. Using your personal information in connection with our loans 

Why does Self Build Wales need to use my personal information?  

If you apply to Self Build Wales for a loan, you will need to provide us with information about yourself. This is so that we can decide whether you are eligible for a loan. If your application is successful, we will continue to use your information as part of our ongoing management of our loan to you. 

We might also use personal information about you which is provided by others to inform our loan decisions. For instance, if you are financially associated with an applicant, then we will need to collect personal information about you both. 

What information do I need provide to Self Build Wales?  

The exact information that we require will be set out on the application forms themselves. It will include basic information about you, such as your name, address and date of birth. We will also ask you to provide information about your financial standing.  

If we decide to make an offer of a loan, we will ask you to complete a diversity monitoring form. Any information you provide to us on this form will only be used to help us monitor if we are achieving real equality of opportunity in delivering our services. It will not be used to make decisions affecting you.  

What does Self Build Wales do with my information?  

When you provide your information to us or it is provided by others as part of an application, we will use it in order to assess the application and to make a decision on whether or not to provide the loan. We will then use your information as part of our ongoing management of the loan, the development of your property and to facilitate your property transaction. Our uses of your information may include:  

  • Making searches about you at credit reference agencies. These agencies will provide us with credit information as well as information from the electoral register and will record details of any searches whether or not your application proceeds. You can find out more information about how your information is used by credit reference agencies and fraud prevention agencies by reading the Credit Reference Agency Information Notice (“CRAIN”). This document describes how the three main credit reference agencies each use and share personal data. The CRAIN can be accessed here. 

  • Credit searching, for debt tracing and the ongoing management of any funding we may provide to you. 

  • Credit-scoring, to determine your suitability for the relevant product or service. 

  • Fraud detection and prevention. We may share your information with fraud prevention agencies such as the National Crime Agency, for this purpose. 

  • Sharing your information with local authorities, housing associations and/or private landowners in order to assign a plot of land used for the development of your property. This may be in accordance with your specific requirements and their specific requirements. 

  • Sharing your information with solicitors in relation to the purchase of land as well as carrying out other legal formalities in association with your property transaction. 

  • Sharing your information with builders in order to develop your property on the acquired plot of land. This may be in accordance with your specific requirements. 

  • Using your information in accordance with the Terms and Conditions of the loan. 

What is the legal basis for using my information? 

Under data protection law, we must have a valid legal basis for collecting and using your personal information. When you apply for a loan with us, the following legal bases may apply:  

Performance of a Contract 

Your application is a request for us to enter a contract with you. We are permitted to use your personal information where it is necessary for us to do so in order to perform pre-contractual steps, to enter into a contract with you, and for the performance of a contract we have in place. 

Legal Obligation 

We are permitted to use your personal information where it is necessary in order for us to comply with our legal obligations. 

We are subject to various legal obligations whenever we consider applications for a loan, including anti-money laundering legislation and the requirements of the Financial Conduct Authority.  

Legitimate Interests 

We are permitted to use your personal information where it is necessary for our legitimate interests, provided that our interests are not overridden by your own interests.  

Where you have applied for a loan with us, or are an existing customer, we process your personal information for the following reasons under our legitimate interests:  

  • Conducting appropriate checks on potential customers,  

  • Ensuring the repayment of loans to us. 

  • Assessing compliance with the scheme policies and terms and conditions, 

  • Managing the development of your property and your property transaction. 

  • Conducting appropriate validation of property data held by us (that has been provided by you) with property data held by HM Land Registry. 

  • Investigating and managing enquiries and complaints, including analysing enquiries and complaints for the purposes of preventing failures and rectifying negative impacts on customers. 

  • To consider customers’ welfare needs, including provision of any adjustments, support, or protection they need to be put in place. 

  • Preventing and investigating fraud, money-laundering and other financial misconduct. 

  • To develop and improve our products and services, including conducting customer surveys and research. 

  • Ensuring business continuity, disaster recovery and network and information security. 

Legal Basis for Processing Special Category Data 

Data Protection laws treat some types of personal information as being particularly sensitive. This information is called ‘Special Category Data’. We will not collect or use these types of data without your consent unless the law allows us to do so. If we do, it will only be under one of the following legal bases: 

  • For reasons of substantial public interest; or 

  • We have your explicit consent to do so; or 

  • To establish, exercise or defend legal claims. 

How long does Self Build Wales retain my information? 

If your application is successful, we will keep your personal information for at least the duration of your contract with us, and after that for a period of 12 years. This is to ensure that we have a full record of the contract between us, if there should be any dispute about the contract. 

If your application is unsuccessful or withdrawn, we will retain and destroy your personal data in accordance with our data retention schedule. 

We may hold your information for longer where it is necessary to comply with our legal obligations, to exercise legal rights, comply with the Terms and Conditions of the fund or to defend legal claims. 

We have a retention period of 2 years in relation to email correspondence. If we need to retain your emails for a period longer than stated, we will do so to either keep to the law, if there are existing claims or complaints that will reasonably require us to keep your information, or for regulatory or technical reasons. 

What happens if I do not provide my information to Self Build Wales? 

For us to consider your application, there is certain information that you must provide to us. If you do not provide all the details we request on the application forms, we will be unable to assess your application and it may result in you being unable to access our investments. 

 

2. Using your personal information to respond to your enquiry 

Why does Self Build Wales need to use my personal information? 

If you contact us for more information about a loan, or if you make a general enquiry, we will need to process your personal information to respond to you.  

What information do I need to provide to Self Build Wales? 

That will depend on the nature of your query. The Contact Us page on our website sets out the minimum information we will need about you in order to respond to your query.  You may also contact us by sending your query to the following email address: [email protected].   

As part of the activities listed above, we may share your information with third parties such as local authorities, builders, independent financial advisers, architects, valuers, mortgage advisers, developers, landlords, private landowners, housing association employers and solicitors.  

What does Self Build Wales do with my information? 

We will use the information to respond to your query and, if you agree, to contact you again to provide you with information about our products and services (see part 3 below). 

What is the legal basis for using my information? 

Under data protection law, we must have a valid legal basis for collecting and using your personal information.  

When you contact us for more information about our products or services, we believe that we have a legitimate interest in being able to respond fully to your enquiry. We are permitted to use your personal information where it is necessary for our legitimate interests, provided that our interests are not overridden by your own interests. In this case, we believe that using your personal data to respond to your query is in both your and our interests. 

How long does Self Build Wales retain my information? 

We will hold your personal information for the time it takes to deal with your query. This may include any correspondence you have with us by email or via the 'Contact Us' form on our website. 

We will normally delete your personal information after 24 months, unless you would like us to retain your contact details to keep you informed of our products and services (see section 3, below). 

If we need to retain your personal information for a period longer than stated, we will do so to either keep to the law, if there are existing claims or complaints that will reasonably require us to keep your information, or for regulatory or technical reasons. 

What happens if I do not provide my information to Self Build Wales? 

You do not need to provide us with your personal information. However, if you do not provide sufficient information, we may not be able to respond accurately to your query. If you contact us via our website, we ask that you provide certain mandatory information so that we can deal with your query. 

 

3. Using your personal information to keep you informed of our products and services 

Why does Self Build Wales need to use my personal information? 

If you would like to be kept informed of our range of investment products and services, we will use your personal information to send you direct marketing communications (such as emails). We will only do this if you have agreed to us using your personal information for this purpose. 

What information do I need to provide to Self Build Wales? 

You may provide us with your name and contact details via our contact us page, plot application form, registration form or expression of interest form, which can be found on this website.  

What does Self Build Wales do with my information? 

We will use your contact details to provide you with information about our products and services. 

What is the legal basis for using my information? 

Under data protection law, we must have a valid legal basis for collecting and using your personal information. When we use your information for marketing purposes, the following legal bases apply: 

  • We believe that we have a legitimate interest in sending you information about our products and services. We are permitted to use your personal information where it is necessary for our legitimate interests, provided that our interests are not overridden by your own interests. In this case, we believe that telling you about our products and services is in both your and our interests. We will always give you the opportunity to opt out of receiving these communications. 

  • In some circumstances we will ask for your consent before we send you information about our products and services.  

How long does Self Build Wales retain my information? 

We will hold your information until you choose to no longer receive marketing communications from us.  

We have a retention period of 2 years in relation to email correspondence. If we need to retain your emails for a period longer than stated, we will do so to either keep to the law, if there are existing claims or complaints that will reasonably require us to keep your information, or for regulatory or technical reasons. 

What happens if I do not provide my information to Self Build Wales? 

If you do not wish to receive information from us, please let us know. You have the right to opt out at any time by emailing us at [email protected] or clicking the 'unsubscribe' option in any of our marketing emails. 

 

4. Using your personal information in connection with services you provide to Self Build Wales 

Why does Self Build Wales need to use my personal information? 

If you provide services to Self Build Wales, you will need to provide us with information about you. This is so we can decide whether you are the right person to deliver the required service. We will continue to use your information as part of our ongoing management of the service you provide. 

What information do I need to provide to Self Build Wales? 

We require information such as your full name, address and contact details, including email address and telephone number. 

What does Self Build Wales do with my information? 

When you provide your information to us, we will use it to assess your suitability for the service. We will then use your information to manage our ongoing relationship while you provide the service and will share that information with third parties as is required.  

You acknowledge and agree that your personal data may be processed outside the EEA. We will take precautions (in accordance with relevant guidance by regulatory bodies) to ensure that any transfer of your data outside the EEA will be subject to safeguards that protect your privacy rights, and your data will be kept secure at all times 

What is the legal basis for using my information? 

Under data protection law, we must have a valid legal basis for collecting and using your personal information. When you apply to provide a service to us, the following legal bases may apply: 

  • Where your information is provided to us in connection with a service you provide to us. We are permitted to use your personal information for the performance of that contract.  

  • We are permitted to use your personal information where it is necessary for us to comply with our legal obligations.  

  • We believe that carrying out appropriate checks on potential service providers, and then monitoring the performance of service providers during the term of our relationship, is in our legitimate interest as a responsible lender. We are permitted to use your personal information where it is necessary for our legitimate interests, provided that our interests are not overridden by your own interests.  

How long does Self Build Wales retain my information? 

We will keep your personal information for at least the duration of your contract with us, and after that for a period of 7 years. This is to ensure that we have a full record of the contract between us, if there should be any dispute about the contract. 

We may hold your information for longer where it is necessary to comply with our legal obligations, to exercise legal rights or to defend legal claims.  

We have a retention period of 2 years in relation to email correspondence. If we need to retain your emails for a period longer than stated, we will do so to either keep to the law, if there are existing claims or complaints that will reasonably require us to keep your information, or for regulatory or technical reasons. 

What happens if I do not provide my information to Self Build Wales? 

You are not obliged to provide any information to us. However, if you do not provide the details we request, we will be unable to use your services. 

 

Your Data Protection Rights 

The personal information you provide to us will be held in accordance with our responsibilities under data protection legislation. This includes the UK General Data Protection Regulation and the Data Protection Act 2018. These laws contain specific rights for you, including: 

  • The right to access – You have the right to request copies of your personal data (this is also known as a subject access request). 

  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete information you believe is incomplete. 

  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions. 

  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions 

  • The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions. 

  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions. 

  • The right to complain to the regulator - the Information Commissioner's Office, if you are unhappy about how your personal data is being used. The ICO can be contacted at www.ico.org.uk.  

  • Your rights in relation to automated decision making – You have the right to object to your personal information being used for any automated decision making, including profiling. 

If you would like to exercise any of the rights set out above, please email us at [email protected] or write to us at: 

DATA PROTECTION OFFICER 

Development Bank of Wales 

1 Capital Quarter 

Tyndall Street 

Cardiff 

CF10 4BZ 

 

How to Raise a Concern or Make a Complaint 

To the Development Bank of Wales: 

If you have any concerns or complaints about our use of your personal information, we would appreciate the chance to resolve your issue in the first instance. You can make a complaint to us at [email protected] or write to us at the same address as above. 

To the Information Commissioner’s Office (ICO): 

If you are unhappy with how we have used your personal information, or dealt with your concern or complaint, you can also complain to the UK data protection regulator, the ICO. The ICO can be contacted at www.ico.org.uk or by phone on 0303 123 1113. 

 

How to report a security vulnerability 

 If you believe you have found a security vulnerability, please submit your report via email.

In your report, please include details of:  

  • The website, IP or page where the vulnerability can be observed.  
  • A brief description of the type of vulnerability, for example; “XSS vulnerability”.  
  • Steps to reproduce. This helps to ensure that the report can be triaged quickly and accurately.

 

Our commitment to you 

We aim to acknowledge your security vulnerability report within 5 working days and will keep you informed throughout our investigation and remediation process. 

Thank you for helping us maintain a safe and secure experience for all our users.