Are my bank details safe, and who holds them?

Your bank details are protected at every step. You enter them on helloBill's own form. GoCardless, a payments provider authorised by the Financial Conduct Authority under the Payment Services Regulations 2017, checks them, and helloBill passes them securely to the providers you approved, only for the purpose shown when you approved it. Each provider then sets up its own Direct Debit and collects its own payments. Every Direct Debit is protected by the Direct Debit Guarantee, so you can cancel at any time through your bank and you're entitled to a full and immediate refund if a payment is ever taken in error. Your bank details are stored encrypted in the UK, and we keep payment and mandate references for as long as they're needed for payment, accounting or legal reasons, normally up to six years. Our Privacy notice has the full retention table.