This Policy was created in May 2018 and sets out the rights you have in respect of your personal data. If you have
any questions then please contact us on email@example.com.
You have the right to know how we use your personal data and we have set this out in our Privacy
You have the right to access the personal data we hold (this is commonly known as a “data subject access request” or
“DSAR”). This allows you to receive a copy of the personal data we hold about you and to check what we are
processing. Please note that we may ask you to specify what you wish to see in order to focus our search, and we may
have to verify your identity/authority. The simplest way of accessing your loan documentation and statements is via
MyAccount. If you are unable to login to MyAccount please contact our customer service representatives on 0800 7315
444 or 01284 715 444 or email firstname.lastname@example.org.
You have the right to ask us to delete or remove personal data where there is no good reason for us continuing to
process it, for example:
- where you consider that we do not need it any longer for the purposes for which we originally collected it as
- where you consider that we cannot show a ‘legitimate interest’ in continuing to process it and we have relied
You also have the right to ask us to delete or remove your personal data where you have successfully exercised your
right to object to processing (see below), where we may have processed your information unlawfully or where we are
required to erase your personal data to comply with local law.
Please note that if we are legally obliged to retain your data, we may not be able to comply with your request of
erasure. If this is the case, you will be notified at the time of your request.
You have the right to ask us to suspend the processing of your personal data in the following scenarios:
- (a) if you want us to establish the data’s accuracy;
- (b) where our use of the data is unlawful but you do not want us to erase it;
- (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or
defend legal claims; or
- (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate
grounds to use it.
This right only applies to personal data you initially provided consent for us to use or where it was required for
the performance of our contract with you, and we used automated means to process it. In such cases we will provide
you, or any third party you have chosen to act on your behalf, with your personal data in a structured, commonly
used, machine-readable format.
If we are under a legal obligation to process your personal data, for example to conduct an assessment of
affordability and creditworthiness, and we use that as part of an automated decisioning process, we are not obliged
to provide this data in a machine readable-format.
This right applies where we are relying on a legitimate interest (or those of a third party) and there is something
about your particular situation which makes you want to object to processing on this ground as you feel it impacts
on your fundamental rights and freedoms. You also have the right to object where we are processing your personal
data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds. In
such cases, these may override your rights and freedoms.
We are only required to obtain your consent to process your personal data in circumstances where we are not able to
rely upon an alternative lawful processing condition. All of our lawful processing conditions are explained in our
different uses of your data as set out in that Policy, including performance of the contract, legitimate interest or
legal obligation. We do rely on your consent to allow us to market directly to you, including by email and SMS
except for when you have started a loan application process with us – instead we then rely on the ‘soft opt in’
allowed under data privacy laws. This allows us to rely on offering you an opt-out of such marketing where we are
marketing our similar products and services to you. All our marketing communications will, in addition, clearly
explain how you can unsubscribe from receiving any more of them. You have the right to withdraw your consent where
we are relying on that consent to process your personal data. However, this will not affect the lawfulness of any
processing carried out before you withdraw your consent.