NATWESTPrivacy Policy
Last updated: 16 October 2026
1. Who we are
Natwest is a demonstration banking app. The operator of this site decides how your information is used (the “controller”). To contact us, use the live chat on our home page.
2. What we collect
| Type | What it includes |
|---|---|
| Account details | Username, email, full name, phone number, date of birth, gender, country, address, occupation and profile photo. An administrator enters these when creating your account. |
| ID details | ID type and number. The number is stored encrypted; staff normally see only the last four characters, and revealing the full number is recorded. |
| Passwords and PINs | Stored only as salted one-way hashes. Nobody, including us, can read them. |
| Activity | Transactions, transfers, saved recipients (their bank details are encrypted), savings vaults, money requests, funding requests and notifications. |
| Security records | Sign-in attempts (time, success or failure, network address and browser details), and an audit log of administrator actions. |
| Support chat | Anything you type into the live chat, if you choose to use it. |
| Emails | One-time codes and notifications we send you. |
3. How we use it
- To run your account and the demo features (transfers, vaults, requests, statements).
- To keep Natwest secure: verifying it’s you, preventing misuse and investigating problems.
- To email you one-time codes and account notices.
- To reply to you through support.
We do not sell your information and we do not use it for advertising.
5. Where your data goes
Your data is stored and processed mainly in the United States, and emails are handled through email servers in Ireland. If you are elsewhere, your information is sent to these countries to run the service.
7. How long we keep it
- Account information is kept while your account exists.
- If an administrator deletes your account, your personal details, transactions and sign-in records are erased. Only a short log line without personal details is kept.
- Transfers are reversed after about 24 hours and removed from history.
- Because this is a demo on free hosting, data can also be reset or lost at any time.
8. How we protect it
- Passwords and PINs are hashed with scrypt; ID numbers and saved-recipient details are encrypted (AES-256-GCM).
- Connections use HTTPS, and sign-in cookies are HTTP-only.
- Sign-in attempts are rate-limited, with lockouts after repeated failures.
- Administrator actions need re-entering a password and are recorded in an audit log.
No system is perfectly secure, so please keep your own credentials private.
9. Your rights
Depending on where you live, you may have the right to see the information we hold about you, correct it, have it deleted, object to or restrict how it’s used, and withdraw consent (for optional cookies, use Cookie settings). To ask, contact us through the live chat and we will reply within a reasonable time, normally within 30 days. You can also complain to your local data protection authority.
10. Children
Natwest is for people aged 18 or over. We do not knowingly collect information from anyone younger.
11. Changes to this policy
We may update this policy and will change the date at the top. For important changes we will tell you in the app or by email.
12. Contact
For any privacy question or request, use the live chat on our home page. Our Terms of Use explain the rules for using Natwest.