This policy is effective from 01 October 2021. Rishon Finance Limited may change this policy from time to time to keep it up to date with legal requirements, guidance from the Information Commissioner’s Office and the way we operate our business. You should check this page regularly to ensure that you are aware of any changes.
By "your information" we mean personal information about you, such as your name, address, date of birth, contact details, financial information, employment details, and device identifiers including IP address that we collect: from you, your broker or other loan sourcing business, your representative, any potential guarantor for you or individual you may guarantee, or from third parties, such as credit reference agencies (“CRAs”) (who may search the electoral register), fraud prevention agencies, credit, income and expense analytical service providers or other organisations; or learn about you from the way you manage your payment obligations to us (including from the transactions and payments made to your account with us) or the way in which you interact with our website.
We may record telephone calls for training, monitoring, compliance and security purposes.
We require the information we collect to understand your needs, to service you as a customer, provide a better service and to check and assess whether you may be suitable for other credit products or services we, our affiliates, branded product providers or selected trusted third parties may offer, or provide from time to time, including if we were to decline you for a product or service. Specifically, we will use your information for the following purposes:
When you apply for a product from us you confirm that all the information you have given to us is accurate, we will make contact with CRAs and fraud prevention agencies for assessing your credit status and identity and to detect fraud and comply with the law, and following our approval of you, we may also make periodic searches at CRAs and fraud prevention agencies to enable us to manage your payment obligations to us or identify your credit status. When we conduct a search with a CRA we will supply your personal information and add details of our search and information from your credit application to your credit records that may be seen by other lenders. A large number of applications within a short period of time could impact your ability to obtain credit. We will use a credit scoring or a number of other automated or manual decision-making systems when assessing your application. CRAs supply to us public information (including the electoral register), and shared credit, financial situation and financial history information and fraud prevention information. Law enforcement agencies may also access and use this information.
We will continue to exchange information about you with CRAs while you have a relationship with us. We will also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs. When CRAs receive a search from us (including a search carried out to resolve a query or complaint you have raised whether before or after the account has been settled) they will place a search footprint on your credit file that may be seen by other lenders.
If you tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail by each of the three CRAs – clicking on any of these three links will also take you to the same CRAIN document:
We will only collect, obtain, use and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This may be because:
Our use of your personal information is necessary to take steps to enter into a contract with you or perform a contract: for example, to assess your creditworthiness and sustainable affordability of any credit obligations you may undertake, or to conclude a loan agreement with you or obtain a guarantee and indemnity from you if you are to guarantee a Rishon Finance loan;
In these cases we will look after your information at all times in a way that is proportionate and respects your privacy rights and you have a right to object to the processing as explained in the "Your Legal Rights" section below;
Additionally, we will look for your consent to process personal information in relation to your health. This will only be in circumstances where you choose to share this information with us to help us understand your circumstances and appropriately manage your account.
This will be used for no other purposes than managing your account and for training and quality purposes.
If you would like to find out more about the legal basis by which we process personal information please contact us at email@example.com.
In this section you can find out more about:
How we use personal information to keep you up to date with our products and services
As mentioned above we may use your personal information to let you know about products and services that we believe will be of interest to you. We may contact you by email, post, or telephone or through other communication channels that we think you may find helpful. In all cases, we will respect your preferences for how you would like us to manage marketing activity with you.
How you can manage your marketing preferences
To protect privacy rights and to ensure you have control over how we manage marketing with you:
We recommend you routinely review the privacy notices and preference settings that are available to you on any social media platforms.
When and how we carry out automated or manual decision making
As described above, we will use a credit scoring or a number of other automated or manual decision-making systems when assessing your application. These automated or manual processes are used to assess your creditworthiness and whether you can sustainably afford to repay the loan or guarantee it and inform our decision about whether or not to proceed with your application. We may automatically or independently decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have hidden your true identity. These processes make use of information which you provide to us directly and that information which we collect from third parties (including from CRAs) and includes a combination of information about your personal and financial status. For more information about how you can exercise your rights in relation to these automated or manual processes please see the "Your Legal Rights" section below.
If we, or fraud prevention agencies, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or to employ you, or we may stop providing existing services to you.
A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please see Contact Us below.
Your personal information may be transferred and stored in countries outside the United Kingdom, including the European Economic Area (the “EEA”) and/or the United States, that may be subject to different standards of data protection. We will take appropriate steps to ensure that transfers of personal information are: in accordance with applicable law; carefully managed to protect your privacy rights and interests; and limited to countries (this is expected to include the EEA) which are recognised by the UK as providing an adequate level of legal protection or where we can be satisfied that alternative arrangement are in place to protect your privacy rights. To this end where we transfer your personal information to third parties who help provide our products and services, we obtain contractual commitments from them to protect your personal information to the UK standards, unless we are legally permitted to transfer your personal information, for example if the transfer is necessary for the establishment, exercise or defence of legal claims.
You have a right to contact us for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) to ensure the adequate protection of your personal information when this is transferred as mentioned above.
We have implemented and maintain appropriate technical and organisational security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorised disclosure or access to such information appropriate to the nature of the information concerned. Measures we take include placing confidentiality requirements on our staff members and service providers; destroying or permanently anonymising personal information if it is no longer needed for the purposes for which it was collected. As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect User IDs and passwords please take appropriate measures to protect this information.
We will store your personal information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this notice. In some circumstances we may store your personal information for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, and/or accounting requirements.
Fraud prevention agencies can hold your personal information for different periods of time, and if you are considered to pose a fraud or money laundering risk, your information may be held by such agencies for six years.
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information. These rights are:-
We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
You can exercise your rights by contacting us, see Contact Us below. Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.
We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Right to access personal information
You have a right to request that we provide you with a copy of your personal information that we hold and you have the right to be informed of;
(a) the source of your personal information;
(b) the purposes, legal basis and methods of the processing;
(c) the data controller’s identity; and
(d) the entities or categories of entities to whom your personal information may be transferred.
Right to rectify or erase personal information
You have a right to request that we rectify inaccurate personal information. We may seek to verify the accuracy of the personal information before rectifying it.
Subject to the paragraph below, you can also request that we erase your personal information in limited circumstances where:
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:
Right to restrict the processing of your personal information
You can ask us to restrict your personal information, but only where:
We can continue to use your personal information following a request for restriction, where:
Right to transfer your personal information
You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller, but in each case only where:
Right to object to the processing of your personal information
You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.
If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
Right to human intervention
When you apply for a loan, we will use an automated or manual decision process to decide whether to lend to you. If we decline your application, you can ask one of our underwriters to review the decision.
Right to object to how we use your personal information for direct marketing purposes
You can request that we change the manner in which we contact you for marketing purposes. You can request that we not transfer your personal information to unaffiliated third parties for the purposes of direct marketing or any other purposes.
Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction
You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the United Kingdom.
We may redact data transfer agreements to protect commercial terms.
Right to lodge a complaint with the Information Commissioner's Office
You have a right to lodge a complaint with the Information Commissioner's Office which regulates the processing of personal data in the UK if you have concerns about how we are processing your personal information.
We ask that you please attempt to resolve any issues with us first, although you have a right to contact the Information Commissioner’s Office at any time.
The primary point of contact for all issues arising from this privacy notice, is our Compliance Department who can be reached at firstname.lastname@example.org or by writing to us at Rishon Finance Limited, 193a Ashley Road, Hale, Altrincham, WA15 9SQ.
If you have any questions, concerns or complaints regarding our compliance with this policy and the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us. We will investigate and attempt to resolve complaints and disputes and will make every reasonable effort to honour your wish to exercise your rights as quickly as possible and, in any event, within the timescales provided by data protection laws.
To contact the Information Commissioner’s Office
You have a right to lodge a complaint with the Information Commissioner’s Office at any time. The Information Commissioner's Office can be contacted on 0303 123 1113 or via other methods of communication as explained on their website (currently https://ico.org.uk). We ask that you please attempt to resolve any issues with us first.
Our site may contain links to other sites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other site.
What is a cookie?
A cookie is a small file stored on your computer that is used to store information about your use of a website and preferences. As an example, when you set your cookie preferences for Rishon Finance, they are stored in a “CookieConsent” cookie so that when you return you are not asked again.
What cookies do Rishon Finance use?
Essential cookies (required)
Essential cookies are used so that our website functions properly for you. An example of this is the session_id cookie that enables us to sign you out for security after 30 minutes of inactivity.
Rishon Finance use analytics cookies to collect site usage data. This helps to show us where our site causes users problems. We use this data to make improvements to our site and check that the problems have been solved.
The analytics services Rishon Finance uses is Google Analytics. This service is set up so that none of your personally identifiable data is collected.
Rishon Finance use marketing cookies to help target online adverts and understand where users have seen our adverts on other sites.
An example of how we use marketing cookies is if you have just taken a loan out with us we will then use targeting in our marketing platforms so that you stop seeing our adverts.
How do I change my cookie settings on linkfinanceuk.com?
How can I change my browser's cookie settings?
All the main browsers allow you some control of cookies through their settings. To find out more about these settings for your specific browser, search for "(your browser) cookie settings".
To opt out of being tracked by Google Analytics across all websites, visit https://tools.google.com/dlpage/gaoptout