1.1 This is the website of Whichdeal Limited, operating under the trading name of Employee Loans. Whichdeal Limited is fully authorised and regulated by the Financial Conduct Authority under Registration number 456327. We are registered with the UK Information Commissioner’s Office (ICO) as a data controller under registration number Z8890305.
1.4 If you have any questions about how we collect, store or use your personal data, our contact details can be found under the ‘How to contact us’ section of this notice.
2.0 What this policy covers
- sets out the types of personal data that we collect;
- explains how and why we collect and use your personal data;
- explains when and why we share personal data within and outside this company;
- Defines the rights and choices you have regarding your personal data.
2.2 Our Website may contain links to other websites operated by other organisations. Please make sure that you read the terms and conditions and privacy policies of these third parties before you provide any personal data as we cannot accept any responsibility or liability for websites of other organisations. If you cannot locate a privacy notice on another organisation’s website, please contact them directly for guidance.
3.0 Personal data that we collect
3.1 This section explains what personal data we may collect when you use our services. Personal Information is any information which we would reasonably expect to identify you as an individual. The application form highlights which information is mandatory for you to enter into a contract with us and failure to provide such information may result in your application being declined.
- Your personal details may include your full name and title, your postal and billing addresses, phone numbers and date of birth;
- Images collected by way of CCTV, Body Worn Cameras and Facetime.
- Your IP addresses and email address;
- Your previous address history;
- Your bank account, credit/debit card details and transaction history;
- Details of your expenditure;
- Passport information;
- Driving licence information;
- Your employment details including length of service, name and address of employer and your job title. We may also need to verify your identity by contacting your employer (your expressed consent will be requested).
- Information regarding other members of your household and any dependents;
- Information as to whether you are considered to be a ‘PEP’ (Politically Exposed Person) or any connection you have with a ‘PEP’.
- Insurance information;
- Credit History;
- Stored records will include the details of the vehicle (including make, model and registration number) or product that you purchased/hired, when and where you bought it and how much you paid for it.
- As we are committed to our responsible lending obligations, our employees will carry out due diligence checks on all applicants to determine whether your personal circumstances or a characteristic identifies you as a ‘vulnerable customer’ (a person who may be vulnerable to financial detriment’). In these circumstances, we will also collect personal sensitive information such as your health information in respect of any disability, illness or impairment. Personal sensitive information may also include closely protected data such as criminal convictions. It is not necessary for us to collect personal sensitive data (unless you have volunteered this information to us, if you are considered by us to fall within our defined category of a ‘vulnerable customer’). By providing this information to us, you agree that you do so voluntarily and we may use this information to determine whether the products or services that we offer are suitable for you.
- Your account logins such as your username and passwords that you have chosen;
- Details of your visits to the website and the resources that you access which may include traffic data and communication data.
3.4 Data is also collected to reduce and identify fraud and protect your identification.
4.0 How we use the personal data
4.1 We collect information about you for a number of different activities as described below.
- You may wish to apply for any of our products or services;
- You may wish to enquire or provide information to us;
- Information may be collected from this parties including credit reference agencies, market information sharing databases, motor dealers, brokers or introducers including authorities responsible for tax or fraud prevention;
- You may wish to apply for a job advertised by us;
- You may request information from us or raise a complaint;
- Features on our website may require your information in order for it to be used.
5.0 Why we use the personal data
5.1 Your information will be used for the purpose of allowing us to quote or provide the service or product that you applied for.
5.2 We will use your information to compare the best services and rates available from our panel of lenders. Once an initial comparison has been completed, we will share your information to a carefully selected lender to provide you with a service or product which is suitable for your needs.
5.3 If your application is considered appropriate and meets our own lending criteria, our in-house underwriting team shall consider and process your application on behalf of our lender, whom we act as a Credit Intermediary. This process will involve the evaluation of risk and credit checking and automated decision/credit checking processes.
5.4 Credit checking is carried out by us to include identification, verification and bankruptcy checks in line with our anti money laundering procedures.
5.5 Any applications assessed by our in-house underwriting team (see 5.3) will be subject to automatic decision making (automatic credit scoring) in the first instance. Should the application be declined solely due to automatic decision making, you will be informed of the outcome of the scoring process and should you wish for your application to be re-assessed manually, our friendly team will be happy to carry out the request on your behalf.
5.6 We will keep your data on file and this information will be updated where necessary. We shall also monitor your account to ensure that it is only being used by you or a nominated person when you have given consent.
5.7 Should you wish to apply for a joint application, we will require the full details of the joint applicant. Please ensure that you have obtained their agreement to disclose this information to us. To process the application, it will be necessary for us to communicate with, verify and identity of the joint applicant in line with our data protection and anti-money laundering procedures.
5.8 Our Collections Department will consider your information in the interests of forbearance if you find yourself in financial difficulty. Your information may also be used to recover any debt/money that you owe us in line with our litigation procedures.
5.9 Should there be problems with our website, we may also use your data in order to improve its performance or to troubleshoot any problems.
5.10 Our web server automatically recognises each visitor to our website and does not record information regarding the domain or e-mail address. We collect the e-mail addresses of those who communicate with us via e-mail or by submitting an application, aggregate information on what pages consumers’ access or visit, user-specific information on what pages are visited, and information volunteered by the consumer e.g. survey information or site registrations.
5.11 We will record and store all incoming and outgoing telephone calls for our internal quality control purposes. In the interest of security and compliance, credit, debit card and account information will not be recorded.
- Maintaining a relationship
5.12 We may contact you for future promotions, activities or changes to our services or products that we offer.
5.13 Should an incomplete application be submitted, we will use your data to contact you for further information.
5.14 Any information we collect is used to improve the websites content and/or layout, and to inform visitors of offers and promotions associated with the Employee Loans brand. If you have signed up via email or SMS to receive blog content or a report from our website, we will not pass your details to third parties, unless you have given explicit consent to do so.
5.15 We may use your data for training purposes to improve and enhance the service that we provide.
- Statistical purposes and reviews
5.16 Your data may be used to assist with creating marketing reports, although personal data will not be recorded to identify any individual.
5.17 Your information may also be used to ensure that the website remains effective and to provide site performance, system administration and evaluate the use of the site to provide you with an improved service.
5.19 We will use your data to respond directly to you. In the first instance, we will acknowledge your complaint with a copy of our complaints procedure and keep you updated as to the progression of our investigation. We may, if appropriate and necessary, consult with third parties such as dealerships, expert engineers or relevant lenders to collate correct information and obtain advice to enable us to make informed decisions and to respond appropriately.
5.20 Due to the regulated nature of the business, we are required to retain data for auditing purposes.
5.21 We are obliged to disclose information with the appropriate authorities including law enforcement to detect, investigate and prevent crime including fraud and money laundering. We may also be required to respond and be involved in any legal proceedings, prosecution, court orders, regulation or law.
5.22 In circumstances whereby suspicions may be raised internally, by a fraud/crime preventing authority or we receive intelligence by another with regards to the validity of your application or identity, we reserve the right to decline the provision of any service or product that you have applied for or suspend any service that you currently have ongoing.
5.23 Fraud Protection Agencies may retain a record of your personal details and share it with other companies/agencies should your record be considered as a risk to future applications that you may make. This may a result in a refusal for future job applications or re-financing to obtain credit.
5.24 Whilst any information that we collate will not be kept for any longer than is deemed necessary, the processing of your data is a contractual requirement.
5.25 Under our obligations under The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, record keeping including details of customer due diligence and supporting evidence of business relationships need to be kept by us for five years at the end of the business relationship to enable us to reconstruct the transaction unless we have reasonable grounds to believe that the records need to be held for legal proceedings. The storage of this information may be extended if you have given your consent or if we are legally obliged to do so.
- CCTV and Body Worn Cameras (BWC)
5.26 Body worn video cameras are wearable video and audio devices worn by our delivery drivers for the purposes of health and safety and crime prevention reasons. These devices are not used for the purpose of viewing documents.
5.27 Images are collected and stored on the devices’ encrypted memory card and as soon as practicable, data is transferred for long term storage and deleted from the portable device. This is to allow information to be recovered in response to any subject access requests. This data may also be disclosed to law enforcement agencies and used in respect of any potential legal proceedings.
5.28 Customers are advised Automated Number Plate Recognition Technology is used for access to our premises and is controlled by a third party. Should you wish to attend our offices, you may be asked for your personal information and reasons for your visit for authorised access to be granted. CCTV cameras are installed throughout the vicinity of our premises for the purpose of deterring and detecting crime.
5.29 Third-party dealerships involved in tri-party agreements are expected to identify and verify applicants inline with enhanced Anti Money Laundering requirements and customer due diligence. This may involve the use of videotelephony communications.
6. Sharing personal data
6.1 When we share your personal data, we require those parties to keep it safe and they must not use your personal data for their own marketing purposes. We do not accept liability for the failure of data protection practices carried out by third parties of which we have no control.
6.2 We will share your data with our affiliates for the purpose of administering our business and maintaining our business relationships. These may include our advisors who provide compliance and legal advice and support our legal function.
6.3 We use service providers to enable us to carry out certain duties within the business such as email distribution companies, electronic signature processing, data storage and IT services.
6.4 Due to the nature of our comparison business, your details may be shared with third parties on applying for finance with us, as per our terms and conditions.
- Credit reference agencies
6.5 Unlike most car finance providers, when you apply through us, we carry out a ‘soft credit search’ to identify which lenders may be suitable. The soft credit search, also known as a ‘quotation search’ allows us to examine all the important details we need to see your creditworthiness and compare more than 90 lending options without leaving a footprint on your credit file.
6.7 The Credit Reference Agency will provide a credit scoring computation and your score will determine which lenders may be suitable. You will be advised of which options are available and we will obtain your explicit consent to proceed with your application which will involve passing your information to your desired lender in order for them to perform a hard credit search on your file. Those hard searches will be recorded on your credit file to allow other lenders or organisations information as to how many times your credit information has been accessed.
6.8 As we act as a Credit Intermediary to one of our panelled lenders, we have in-house underwriters to carry out the administration of the applications and agreements finance agreements on their behalf.
- Third-party companies such as warranty and GAP providers
6.9 We offer a range of different products and services for example warranties, gap insurance and car valuations. Full information as to our panelled suppliers of these products and services can be found on our website and also in correspondence and documentation which will form part of your finance package.
6.10 If any product such as warranty is included within the purchase of your vehicle, we will pass your data to the third party to allow for the service to be affected for your use. Consent to pass this information will be obtained from you whilst processing your application.
6.11 Products which are available for purchase, such as GAP cover, will require your information to be passed to the relevant provider at the point of sale. The provider will contact you separately to confirm that a contract with them has been set up in accordance with your instructions.
6.12 We may share information with insurance and warranty providers to underwrite, process, claim handle or prevent fraud.
6.13 Due to this company operating at distance, it may be required for third party dealerships involved in your prospective transaction to undertake identification checks on our behalf. The dealership may be required to utilise video conferencing to confirm that you are the applicant of the agreement and to carry out enhanced money laundering checks by way of obtaining and providing to us verification of your ID.
6.14 Your application, including your personal data will be provided to a third-party lender following the completion of the soft search (see section 6.7). In the event that your application is declined by all of our available lenders, you may be considered for alternative loan options taking into consideration your circumstances. Those third-party lenders may carry out further searches against you to access your credit score and to establish whether they may be able to assist further. Details of the prospective lenders are available to you by contacting us by email to firstname.lastname@example.org.
6.15 We may be required by law to exchange and share your information with other organisations in the following circumstances:
- We may be required by law to exchange and share your information to fraud prevention agencies to verify your identity and prevent crime;
- We may need to share personal data in order to establish, exercise or defend our legal rights. Furthermore, we may share your information to identify, contact or bring legal action against someone who may causing injury or who may interfere with our property, employees, users of the website or anyone else who may be affected or harmed by those activities.
6.18 If we sell or transfer any part of our business or enter into negotiations to sell or transfer the business), the successor of the title of the business may use your personal data in the same way as adopted under the terms of this privacy notice;
6.19 To assist in the recovery of debt or monies outstanding on your account, we may exchange information parties such our lawyers, enquiry agents, High Court Enforcement Agents and any other relevant organisation including other lenders. We reserve the right to sell aged debts to debt recovery agencies.
7. International Policy
7.1 Employee Loans is based in the UK, however information shared by us may include third parties who are located within the UK or within the European Economic Area. Any information transferred to these locations are protected by European Data Protection Standards. Companies operating outside of the European Economic Area may not be protected by the same quality of legal protection however we will only transfer data if we are satisfied that compliance is met with applicable privacy laws and appropriate contracts are put in place and adhered to.
8. How we protect personal data
8.1 We use computer safeguards such as firewalls and data encryption, and we enforce physical access controls to our buildings and files to keep this data safe. We only authorise access to employees who need it to carry out their job responsibilities and we continuously screen employees subsequent to their appointment for any undisclosed criminal or financial implications.
8.2 We enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data.
8.3 We carry out enhanced data protection procedures to verify your identity before we share your personal data with you. This includes obtaining your consent to share the information with another person whom you have previously given authorisation to speak on your behalf;
8.4 We will not reveal over the telephone or by email any banking or financial information when confirming an order or providing a refund.
8.5 Whilst we take appropriate technical and organisational measures to safeguard your personal data, cannot guarantee the security of any personal data that you transfer over the internet to us.
8.6 In the unlikelihood that we become aware of a security breach involving your personal data, our dedicated Data Protection Team will be responsible for informing our regulator and you as to the details of the breach. You will be notified of any breach which may give rise to any detriment to your personal data.
9. Marketing and Market research
9.1 Upon making an application to us, you will have a choice to either opt in or opt out of marketing and automated data profiling. Your information will only be used upon receiving your explicit consent to use your information. This marketing will include offers, updates and information in relation to goods, products and services which we feel may be of interest to you. If you have agreed to such marketing, your information will be passed to our reputable suppliers of credit and other products. You may receive this information by telephone, SMS, letter or email. All communications sent to you will give you information as to how you can unsubscribe from the marketing communications and electronic communications will include a link to enable you to opt out.
1.0 Notwithstanding our investment into security and firewalls to protect your data and our website, it is still nevertheless not 100% guaranteed that any communication via email cannot be intercepted. On this basis, we cannot accept liability for any unauthorised or unintended access that is beyond our control. We recommend that any communication to us is via our encrypted online portal.
11. Children’s Privacy
11.1 Due to the nature of our business, our policy is not to actively market our products or services or encourage interaction with minors with anyone under the age of 16. Anyone under this age may only use their site with parental consent. We do not knowingly collect data from anyone under the age of 16.
11.2Parents/ Guardians should monitor and supervise their children’s internet usage and ensure parental controls and tools are in place.
12. Complaints Process
12.1 If you are unhappy with the way we have stored or processed your data, please contact us by calling us on 01202 688177 or emailing us at email@example.com.
12.2 When you call, ask to be put through to the Complaints department and a member of our team will connect you. Your complaint will be acknowledged within 5 working days of receipt. We’ll then attempt to resolve the complaint as quickly as possible, liaising with you to keep you updated of the process throughout.
12.3If you’re still unhappy after we’ve resolved your complaint, you can then take it to the Financial Ombudsman Service (if 8 weeks has passed since the initial complaint).
The contact details for the Financial Ombudsman Service are as follows:
Tel: 0800 023 4 567
Mob: 0300 123 9 123
Address: The Financial Ombudsman Service
London E14 9SR
12.4 You may also lodge your complaint with the Information Commissioner’s Office (ICO) if we have been unable to resolve the complaint to your satisfaction. The ICO may be contacted on 0303 123 1113.
13. Cookies and Similar technologies
14. Your individual rights
14.1 Under the General Data Protection Regulations 2018 you have the right to
The right to be informed encompasses our obligations to provide ‘fair processing of information’. This privacy notice provides all information regarding how your data is stored.
You have the right to access your personal data and supplementary information. You have the right to see the personal data we hold about you. This is called a Subject Access Request.
The right to rectification;
You have the right to have any incorrect or incomplete data to be rectified. Please contact our data protection officer should you require any amendments to be made to the data we store.
The right to erasure is also known as ‘the right to be forgotten’.
The broad principle underpinning this right is to allow you to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
- The right to restrict processing;
You have a right to ‘block’ or suppress processing of personal data.
When processing is restricted, we are permitted to store the personal data, but not further process it.
- The right to data portability;
The right to data portability allows you to obtain and reuse their personal data for your own purposes across different services.
You may object to our processing of your personal data based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics.
- The right not to be subject to automated profiling.
You may opt out of any automated profiling which we conduct.
14.2 If you would like a copy of the personal data we hold about you, or would like to exercise your rights as detailed above, please write to:
Data Protection Officer, Whichdeal Ltd t/a Employee Loans, Waterloo House, Fleets Corner, Nuffield Road, Poole, Dorset BH17 0HL
14.3 There will be no charge for a copy of the information however we reserve the right to charge a reasonable fee or refuse to respond when a request is manifestly unfounded or excessive, particularly if it is repetitive. We may also charge a reasonable fee to comply with requests for further copies of the same information. Information will be sent to you at the latest and within one month of the date of receipt of the Subject Access Request. We may extend the period of compliance by a further two months where the request is complex or numerous and we shall keep you updated as to why the extension is necessary.
15. How to contact us
15.1 Our postal address is: Employee Loans, Waterloo House, Fleets Corner, Nuffield Road, Poole, Dorset, BH17 0HL. Our telephone number is: 01202 688177
Our email address is firstname.lastname@example.org[/vc_column_text][/vc_column][/vc_row]