Experian AutoCheck (Consumer) Privacy Policy
Effective date: 23 May 2018

This policy
We take your privacy seriously. This Privacy Policy explains what personal information we collect from you and how
we use it.
We encourage you to read this policy thoroughly. To make it easier, we’ve broken it up into bite-size chunks and somelonger sections have a heading and summary.

1. Who is Experian and how can you
contact us?
2. What information we collect
3. How we use your information
4. What are the legal grounds forhandling personal information?
5. Who we share your personal
information with

1. Who is Experian and how can you contact us?
When we refer to ‘Experian’ in this Privacy Policy, we mean Experian
Limited.
Experian is part of a group of companies whose parent company is listedon the London Stock Exchange (EXPN) as Experian plc. The Experian groupof companies has its corporate HQ in Dublin, Ireland, and its operational
HQs in Costa Mesa, California and Nottingham, UK. You can find out more
about the Experian group on our website at www.experianplc.com.

7. Your rights to how we use yourpersonal information

Experian is responsible for processing the personal information you
provide to us on this website www.autocheck.co.uk (or was provided to us
as part of enabling you to access the website) and where it is arequirement under English Law, Experian will maintain its registration with
the Information Commissioners Office in the UK.

8. How we keep your personal
information secure

If there’s anything you’re unsure about in this Privacy Policy, feel free tocontact our Data Protection Officer at uk.dpo@experian.com.

9. How long we keep your personal
information for

2. What information we collect

6. Where in the world do we sendinformation?

10.Changes to this Privacy Policy

We will need to ask you for certain personal information to give you thebest possible experience when you engage with us (via our websites orotherwise) and when you use our products and services.
We or our third parties will also collect other information about you and thedevices you use to access our website. We do this by using technologies
like cookies. See also our Cookie Policy.

Contact information
When you apply for Experian services from this website we will ask you toprovide some contact information. Contact information may include someor all of the following: full name, residential address and email address.
We will only retain your Contact information for 3 years, from the last time
you logged in to use the product.

Payment information
Where the services you select on our website carry a cost, we will ask you
to provide some payment information. Payment information may include
some or all of the following: credit card and debit card details.
We do not retain your credit card or debit card details at all – when you pay
for our services by card, the card details are used instantly to make thepayment and we do not keep the details.

Security details
For most of the services you select on our website, we will ask you toprovide security information that only you will know. Security information
may include some or all of the following: password, favourite food,favourite film, father’s middle name, spouse’s middle name, child’s middle
name, favourite sports team and mother’s maiden name.
We will only retain your Security information for 3 years, from the last time
you logged in to use the product.

Device information
We may collect certain data automatically, both ourselves and via the useof cookies or third parties, from your visit to our website or use of ourservices, which may include some or all of the following: How you connect
to the internet (IP Protocol Address), how you engage with our site, screen
resolution, operating system, browser data stored on your device (such ascookies), information about the device software you are using such as
internet browser and location data (city, region of the IP address you used
when accessing our APPS), navigation through the product screens,Google Analytics.
We will only retain your Device information for up to 2 years after the end ofthe provision of the services.

3. How we use your information
We use your personal information in lots of ways to make our products andservices as effective as possible.

To enable you to access our website and use our services
We will use your information to accept you as a new/returning customer
and continue to provide you with our products and services.

To process payments and collect arrears
We will use your information to process the payment/s you commit towhen signing up to our services and for the collection of any future
payments or overdue amounts for those services.
Your payment card provider may let us know if the card details relating to
your Experian payment change. If this happens, we reserve the right toupdate certain card details to make sure your access to our services isn’t
interrupted.

So for example, if you get a new payment card with a later expiry date tothe one you currently pay with (but all the other details stay the same), wemay update your payment card expiry date accordingly.

To provide and improve customer support
We will use your information to be able to provide and improve thecustomer support we provide to you (e.g. when you have questions orwhen you forget your log-in information).

For internal training purposes
We will use your information to ensure that our team has the knowledge
and expertise to ensure we provide the best possible experience to you
when you interact with us.

For fraud investigation, detection and prevention
We will use your information for fraud investigation, detection andprevention measures and in order to provide suitable security for youraccount and your information that we hold (such as to enable us to prevent
others logging in to your account without your permission from unknowndevices).

For the investigation, detection and prevention of crime
We will use your information for the investigation, detection and preventionof crime (other than fraud).

To comply with the law
Like any other business, we are required to comply with many laws andregulations. We will, where necessary, use your information to the extent
required to enable us to comply with these requirements.

For reporting and analytical purposes
We will use your information for reporting and analytical purposes (e.g.
how many of our customers are in the north or south of the country) toenable us to improve our products and services and provide appropriate
levels of support to our customers.

For complaint and dispute resolution
Whilst we will try to make sure that you are happy with the service weprovide and do not feel the need to complain, if you do complain to us, wewill use the information we have about you to help us manage yourcomplaint and to bring it to a close.

Further uses of your personal information not described in thisPrivacy Policy
If we use your personal information for any purposes that are not set out inthis Privacy Policy, we promise to let you know exactly what we will use it
for before we go ahead and use it.

4. What are the legal grounds for handling personal
information?
Contract
In most cases, the information described above will be provided to us by you
because you want to take services from us or engage with us and our use ofyour information will be governed by contract terms. Giving this information
to us is therefore your choice. If you choose not to give all or some of it tous, this may affect our ability to provide the services you want, to you.

Consent
Where we collect other information from you such as when we use cookies
to collect information about the device you use to access our website, orsometimes third parties collect it on our behalf, you may be asked to consent
to this before using our website. If you choose not to give your consent, or
you later remove your consent, this may affect our ability to provide theservices you want, to you.

Legitimate interests
In the United Kingdom, we can also use personal information where thebenefits of doing it are not outweighed by the interests or fundamental
rights or freedoms of data subjects. The law calls this the “LegitimateInterests” condition for processing. E.G:
•Helping to prevent and detect crime such as fraud and money
laundering - fraud and money laundering cost the British economy
many billions of pounds every year. That cost is ultimately passed on
to the public in the form of higher prices. By helping to avoid fraud
such as identity theft, we help to stop this from happening.

•Running a credit bureau - by providing credit information to lenders
about a consumer’s creditworthiness a credit bureau is helping toavoid over-indebtedness of consumers, especially vulnerable
consumers and the negative effects of excessive debt.

•Complying with/supporting compliance with legal and regulatory
requirements - we must comply with various legal and regulatory
requirements. Additionally, the services we provide help otherorganisations to comply with their own legal and regulatory
obligations. For example, Experian is regulated by the Financial
Conduct Authority.

We gather data from the user of this service under a legal basis of contract
due to the need to supply the requested services, to collect payment for
those services, to provide support and to be able to resolve
complaints/disputes.
We also gather data from the user of this service under a legal basis ofcontract due to the need to train our staff, to be able to report and analyse
usage of the service and to comply with relevant laws and regulations.

5. Who we share your personal information withWe share your personal information only with those persons who need tohandle it so we can provide the Experian products and services you’ve
signed up to. We also share it with companies within the Experian group
who manage some parts of the services for us; with suppliers who provide
services to us which require access to your personal information only; andwith resellers, distributors and agents involved in delivering the services weprovide where necessary for them to do so.
Lastly, we may also provide your personal information to fraud prevention
agencies. This is to protect the Experian group of companies and ourcustomers, to keep our systems secure, or where it’s necessary to protect
either yours or our best interests.

1. Group companies
As a member of the Experian group of companies, we can benefit fromthe large IT infrastructure and expertise that exists within our business.
This means that the personal data you provide to us may be accessedby members of our group of companies for support and administrative
purposes.

2. Suppliers
We use a number of service providers to support our business andthese service providers may have access to our systems in order toprovide services to us and/or to you on our behalf.

3. Resellers, distributors and agents
We sometimes use organisations to help provide our products services
to clients and customers. Personal information may be provided tothem in connection with this purpose.

4. Fraud prevention agencies
We may check your details with the records we hold and share withfraud prevention agencies. If false or inaccurate information isprovided and fraud is identified, we will record this and details will bepassed to the other fraud prevention agencies. Law enforcement
agencies may access and use this information.
We and other organisations may also access and use this information
to prevent fraud and money laundering, for example, when:•Checking details on applications for credit and credit related orother facilities.

•Managing credit and credit related accounts or facilities.

•Checking details on proposals and claims for all types ofinsurance.

•Checking details of job applicants and employees.

Please contact us at Experian Ltd, PO Box 8000, Nottingham, NG80
7WF if you want to receive details of the fraud prevention agencies.
We and other organisations may access and use the information
recorded by fraud prevention agencies from other countries.

5. Public bodies, law enforcement and regulators
The police and other law enforcement agencies, as well as publicbodies such as local and central authorities can sometimes request
personal information. This may be for the purposes of preventing or
detecting crime, apprehending or prosecuting offenders, assessing orcollecting tax, investigating complaints or assessing how well aparticular industry sector is working.

6. Individuals
You can obtain a copy of the information we hold about you. See
section Your rights to how we use your personal information forfurther information on how you can do this.

6. Where in the world do we send information?
Experian is based in the UK, which is where our main databases are. We
also operate elsewhere in and outside the European Economic Area, so wemay access your personal information from and transfer it to theselocations as well. Don’t worry though, any personal information we accessfrom or transfer to these locations is protected by European dataprotection standards.
While countries in the European Economic Area all ensure rigorous dataprotection laws, there are parts of the world that may not be quite sorigorous and don’t provide the same quality of legal protection when it
comes to your personal information.
To make sure we keep your personal information safe, we apply strictsafeguards when transferring it overseas. For example:•Sending your personal information to countries approved by theEuropean Commission as having high quality data protection laws,
such as Switzerland, Canada and the Isle of Man.

•Putting in place a contract that has been approved by the European
Commission with the recipient of your personal information thatprovides a suitable level of high quality protection.

•Sending your personal information to a member organisation approvedby the European Commission as providing a suitable level of highquality protection. For example, the Privacy Shield Scheme that exists
in the US.

Still want to know more about the safeguards we use to protect yourpersonal information overseas? Feel free to contact our Data Protection
Officer at uk.dpo@experian.com.

7. Your rights to how we use your personal
information
If our right to process or share your personal information is based on thefact that you’ve given us consent, you have the right to withdraw thatconsent at any time by contacting us.
You can also ask for access to the personal information we hold about youand request that we correct any mistakes, restrict or stop processing ordelete it. We will assess your request and subject to legal or overriding
requirements to keep it we will act on your request, but please note that
this does not mean that we will delete negative information about you if it
is confirmed to be correct. Credit checking relies on having both positive
and negative information in order for lenders to correctly assess yourability to repay any credit you receive. If that is the case, we will explain
why. To request a copy of the personal information we hold about you,please follow this link.
In certain circumstances (e.g. where you provide your information to us (a)with consent to process it or (b) where the processing is necessary for the
performance of our contract with you) you can require that we provide theinformation we hold about you either to you or a third party in a commonlyused format. This only applies if we are processing it using automatedmeans. If you would like more information about this, let us know bycontacting our Data Protection Officer on uk.dpo@experian.com.

Problems with how we handle your information or rights
We will try to ensure that we deliver the best levels of customer service but
if you think we are falling short of that commitment, please let us know bycontacting our Data Protection Officer at uk.dpo@experian.com. You may
also see our full complaints handling procedure and how to make acomplaint.
If we cannot resolve things under that procedure, then you may have theright to refer your complaint, free of charge, to the Financial Ombudsman
Service. The contact details for the Financial Ombudsman Service are:Telephone: 0300 123 9 123, or from outside the UK +44 20 7964 1000 E:
complaint.info@financial-ombudsman.org.uk W: www.financialombudsman.org.uk Financial Ombudsman Service Exchange Tower
London E14 9SR.
You also have the right to contact the Information Commissioner’s Office(ICO), the supervisory authority that regulates the handling of personal
information in the UK. You can contact them by:
1. Going to their website at https://ico.org.uk.
2.

Phone on 0303 123 1113.

3. Post to Information Commissioner’s Office, Wycliffe House, WaterLane, Wilmslow, SK9 5AF.
You may also have the option to register your complaint using theEuropean Commission Online Dispute Resolution (ODR) platform. This is a
web-based platform that is designed to help consumers who have bought
goods or services online to deal with issues arising from their purchase.

8. How we keep your personal information secure
Online privacy and security is the most important aspect of any customer
service and we take it extremely seriously. We use a variety of the latest
technologies and procedures to protect your personal information fromunauthorised access, destruction, use or disclosure.
We have put in place various safeguards to ensure that individuals’ whose
personal information we handle are not unduly harmed by the activities weuse their personal data for. These include making information available toindividuals so that they understand how their personal data will be used byExperian, explaining their rights to obtain the information we hold and tohave their information corrected or restricted and providing information
about how individuals can complaint if they are dissatisfied.
We restrict access to your personal data to those employees, and thirdparties, who need to know that information to provide products or services
to you. We maintain physical, electronic, and procedural safeguards toprotect your personal data.
Experian protects your information over the Internet by using secure web
server technologies, which allows web browser programs (such asMicrosoft Internet Explorer) to interact with Experian's web server via anencrypted session. Experian employs a Secure Sockets Layer (SSL)
connection that provides an encrypted connection between your computerand Experian. The 128-bit encrypted connection scrambles ordinary text ordata into cypher text to safeguard sensitive information during its journey
across the Internet. The information is decrypted, or put back into areadable format, when it reaches its intended destination. When you visit
any Experian website you may move in and out of secured areas. Any timethat you are on a registration page or viewing your personal credit report,
you will be in a secured area.

9. How long we keep your personal information for
We’ll keep your personal information for the periods set out in the section‘What information we collect’ above, and where we were not able to give a
specific period, we will keep it only as long as we need it to provide theExperian products and services you’ve signed up to. We may also keep it tocomply with our legal obligations, resolve any disputes and enforce ourrights. These reasons can vary from one piece of information to the next
and depend on the products or services you’re signed up to, so the amountof time we keep your personal information for may vary.

Contact information
Contact information such as names and addresses are kept while there is acontinuing need for us to have it.

Payment information
Payment information such as card and bank details are kept while there isa continuing need for us to have it.

Security details

Security check information such as date of birth and mother’s maiden
name details are kept while there is a continuing need to retain it.

Device information
Device information such as how you connect to the internet and screen
resolution are kept while there is a continuing need to retain it.
In all of these cases, our need to use your personal information will bereassessed on a regular basis, and information which is no longer required
for any purposes will be deleted/disposed of securely.

10.

Changes to this Privacy Policy

We can update this Privacy Policy at any time and ideally you should checkit regularly for updates. We won’t alert you to every little change, but if there
are any really important changes to the Policy or how we use yourinformation we’ll let you know and where appropriate ask for your consent.
The previous version of the Privacy Policy (valid until 23 May 2018) can befound here.

Contact us