A Data Controller is usually a company that is holding personal information about a data subject.
The Data Controller has a duty of care refgarding this information and is bound by the Data Protection Act (DPA).
Need the address to write to a Data Controller?
Addresses can be found on the Information Commissioner Website here
Just type the name of the Bank or Credit Card company in the "NAME" section...