Established in 2003, we have lent over £27 million on behalf of our council partners.
Established in 2003, we have lent over £27 million on behalf of our council partners.
This information has been produced to help you understand everything you need to know about the way Lendology collects, uses, and shares personal data, what your legal rights are and how to exercise them.
We hope you’ll take some time to read this document; we’ve tried to keep it all as simple as possible and to avoid jargon, and we’ll make our best efforts to keep you informed if there are any changes to the way we process your personal data in the future.
Lendology takes its responsibility for protecting your data very seriously. If there’s anything here you don’t understand, or if you want to ask any questions, please feel free to contact us.
We are Lendology C.I.C.
Registration number: 04512225
Company Address: Heatherton Park Studios, Heatherton Park, Bradford On Tone, TA4 1EU
Contact Number: 01823 462049
Email: loans@lendology.org.uk
In this document Lendology may be referred to as “we”, “us”, or “our”.
Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details, employment status and income, assets, savings and debts;
Household and Relationships: including dependents and relationship status;
Legal Documents including ID documents, marriage certificates, home ownership, Title Deeds and national insurance numbers;
Communications Data: including instant messaging data, social media engagement and correspondence;
Opinions: including survey responses, testimonials and feedback given;
Special Category Personal Data: including health (physical and mental);
Contact Details; including Name, address, telephone, email;
CV data; including work and education history;
Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details;
Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details;
Contact Details: including Name, address, telephone number, email address; and
Identity data; Including data required to identify your residency and financial status
Contact Details: including name, email address, contact numbers and address;
Financial Data: including bank account details,
Personal Characteristics: including nationality; date of birth; CV information; employment history and Academic Qualifications;
Legal Documents including national insurance numbers; passport, right to work document
Communications Data: including instant messaging data; social media engagement and correspondence;
Opinions: including feedback given and employment references;
Special Category Personal Data: including health (physical and mental),
Work Related Data: including appraisal forms, one to ones, impromptu meetings, expressions of wishes, pensions, risk assessments, contracts, salaries and maternity/paternity leave information.
We collect data for four main reasons: legal obligations, consent, legitimate interests and special category personal data. However, the main reason we collect your data is to fulfil any legal and contractual obligations that exist between us.
A more detailed breakdown can be found further on.
Where we request personal data be provided to enter into, or meet the terms of any such contract, you will be required to provide the relevant personal data or we will not be able to deliver the goods or services you want. In such cases the lawful basis of us processing the personal data is that it is necessary for the performance of a contract.
We are required by law to process personal data for purposes relating to our legal obligations, these include:
We do not share data with other controllers unless you have given us your permission to do so. With your consent we will supply to contact details to organisation who may be able to supply complimentary services. After giving consent, you may wish to withdraw this at a later stage. If so, do let us know and we will withdraw your data on your behalf.
Lendology may process Personal Data for any of the following purposes, which are considered to be within our legitimate business interests:
Where Special Categories of Personal Data are processed, one or more of the following lawful basis shall apply:
Data | Purpose | Legal Justification |
|---|---|---|
Contact Details | For authenticating your identity, correspondence and file storage | Legal Obligations |
Financial Data | For authentication, file storage and paying invoices | Legal Obligations, Legitimate Interests |
Legal Documents | For authenticating your identity and file storage | Legal Obligations |
Communications Data | For processing loan eligibility, processing the loan and repayment of the same, contacting you, file storage | Legal Obligations |
Opinions | For improving our services, marketing, file storage | Legal Obligations, Consent |
Data | Purpose | Legal Justification |
|---|---|---|
Contact Details | For authenticating your identity, correspondence, providing customer support, file storage, processing transactions and targeted data | Legal Obligations |
Financial Data | For authentication, file storage, paying invoices and receiving loan repayments | Legal Obligations, Legitimate Interests |
Household and Relationships | For processing loan eligibility, file storage | Legal Obligations |
Personal Characteristics | For processing loan eligibility, file storage | Legal Obligations |
Legal Documents | For authenticating your identity, processing loan eligibility, file storage | Legal Obligations |
Location Data | File storage | Legal Obligations |
Communications Data | For processing loan eligibility, processing the loan and repayment of the same, contacting you, file storage | Legal Obligations |
Opinions | For improving our services, marketing, file storage | Legal Obligations, Consent |
Special Category Personal Data | To enable us to adapt our service based on your needs, which you have told us about.
You can ask us, at any time, to remove this information from your file.The Financial Conduct Authority’s ‘Consumer Duty’ places a responsibility on lenders to ensure that their services are tailored to the needs of customers. Find out more about the Consumer Duty and what it means for you here. | For reasons of substantial public interest |
Data | Purpose | Legal Justification |
|---|---|---|
Contact Details | For authenticating your identity, references, personnel checks, correspondence regarding work related matters, HR and personnel management, providing access to company resources and file storage | Legal Obligations |
Financial Data | For payroll, HR and personnel management and benefits administration | Legal Obligations, Legitimate Interests |
Legal Documents | For authenticating your identity, processing loan eligibility, file storage | Legal Obligations |
Opinions | For improving our services, HR and personnel management and file storage | Legal Obligations, Consent |
Data | Purpose | Legal Justification |
|---|---|---|
Contact Details | For authenticating your identity, references, personnel checks, correspondence regarding work related matters, HR and personnel management, providing access to company resources and file storage | Legal Obligations, contractual necessity |
Financial Data | For payroll, pension payments, loan payments and repayments, tax payments, HR and personnel management and benefits administration | Legal Obligations, Legitimate Interests |
Household and Relationships | For emergency contacts, nomination of benefits, HR and personnel management and file storage | Legal Obligations, Contractual Obligations |
Personal Characteristics | For reporting and compliance with legal obligations, file storage | Legal Obligations |
Legal Documents | For authenticating your identity, processing loan eligibility, file storage | Legal Obligations |
Opinions | For improving our services for team members, HR and personnel management and file storage | Legitimate interest |
Special Category Personal Data | For file storage, legal obligations, safeguarding, HR and personnel management, authentication and caring for team members | It is necessary for preventive or occupational medicine, for the assessment of the working capacity of an employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems or pursuant to contract with a health professional. |
Most of the data we collect comes directly from you. This is given when filing in forms, corresponding with us, subscribing to marketing, giving feedback and most commonly, when applying for a loan.
We may also gather personal data from third party organisations, which can mean your personal data has been provided directly by another company for a specific purpose, or where you may have accessed our platforms through a third party online service. There are also some local or national authorities providing data for specific purposes. These publicly accessible sources including The Land Registry, Probate Registry, The Gazette, Companies House, online estate agents or social media platforms.
To achieve the above stated purposes for which we process your personal data, we may have to share your personal data with certain third parties.
We shall make all reasonable efforts to ensure that any third-party we share your personal data with is also compliant with data protection law. The kinds of third parties we may share your personal data with include organisations where it is necessary to provide goods or services.
When sharing data, or when it is transferred between devices, it is encrypted.
The specific types of third parties we may share your personal data with include:
For team members, the specific types of third parties we may share your personal data with include:
You may be aware that data within the UK and EU are strictly controlled and regulated. Other countries may not have such strong protection for consumers, whilst some have been granted what is known as an ‘adequacy decision’ under the General Data Protection Regulation, meaning they comply with our rules.
As part of our standard business practices, we may transfer your personal data to organisations based in countries that have not been granted an adequacy decision. These might include where the data transfer is necessary in order to fulfil a contract between us and yourself, where we have received your specific consent after having made you aware of any risks involved, or where contracts are in place between us and the third-parties involved that ensure the recipient organisation has a suitable standard of data protection in place.
Where data is transferred to such countries, we shall ensure that specific safeguards have been established as we take data security very seriously.
We will only keep your personal data only for as long as reasonable required to achieve the purposes for which it was collected, in line with this privacy notice.
The following criteria are what determine the period for which we will keep your personal data:
There are several rights granted to you immediately upon providing us with your personal information. We’d like you to know that at Lendology we take your rights seriously and will always conduct ourselves in a way that is considerate of our responsibility to serve your legal rights.
Please note that if you use any of these rights, we may not be able to provide certain products or services to you. We will, of course, confirm this at the time your consent is withdrawn.
If making a request of us, we will require you to prove your identity before processing the request. If acting on someone else’s behalf, we will also need to see evidence of your authority to act on their behalf. We may also ask for further information in order to help us process your request, which we will confirm as soon as practicable, alongside confirming how long it will take to process the request.
You have the following rights:
The Right of Access
This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed.
If you would like access to the personal data we have about you, we ask that you contact us.
The Right to Rectification
This one is fairly straight forward; if you notice that the data we have about you is inaccurate or incomplete, you may request we correct it.
The Right to Erasure
Otherwise known as the ‘right to be forgotten’, this gives you the right to request your personal data be deleted.
This is not an absolute right; if you were to request that we erase your personal data, we would erase as much of that data as we could but may have to retain some information if it is necessary.
Where we have received a request for personal data to be erased, if it is necessary for us to retain some of that information we shall ensure that the remaining data is used only when and where it is absolutely necessary. We shall, of course, also confirm to you what personal data we are unable to erase and for what specific legal reason.
The Right to Objection
If you wish to object to the way we use, or have used, your personal data you may do so freely. We will consider each objection on its merits, taking into account your fundamental rights and freedoms and our legitimate grounds and legal obligations for holding that data. You also have the right to object where we are processing your personal data for direct marketing purposes.
The Right to Request Restriction
This allows you to ask us to stop processing your personal data in some situations, including if you want us to establish how accurate the data held is; where we have incorrectly processed the data but you do not wish for us to delete it; where you have asked us to remove the data but we need to confirm if we have overriding grounds, i.e. legal obligations to use it; and finally, we no longer need to hold the data but you need it in regards to a legal claim.
The Right to Complain
We will always try to maintain the highest standards and encourage the confidence our customers have in us as an organisation. To achieve this, we request that any complaints be first brought to our attention so we can properly investigate matters. If you would like to complain about Lendology to a regulatory body, you may do so by contacting your local data protection supervisory authority.
Our Data Protection Officer is:
Sarah Marney, Compliance Lead, Lendology CIC
01823 461099
