Privacy policy.

Our lawful basis to process your information

We will collect your consent in order to process your information for marketing purposes, this includes contacting you about our product and our offers. Where you discuss sensitive data with us, we will capture explicit consent from you in order to store and process this information about you.

Where you have applied for a loan with a credit brokerage or credit intermediary and they have passed your information to us, we will use our legitimate interests to contact you about the application we have received on your behalf and process your information in line with the loan you have enquired about.

How we collect your information

Through the information you provide to us through our website, our smart device application and any other communication you have with us:

• through the information you provide to a broker that is passed to us (with your consent);
• from third parties, such as banks, credit reference and fraud prevention or investigation agencies; and
• in customer satisfaction surveys.

Information we collect

We will collect any information we need from you and use this information in order to manage, provide and administer our credit reporting services to you.

We will collect:

• your name, date of birth, current and previous addresses, and contact information;
• debit card and bank account information;
• details of when you contact us and when we contact you;
• we may keep any email address or phone numbers that you communicate with us on;
• your location; and
• your IP address, operating system, and browser.

We may record your customer journey on our website or app for usability monitoring, testing, and improvement. However, we will not record any personal information you input. We will record and may monitor the calls, texts, emails, and letters you send to us or receive from us. We will also collect information for the purpose of staff training and system improvement.

How we use your information

Your Personal Data is used to administer and manage your account with us. This may include:

• to contact you about our products and services, unless you tell us that you prefer not to receive marketing;
• to respond to complaints; or
• to exercise our rights set out in agreements or contracts and to comply with our regulatory obligations.

Your IP address, details of the device you use and your location are used to help identify you, to prevent fraudulent use of our services, to diagnose problems with our servers, and to administer our website.

We will also use your information to run our business in an efficient and correct way. This includes managing our financial position, business planning, statistical research, governance, monitoring risk and auditing. We may do this:

• to detect, investigate, report, monitor, and analyse our business;
• to carry out market research, to develop and manage our brand, product and services;
• to carry out internal and external audits;
• to test our processes and systems;
• to obey laws and regulations that apply to us; or
• to manage security and risk for us and you.

Where you have consented for your details to be passed to us by a loan broker that we work with, we will store and process your information so you have the option to complete your signup without having to re-enter in your details and so we can contact you about our product.

How long we will store your information

We retain the personal information we collect from You only for as long as is necessary for the purpose for which it was collected. In most cases, we will keep Your personal information while You're a regular user of Our Website, and for seven years thereafter. In other cases, we'll store personal information for the periods needed for the purposes for which the information was collected or for which it is to be further processed. And sometimes we'll keep it for longer if we need to by law.

At the end of the retention period, Your personal information will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.

Who we will share your information with

We may share your personal data with:

• companies who verify your information for us;
• credit reference and fraud investigation or prevention agencies;
• organisations that introduce you to us (credit brokers or intermediaries);
• companies you ask us to share your data with; 3rd party companies who help us document, record, assess, and test our internal processes and systems;
• any company we use to process your information (i.e mail and telecom companies to send you communications via text, email, and letter);
• as part of the application process you details may be passed to T Dot UK limited to assist you in your search for a loan. Their privacy policy and how they use and store data can be found here: https://t.uk/b-privacy/
• our regulators;
• Visa and Mastercard (when you have a debit, credit, or charge card with us, we will share transaction details with companies that help us to provide this service); and
• if you use direct debits, we will share your data with the Direct Debit scheme and its members.

Credit searching

When using the services provided by Raporto, we will look at your credit file at credit-reference agencies (CRAs). The CRAs will give us credit information about you including information from the electoral register. This credit search is used to source the credit risk information we display on our site and/or application. The CRAs may add details of our searches and your application to the record which they hold about you. Your credit-reference agency records will be seen by other organisations that make searches with those agencies. Information held about you by the CRAs may already be linked to records relating to one or more of your partners. For the purposes of this application, you may be treated as financially linked and your application will be assessed with reference to any “associated” records.

While you are a customer of ours, we may carry out extra credit searches so we can manage your account. We and other organisations may use and search these records (including access and use from other countries) for example to:

• help make decisions about credit and credit-related services and other facilities for you and members of your household;
• verify the accuracy of the data you have provided to us;
• check details on proposals and claims for all types of insurance;
• check details of job applicants and employees; and
• check your identity to prevent money laundering unless you give us other satisfactory proof of identity.

The identities of the CRAs, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail here. This information is also accessible from each of the four main CRAs – clicking on any of these four links will also take you to the same document:

Your rights

You have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or remove your information, providing we are not legally required to hold it or hold it to meet a legitimate expectation or for you or us to meet a legal obligation.

If we are using your data because we deem it necessary to do so, and you do not agree, you have the right to ask to remove your information or ask us to stop processing your information. If you would like to do so, you can contact us at [email protected]. In cases where you ask us not to contact you, we may still hold your information so that we know not to use it. If you request us to remove your information, we will respond to your request within 30 days. We will only refuse your request if we are required or have the legal right to process the information for a specific reason. For example, if you have an ongoing relationship with us, or we have a legal reason to keep it.

You have the right to object to an automated decision and ask that a person reviews it. To do this please contact us. Where we have obtained your consent to process your personal data for certain activities (for example, marketing), you may withdraw your consent at any time. You can do so by contacting us.

If you wish, you have the right to transfer the data we hold for you. We will help with this – either by directly transferring your data for you or by providing you with a copy in a commonly used machine-readable format. To do this just contact us by phone, in writing, or by using the email address above.

Security

We recognise how important it is to protect and manage the information you share with us. We use computer safeguards such as firewalls and data encryption to keep your details safe. Our security systems meet or exceed industry standards and we are constantly monitoring internet developments to ensure our systems evolve as required.