Privacy Policy - Premium Plan Limited

PREMIUM PLAN LIMITED PRIVACY NOTICE

Premium Plan Limited is a company registered in England under company registration number 05977118. Our registered office is Kempton House, Kempton Way, PO Box 9562, Grantham, Lincolnshire, NG31 0EA.

Premium Plan Limited is registered with the Information Commissioner’s Office as a data controller under the registration number Z9732937.

This privacy notice applies to processing activities carried out by Premium Plan Limited. We respect your privacy and are committed to protecting your personal data. The purpose of this privacy notice is to explain how we collect and use your personal data when you apply for a loan with us and to give you more information about your privacy rights. If you use a finance broker or an introducer to make an application us, they are the data controller until your application is received by us – until this point, the broker/introducer’s privacy notice applies to your personal data. Premium Plan Limited trades as Premium Plan, Red Potato and Finance My Balloon. In this privacy notice ‘we’ ‘us’ or ‘our’ are references to Premium Plan Limited. Premium Plan Limited is a data controller in respect of personal data that we process in connection with our business, which is a motor finance lender and credit broker.

It is important that you read this privacy notice together with any other relevant privacy notice or fair processing notice we provide during the course of our relationship when we are collecting or processing your personal data so you are fully aware of how and why we are using your data.

Our website may contain links to third-party websites, plug-ins and applications. Clicking on those links or enabling any third party connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. We encourage you to read the privacy notice of every website you visit.

The personal data we collect and process

The different types of personal data we collect and process are:

Basic personal information such as your name, previous names, title, gender, current and previous address history, date of birth, telephone number(s), email address;
Information about your family and personal circumstances (such as marital status and dependents);
Details of your income and expenditure;
Details of your employment status and/or benefit awards;
Photographic identification such as a passport and/or driving licence;
Current and historic financial information including account details, credit history, payment history and outstanding balances;
Banking details such as an account number and sort code;
Details of health and medical conditions but only where you have given explicit consent;
Technical information such as internet protocol (IP) address, browser details, time zone setting and location, operating system information and platform and other technology on the devices you use to access our website;
Website usage data such as information about how you use our website, products and services;
Marketing information such as your preferences about marketing you wish to receive from us your communication preferences.

It is important that the personal data we hold about you is accurate and remains up to date. Please keep us informed if your personal data changes during your relationship with us. If we request personal data that we require by law or to provide you with a product or service and you refuse to provide us with that data when requested, we may not be able to provide a loan product.

Why we collect and process personal data

We collect and process personal data for the following reasons:

To help us make a lending decision when you apply for motor finance;
To ensure any products we offer are appropriate based on your circumstances;
If we need to perform any of our duties under a loan agreement or contract we have with you;
To check your details and information you or a credit broker have provided us with;
To check your credit score and history;
To confirm your identity;
To help us manage your account (for example, to recover debts you owe to us or to trace you if we need to);
To share information about you and how you manage your account and repayments with a credit reference agency;
If we suspect or identify fraud, money laundering or any other criminal activity;
If we believe you have given us false or inaccurate information;
To comply with regulatory and/or legal obligations;
To introduce you to third parties where you have provided permission for us to do so;
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

How we obtain personal data

We obtain personal data from a number of sources which include:

Information you supply to us;
Information if you have previously had an account with us;
Information that we acquire through our relationship with you and the way you operate your account such as repayments;
Information supplied by a credit broker who introduces you to us;
Information obtained from a credit reference agency;
Information obtained from publicly available sources such as the Electoral Roll;
Information obtained from automated technology or interactions (such as your website usage and information obtained from cookies. Please see our Cookie Policy for further details).

Credit reference agencies

When you make an application for credit with Premium Plan Limited, we will perform credit and identity checks on you with one or more credit reference agencies. To perform credit and identity checks, we will supply your personal information to credit reference agencies and they will provide us with information about you. The information we receive will include public information, information about your financial situation and history and fraud prevention information. When a credit reference agency receives a search from us they will place a search footprint on your credit file that may be seen by other lenders.

Credit reference agencies retain a record of the enquiries we make and may record, use and supply the information we give them. This information may be used by other lenders, insurers and other organisations even if we do not accept your application for motor finance. We, law enforcement agencies and other organisations may also access and use this information to prevent and detect fraud, money laundering and other criminal activity.

The three main credit reference agencies are Callcredit, Equifax and Experian. The Credit Reference Agency Information Notice (“CRAIN”) describes how these credit reference agencies use and share the personal data they receive about you. For more information, please visit https://www.transunion.co.uk/crain.

Sharing your personal data with third parties

We may share your personal data with third parties such as:

A third party nominated by you, who acts on your behalf such as a relative, advice agency or legal representative;
Details of your account information and transactional history with a credit reference agency;
A third party who acts as our agent such as a debt collection agency , vehicle recovery operator, or our legal representative;
A vehicle inspection operator where a vehicle mechanical investigation is required.
A lender if we transfer the motor finance under the terms of the credit agreement to another lender;
A third party where we are required by law such as enforcement agencies, juridical bodies, government entities, tax authorities and regulatory bodies;
Other lenders that we have identified as suitable to offer you a loan if we are unable to offer a loan and you have given us permission to refer your application to them;
Our funders, who may process this data to determine whether and to what extent they may provide finance to us.

How long we will keep your data for and how we will protect it?

If you make a motor finance application which is not approved, we will retain your personal data for no longer than one year from the date your application is declined or closed.

If you make a motor finance application which is approved and you subsequently enter into a credit agreement with us, we will retain your personal data for six years from the date your credit agreement ends, or longer if required to do so by a regulator or by law. This will help us answer any enquiries or resolve any complaints you may have. After this period, your personal details will be deleted and anonymised.

Data will be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage using appropriate technical and organisational measures.

Your data rights

If you wish to exercise any of your data rights please contact us using the details stated at the end of this privacy notice.

Access – You have the right to access the personal data we hold about you.
Rectification – You have the right to rectify inaccurate personal data we hold about you. If personal data is incomplete taking into account the purposes of the processing you also have the right to have incomplete data completed. If any personal data has been disclosed to a third party, such as a credit reference agency we will also inform them that the personal data has been rectified.
Erasure – In specific circumstances, you can ask us to delete your personal data. If the processing of your personal data is necessary for compliance with a legal obligation, the establishment, exercise or defence of legal claims we will not be able to delete your personal data.
Restriction – In specific circumstances, you have the right to restrict processing of your personal data.
Portability – Where technically feasible you have the right to have your data transmitted by us to another data controller.
Objection – You have the right to object to us processing your personal data, unless we can demonstrate compelling and legitimate grounds for processing, which may override your own interests, or where we need to investigate and protect us or others from legal claims.
Withdraw consent – Where you have given consent to the processing of your personal data you have the right to with your consent at any time. This will not affect the lawfulness of processing which is based on consent prior to your withdrawal.
Complaints – If you wish to raise a complaint about how we have handled your personal data you can contact us directly. We hope that we can address any of your concerns you may have, but you can contact the UK supervisory authority for data protection issues, the Information Commissioner’s Office (ICO), if you wish. The ICO helpline is 0303 123 1113 or refer to their website www.ico.org.uk

How to contact us

Our contact details are:

Address: Premium Plan Limited, Kempton House, Kempton Way, PO Box 9562, Grantham, Lincolnshire, NG31 0EA

Telephone: 0800 009 4147.

email: DPO@totemic.co.uk

Our Data Protection Officer is Dale Stringer.

Privacy notice last updated: 18 July 2019