Fair Processing Notice

How your Personal Information is used by First Response Finance.

This privacy notice sets out your rights under GDPR.

View our cookie policy here.

Who we are

Your personal information will be held by First Response Finance Ltd.  If you have any questions, or would like to find out more about how we use your personal information, you can email our Data Protection Officer or call us on 01159466368 (option 4, then option 3).

How your data is protected?

For First Response Finance to use your personal information, we must have a lawful basis for doing so, including the sharing of your information outside of First Response Finance Ltd. The legal basis for which we may use your data must fall into one or more of these reasons:

• To enter into a contract with you, or
• When it is our legal duty, or
• Where there is a legitimate interest, or
• When you consent to it

Below is a list of the ways in which we will use your personal information, the lawful basis we rely on to process it and where we process based on legitimate interests, what these are.

How we may use your personal information

The types (or categories) of personal information we will collect about you and process are as follows:

• To provide you with our products and services
  To allow us to process your application, we will use your personal information to assess your suitability for finance
  Lawful Basis: Fulfilling a Contract, Legal Duty, Legitimate Interests
  Our Legitimate Interests: Promoting responsible lending and helping to prevent over indebtedness. To prevent, detect, investigate and report Financial Crime
  
  
• Managing our agreement and relationship with you
  We will process your information to ensure that you are able to fulfil your obligations under your credit agreement and to communicate with you to provide and manage your needs.
  Lawful Basis: Fulfilling a Contract, Legal Duty, Legitimate Interests
  Our Legitimate Interests: Make and manage your payments required under your agreement and to recover money and assets that are owed to us
  
  
• Our Legal Obligations
  We may process your information for the prevention, detection and investigation of fraud and money laundering; To comply with laws and regulations that we have to adhere to For auditing purposes. If we are obliged to disclose information by reason of any law, regulation or court order
  Lawful Basis: Legal Duty
  
  
• Staff Training and Awareness
  To provide training to our employees to enhance or review the service we provide or have provided to you
  Lawful Basis: Legitimate Interests
  Our Legitimate Interests: Developing and improving our employees knowledge and expertise to ensure you are provided with the most efficient service
  
  
• To send you Marketing Material
  To provide you with information on other products and services we can offer you
  Lawful Basis: Legitimate Interests
  Our Legitimate Interests: To send information on similar products to individuals who have not previously objected to receiving marketing material

What personal information will we collect and process

The types (or categories) of personal information we will collect about you and process are as follows:

• Personal Identifiers - Information which can identify you, such as your name and date of birth
  
  
• Contact Details - Information on where you live and how we may contact you to discuss your agreement.
  
  
• Financial Details - Your financial position, history and bank account information
  
  
• Employment - Your current employment status and employment history
  
  
• Documentary Data - Documents provided by you, for example Passport, Driving Licence, Payslips, Bank Statements
  
  
• Public Records and Open Data - Information about you on public records such as the Electoral Register and information which is openly available on the internet
  
  
• Location Data - Information we receive from your device (mobile phone, computer etc.) when you visit our website or log on to your online account
  
  
• Special Category Data - Certain personal information you provide to us is more sensitive and needs more protection. We will only collect and process this type of data with your consent. Examples of this type of data may include information you provide in relation to a vulnerability which we need to be aware of to provide support and correctly manage our relationship with you

Why we need your personal information

We need to collect your personal information in order to enter into a finance contract with you.

If you choose not to provide us with your personal information, it will mean that we will be unable to offer you our products and services.

Where we collect your personal information from

We may collect personal information directly from you when you apply for our products and services or when you contact us to discuss your finance agreement.

Your personal information may also be provided to us by a 3^rd party, such as a dealership when you visit them to purchase a vehicle.

Further organisations where we may collect your data from include:

• Credit Reference Agencies
• Fraud Prevention Agencies
• Public information sources such as Companies House
• Agents working on our behalf

Who we share your personal information with

Below is a list of organisations in which First Response Finance Ltd may share your personal information with:

• Agents (Tracing, Debt Collection, Vehicle Repossession and Car Auction) who assist us in ensuring you fulfil your obligations under your finance agreement
• Government and Law enforcement agencies
• Regulators and other authorities (such as the DVLA)
• Independent Vehicle Inspection companies
• Feedback service providers
• Communication Management Companies
• Payment System Providers, including the Direct Debit Scheme and BACS
• Legal and professional advisors including auditors
• Courts to comply with legal requirements
• Dealerships
• Technology business partners

We also share your personal information with the following agencies:

Credit Reference Agencies

When you apply for a product or service, we will carry out credit and identity checks on you with one or more credit reference agencies (CRAs)

To do this, we will supply your personal information to CRAs and they will give us information about you. This will include information from your credit application and about your financial situation and financial history. CRAs will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.

We will use this information to:

• Assess your creditworthiness and whether you can afford to take the product;
• Verify the accuracy of the data you have provided to us;
• Prevent criminal activity, fraud and money laundering;
• Manage your account(s);
• Trace and recover debts;
• Ensure any offers provided to you are appropriate to your circumstances.

We will continue to exchange information about you with CRAs while you have a relationship with us. We will also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.

When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.

If you are making a joint application, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.

The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail within the Credit Reference Agency Information Notice (CRAIN).

This notice is accessible from each of the three CRA links below:

TransUnion

Equifax

Experian

Fraud Prevention Agencies

General

Before we provide services, goods or financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you.

The personal data you have provided, we have collected from you, or we have received from third parties will be used to prevent fraud and money laundering, and to verify your identity.

Details of the personal information that will be processed include, for example: name, address, date of birth, contact details, financial information, employment details, device identifiers including IP address and vehicle details.

We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.

We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested.

Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.

 

Data transfers

Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.

Your rights

Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.

Transfers of Data outside of the EEA

Your personal data will not be transferred outside of the European Union.

If in the event First Response Finance Ltd are required to transfer data outside of the European Union, we will:

• Only do so with either your consent, or where we have a legal basis for processing
• Put in place a contract with the organisation to ensure the data is protected to the same standards as if it were still within the European Union.

How long we retain your personal information

We will keep your personal information for as long as you are a customer of First Response Finance Ltd.

Once you are no longer a customer, we may retain your personal information for up to 7 (seven) years. The reason for this is:

• Adherence to regulations applicable to us
• To respond to questions or complaints from when you were a customer

Your Rights as an Individual

How to access your personal information?

You have the right to access the personal information we hold on you by writing to us at the following address or calling us on 0115 946 6368

Customer Experience Team
First Response Finance Ltd
5 Regan Way, Chilwell,
Nottingham, NG9 6RZ

What if your personal data is incorrect?

You have the right to have your data corrected if it's inaccurate or incomplete. Please contact us if you would like us to do this and we will take reasonable steps to check its accuracy and correct it.

Deleting your personal data

You have the right to ask us to erase your personal data. Please contact us if you would like us to consider your request. If we are unable to comply with your request for erasure, we will explain to you why.

How to restrict the processing of your personal information?

You have the right to request that we cease processing the personal information we hold about you if it is not accurate, it has been used unlawfully and you don’t want us to delete it or your information is no longer relevant but you wish for us to keep it for use in legal claims. Please contact us if you would like to exercise this right.

Data Portability

You have the right to ask us to provide you with a copy of the personal information you provided to us or to request that we transfer this data to another organisation in a format that can be easily re-used. Please contact us if you would like to exercise this right. This right will be implemented on the 25^th May 2018.

What if you want us to stop using your personal information?

You have the right to object to our use of your personal information. There may be legal reasons as to why we may need to keep your data, however, please contact us if you think we should not be using it.

How we use your information to make automated decisions

When we collect your personal information either directly from you or from other authorised sources, we may use systems to make automated decisions.

The types of automated decisions we make are:

• Pricing – We sometimes make decisions on the cost of the product and services you have applied for based on the information we have collected
• Approving Credit – Once you submit an application for finance, we may make automated decisions to establish whether we can offer you our products and services and to proceed with your application
• This decision is based on our Credit Assessment models which assess how likely you are to act while paying back any funds borrowed. This assessment will check on how you have paid similar accounts in the past

Our credit assessment model uses three sources to ensure a fair and well informed outcome is achieved;

• The details you submit on your application form
• Information held and supplied from credit reference agencies
• Any data that we may already hold that relates to you

We share specific information regarding you with the credit reference agencies and they in return give us specific information about you.

Your rights on automated decisions

There are a number of rights you have in relation to automated decisions, these are:

• You can ask us not to make our decision based on automated means alone
• You can object to an automated decision and request that a person reviews your application

If you would like to exercise your rights, please contact us.

Links to other websites

Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.

What to do if you wish to make a complaint

If you are unhappy with how we have processed your personal information, please view our complaints procedure.

You also have the right to make a complaint to the Information Commissioners Office, who regulates the processing of personal data. You can do this by phone on 0303 123 1113, or via the ICO website.