Welcome to the Lendology Privacy Notice
This information has been produced to help you understand everything you need to know about the way Lendology collects, uses, and shares personal data, what your legal rights are and how to exercise them.
We hope you’ll take some time to read this document; we’ve tried to keep it all as simple as possible and to avoid jargon, and we’ll make our best efforts to keep you informed if there are any changes to the way we process your personal data in the future.
Lendology takes its responsibility for protecting your data very seriously. If there’s anything here you don’t understand, or if you want to ask any questions, please feel free to contact us.
Who are we?
We are Lendology C.I.C.
Registration number: 04512225
Company Address: Heatherton Park Studios, Heatherton Park, Bradford On Tone, TA4 1EU
Contact Number: 01823 462049
Email: loans@lendology.org.ukIn this document Lendology may be referred to as “we”, “us”, or “our”.
What kinds of Personal Data do we Process?
Lendology collects personal data for various purposes; with that in mind we have created a list of the types of personal data that we may collect, either directly from yourself or from other sources, in order to achieve those purposes. It is not intended to be an exhaustive list and more detail of how we use this data is then given further on.
| Professional Contacts | Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details; |
| Customer | Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details, employment status and income, assets, savings and debts; Household and Relationships: including dependents and relationship status; Legal Documents including ID documents, marriage certificates, home ownership, Title Deeds and national insurance numbers; Communications Data: including instant messaging data, social media engagement and correspondence; Opinions: including survey responses, testimonials and feedback given; Special Category Personal Data: including health (physical and mental); |
| Applicant | Contact Details; including Name, address, telephone, email;
CV data; including work and education history; |
| Supplier | Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details; |
| Board members | Contact Details: including Name, address, telephone number, email address; and
Identity data; Including data required to identify your residency and financial status |
Why do we collect personal data?
We collect data for four main reasons: legal obligations, consent, legitimate interests and special category personal data. However, the main reason we collect your data is to fulfil any legal and contractual obligations that exist between us.
A more detailed breakdown can be found further on.
Legal Obligations
Where we request personal data be provided to enter into, or meet the terms of any such contract, you will be required to provide the relevant personal data or we will not be able to deliver the goods or services you want. In such cases the lawful basis of us processing the personal data is that it is necessary for the performance of a contract.
We are required by law to process personal data for purposes relating to our legal obligations, these include:
- To comply with regulatory requirements and any self-regulatory schemes.
- To carry out required business operations and due diligence.
- To cooperate with relevant authorities for reporting criminal activity, or to detect and prevent fraud.
- To investigate any insurance claims, claims of unfair dismissal, claims of any kind of harassment or of discrimination, or any other claim whereby the organisation may have to defend itself.
Consent
We do not share data with other controllers unless you have given us your permission to do so. With your consent we will supply to contact details to organisation who may be able to supply complimentary services. After giving consent, you may wish to withdraw this at a later stage. If so, do let us know and we will withdraw your data on your behalf.
Legitimate Interests
Lendology may process Personal Data for any of the following purposes, which are considered to be within our legitimate business interests:
- To provide goods and services where it has been requested,
- To send notification on subjects to individuals who have asked to be kept informed,
- To invite people to participate in research in fields and disciplines they are interested in,
- To improve the quality of the services we offer, and to better understand customers’ needs by requesting feedback, or reviews of the services provided, or sending survey forms,
- To notify of any changes to the goods and/or services provided that may affect people,
- To recognise when people re-engage with our organisation,
- To allow the organisation to support and maintain our products in active service,
- To protect the organisations assets
Special Category Personal Data
Where Special Categories of Personal Data are processed, one or more of the following lawful basis shall apply:
- Lendology has received explicit consent.
- Reasons of substantial public interest (to ensure Equality of opportunity)
Data we use for Contractors/Partners:
| Data | Purpose | Legal Justification |
| Contact Details | For authenticating your identity, correspondence and file storage | Legal Obligations |
| Financial Data | For authentication, file storage and paying invoices | Legal Obligations, Legitimate Interests |
| Legal Documents | For authenticating your identity and file storage | Legal Obligations |
| Communications Data | For processing loan eligibility, processing the loan and repayment of the same, contacting you, file storage | Legal Obligations |
| Opinions | For improving our services, marketing, file storage | Legal Obligations, Consent |
Data we use for Customers:
| Data | Purpose | Legal Justification |
| Contact Details | For authenticating your identity, correspondence, providing customer support, file storage, processing transactions and targeted data | Legal Obligations |
| Financial Data | For authentication, file storage, paying invoices and receiving loan repayments | Legal Obligations, Legitimate Interests |
| Household and Relationships | For processing loan eligibility, file storage | Legal Obligations |
| Personal Characteristics | For processing loan eligibility, file storage | Legal Obligations |
| Legal Documents | For authenticating your identity, processing loan eligibility, file storage | Legal Obligations |
| Location Data | File storage | Legal Obligations |
| Communications Data | For processing loan eligibility, processing the loan and repayment of the same, contacting you, file storage | Legal Obligations |
| Opinions | For improving our services, marketing, file storage | Legal Obligations, Consent |
| Special Category Personal Data | To enable us to adapt our service based on your needs, which you have told us about.
You can ask us, at any time, to remove this information from your file. The Financial Conduct Authority’s ‘Consumer Duty’ places a responsibility on lenders to ensure that their services are tailored to the needs of customers. Find out more about the Consumer Duty and what it means for you here. |
For reasons of substantial public interest |
Data we use for Board Members
| Data | Purpose | Legal Justification |
| Contact Details | For authenticating your identity, references, personnel checks, correspondence regarding work related matters, HR and personnel management, providing access to company resources and file storage | Legal Obligations |
| Financial Data | For payroll, HR and personnel management and benefits administration | Legal Obligations, Legitimate Interests |
| Legal Documents | For authenticating your identity, processing loan eligibility, file storage | Legal Obligations |
| Opinions | For improving our services, HR and personnel management and file storage | Legal Obligations, Consent |
Where did we obtain your personal data?
Most of the data we collect comes directly from you. This is given when filing in forms, corresponding with us, subscribing to marketing, giving feedback and most commonly, when applying for a loan.
We may also gather personal data from third party organisations, which can mean your personal data has been provided directly by another company for a specific purpose, or where you may have accessed our platforms through a third party online service. There are also some local or national authorities providing data for specific purposes. These publicly accessible sources including The Land Registry, Probate Registry, The Gazette, Companies House, online estate agents or social media platforms.
Your data and third parties
To achieve the above stated purposes for which we process your personal data, we may have to share your personal data with certain third parties.
We shall make all reasonable efforts to ensure that any third-party we share your personal data with is also compliant with data protection law. The kinds of third parties we may share your personal data with include organisations where it is necessary to provide goods or services.
When sharing data, or when it is transferred between devices, it is encrypted.
The specfic types of third parties we may share your personal data with include:
- Microsoft Office
- LiveChat
- Feefo
- Slick
- Your Local Council
- iMail
- HM Land Registry
- Mailchimp
- Ring Central
- Sign Video
- Hope Macy
- Plend
- Parity Trust
- Francis Clark LLP
- Clarke Willmott LLP
- Foot Anstey LLP
- TransUnion (for further information, please using the following link: transunion.co.uk/CRAIN)
Do we transfer your Personal Data?
You may be aware that data within the UK and EU are strictly controlled and regulated. Other countries may not have such strong protection for consumers, whilst some have been granted what is known as an ‘adequacy decision’ under the General Data Protection Regulation, meaning they comply with our rules.
As part of our standard business practices, we may transfer your personal data to organisations based in countries that have not been granted an adequacy decision. These might include where the data transfer is necessary in order to fulfil a contract between us and yourself, where we have received your specific consent after having made you aware of any risks involved, or where contracts are in place between us and the third-parties involved that ensure the recipient organisation has a suitable standard of data protection in place.
Where data is transferred to such countries, we shall ensure that specific safeguards have been established as we take data security very seriously.
How long will we keep your Personal Data?
We will only keep your personal data only for as long as reasonable required to achieve the purposes for which it was collected, in line with this privacy notice.
The following criteria are what determine the period for which we will keep your personal data:
- Until we are no longer required to do so in order to comply with our legal, regulatory, tax, accounting or reporting obligations;
- Until all purposes for which the data was originally gathered has become irrelevant or obsolete;
- Until it has been requested that we no longer process the data and that it is erased; in some cases, where there is a remaining relevant or legal reason why we are required to keep this data, we may opt to restrict the amount of processing being conducted to what is absolute necessary rather than erase it.
Your Rights, Our Responsibility
There are several rights granted to you immediately upon providing us with your personal information. We’d like you to know that at Lendology we take your rights seriously and will always conduct ourselves in a way that is considerate of our responsibility to serve your legal rights.
Please note that if you use any of these rights, we may not be able to provide certain products or services to you. We will, of course, confirm this at the time your consent is withdrawn.
If making a request of us, we will require you to prove your identity before processing the request. If acting on someone else’s behalf, we will also need to see evidence of your authority to act on their behalf. We may also ask for further information in order to help us process your request, which we will confirm as soon as practicable, alongside confirming how long it will take to process the request.
You have the following rights:
The Right of Access
This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed.
If you would like access to the personal data we have about you, we ask that you contact us.
The Right to Rectification
This one is fairly straight forward; if you notice that the data we have about you is inaccurate or incomplete, you may request we correct it.
The Right to Erasure
Otherwise known as the ‘right to be forgotten’, this gives you the right to request your personal data be deleted.
This is not an absolute right; if you were to request that we erase your personal data, we would erase as much of that data as we could but may have to retain some information if it is necessary.
Where we have received a request for personal data to be erased, if it is necessary for us to retain some of that information we shall ensure that the remaining data is used only when and where it is absolutely necessary. We shall, of course, also confirm to you what personal data we are unable to erase and for what specific legal reason.
The Right to Objection
If you wish to object to the way we use, or have used, your personal data you may do so freely. We will consider each objection on its merits, taking into account your fundamental rights and freedoms and our legitimate grounds and legal obligations for holding that data. You also have the right to object where we are processing your personal data for direct marketing purposes.
The Right to Request Restriction
This allows you to ask us to stop processing your personal data in some situations, including if you want us to establish how accurate the data held is; where we have incorrectly processed the data but you do not wish for us to delete it; where you have asked us to remove the data but we need to confirm if we have overriding grounds, i.e. legal obligations to use it; and finally, we no longer need to hold the data but you need it in regards to a legal claim.
The Right to Complain
We will always try to maintain the highest standards and encourage the confidence our customers have in us as an organisation. To achieve this, we request that any complaints be first brought to our attention so we can properly investigate matters. If you would like to complain about Lendology to a regulatory body, you may do so by contacting your local data protection supervisory authority.
Who is the Lendology Data Protection Officer?
To help us with our Data Protection responsibilities, we work with our advisors, Ametros Group Ltd. If you wish to contact them, their details are as follows:
Ametros Group Ltd
Lakeside Offices, Thorn Business Park
Rotherwas Industrial Estate
Hereford
HR2 6JT
0330 223 2246
dpo@ametrosgroup.com
