They are in the wrong so far as I know.(posted 9106 days ago)Get it all in writing and complain to the Data Protection Registrar. If you haven't submitted a DPA in writing already, do it now as they have up to 40 days to reply (or not reply) before you can complain to the Data Protection Registrar.
Also, if the endowment is projected to shortfall, take it to the FSA. They are looking for lenders that have not explained the risks of endowment shortfall properly and left customers with shortfalls.
Keep me posted.
Lee