page
12/17
¡
Payment systems (e.g. Visa or MasterCard), if you issue cards linked to
my account, who may transfer my personal data to others as necessary
to operate my account and for regulatory purposes, to process
transactions, resolve disputes and for statistical purposes, including
sending my personal data overseas; and
¡
Anyone else where you have my consent or as required by law.
International transfers
My personal data may be transferred outside the UK and the European
Economic Area. While some countries have adequate protections for
personal data under applicable laws, in other countries steps will be
necessary to ensure appropriate safeguards apply to it. These include
imposing contractual obligations of adequacy or requiring the recipient to
subscribe or be certified with an ‘international framework’ of protection.
Further details can be found in the ‘Using My Personal Data’ booklet.
Identity verification and fraud prevention checks
The personal data you’ve collected from me at application or at any stage
will be shared with fraud prevention agencies who will use it to prevent
fraud and money-laundering and to verify my identity. If fraud is detected,
I could be refused certain services, finance or employment in future. You
may also search and use your internal records for these purposes. Further
details on how my personal data will be used by you and these fraud
prevention agencies, and my data protection rights, can be found in the
‘Using My Personal Data’ booklet.
Credit reference checks (this doesn’t apply to the following accounts:
Asset 30 Account and Sovereign 30 Account)
If I’ve applied for a credit product then in order to process my application,
you’ll perform credit and identity checks on me at my home and/or
business address (if I am a business customer) with one or more credit
reference agencies. To do this you’ll supply my personal data to the credit
reference agencies and they’ll give you information about me. When you
carry out a search at the credit reference agencies they’ll place a footprint
on my credit file. A credit search may either be: a) a quotation search where
a soft footprint is left. This has no effect on my credit score, and lenders
are unable to see this; or b) a hard footprint where I’ve agreed/requested
Cater Allen to proceed with my application for credit. This footprint will
be viewable by other lenders and may affect my ability to get credit
elsewhere. You’ll also continue to exchange information about me with
credit reference agencies while I have a relationship with you. The credit
reference agencies may in turn share my personal information with other
organisations. If I am a business customer, the personal data shared with
the credit reference agencies will relate to me and my business. Details
about my application (whether or not it’s successful) will be recorded and
you’ll give details of me, the business (where applicable) and my accounts
and how I manage them to credit reference agencies. If I do not repay any
debt in full or on time, they’ll record the outstanding debt and supply this
information to others performing similar checks, to trace my whereabouts
and to recover debts that I owe. Records remain on file for 6 years after
they are closed, whether settled by me or defaulted. A financial association
link between joint applicants will be created at the credit reference
agencies. This will link our financial records and be taken into account in
all future applications by either or both of us until either of us apply for a
notice of disassociation with the credit reference agencies.
The identities of the credit reference agencies, and the ways in which
they use and share personal information is explained in more detail in
the ‘Using My Personal Data’ booklet, or via the Credit Reference Agency
Information Notice (CRAIN) document which can be accessed via any of
the following links:
¡
experian.co.uk/crain
¡
equifax.co.uk/crain
¡
transunion/crain
My marketing preferences and related searches
You’ll use my home address, phone numbers, and email address and social
media (e.g. Facebook, Google and message facilities in other platforms)
to contact me according to my preferences. I can change my preferences
or unsubscribe at any time by contacting you. In the case of social media
messages I can manage my social media preferences via that social media
platform. If I’m over 18, you may search the files at credit reference agencies
before sending marketing communications to me about credit. The credit
reference agencies don’t record this particular search or show it to other
lenders and it won’t affect my credit rating. You do this as part of your
responsible lending obligations which is within your legitimate interests.
From time to time you’d like to contact me about products, services and
offers that may interest me or to get my opinion on how you are doing.
I understand you won’t bombard me and I can choose to stop receiving
information at any time by contacting you.
Applicant 1
The boxes I have ticked below indicate the channels I WOULD NOT like
you to use to contact me, as explained in the Data Protection Statement in
section 2 of this form:
Email
SMS
Phone
Post
Market research, including customer satisfaction surveys
All of the above
I understand that I may receive details of products and services from other
Santander group companies if I have agreed with them to receive such
information.
Applicant 2
The boxes I have ticked below indicate the channels I WOULD NOT like
you to use to contact me, as explained in the Data Protection Statement in
section 2 of this form:
Email
SMS
Phone
Post
Market research, including customer satisfaction surveys
All of the above
I understand that I may receive details of products and services from other
Santander group companies if I have agreed with them to receive such
information.
Automated decision making and processing
Automated decision making involves processing my personal data
without human intervention to evaluate my personal situation such as
my economic position, personal preferences, interests or behaviour, for
instance in relation to transactions on my accounts, my payments to other
providers, and triggers and events such as account opening anniversaries
and maturity dates. You may do this to decide what marketing
communications are suitable for me, to analyse statistics and assess
lending risks. All this activity is on the basis of your legitimate interests,
to protect your business, and to develop and improve your products and
services, except as follows; when you do automated decision making
including profiling activity to assess lending and insurance risks, this will be
performed on the basis of it being necessary to perform the contract with
me or to take steps to enter into that contract. Further details can be found
in the ‘Using My Personal Data’ booklet.
Other information about me as a business customer (if I am one)
You may also hold all the information I give to you (i.e. name, address, date
of birth, nationality) in order to undertake periodic due diligence checks
which banks are required to undertake to comply with UK legislation.
Criteria used to determine retention periods (whether or not I
become a customer)
The following criteria are used to determine data retention periods for my
personal data:
¡
Retention in case of queries. You’ll retain my personal data as
long as necessary to deal with my queries (e.g. if my application is
unsuccessful);
¡
Retention in case of claims. You’ll retain my personal data for as long
as I might legally bring claims against you; and
¡
Retention in accordance with legal and regulatory requirements.
You’ll retain my personal data after my account has been closed or
has otherwise come to an end based on your legal and regulatory
requirements.
My rights under applicable data protection law
My rights are as follows (noting that these rights don’t apply in all
circumstances and that data portability is only relevant from May 2018):
¡
The right to be informed about your processing of my personal data;
¡
The right to have my personal data corrected if it’s inaccurate and to
have incomplete personal data completed;
¡
The right to object to processing of my personal data;
¡
The right to restrict processing of my personal data;
7 Data Protection Statement (continued)
Applicant(s) to complete