McDaan Limited PRIVACY NOTICE

Introduction

This is the privacy policy of McDaan Limited, a private company registered in England and Wales with a registration number 07641503. The company's registered office is at 251 A33 Relief Road, Reading Berkshire, RG2 0RR, on behalf of itself, its affiliates and subsidiaries.

McDaan Limited values your privacy and is committed to make sure that your information is used according to the current data protection procedures.

This privacy notice describes the way we collect your information, how we use it and why.

Where we use the term ‘we’ in this notice we mean the relevant member of McDaan Limited who is processing your personal information.

If you have any questions about how your personal information is used by us, which have not answered in this notice, please contact us at 251 A33 Relief Road, Reading Berkshire, RG2 0RR, or email  info@mcdaanlimited.co.uk .

What is personal data?

Personal data is considered to be any information that either alone, or in combination with other information, would identify you as a living individual. For example, your name and date of birth.

How do we collect your information?

The type of loan or other products and services you have with us will determine how your personal information is collected. If you become our customer, we will use it to manage the service you've applied with us.

Personal information may be provided to us by;

·     You or a third party during the application time.

 And may be provided;

·     electronically

·     by telephone

·     postal mail

·     physically at our offices

When applying for a product or service we will ask you to provide some information about yourself for security, identification and verification purposes.

When completing any forms, we will always tell you how your information will be used in relation to the product or service you are applying for within the declaration and in any associated terms and conditions.

When you provide any information about others (e.g. guarantors), you must ensure that you have their consent or are otherwise entitled to provide the information to us.


What personal data do we process?

We may process the following personal information;

·     Full name and personal contact details such as home address and address history, email address, home and mobile telephone numbers

·     Date of birth or your age (to make sure that you are eligible to apply for our services)

·     Employment details if relevant to the product or service applied for

·  Bank account number and Sort Code (for loan applicants: to be used for crediting your account once your loan is approved; can also be used as a means for proof of address)

·     Passportinformation as a form of identification

·     Vehicle details (when you chose to use your vehicle as a security for the loan)

·    Device ID if relevant for the services requested especially when you choose to use your devices as a security for the loan

·     If you have requested a third party to act on your behalf, you will provide their name and contact details and their letter of consent

  On what basis are we allowed to process your personal data?

Under Data ProtectionAct 1998, we are only allowed to process your personal data if we have a proper reason to do so. This includes sharing it outside our company. The law allows us to process your data for one or more of the following reasons;

·     to fulfil a contract, we have with you

·     when it is our legal duty

·     when it is in our genuine interest

·     when you consent to it

 A genuine interest is when we have a business or commercial reason to use your information. This reason must not unfairly go against what is right and best for you.

The table below shows the ways we may use your personal information and why;

What we use your personal information for

Why we use your personal information

·     To verify your identity

·     To manage our relationship with you

·     To find new ways to meet our customers’ needs and to grow our business

·     To develop and carry out marketing activities

·     Pass to another broker if we are not able to arrange finance for you

·     To understand how our customers use our products and services

·     Fulfil a contract

·     Legal duty

·     Legitimate interest

·     Your consent

·     To develop and manage our products and services

·          To manage how we work with other companies that provide services to us and our customers (affiliates)

·     Fulfil a contract

·     Legal duty

·     Legitimate interest

·     To deliver our products and services

·     To make and manage customer payments

·     To collect and recover money that is owed to us

·     Fulfil a contract

·     Legal duty

·     Legitimate interest

·     To respond to complaints and seek to resolve them

·     To detect, investigate, report and seek to prevent financial crime

·     To comply with laws and regulations that apply to us

·     To manage risk for us and our customers

·     To prevent fraud and money laundering

·     Fulfil a contract

·     Legal duty

·     Legitimate interest

·     To exercise our rights set out in agreements or contracts

·      To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance and audit requirements

·     Legal duty

·     Legitimate interest

·      To exercise our rights set out in agreements or contracts

·     Fulfil a contract

 

Who do we share your personal data with and why?

We may share your personal information with the following third parties;

·          with funders or lenders to request information from them so that we can assess whether you meet the eligibility criteria if you have applied for a mortgage or loan

·          Other organisations who use shared databases for income verification and affordability checks and to manage/collect arrears;

·          Companies and other persons providing services to us;

·          with businesses who may process data on our behalf as part of a contract

·          with valuers and other organisations involved in the provision of valuation services to enable them to carry out valuations of your property

·          with third parties to whom your mortgage, loan or account is, or may be, assigned or transferred

·          with credit reference agencies (CRAs) to carry out credit checks and record details of your repayment history. The CRA’s have drafted a notice called ‘Credit Reference Agency Information Notice’ (CRAIN) which sets out how your data will be processed by Callcredit, Equifax and Experian. Please check out  www.equifax.co.uk/crain www.callcredit.co.uk/crain  or  www.experian.co.uk/crain/index  to read the notice in full

·          the credit reference agencies we normally use are:

·          Equifax Ltd, Customer Services Centre, PO Box 10036, Leicester LE3 4FS

·          Experian, Consumer Help Service, PO Box 8000, Nottingham, NG1 5GX

·          Callcredit PLC, 1 Park Lane, Leeds, LS3 1EP

If you would like to see the information that these credit reference agencies hold about you, please contact them directly; they will be able to explain how you may progress your request and any charges that may apply.

·          Fraud prevention agencies, credit reference agencies, and debt collection agencies when we open your account and periodically during your account or service management

·          with identification checking agencies who will carry out electronic identity checks on you and who will record details of the check, regardless of whether your application proceeds

·          if you have a mortgage or second charge mortgage with us, we may share information with other lenders who also hold a charge on the property

·          with regulatory bodies where we are required to do so for legal and regulatory purposes for example, the  Financial Conduct Authority (FCA)

·          If you would like to know which specific third parties process data on our behalf, please contact us at 251 A33 Relief Road, Reading Berkshire, RG2 0RR or email info@mcdaanlimited.co.uk.

·          with anyone else where we have your consent or as required by law.

 

Possible consequences of us processing your personal data

If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services and financing you have requested, or we may stop providing existing services to you.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, finance or employment to you. If you have any questions about this, please contact us.

Marketing

From time to time we may make you aware of products or services which are similar to the ones you currently hold with us that may be of interest to you. We will only do this if we consider this type of processing to be a legitimate business interest or with your consent. You are able to get in touch and ask us to stop sending you these messages at any time . If you chose not to receive marketing information you will still receive important information about your product or service.

How long will we keep your personal information?

We will keep your personal information for as long as you are a customer of McDaan Limited. After you stop being a customer we may keep your data for up to 12 years for one of these reasons;

·     to respond to any questions or complaints

·     to show that we treated you fairly

·     to maintain records according to our regulatory and statutory obligations

We will keep your data for longer than this if we cannot delete it for legal, regulatory or technical reasons. We will also keep it for research, fraud prevention, money laundering, capital, liquidity, risk and business forecasting purposes. When this happens, we will make sure that your privacy is protected, and we will only use it for these purposes.

How long will we keep your personal information (whether or not you become a customer)

The following criteria are used to determine data retention periods for your personal data:

·       Retention in case of queries. We’ll keep your personal data as long as necessary to deal with your queries (e.g. if your application is unsuccessful);

·          Retention in case of claims. We’ll retain your personal data for as long as you might legally bring claims against us; and

·       Retention in accordance with legal and regulatory requirements. We’ll retain your personal data after your account, policy or service has been closed or has otherwise come to an end based on our legal and regulatory requirements.

Your information rights

You have various rights in terms of how and why your personal data is processed. Please contact us at any time by emailing info@mcdaanlimited.co.uk if you wish to exercise these rights (noting that these rights don’t apply in all circumstances and that data portability is only relevant from 25 May 2018):

·         The right to be informed about our processing of your personal data;

·         The right to have your personal data corrected if it’s inaccurate and to have incomplete personal data completed ;

·         The right to object to processing of your personal data;

·         The right to restrict processing of your personal data;

·         The right to have your personal data erased (the “right to be forgotten”);

·         The right to request access to your personal data and information about how we process it;

·         The right to move, copy or transfer your personal data (“data portability”); and

·         Rights in relation to automated decision making including profiling.

You have the right to complain to the Information Commissioner’s Office that hold enforcement powers and can review the compliance requirements for data protection ( https://ico.org.uk/global/contact-us/email/) .For more information visit their website https://ico.org.uk/for-the-public/.

 

 

Transfer of your personal information overseas

Some or all of your personal information may be transferred to, stored or processed by service provider of ours located in countries outside the European Economic Area (EEA) where data protection laws may not be as strict as they are in the UK.

In the event that your personal information would be needed to be transferred to, stored or processed affiliate service providers outside the European Economic Area (EEA), we endeavour to ensure that the transfer of your data is in line with UK data protection requirements and that your information is treated securely and protected to a similar standard.

  If you chose not to give personal information

We may need to collect personal information by law, under the terms of a contract we have with you. If you chose not to give us this personal information, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform services needed to meet your need. It could mean that we cancel a product or service that you have with us.

Complaints

If you wish to complain about how we have treated your personal data, please contact the us through your usual servicing department to discuss your concerns.

You also have a right to refer your concerns to the Information Commissioner’s Office (ICO), who regulates the handling of personal data in the UK. The contact details are:

Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone:  01625 545745

www.ico.org