Under data protection laws we can only use your personal information if we have a proper legal basis for doing so. Most commonly we will use your personal information in the following circumstances:
- to comply with our legal and regulatory obligations;
- for the performance of our contract with you or to take steps at your request before entering into a contract;
- for our legitimate interests (or those of a third party); or
- where you have given consent.
Where we are relying on consent as the legal basis for processing your personal information you have the right to withdraw consent at any time by contacting us at UFG-DataProtection-Mailbox@ultimatefinance.co.uk.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own fundamental rights and interests.
Purposes for which we will use your personal information
We may use the personal information held about you for various purposes and which of the legal bases we rely on to do so are set out in the following table:
Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
To sign you up as a new customer either online, in person or over the phone | (a) Identity
(b) Contact
(c) Financial | Performance of a contract with you |
To process any service requested by you, deliver a product or service to you and perform any obligations we have in relation to those products or services:
(a) Manage payments, fees and charges
(b) Collect and recover money owed to us
(c) Consider suitable repayment options | (a) Identity
(b) Contact
(c) Financial
(d) Transaction
(e) Marketing and Communications
(f) Special Category | (a) Performance of a contract with you
(b) Necessary for our legitimate interests (to manage our business including to recover debts due to us)
(c) Consent
(d) What is in the substantial public interest |
To manage our relationship with you which will include:
(a) Notifying you about changes to our terms and conditions or privacy policy
(b) To carry out compliance checks such as KYC checks using passports, other ID documents and online tools
(c) Asking you to leave a review, provide feedback or take a survey in relation to our products or those of third parties
(c) To provide you with information, products or services that you request from us | (a) Identity
(b) Contact
(c) Profile
(d) Marketing and Communications
(e) Special Category | (a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
(d) What is in the substantial public interest |
To assess your suitability for a role with us and to ensure you are legally entitled to work in the UK | (a) Identity
(b) Contact
(c) Employment & Education | (a) Performance of a contract with you
(b) Necessary for our legitimate interests (to manage our business)
|
To administer and protect our business (including complying with our legal obligation to prevent money laundering, fraud and other criminal or illegal activity) and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity
(b) Contact
(c) Financial
(d) Transaction
(e) Technical
(f) Profile
(g) Usage | (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
(b) Necessary to comply with a legal obligation
(c) What is in the substantial public interest |
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | (a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communications
(f) Technical | Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences | (a) Technical
(b) Usage | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
To make suggestions and recommendations to you about goods or services that may be of interest to you | (a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile | Necessary for our legitimate interests (to develop our products/services and grow our business) |
Assess risk and carry out credit scoring | (a) Identity
(b) Contact
(c) Financial | (a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to ensure we are only lending money to customers who are able to repay it and ensuring that third party suppliers and connected parties are financially sound) |
Prevent, fraud, money laundering, financial crime and the funding of terrorism | (a) Identity
(b) Contact
(c) Technical
(d) Financial
(e) Usage
(f) Profile | (a) Necessary to comply with a legal obligation
(b) Necessary for our legitimate interests to protect our business (to avoid losses caused by financial crime) |
To verify your identity | (a) Identity
(b) Contact
(c) Technical
(d) Financial | (a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests to protect our business (to avoid losses caused by financial crime) |
If we or a fraud prevention agency determine that you pose a fraud or money laundering risk we may refuse to provide the services or financing you have requested, or to employ you, or we may stop providing existing services to you.
In order to process your application we will supply your personal/business information to credit reference agencies (CRAs) and they will give us information about you/your business, such as financial history. We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity.
We will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organisations. Your data will also be linked to the data of your spouse, any joint applicants or other financial associates.
The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at www.experian.co.uk/crain