Privacy & Security - NRAM

Privacy & Security


We understand the importance of data security and privacy to customers and we comply with the requirements of applicable data protection laws, including the Data Protection Act 2018.

Details of the NRAM notification to the data protection regulator may be found in the Information Commissioner’s Office Public Register of Data Controllers under registration number ZA154626.

We will not collect any information about individuals, except where it is specifically and knowingly provided by them.

For a full explanation of our policy around using and holding personal customer data, please see our Privacy Notice.

For specific information about Cookies and how they are used by our website, please see our Cookie Policy.

Making a request for personal information

You have a legal right to obtain the personal information that we hold about you. You can do this by submitting a Data Subject Access Request (DSAR).

If you wish to make a request for the information that NRAM holds about you, you can either make the request in writing or by calling us.

Please submit your request in writing to the address below:

PO BOX 118
BD23 9FH

Alternatively, please call us on 0344 472 6146. We’re open Monday to Friday from 9am to 5pm.

If you are making a written DSAR, please ensure that your request is signed.

It will also be helpful if you could be as specific as possible about the information you want access to, as this will assist us in processing your request.

Your DSAR will be handled within one month of us receiving it. However in some cases it may take us longer to process your DSAR, for instance if we have received a number of requests from you or there is complexity in obtaining the information.

In those circumstances, we reserve the right to seek additional information from you which would enable us to process your request. Should this be the case, it may be necessary to extend the one month period by up to a further two months where necessary and we will be in touch to inform you of the reasons for this. We will also advise you of any further clarification or information we require.

Similarly, if we process a large amount of information about you, we may ask you for more information in order to clarify your request. Should this be the case, we will let you know as soon as possible that we need more information from you before responding to your request.

In both cases, the one month deadline for processing your DSAR will then commence from the date we receive this additional information from you.

There is no charge to make a DSAR in the first instance. We will provide a copy of the relevant personal information we hold about you at no cost, in line with the timeframes above.

Any DSAR made within six months of a previous request will normally be refused where the request is for duplicate information already provided to you.

However, if we do consent to provide you with duplicate information within six months of a previous request we may ask you to pay a reasonable fee to cover our administrative costs of providing this for you.