Your Rights

This Policy was created in May 2018 and sets out the rights you have in respect of your personal data. If you have any questions then please contact us on dataprotection@sunny.co.uk.

Your right to be informed

You have the right to know how we use your personal data and we have set this out in our Privacy Policy.

Your right of access

You have the right to access the personal data we hold (this is commonly known as a “data subject access request” or “DSAR”). This allows you to receive a copy of the personal data we hold about you and to check what we are processing. Please note that we may ask you to specify what you wish to see in order to focus our search, and we may have to verify your identity/authority. The simplest way of accessing your loan documentation and statements is via MyAccount. If you are unable to login to MyAccount please contact our customer service representatives on 0800 7315 444 or 01284 715 444 or email dataprotection@sunny.co.uk.

Your right to erasure

You have the right to ask us to delete or remove personal data where there is no good reason for us continuing to process it, for example:

  • where you consider that we do not need it any longer for the purposes for which we originally collected it as explained to you in our Privacy Policy; and/or
  • where you consider that we cannot show a ‘legitimate interest’ in continuing to process it and we have relied on that legitimate interest to process it as further explained in our Privacy Policy.

You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.

Please note that if we are legally obliged to retain your data, we may not be able to comply with your request of erasure. If this is the case, you will be notified at the time of your request.

Your right to restrict processing

You have the right to ask us to suspend the processing of your personal data in the following scenarios:

  • (a) if you want us to establish the data’s accuracy;
  • (b) where our use of the data is unlawful but you do not want us to erase it;
  • (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  • (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Your right to data portability

This right only applies to personal data you initially provided consent for us to use or where it was required for the performance of our contract with you, and we used automated means to process it. In such cases we will provide you, or any third party you have chosen to act on your behalf, with your personal data in a structured, commonly used, machine-readable format.

If we are under a legal obligation to process your personal data, for example to conduct an assessment of affordability and creditworthiness, and we use that as part of an automated decisioning process, we are not obliged to provide this data in a machine readable-format.

Your right to object

This right applies where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds. In such cases, these may override your rights and freedoms.

Consent

We are only required to obtain your consent to process your personal data in circumstances where we are not able to rely upon an alternative lawful processing condition. All of our lawful processing conditions are explained in our Privacy Policy. When you apply for a loan we rely on a number of the lawful processing conditions to validate different uses of your data as set out in that Policy, including performance of the contract, legitimate interest or legal obligation. We do rely on your consent to allow us to market directly to you, including by email and SMS except for when you have started a loan application process with us – instead we then rely on the ‘soft opt in’ allowed under data privacy laws. This allows us to rely on offering you an opt-out of such marketing where we are marketing our similar products and services to you. All our marketing communications will, in addition, clearly explain how you can unsubscribe from receiving any more of them. You have the right to withdraw your consent where we are relying on that consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.