I've just looked at some emails I've had from Santander. They follow the pattern you've illustrated (with my surname and the last part of my postcode at the top), so everything seems OK with that part of the email you've received.
Further (AND HERE'S THE REALLY IMPORTANT BIT) the link in your email (
https://investmenthub.santander.co.uk/ ) appears to be 100% TOTALLY SAFE. While it's possible for scammers to create links which look remarkably like genuine ones, they can't create a dodgy link which includes a genuine domain name. I've clicked on the link you've provided and I've no doubt that it goes to the REAL Santander website.
Just as a final check though, please re-visit the email in question and click on that link yourself. (i.e. DON'T click on the link shown in this thread. Go to the ORIGINAL email and click). If the web address shown at the top of your browser page looks exactly like this
http://www.upl.co/uploads/JJURL1539043687.jpg
then, as I see it, you've absolutely NOTHING to worry about.