Privacy & Cookie Policy

Privacy notice for the Pensions Trust and the Pensions Trust 2016 (the "Scheme") DC Members website

This notice sets out how we use personal information about all visitors to (“the website”) and members of the Scheme (“you”), and your dependants and nominated beneficiaries

Please see section ‘1. Collection of your information’ for the type of information we may hold about you, and ‘2. How we use your information’ for the reasons for which we use your information. 

We are the Trustee of the Scheme, Verity Trustees Limited. We are committed to protecting your information and acting in accordance with your rights under data protection law.

Personal data that we hold will be processed in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679), the Data Protection Act 2018 and any laws or regulations implementing EU Directives 95/46/EC (Data Protection Directive) or 2002/58/EC (ePrivacy Directive).” The Data Controller (or Controller) is Verity Trustees Ltd.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

By visiting and using our website you are accepting and consenting to this privacy policy. If you do not wish to be bound by this privacy policy, do not access or use the website.

1. Collection of your information

1.1 All website visitors

We collect and process the following information about you only when you opt-in to receive email updates:

1.1.1 your personal details such as your name, company, position, email address, phone number.

1.1.2 your profile data such as username and password;

1.1.3 we also collect information about your use of the website to help us develop and improve the website and to provide relevant, helpful information to you. This includes information about your computer such as domain name, browser type and version, operating system, IP address, cookie information, time stamp, what web pages you visit on our website, what information you download and how long you spend on each page. See our Cookie Policy for more information.

1.2 Members only

We collect and process the following information about you:

1.2.1 your personal details such as your name, gender, date of birth, home address including postcode, National Insurance number, bank account details (in some cases), and country of residence; 

1.2.2 information relating to your benefits, including your member number (which is assigned to you by the Scheme), the date you joined or left the Scheme, your earnings, the category and value of contributions and benefits that you receive, your target retirement age, and any relevant matters impacting your benefits such as additional voluntary contributions, pension sharing orders (including information in divorce or dissolution certificates), tax protections or other adjustments; 

1.2.3 records of communications with you (including phone calls and any complaints); and 

1.2.4 in some cases, special categories of personal information such as your marital status or information concerning your health (e.g. in the case of ill-health early retirement and ill-health reviews, and where incapacity or similar reasons determine the benefits paid to you), and (in exceptional cases) information relating to convictions or offences (e.g. in relation to fraud). 

1.2.5 Whilst much of the information we hold has been provided by you, we also obtain information from your employer, other pension schemes which you may have transferred from, HMRC, the Department for Work and Pensions and regulatory bodies, our medical advisors, and from tracing organisations.

1.2.6 If you sign up to access your scheme benefit details through Benpal, we will (or our administrator will on our behalf) also collect and process the personal information you provided via these online services. You can view the portal terms and conditions here:


1.2.7. Where applicable, we also collect information about your dependants or next of kin (for example, when you submit a nomination form, or where we collect marriage and birth certificates on a benefit event, such as at retirement or when deciding how to distribute death benefits). You should therefore provide a copy of the information in this notice to those individuals.

2. How we use your information

We use your information for the following purposes:

2.1.1 to register you as a user of the website and its services;

2.1.2 to manage our relationship with you including notifying you about changes to our terms or privacy policy;

2.1.3 to administer and protect our business and the website, including troubleshooting, testing, system maintenance, reporting and hosting data;

2.1.4 to deliver relevant website content to you;

2.1.5 communicating with you in relation to your benefits and contributions, handling requests for transfers and allocation of death benefits or valuations for divorce, dealing with complaints, and making disclosures at your request such as in relation to transfers to other schemes;

2.1.6 for general administration of the Scheme, including: to record and pay benefits; reviews we or our administrators conduct for statistical and reference purposes; and for other checks or administrative activities that may become necessary from time to time (like member tracing) should we happen to lose contact with you or to prevent fraud;

2.1.7 for meeting our on-going regulatory and compliance obligations, and investigating or preventing crime;

2.1.8 to improve our and our administrators’ processes and our use of technology, including training our employees, testing and upgrading of systems, developing solutions for access to historic data and to learn about other processes we can use to improve the administration of the Scheme, its internal operations and other business activities; and

2.1.9 when we or your employer undertake activities from time to time to help us and them manage the liabilities of the Scheme, such as obtaining life insurance, longevity hedging, scheme mergers, bulk transfers, pension increase exchanges and enhanced transfer value exercises, including (where relevant) disclosures to administrators for calculating offers made to you in relation to these activities and disclosures to independent financial advisers to allow you to obtain financial advice.

2.2 Our use of your information as described above is permitted by applicable data protection law because it is:

2.2.1. necessary for our legitimate interests in pursuing the purposes set out in 2.1.1 to 2.1.9 above, and (when we make the disclosures to your employer) necessary for your employer’s legitimate interests in meeting accountability and regulatory requirements, ensuring that the Scheme is run in a cost effective way and that you are offered appropriate pension options, such interests in each case not being overridden by your privacy interests; 

2.2.2. required to meet our legal or regulatory responsibilities, including when we make the disclosures to authorities, regulators or government bodies referred to below;

2.2.3. necessary for the performance of a task carried out in the public interest;

2.2.4. when we use special categories of personal information, necessary for making a determination in connection with eligibility for, or benefits payable under, the Scheme (where authorised under local or EU law), for preventing fraud or other unlawful acts, for establishing, exercising or defending legal claims, or where the processing relates to personal information manifestly in the public domain; and

2.2.5. processed with your consent which we obtain from you from time to time, such as when we consider requests by you to access your benefits on the grounds of ill-health (which may require us to consider information – with your consent – about your medical condition), when you ask us to make disclosures or allocate benefits or where the Scheme rules require you to provide information which we cannot otherwise process without your consent.

2.3. Where the personal information we collect from you is needed to meet our legal or regulatory obligations or to pay benefits to you or your nominated beneficiaries, if we cannot collect this information we may be unable to record or pay your or your beneficiaries’ benefits. We will identify any such “required” data to you when we seek to collect it. 

2.4 We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

2.5 If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

2.6 Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

3. Disclosures of your information (members only)

We share information with the following recipients:

3.1.1. our suppliers, including:
(i) Mercer, who help us administer parts of the Scheme; 
(ii) PwC, our auditors;  
(iii) Mercer, who provide actuarial services to us, and the scheme actuary (who is a person appointed by the Trustee, and also an employee of Mercer); 
(iv) TPT Retirement Solutions Limited who provide services to us, primarily in respect of accounting services for some employers
(v) The Leadership Factor, who undertake customer satisfaction surveys on our behalf; 
(vi) our professional advisers to obtain legal and medical advice; and
(vii) other providers of services to us, including financial advisers, payroll providers (to record and pay benefits) mortality analysis providers, and printing, communication, IT and hosting, archiving, marketing, and tracing providers,

(and when we share information with these recipients we take steps to ensure they meet our data security standards, so that your information remains secure);

3.1.2. your employer or former employer, who will use the information for audit purposes, in relation to corporate transactions they are involved in, to consider whether to participate in the activities referred to in 2.1.5 above, and to allow you to flex your benefits including your pensions options;

3.1.3. insurance and, reinsurance companies and independent financial advisers where we carry out the activities referred to in 2.1.5 above;

3.1.4. public authorities, regulators or government bodies, including when required by law or regulation, under a code of practice or conduct, or when these authorities or bodies require us to do so;

3.1.5. third parties to whom you ask us to disclose your information, for example where you wish to transfer your pension; and

3.1.6. other persons from time to time when the disclosure is needed to exercise or protect legal rights, including those of the Trustee or other stakeholders, or in response to requests from individuals or their representatives who seek to protect their legal rights or such rights of others.

4. Transfers of your information abroad (members only)

The use and disclosure of your information involves transferring your information outside of the European Economic Area to Mercer and their service provider in India. In those cases, the transferred information is protected by a data transfer agreement in the appropriate standard form approved for this purpose by the European Commission. Further details of these transfers including the form of data transfer agreement used are available from us on request.

5. Retention of your information

5.1. We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any of our legal or regulatory responsibilities.

5.2 For members we determine the period envisaged within such policy with regard to the Scheme’s operational and legal requirements, such as facilitating the payment of benefits to you or your beneficiaries, calculating and managing the liabilities of the Scheme, and responding to legal claims or regulatory requests. 

5.3. In general, for members we will retain your information for 12 years after all entitlements to your benefits cease or, if longer, 6 years after your normal pension age (as defined in the rules of the scheme). For example, information will be retained for 12 years after the death of a member and their beneficiaries (if any).

5.4. For non-members, to determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

6. Data Security

6.1 We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

6.2 We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Your rights

7.1. You have rights under data protection law of access to, and rectification or erasure of, your personal information, and to restrict its processing and (in some circumstances) to require certain of your information to be transferred to you or a third party.

7.2. You also have the right to object to the processing of your information in some circumstances, and to tell us that you do not wish to receive marketing information.

7.3. You can exercise any of these rights by contacting our privacy office at the details set out below.

7.4. You also have the right to withdraw your consent to the use of your information, to the extent such use is based on your consent. You can notify us of your withdrawal of consent by contacting us at the details set out below.

7.5. You can also lodge a complaint about our processing of your personal information with a supervisory authority in the Member State where you habitually reside or work, or where a breach has taken place. Details for the office of the Information Commissioner in the UK are available at

8. Further information may be required to carry out requests

In some cases, it may be necessary to obtain additional information from you, for example to carry out your request for a transfer or allocation of benefits. We will notify you when your information is required for this purpose.

9. Status of this privacy notice

This privacy notice was updated in July 20208. It is a notice explaining what the Scheme does with your information, not a document that binds the Scheme or any other party contractually. 

We reserve the right to amend this notice from time to time, and will take appropriate steps to bring any such amendments to your attention.

10. Contact information, and exercising your rights

If you wish to exercise your rights described in Point 7 above, or if you have any questions about our use of information or this document, please contact: 

TPT Retirement Solutions, Verity House, 6 Canal Wharf, Leeds, LS11 5BQ
0113 394 2779

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.