top of page
  • Black Facebook Icon
  • Black Instagram Icon
  • Black Pinterest Icon
Privacy Policy

Policy Scope

This policy governs the collection, usage, and protection of customer bank details within Pack Mentality’s operational ecosystem. It aligns with the organisation’s strategic commitment to data ethics, regulatory compliance, and customer trust.

 

Purpose of Data Collection

Pack Mentality collects customer bank details exclusively for payment processing. This enables the organisation to:

  • Facilitate secure financial transactions

  • Fulfil contractual obligations related to product or service delivery

  • Prevent fraudulent activity through verification mechanisms

Bank details are not used for marketing, profiling, or any purpose beyond transactional fulfilment.

 

Legal Basis for Processing

Processing is conducted under the lawful basis of:

  • Contractual necessity – required to complete purchases initiated by the customer

  • Legitimate interest – ensuring secure and efficient payment operations

 

Data Governance and Protection

Pack Mentality applies the following controls to safeguard bank details:

  • Encryption at rest and in transit

  • Access control policies limiting data visibility to authorised personnel

  • PCI DSS compliance for payment systems and infrastructure

  • Data minimisation principles to retain only what is necessary

 

Retention and Disposal

Customer bank details are retained only for the duration required to:

  • Complete the transaction

  • Meet statutory financial audit and reporting obligations

Data is securely disposed of once retention thresholds are met, in accordance with Pack Mentality’s data lifecycle management standards.

 

Customer Rights

Under UK GDPR, customers have the right to:

  • Access their personal data

  • Rectify inaccuracies

  • Request erasure where applicable

  • Restrict processing under certain conditions

  • Object to processing where legitimate interest is contested

To exercise these rights, customers may contact us via the contact page.

 

Policy Ownership

This policy is owned by the Data Governance Capability and is reviewed annually in alignment with Pack Mentality’s compliance and risk management framework.

bottom of page