Your privacy’s important to us and we go to great lengths to protect it. This privacy notice tells you about the personal data we hold about you and it explains how we may collect, use and share your details and tells you about your rights under data protection laws.
For the purposes of data protection law, we are a data controller in respect of your personal data. We collect and use your personal data and where applicable this may include information related to your spouse/partner, directors, partners and owners (your “representatives”). Sandfield Capital is responsible for ensuring that it uses your personal data in compliance with data protection law.
We are Sandfield Capital Limited (also referred to as ‘Sandfield”, ‘we’, ‘us’ or ‘our’) and our registered office is at C/O O'Connors, The Plaza, 100 Old Hall Street, Liverpool, England, L3 9QJ Our company registration number is 11136768.
We are registered with the Information Commissioner’s Office and our registration number is ZA448743.
“Personal information” means information that relates to you as an individual, whether linked to your name or any other way which you could be identified, such as your driving licence number or your Loan account number.
Certain types of personal information are considered to be “special categories of information” due to their more sensitive nature. Sometimes we will ask for or obtain special categories of information because it is relevant to your Loan application. For example, to assess risk appropriately, we may ask our customers about their previous credit history. This Privacy Notice highlights where we are likely to obtain special categories of information, and the grounds on which we process this data. We will only process special categories of information where they are relevant.
Special categories of information are Information about your health, criminal convictions, genetic or biometric data, sex life, sexual orientation, racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership.
The personal information that we collect will depend on our relationship with you. We have included a number of sections below – simply read those which most apply to your relationship with us.
In the case of joint legal claims we may hold data on any joint party to the claim. The loan will remain a sole product and the data of the joint party will be held for information purposes only.
If you provide personal information to us about other people you must provide them with a copy of this Privacy Notice, and obtain relevant consent from them where we have indicated in this Privacy Notice that we need it.
This section shows what personal information we collect about you and use if you are either: a prospective customer and have submitted your personal information so that we can provide you with a quote for a loan, or you are an existing customer.
In addition to the information provided to us by you when an application is made, we will obtain information about you during the lifetime of your loan.
We may collect the following information provided by you by phone or web:
Before we provide services or financing to you, we may undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you. We use external sources to supplement and verify the information above, and also to provide the following new information:
The external sources that provide us with information about you include:
We may process your personal information for a number of different purposes. We must have a legal ground for each purpose, and we will rely on the following grounds:
For special categories of information, we must have an additional legal ground for processing. We will rely on the following:
On occasion, we may share personal information with the following third parties:
Any third parties will be subject to confidentiality requirements and they will only use your personal data as described in this Privacy Notice.
We may also share your personal data outside of Sandfield Capital Limited to the extent required by law, for example if we are under a duty to disclose your personal data in order to comply with any legal obligation including but not limited to disclosures made to Credit agencies and Companies House; and to establish, exercise or defend our legal rights.
We will perform initial “soft search” credit checks through one or more Credit Reference Agencies for initial enquiries to help establish suitability and Approval in Principle.
For cases where we are assessing a loan application that will be funded by us, a full credit assessment may be made with one or more Credit Reference Agencies.
In the cases where credit referencing is undertaken the following will apply;
Any third parties will be subject to confidentiality requirements and they will only use your personal data as described in this Privacy Notice.
We may also share your personal data outside of Sandfield Capital Limited to the extent required by law, for example if we are under a duty to disclose your personal data in order to comply with any legal obligation including but not limited to disclosures made to Credit agencies and Companies House; and to establish, exercise or defend our legal rights.
Before we provide services, goods or financing to customers, we may undertake checks for the purposes of preventing fraud and money laundering, and to verify identity. These checks require us to process personal data about our customers.
The personal data you have provided, we have collected from you, or we have received from third parties will be used to prevent fraud and money laundering, and to verify your identity. Details of the personal information that will be processed include, for example: name, address, date of birth, contact details, financial information, employment details and device identifiers including IP address.
We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime. We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested. Cifas has published its assessment of the legitimate interests in relation to the National Fraud Database.
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years. As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more please contact us.
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or to employ you, or we may stop providing existing services to you.
A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to "international frameworks" intended to enable secure data sharing. Cifas has published more information about data transfers.
In order to work effectively with you and for ongoing due diligence purposes, we will need to collect some personal information from you which may include:
We use external sources to supplement and verify information the information above, and also to provide the following new information:
The external sources that provide us with information about you include:
We may process your personal information for a number of different purposes. We must have a legal ground for each purpose, and we will rely on the following grounds:
For special categories of information, we must have an additional legal ground for processing. We will rely on the following:
We may use various software including cookies and tags to improve your digital journey and to identify and prevent fraud. We collect and store information about how you access and use our website (including the website you visited before coming to our websites). We automatically receive the IP address of your computer, mobile device, or the proxy server you use to access the Internet and this may include information to identify your browser or device to analyse web traffic.
Fraud prevention cookies collect information about certain features of your device, such as your IP address, device type, browser type, screen resolution and operating system. This is to prevent and detect devices associated with fraudulent or other malicious activity and allows us to authenticate your account.
We may process your personal information for a number of different purposes. We must have a legal ground for each purpose, and we will rely on the following ground:
Sometimes we may transfer personal information that we collect about you to countries outside of the European Economic Area (“EEA”).
Where a transfer occurs we will take steps to ensure that your personal information is protected. We will do this using a number of different methods including:
We take privacy very seriously and will only use your personal information for the purposes laid out in this Privacy Notice. When you have made an application or taken a loan from us, we can contact you about similar products and services unless you have opted out. We will contact you about marketing – for example, to offer other services or to ask if you want to take part in a competition we might run.
You are free to object to receiving any marketing material and can edit your marketing preferences at any time. To opt out of marketing communications please click “unsubscribe” on any marketing message we send you or call in to change your preferences.
Please be aware that we have a legitimate interest to be able to contact you to discuss how your loan is being administered. This form of contact falls outside of your marketing preferences and must continue in order for us to be able to provide you with a loan effectively. This will never include marketing material and all information will be strictly related to your loan.
We will keep your personal information for as long as reasonably necessary to fulfil the purposes set out in section 3 above and to comply with our legal and regulatory obligations. We have a detailed retention policy in place which governs how long we will hold different types of information for. The exact time period will depend on the purpose for which we collect that information, for example:
Please note that in the circumstances of the prevention or detection of crime and the apprehension or prosecution of offenders Sandfield and agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to 6 years.
If a human is involved in the decision at any point then it is not considered an automated decision. Where we have to make a decision about your loan and as part of the agreement decision process we may make decisions using automated processing. The process considers the information that you provide us as well as information from other sources to determine whether your application for a loan can be accepted and the rate of interest charged.
The automated decisions include:
As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more please contact us.
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or we may stop providing existing services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you.
The protection of your personal data is important to us. We take a number of technical and procedural measures to protect personal data. For example:
Under data protection law you have a number of rights in relation to the personal information that we hold about you. You can exercise these rights by contacting us. We will not usually charge you in relation to a request.
You are entitled to a copy of the personal information we hold about you and certain details of how we use it. We will usually provide your personal information to you in writing unless you request otherwise. Where your request has been made electronically (e.g. by email), a copy of your personal information will be provided to you by electronic means where possible.
We take reasonable steps to ensure that the information we hold about you is accurate and where necessary up to date and complete. If you believe that there are any inaccuracies, discrepancies or gaps in the information we hold about you, you can contact us and ask us to update or amend it.
This is sometimes known as the ‘right to be forgotten’. It entitles you, in certain circumstances, to request deletion of your personal information. For example, where we no longer need your personal information for the original purpose we collected it for or where you have exercised your right to withdraw consent. Whilst we will assess every request, there are other factors that will need to be taken into consideration. For example we may be unable to erase your information as you have requested because we have a regulatory obligation to keep it.
In certain circumstances, you are entitled to ask us to stop using your personal information, for example where you think that the personal information we hold about you may be inaccurate or where you think that we no longer need to use your personal information.
In certain circumstances, you can request that we transfer personal information that you have provided to us to a third party.
You have control over the extent to which we market to you and you have the right to request that we stop sending you marketing messages at any time. You can do this either by clicking on the “unsubscribe” button in any email that we send to you or by contacting us. Please note that even if you exercise this right because you do not want to receive marketing messages, we may still send you service related communications where necessary.
In addition to the right to object to marketing, in certain circumstances you will also have the right to object to us processing your personal information. This will be when we are relying on there being a legitimate interest to process your personal information. Please note, in some circumstances we will not be able to cease processing your information, but we will let you know if this is the case.
If you have been subject to an automated decision and do not agree with the outcome, you can ask us to review it.
Where we rely on your consent in order to process your personal information, you have the right to withdraw such consent to further use of your personal information. Please note that for some purposes, we need your consent in order to manage your loan. We will advise you of any issues this may cause at the point you seek to withdraw your consent.
You have a right to complain to the Information Commissioner’s Office if you believe that any use of your personal information by us is in breach of applicable data protection laws and / or regulations. More information can be found on the Information Commissioner’s Office website: www.ico.org.uk. This will not affect any other legal rights or remedies that you have.
Please note, there may be some circumstances where we cannot comply with your request such as where complying with it would mean that we couldn’t comply with our own legal or regulatory requirements. In these instances we will let you know why we cannot comply with your request.
You may contact our Data Protection Officer if you would like to exercise the rights set out above, or if you have any questions about how we collect, store or use your personal information, Write to:
‘The Data Protection Team’ at Sandfield Capital Limited, C/O O'Connors, The Plaza, 100 Old Hall Street, Liverpool, England, L3 9QJ
or
Email: enquiries@sandfieldcapital.com
We may need to make changes to this Privacy Notice periodically, for example, as the result of government regulation, new technologies, or other developments in data protection laws or privacy generally or where we identify new sources and uses of personal information (provided such use is compatible with the purposes for which the personal information was original collected). The Data Protection Officer will ensure that this document is updated regularly or as legislation requires.