CUSTOMER PRIVACY NOTICE – USE OF PERSONAL INFORMATION We, PEAC (UK) Limited, trading as PEAC Finance, are a registered company in England (Company no. 3088213). This privacy notice explains what data We hold about You and how We plan to use it. It also sets out Your legal rights under Data Protection laws. In this respect, we are the data controller of data we hold about You. Table Of Contents Introduction What We process and share Automated decisions Consequences of processing Marketing Analysis Cookies Data Transfers Your Rights Contact details Introduction Before We are able to complete the application process and provide financing to You, We use the data You provide directly to Us, or via Your intermediary in conjunction with data shared with credit reference agencies (CRAs), anti-fraud and anti-money laundering agencies, and data collected from publicly available sources (e.g. electoral register) for the following purposes: to verify Your identity; to verify Your credit history and take credit decisions; to prevent, detect and prosecute fraud, terrorism and money laundering; to manage Your account; and to recover and trace debts. These checks require Us to process personal data about You. What We Process And Share The personal data You have provided, We have collected from You, or We have received from third parties (such as the person who introduced Your application to us, credit reference and fraud prevention agencies, debt recovery agencies) may include Your: name date of birth residential address and address history contact details such as email address and telephone numbers financial information employment details identifiers assigned to Your computer or other internet connected device including Your Internet Protocol (IP) address vehicle details Your employee’s contact details CRAs collect and maintain information about consumers’ and businesses’ credit behaviour. This includes Electoral Register, fraud prevention, and credit information – including details of previous applications and the conduct of Your accounts – and public information such as County Court Judgements, decrees, and bankruptcies. We use the CRA, Experian Limited (“Experian”), who will process Your personal data to verify Your identity and to assess credit worthiness. We will supply Your personal information to Experian, who will give Us information about You. This will include information from Your credit application and about Your financial situation and financial history. Experian will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information. For more information about how Experian Limited will use and share Your data, their role also as fraud prevention agency, the data they hold, data retention periods and Your data protection rights with CRAs, please go to their website at: www.experian.co.uk/crain. We will continue to exchange information about You with Experian while You have a relationship with us. We will also inform them about your settled accounts. If you borrow and do not repay in full and on time, Experian will record the outstanding debt. This information may be supplied to other organisations by Experian. When Experian receive a search from us they will place a search footprint on your credit file that may be seen by other lenders. If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. Experian will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with Experian to break that link. When We collect information about corporate customers, We will collect information on the directors and shareholders and any guarantors offered. This Notice also applies to the processing of such personal data and the use of the word ‘You’ in this Notice will include such individuals. When We, CRAs and fraud prevention agencies process Your personal data, We do so on the basis that We have a legitimate interest in assessing credit worthiness before signing a contract with You, in preventing fraud, terrorism and money laundering, and in verifying identity, in order to protect Our business and to comply with laws that apply to Us. The Government, through statute, also requires Us to screen applications that are made to Us to ensure We are complying with the international fight against terrorism and other criminal activities. As a result of this We may need to disclose information to government bodies. Credit reference and fraud prevention agencies can hold Your personal data for different periods of time, and if You are considered to pose a fraud, terrorism or money laundering risk, Your data can be held for up to six years. We will not retain Your personal information for longer than is necessary for the maintenance of Your account, or for legal or regulatory requirements. In addition to disclosure to the person who introduced Your application to Us, credit reference and fraud agencies, We may disclose Your personal data to comply with any legal or regulatory requirements to which We are subject, to other companies within Our group, to advisers, banks or to anyone We propose to transfer any of Our rights and/or responsibilities under any agreement We have with You, each of whom may use Your personal data in the ways described in this statement. We will also process Your personal data in accordance with the contractual requirements of the services or financing You have requested. We may monitor or record phone calls with You in case We need to check We have carried out Your instructions correctly, to resolve queries or issues, for regulatory purposes, to help improve Our quality of service, and to help detect or prevent fraud or other crimes. Conversations may also be monitored for staff training purposes. Automated Decisions As part of the processing of Your personal data, decisions may be made by automated means. This means We may automatically decide that: You are not approved for credit or for the amount of credit applied for; or You pose a fraud, terrorism or money laundering risk if: Our processing reveals Your behaviour to be consistent with that of known fraudsters, terrorists or money launderers; or is inconsistent with Your previous submissions; or You appear to have deliberately hidden Your true identity. If You submit an application and it is declined through this automated process, You can contact Us at Our contact details set out below, within one month from the date upon which the decision is communicated to You to have the decision reconsidered. You also have the right to ask that the decision is not made based solely using a credit scoring system. Consequences Of Processing If We, a credit reference agency or a fraud prevention agency, determine either that You are not approved for credit or that You pose a fraud, terrorism or money laundering risk, We may refuse to provide the financing You have requested or We may stop providing existing services to You. A record of any fraud, terrorism or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to You. If You have any questions about this, please contact us using our contact details below. We, credit reference agencies and fraud prevention agencies, may also, pursuant to statute, enable law enforcement agencies to access and use Your personal data to detect, investigate and prevent crime. Marketing Where You have consented to Us contacting You by email, telephone, or post, We will send You details on existing or new products We are marketing to see if You are interested in these. You can withdraw Your consent to this method of marketing communication at any time. In order to do so, please contact Us using our contact details below. Analysis We may use information relating to You, which may also include personal information about You for statistical analysis on how We perform as a business and to improve services provided to Our customers. Cookies For details of our cookie policy when you access our website, please click our Cookie Policy link in the footer of this page. Data Transfers Whenever We, credit reference or fraud prevention agencies transfer Your personal data outside of the European Economic Area, contractual obligations are imposed on the recipients of that data to protect Your personal data to the standard required in the European Economic Area. The recipient may also be required to subscribe to ‘international frameworks’ intended to enable secure data sharing. Your Rights Your personal data is protected by legal rights, which include Your rights to: object to Our processing of Your personal data; request that Your personal data is erased or corrected; request access to Your personal data. For more information or to exercise Your data protection rights, please contact Our Data Protection Officer using our contact details below. If You are unhappy about how your personal data has been used please click our customer complaints policy link in the footer of this page. You also have a right to complain to the Information Commissioner’s Office at: https://ico.org.uk/ which regulates the processing of personal data. PEAC (UK) Limited is registered in England. Company number: 3088213. Registered Office address: Inspired, Easthampstead Road, Bracknell RG12 1YQ. Authorised and regulated by the Financial Conduct Authority (Ref. 668041) in respect of agreements regulated by the Consumer Credit Act 1974. Members of the Finance and Leasing Association (FLA) Find out more Associate member of British Vehicle Rental and Leasing Association Find out more ©2021 PEAC (UK) Ltd. All rights reserved