For the purpose of the European General Data Protection Regulations (‘GDPR’) and the Data Protection Act 2018 (the Act) the data controller is T&L Leasing Limited (‘T&L’). T&L Leasing’s registered office is 7 Hilliards Court, Chester Business Park, Chester CH4 9QP. Our company number is 06637613.
T&L are committed to attaining the best standards of practice and treat all your personal information as private and confidential. Therefore, T&L have implemented appropriate procedures to protect your privacy and confidentiality so that none of your personal information will be disclosed to anyone other than in exceptional circumstances, as permitted by law, or as set out below.
Where T&L have been asked to assist your business in obtaining finance this will involve the processing of your personal data by a third-party lender. T&L carefully selects providers of finance but may not immediately have identified the third-party lender to which your application should be submitted. You will be given details in due course of their identity, but for the purposes of this policy we refer to any such finance provider as the “third-party lender”. A Data Protection Notice will give you information on how your personal data (i.e., information which directly or indirectly identifies you) will be processed by any third-party lender to which T&L submits a finance application on behalf of your business. For the purposes of EU data protection laws, the third-party lender will be a data controller.
Please read the following carefully to understand our views and practices regarding your personal data and how T&L and/or third-party lenders will treat it.
Information T&L may collect from you
T&L may collect certain personal data with respect to you, including, without limitation, your name, address, date of birth, contact details, credit reference data, financial and employment details, banking and credit card details, director or shareholder roles, income and details of your business. T&L may collect some of this data from third parties, for example credit reference agencies.
Where your business is a corporate entity T&L may collect personal data about the directors and shareholders of the business from credit reference agencies where this data is held publicly, such as at Companies House.
Uses made of the information
T&L and third-party lenders will use your personal data for: provision of products and services, credit and anti-money laundering risk assessment, profiling for marketing purposes, market research and product development, statistical analysis, marketing, fraud prevention and detection and otherwise as necessary to comply with applicable laws, regulations and/or codes of practice. The processing of personal data may be necessary for the performance of a contractual relationship, compliance with a legal obligation, or where it is in our legitimate interests or a member of any group of companies to which T&L or the third-party lender belongs.
Disclosure of your information
T&L and third-party lenders may disclose certain personal data: (i) within any group of companies to which the third party lender belong; (ii) brokers and dealers / suppliers, professional advisors and service providers (including, information technology systems providers); (iii) to courts, governmental and non-governmental regulators and ombudsmen; (iv) to fraud prevention agencies and law enforcement agencies; (v) to any third party that acquires, or is interested in acquiring, all or part of T&L or the third-party lender’s assets or shares, or that succeeds in carrying on all or a part of its business, whether by merger, acquisition, reorganization or otherwise; and (vi) as otherwise required or permitted by law.
In particular, third-party lenders may share the personal data it collects with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected you could be refused certain services, finance or employment. For further details of how your information will be used and these fraud prevention agencies, and your data protection rights please contact our Data Privacy Officer at firstname.lastname@example.org or by contacting the Data Privacy Officer(s) whose details will be given to you at the same time as you are informed about the identity of the third party lender.
In addition, in order to process your application for finance, your personal data will be shared with credit reference agencies (CRAs). Third-party lenders, will send information about your application to CRAs and they will record this, even if your business’ application does not proceed or is unsuccessful. This will include information from your credit application and about your financial situation and financial history. CRAs can give third-party lenders both public information (e.g. electoral register) and shared credit, financial situation and financial history information and fraud prevention information
Third-party lenders may use the data received to:
Third-party lenders may continue to exchange information about you with CRAs while you have a relationship with them and may also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs. When CRAs receive a search from the third-party lender they will place a search footprint on your credit file that may be seen by other lenders.
If you are making a joint application or tell third party lender that you have a spouse, financial associate or business partner, the third-party lender may link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail at each of the three CRAs websites – using any of these three addresses will take you to the same CRAIN document:
Third party lenders and data privacy
Automated decision making
Third-party lenders may rely on automated credit assessment based on the personal data which T&L provide to it and data which is obtained from a credit reference agency or similar sources about your credit profile or history. The outcome of this process can result in an automated decline of your application where it does not meet the third-party lender’s acceptance criteria. Third-party lenders have a duty to review their acceptance criteria regularly to ensure fairness in the decisions made, and you have a right to ask it to manually review any decision taken in this manner.
Where your personal data is stored
Third-party lenders may transfer your personal data to recipients (including affiliates) located in countries outside of the EEA, which may not have data privacy laws equivalent to those in the EEA. In such a case, the third-party lender is under a duty to take all necessary steps to ensure the safety of your personal data in accordance with applicable data protection laws.
By submitting your personal data, you agree to this transfer, storing or processing.
T&L and our third-party lenders are under a duty to take steps to protect your personal data against loss or theft, as well as from unauthorized access, disclosure, copying, use or modification, regardless of the format in which it is held.
Under applicable EU data privacy laws, you may have a right to: (i) request access to and rectification or erasure of your personal data; (ii) obtain restriction of processing or to object to processing of your personal data; and (iii) data portability (i.e. to request the transfer of personal data from one data controller to another in certain circumstances). If you wish to exercise any of these rights you should contact the Data Privacy Officer(s) whose details will be given to you at the same time as you are informed about the identity of the third-party lender. You also have the right to lodge a complaint about the processing of your personal data with the Information Commissioner’s Office https://ico.org.uk/global/contact-us/
How long your personal information will be stored for
T&L only keep your personal information for as long as it is necessary to fulfil the purposes for which it is processed (as described above). When you are informed of the identity of the third-party lender you will also be informed of the policy they adopt regarding the retention of your personal data.
Keeping your information accurate
T&L strive to ensure that your personal information is kept up to date and accurate. If any of the personal information you have given to T&L or our third-party lender changes, such as your contact details, home ownership status, employment status or marital status, please promptly inform us.
Cookies are pieces of information that a website transfers to your computer’s hard disk for record-keeping purposes. Cookies can make the internet more useful by storing information about your preferences on a particular site, such as your personal preference pages.
Should you phone T&L, or a third-party lender, your calls may be recorded to help improve service, to assist in training, to evidence communication between us and in the interests of security. Outgoing calls may also be recorded for the same reasons. You may voluntarily give personal data to request information or provide feedback.
Enquiries, Requests or Concerns