We are committed to protecting and respecting your privacy. This privacy notice explains when and why we collect personal information, how we use it, the conditions under which we share it with other people and how we keep it secure.
This privacy notice applies to visitors to our website and individuals who contact us by telephone, e-mail or other electronic means as well as visitors to our Personal Contract Leasing (PCL) website, including individuals who have logged into our website and created accounts to quote or order PCL products and services from us.
We only use personal data obtained from our website to contact you if we feel we have a legitimate interest in informing you of the products and services we offer.
3.5. How long do we retain your data?
We retain personal data collected automatically from our website for as long as it is valid, accurate and up to date or until such time that you choose to unsubscribe. Where we hold Personal Data for the fulfilment of a contract we will hold this for a period of seven years from the termination of the contract.
4.2. How is your information used?
How we use your personal data and the lawful basis for doing so.Where we are relying on a basis other than consent, we may rely on one or more of the following legal bases when processing your personal data for the following purposes:
To assist in the prevention and reduction of fraud and other financial crime. The processing is necessary for us to comply with the law and our legal requirements.
Purposes for which we process your personal data | The basis on which we can do this (this is what the law allows) |
---|---|
In order to perform our contractual obligations to you. | The processing is necessary in connection with any contract that you may enter into with us |
In order to perform our legal obligations to you. This would include funding of the lease agreement | The processing is necessary in connection with any contract that you may enter into with us |
To administer your account, including financial transactions for the product or service we have provided you | The processing is necessary in connection with any contract that you may enter into with us |
In the interests of security and to improve our service, telephone calls you make to us may be monitored and/or recorded | The processing is necessary to pursue our legitimate interest in the management and operation of our business |
To let you know about similar products and services that may be of interest to you | The processing is necessary to pursue our legitimate interest in the management and operation of our business |
4.3. Who has access to your information?
Our staff have access to your personal data to support and provide guidance on our products and services and to carry out our obligations arising from any orders that you have entered into.
We share your personal information with Credit Providers for them to carry out affordability and credit checking, provide finance and manage any late or defaulted payments for the PCL product. In carrying out such processing Credit Providers will share your information with credit reference agencies, details of which are set out at the end of this notice.
We may also share your information with other third party service providers, also known as Data Processors, to complete tasks and provide services to you on our behalf. However, when we use third party service providers, we only share the personal information that is necessary to deliver a service and our contract requires them to keep your information secure and not to use it for their own purposes, for example they will not use it for direct marketing purposes. Please be reassured that we will not release your information to third parties for them to use for their own purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
Examples of services where we may use third party service providers include:
We may share your personal data with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may also disclose your personal data to third party controllers:
We may process (including disclose) your personal data in order to comply with any legal obligations binding on us and to protect the rights, property, or safety of our staff, our customers, or others. We may also process (including disclose) your personal data to:
In complying with legal obligations or establishing, exercising or defending our legal rights, we may share your personal data with the following (i) the Financial Conduct Authority; (ii) HM Revenue & Customs; (iii) Courts and tribunals (iv) any other applicable regulatory authority (v) legal advisors, accountants and auditors
4.4. Lawful processing
When we process your personal data in connection with telephone calls, LiveChat sessions, e-mails or social media, we do so on the basis of our legitimate interests in discussing our products and services with you, in creating and retaining records of such communications for training purposes and for evidentiary purposes or to respond to customer queries.
Where you are a recipient of our products and services (either directly or via your employer), we process your personal data arising from telephone calls, LiveChat sessions, e-mails or social media on the basis of performance of a contract relating to you where such communications are relevant to such a contract.
When we process your personal data for the purposes of processing quotes or orders, including rectifying your data to ensure its accuracy, we do so on the basis of performance of a contract with you or taking steps with the intention of entering into a contract with you for our products and services. If no contract is in place and you are using the website to carry out quotations, we will use your personal data to contact you and discuss quotations as a legitimate interest.
When we process your personal data for the administrative purposes or in order to secure funding, we do so on the basis that we have a legitimate interest in pursuing business aims and objectives.
When we process your personal data for legal purposes we do so on the basis that we have a legal obligation to do so (including our reporting obligations to the Financial Conduct Authority and HM Revenue & Customs, as well as our obligations under applicable legislation including the Money Laundering Regulations, Bribery Act 2010 and the Modern Slavery Act 2015) or such processing is necessary in order to protect the vital interests of a natural person, or is in our legitimate interests in establishing, exercising or defending our legal rights.
4.5. How long do we retain your data?
We retain recordings, transcripts, e-mails and other copies of communications for a maximum period of 7 years from the end date of your contract with us
5.2. Marketing preferences
You can opt out of any marketing communications by:
Where you are a registered user of our website, you can set your marketing preferences within the registered user area of our website, including out of any particular type of marketing communication.
5.3. Who has access to your information?
Our marketing staff have access to any personal data obtained for marketing purposes. We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
We may also use the services of third party marketing companies and platforms, including;
5.4. Lawful processing
When we process your business contact data for marketing purposes, we do so on the basis of our legitimate interests in pursuing sales leads to inform you of the services and products that we offer or for discussing renewals.
5.5. How long do we retain your data?
We will retain any marketing data for a maximum of 7 years.