Privacy Policy
Policy Scope
This policy governs the collection, usage, and protection of customer bank details within Pack Mentality’s operational ecosystem. It aligns with the organisation’s strategic commitment to data ethics, regulatory compliance, and customer trust.
Purpose of Data Collection
Pack Mentality collects customer bank details exclusively for payment processing. This enables the organisation to:
-
Facilitate secure financial transactions
-
Fulfil contractual obligations related to product or service delivery
-
Prevent fraudulent activity through verification mechanisms
Bank details are not used for marketing, profiling, or any purpose beyond transactional fulfilment.
Legal Basis for Processing
Processing is conducted under the lawful basis of:
-
Contractual necessity – required to complete purchases initiated by the customer
-
Legitimate interest – ensuring secure and efficient payment operations
Data Governance and Protection
Pack Mentality applies the following controls to safeguard bank details:
-
Encryption at rest and in transit
-
Access control policies limiting data visibility to authorised personnel
-
PCI DSS compliance for payment systems and infrastructure
-
Data minimisation principles to retain only what is necessary
Retention and Disposal
Customer bank details are retained only for the duration required to:
-
Complete the transaction
-
Meet statutory financial audit and reporting obligations
Data is securely disposed of once retention thresholds are met, in accordance with Pack Mentality’s data lifecycle management standards.
Customer Rights
Under UK GDPR, customers have the right to:
-
Access their personal data
-
Rectify inaccuracies
-
Request erasure where applicable
-
Restrict processing under certain conditions
-
Object to processing where legitimate interest is contested
To exercise these rights, customers may contact us via the contact page.
Policy Ownership
This policy is owned by the Data Governance Capability and is reviewed annually in alignment with Pack Mentality’s compliance and risk management framework.



