Privacy Policy

We are committed to ensuring that your privacy is protected. This Privacy Policy explains how we use information about you:

  • which your employer or pension scheme trustee has provided to us, and
  • any additional information you provide through our Site.

​​Who is collecting information about me?

Capita Pension Solutions Limited. We are registered in England and Wales under company number 02260524 and have our registered office situated at First Floor, Kingdom Street, Paddington, London, England W2 6BD.

We are authorised and regulated by the Financial Conduct Authority under registration number 142484. 

We provide pension administration services to your employer and / or pension scheme trustee. As part of these services they provide us with information about you to enable us to administer your pension scheme and to allow you to apply for any additional optional benefits that your employer or pension scheme trustees ask us to make available to you.

Your employer and / or the pension scheme trustee are the Controller of this information and we are a Processor where we process information at their direction or generally as part of providing our services to them. This Privacy Policy for the administration services we provide to your employer and/or pension scheme trustee, including your use of our Site, is supplemental to any privacy notice or policy provided by your employer and/or pension scheme trustee.

There may also be instances where we process your information where necessary to fulfil a request made by you or complete a transaction on your behalf, and which do not form part of our usual services to your employer and / or the pension scheme trustee. Examples of this may include where you request a cash equivalent transfer value on your own behalf and pay us directly for providing this, or where you make a complaint in respect of which we offer compensation. In these instances, we will be the Controller of your information.

​What information are you collecting about me?

​When your employer and/or pension scheme trustee decides to use our services they provide us with your personal details which are necessary to provide you with the benefits and services they are providing or offering you. The exact details may vary depending on the pension options being provided but may include, without limitation:

  • Full Name
  • Address
  • Gender
  • Date of birth
  • Phone number
  • Company email address
  • Bank account details
  • Personal email address
  • National Insurance Number
  • Employee/Payroll Number
  • Annual salary
  • Employment start date
  • Date you enrolled into the pension scheme
  • Dependents details (e.g. if there is a spouse’s pension/death in service/life cover)
  • Normal retirement date
  • Medical history where you have provided your consent for this
  • Login details

When you enrol and visit our Site you should check the details we hold about you are accurate.

We may ask you for further details in the following circumstances:

  • The information provided by your employer/pension scheme trustee is incomplete, or
  • An external provider of a particular benefit or service requires more information to provide that benefit or service.

Depending on the service you may have the option to receive information e.g. pension investment alerts by SMS or instant message once this functionality is available. Where you choose this service you will have the option of providing your mobile phone number.

We may also ask you for details of your spouse, partner or other immediate family member if they are to be included as the nominated beneficiary of your pension. Where you submit such details, you do so on behalf of the relevant family member and you acknowledge and accept that it is your responsibility for letting them know (i) that you have done so; (ii) what details you have submitted; and (iii) the purpose of submitting the details.

It is your responsibility to keep your personal details and those of any relevant family member updated. If there is any change in your personal details or those of your family members, please let us know the correct details by updating them on our Site (where possible) or inform your employer and/or pension scheme trustee of the changes.

​​Why are you collecting this information?

We gather this information to allow us to process your enrolment into your employer’s pension scheme, provide you with updated details of your pension scheme and benefits, assist you in retirement planning including applying for further benefits or products and processing those applications (where applicable), and generally ensure the smooth running of your pension account.

The information is also used by us to communicate with you on any matter relating to your pension and benefits and the provision of our pensions administration services to your employer’s pension scheme in general.

Your employer and / or pension trustee may have provided your e-mail address details to us for the purpose of providing our services. E-mail messages cannot be guaranteed to be completely secure as they may be subject to possible interception or loss. If you do not want us to contact you on your e-mail address, please update your contact preferences once logged in, or notify your employer and / or pension scheme administrator.

We may also wish to provide you with information about special features of our Site or other services. This may be by email, SMS text messaging or instant message if you have registered for this service. If you do not want to receive this information, please contact your employer and / or pension scheme trustee.

There may also be instances where we process your information where necessary to fulfil a request made by you or complete a transaction on your behalf, as set out in the ‘Who is collecting information about me’ section above.

We never use or share any personally identifiable information provided to us online in ways unrelated to the ones described on our Site, this Privacy Policy or our Cookie Policy below.

What is your lawful basis for processing my information?

Your employer and/or pension scheme trustee, as Controller, will have a lawful basis for providing us with your information to process and they should provide you with details of this in their privacy notice to you.

Where we act as Processor, your information is processed by us for the purposes of meeting our contractual obligations to your employer and/or pension scheme trustee to provide pension administration services.

Where we act as Controller as set out in the ‘Who is collecting information about me’ section above, your information is processed by us because it is necessary for the performance of a contract with you. It may also be necessary for our legitimate interests to collect money due to us for providing a service at your request.

​​Who might you share my information with?

To provide our services to your employer and / or pension scheme trustee as Processor, and also where we act as Controller as set out in the ‘Who is collecting information about me’ section above, we sometimes use both internal (i.e. other organisations within the Capita group of companies) and external third parties such as IT systems and software providers, print and document management companies and banks and payment providers to authorise and complete payments.

In addition, your details may be disclosed to your employer / pension scheme in order for us to provide pensions administration services to you. They may also be disclosed to government, regulatory and law enforcement bodies where required to comply with our legal obligations or exercise our legal rights.

Where we provide pension administration services and you apply for any additional products or services offered through our Site, we will pass your personal details as necessary to a third party provider of those products and services to the extent necessary for you to receive those products or services. Thereafter, the provider may correspond with you directly in order to provide those services. Once a provider has received your personal information they will usually have a direct relationship with you and use your personal data in accordance with their terms and conditions and privacy policy. An example of the types of providers used are insurance companies for the provision of medical insurance or life assurance.

In the event we are sold or integrated with another business, your details may be disclosed to our advisers and any prospective purchasers' advisers and will be passed on to the new owners of the business in order to ensure continuity of service.

​Where might you transfer my information outside the EEA?

Where we act as Processor, your personal data will not be transferred by us outside of the European Economic Area (EEA) unless specifically agreed with your employer and/or pension scheme trustee. Where your employer and/or pension scheme trustee has consented, we may engage with internal and external third party suppliers in the countries outside the EEA which are subject to different standards of data protection, including but not limited to:

  • India
  • United States
  • South Africa

for more straightforward back office support services such as invoice and payroll processing, IT support and providing data matching sources for tracing services.

Where we act as Controller, we may engage internal third parties within the Capita group of companies based in India to perform straightforward back-office such as invoice and payroll processing. By submitting your personal data to us, you agree to this transfer, storing or processing of your personal data.

In all cases where personal data is transferred outside of the EEA, we will take appropriate steps to ensure that such transfers of personal data are in accordance with applicable law and carefully managed to protect your privacy rights and interests. To achieve this, we will:

  • Ensure transfers within the Capita group of companies are covered by an intra-group data sharing agreement entered into by all relevant entities within the Capita group, which contractually obliges each member to ensure that personal information receives an adequate and consistent level of protection.
  • When transferring personal data to third parties outside the UK and EEA:
    • Put in place International Data Transfer Agreement (IDTA) or Standard Contractual Clauses plus UK Addendum, to ensure that your information is safeguarded; or
    • Ensure that the country in which your personal data will be handled has been deemed ‘adequate’ by the European Commission/ICO.

​​How long do you keep hold of my information?

Unless an alternative retention period is agreed with your employer and / or pension scheme trustee, our standard policy is to hold your data for a maximum of 7 years after the end our agreement to provide services to your employer / pension scheme trustee, after which it will be securely destroyed.

​​What if I choose not to give you my personal information?

If you do not wish us to process your Personal Data in order to use our Site, please use the contact details on the Site homepage. However, in certain circumstances your employer and/or pension scheme trustee may be under a legal obligation to process your Personal Data e.g. for automatic enrolment into a pension scheme and to manage opt-outs in which case we may have to continue to process your Personal Data.

​​Will you process my information for purpose I may not be aware of?

Where agreed with your employer and / or pension scheme trustee we may anonymise your Personal Data and use it for data analytical purposes.

We may also use aggregate information and statistics for the purposes of monitoring website usage and to help us develop our Site and our services, and may provide such aggregated information to third parties. These statistics will not include information that can be used to identify any individual.

From time to time we may provide your information that we collect and store during normal use of our Site to our customer service agencies for research and analysis purposes so that we can monitor and improve the services we provide. Such use does not result in any Personal Data, other than contact details, being collected, stored or transferred to such agencies. We, or our agents and sub-contractors, may contact you by post, e-mail or telephone to ask you for your feedback and comments on our services.

One way in which we gather this information is by using cookies. Please see our Cookie Policy for more information.

​What rights do I have?

Under Data Protection Legislation you have a number of rights. These can be exercised by contacting your employer / pension scheme trustee as Controller of your Personal Data, and a brief summary of the rights is provided below:

​​The right to be informed

This includes an obligation to explain to you how your information is used. This Privacy Policy provides you with this explanation in relation to Personal Data processed by us when providing pension scheme administration services to your employer or pension scheme trustee.

​​The right of access

You have the right to obtain confirmation that your Personal Data is being processed and to obtain access to your information (e.g. by receiving a copy of it).

​​The right to rectification

You have the right to have your Personal Data corrected if it is inaccurate or incomplete.

​​The right to erasure (also known as the “right to be forgotten”)

You have the right to request the deletion or removal of your Personal Data in certain circumstances. Please note that there may be circumstances where you ask for your information to be deleted but both us and your employer / pension scheme trustee are legally entitled to retain it.

​​The right to restrict processing

You have the right to request the processing of your Personal Data is restricted in certain circumstances. Again, there may be circumstances where you ask your employer / pension scheme trustee to restrict the processing of your information, but they are legally entitled to refuse that request.

​​The right to object to processing

You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.

​​The right to data portability

You have the right to receive the Personal Data you have provided in a usable electronic format and/or request it is transmitted to a third party where this is technically feasible.

​​The right to complain to the Supervisory Authority

​You have the right to make a complaint with the Information Commissioner (www.ico.org.uk) if you think that any of your rights have been infringed.