You decide what bank accounts to connect to GoodSpend, which you can do at any time. You have the right to be forgotten, which means you can delete your GoodSpend account through our website and we will then delete all data we have about you.
You might give us data about you by filling in forms, using the app or granting us access to your bank account data. We collect personally identifiable data like name, address, email address, mobile phone number and your bank transactions data which we need for identification and to help you manage your spending.
We never see your banking app username or password. You connect GoodSpend to your bank account data via your banking app, which you can do via touch ID or by entering your usual password. This then creates a secure connection between GoodSpend and your bank account.
GoodSpend has Read Only Access to your bank account data, which means that although we have access to your bank account transactions data we do not have the ability to move money into or out of your bank account.
We can only use your data with your consent and to perform our end of the contract that we enter into when you become a user. We use your data to help you achieve your spending goals. If you do not want us to use your data in this way then unfortunately we cannot provide a service to you. We may also use your data to identify and verify your identity, resolve any account security issues, prevent and detect fraud or money laundering and to comply with laws and regulations.
You have the right to stop us using your data or to delete your data. You can either withdraw your consent by deleting your account via our app or by disconnecting your bank accounts via GoodSpend or your banking apps. If we need to retain your data for legal reasons we would only use it for this purpose.You have the right to request a copy of all personal data that we hold on you or to rectify any inaccurate information, which we will do on request. Just send an email to hello@GoodSpend.uk
We ensure your data is stored in a secure cloud server hosted in a secure data centre within the UK and we have internal controls in place to ensure that access to your personal data is encrypted, anonymised and restricted. We will never ask for any of your login credentials and ask that you help us protect your data by taking all reasonable steps to prevent the unauthorised use of the goodspend service and notifying us if you think your account has been breached. Your data is always protected by UK data protection rules.
We keep your personal data only for as long as we need to. You have the right to be forgotten. If you take up that right we will archive your data which means we will no longer actively process your data. Archiving means we can process it if required for legal or regulatory reasons but means we will no longer access it in the course of providing the goodspend service to you. Due to regulatory reasons we need to retain the data in archive for a minimum of 6 years after the termination of your goodspend account.