We may only process your personal information where we have a lawful basis for processing it. What this lawful basis is will depend on the type of personal information you provide, and where we want to process personal information for a specific purpose not identified in this Privacy Policy we will notify you of this at that time. Our lawful bases for processing your personal information are as follows: Processing Lawful Basis Internal record keeping Contract Internal training/audit/compliance Contract Improving products and services Legitimate Interests Account Administration Contract Customising our website Legitimate interests Direct marketing – current customers*, mail and telephone Legitimate Interests Direct marketing electronic marketing Consent Direct marketing – non-current customers, mail and telephone Legitimate Interest Market research Legitimate Interests Preventing fraud and money laundering and verifying identity review Legitimate Interests In certain circumstances, we may be required to process your personal information in order to comply with a lawful obligation on us. This may be the case, for example, where a statutory or regulatory body requests such information in accordance with their legal powers. We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime. We also have a legitimate interest and, on occasion, a legal obligation to disclose personal information to regulatory bodies in certain circumstances, including where we have information about potential criminal acts or security threats, and may disclose information to authorities on this basis. *If you proactively contact us to enquire about becoming a customer, we will treat you as a current customer for the purpose of potentially directly marketing to you on the grounds set out above.