Future Finance is the trading name of Future Finance Loan Corporation Limited (we, us, Future Finance).
This Policy describes the privacy practices of Future Finance and its subsidiaries and affiliated companies in accordance with the Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR) with respect to information relating to you that you or third parties provide to Future Finance, including information collected or provided on the Future Finance website www.futurefinance.com (the Website).
Future Finance is a data controller and is registered in the UK with the Information Commissioner’s Office (the ICO) under registration number ZA134468. Our lead supervisory authority in the EU is the Data Protection Commission in Ireland.
By visiting and using our Website, you acknowledge and agree to the practices described in this Policy.
PERSONAL INFORMATION WE MAY COLLECT ABOUT YOU
Information you give us when applying for a loan, becoming a guarantor or managing our contract with you: your name, email address, home address, date of birth and other information such as bank account details or demographic information when you complete forms, loan applications and/or surveys. This information may be given on our Website or when you contact us directly, for example through our customer service department, either online or by telephone (as our calls are recorded for training and monitoring purposes)
Information we collect about you and your device: each time you visit the Website we may automatically collect information such as:
- details of your usage of the Website, including what pages of the Website you have visited and whether you have clicked on images or links on those pages (this may be user specific or aggregate); and
Information we receive from other sources: we work closely with third parties and may receive information about you from those third parties, for example, information about your enrolment and course from your educational institution, your credit history from Credit Reference Agencies (CRAs) and/or employment history from your current or former employers. We may view any records about you which are in the public domain (for example electoral roll or social media accounts).
We do not seek or knowingly collect any personal data about children under 18 years of age.
HOW WE USE YOUR PERSONAL INFORMATION
We use your information in various ways, such as:
- to process your loan application
- verifying your identity and credit record to enable us to consider and underwrite your application to borrow or be a guarantor;
- assessing the validity of your debit card or bank account details by processing one or more test transactions (which would not result in any money being taken from your account and would not affect your credit history);
- for administrative purposes, for example to process payments, make collections, trace you where necessary, update/maintain our records, prevent fraud and money laundering and enforce our loan terms;
- to communicate with you by telephone, email, SMS, social media or post using the details you have provided in relation to your application/agreement with us or we have obtained from publicly-available sources
- to enhance your experience of our Website and of our services, for example by conducting statistical analysis or for editorial or feedback purposes for our advertiser affiliates; and
- to provide you with marketing communications from us (subject to the consents you provide to us which you can withdraw by opting out at any time).
Disclosure of your information
We may share your information with selected third parties including:
- Service Providers: We contract with service providers to perform certain functions on our behalf. Examples include database providers who assist in identity verification and site analysis providers. Their access is limited only to the personal data needed to perform the functions carried out on our behalf as our agent, and only for the purpose of performing those functions;
- Credit Reference Agencies: In order to process your application, we will perform credit and identity checks on you with one or more credit reference agencies (“CRAs”). Where you take banking services from us we may also make periodic searches at CRAs to manage your account with us. To do this, we will supply your personal information to CRAs and they will give us information about you. This will include information from your credit application and about your financial situation and financial history. CRAs will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.
We will use this information to:
Assess your creditworthiness and whether you can afford to take the product;
Verify the accuracy of the data you have provided to us;
Prevent criminal activity, fraud and money laundering;
Manage your account(s);
Trace and recover debts; and
Ensure any offers provided to you are appropriate to your circumstances.
We will continue to exchange information about you with CRAs while you have a relationship with us. We will also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.
When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
- If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link. More information about CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail in the CRA information notice (CRAIN) available at http://www.experian.co.uk/crain/index.html
- Other disclosures: We use the information you provide to us to engage employers to verify the accuracy of your self-reported income and expenditure and to engage your educational institution to verify the details of your enrolment. We will also disclose your information (which may include data in relation to the performance of your loan) to your guarantor (if you nominate one).
We may also disclose your personal information to third parties:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
- If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
- To our professional advisers where required to advise us from time to time and always subject to a duty of confidentiality;
- To other members of our group where required for management information and forecasting purposes; and
- If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request, this includes exchanging information with other companies and organisations for the purposes of fraud prevention.
We process your data using automated decision-making software
We use automated decision-making software to underwrite your loan. Our automated decision-making systems include but is not limited to the following inputs:
- Credit model algorithms
- Affordability algorithms
- Enrollment and employment verification
- Anti-fraud and Anti-money laundering databases
- Other data sources that provide inputs that show your creditworthiness, affordability or fitness to receive credit
The use of automated decision-making software is a requirement to enter into, or to act as a guarantor for a borrower to enter into, a loan agreement with us. You have the right to request that we do a manual review of the results of the automated decision rendered.
OUR LEGAL BASIS FOR USING YOUR PERSONAL INFORMATION AS OUTLINED ABOVE
We use your personal information for a variety of reasons, upon different legal bases including:
- For the performance of our agreement with you or to take steps at your request prior to entering into an agreement with you. This is necessary for us to lend to you or approve you to act as a guarantor. If you do not provide such information we will be unable to provide you with a loan or to permit you to act as a guarantor.
- Where necessary for our legitimate interests, for example in managing and monitoring our website operation, preventing fraud and for our business compliance purposes
- Where necessary in order to comply with a legal obligation, for example making reports to our regulatory authority or to law enforcement agencies.
Where our use of your data is not necessary for one of the purposes outlined above we may seek your consent to use it in a particular way, for example if we ask you to complete a customer survey. Where we ask for your consent you are free to refuse our use of the data for those purposes and you may withdraw your consent at any time by contacting us using the details set out below.
When you provide your information to us for the purposes of obtaining a quote or making an application for credit we will advise you that we may contact you by telephone, SMS, email or by post to provide you with information about similar products and services that we may provide. We give you the opportunity to change your consent preferences for receiving such marketing communications when you provide your information to us and at any time afterwards in the following ways:
- Via email: Click the "Unsubscribe" link in any email communication and submit your email address on the next screen or email us at firstname.lastname@example.org;
- Via our Website: Update your contact preferences in the customer account section; or
- Via telephone: Call us on +44(0)20 3743 8700.
If you opt-out of our use of your information for marketing purposes, we will process your request as soon as possible. Please note that we reserve the right to take reasonable steps to authenticate your identity with respect to any such request.
How we keep your information secure
We have measures in place to protect the security and confidentiality of your information and we strive to keep it accurate. We only keep your information for as long as is necessary. We generally keep records of any transactions that you enter into for a minimum of six years.
Some of the security measures include:
- We work to protect the security of your personal data during transmission by using Secure Sockets Layer (SSL) software, which encrypts personal data you input.
- We store personal data in an encrypted database.
- We transmit personal data in an encrypted format.
- Our networks are secured with certified firewalls in a multi-layered fashion with redundancy.
We have offices located in the United States from which we perform data processing services. In order to properly protect information subject to transfers from the European Economic Area (EEA) to the United States, we have put adequate safeguards in place by entering into the European Commission's model clauses.
If we otherwise transfer your personal data to a country outside the EEA we will ensure that it is afforded the equivalent level of protection that it would receive in the EEA in one of the ways prescribed under the GDPR.
How long your personal information will be stored for
We only keep your personal information for as long as is necessary to fulfil the purposes for which we use it. We will normally retain your personal data for 6 years after our last business interaction with you to comply with our regulatory requirements. We will delete all data after 6 years from our last business interaction with you unless we are subject to a legal requirement to retain it for longer.
Your personal information is protected under data protection law and you have a number of rights (explained below) which you can seek to exercise. Please contact us using the details shown below if you wish to do so, or if you have any queries in relation to your rights. If you seek to exercise your rights, we will explain to you whether or not the right applies to you; these rights do not apply in all circumstances.
Right of access
Subject to certain exceptions, you have the right of access to information that we hold about you upon request. You can exercise this right by making a request in writing, by email or telephone using the contact details in the contact section below.
Right to rectify your personal information
If you discover that the information we hold about you is inaccurate or incomplete, you have the right to have this information rectified (i.e. corrected).
Right to be forgotten
You may ask us to delete information we hold about you in certain circumstances, this is often referred to as the 'right to be forgotten'. This right is not absolute and only applies in particular circumstances. It may not therefore be possible for us to delete the information we hold about you, for example, if we have an ongoing contractual relationship or are required to retain information to comply with our legal obligations or to exercise or defend legal claims.
Right to restriction of processing
In some cases you may have the right to have the processing of your personal information restricted. For example, where you contest the accuracy of your personal information, its use may be restricted until the accuracy is verified. You have the right to ask us not to use your information for marketing purposes. We will ask for your consent to use your information for these purposes when we collect it and you can exercise your right to prevent such processing by checking certain boxes on our Website or other forms we use to collect your data. You can also exercise the right at any time by contacting us by post or email using the details in the contact section of this Policy (see below).
Right to object to processing
You may object to the processing of your personal information (including profiling) when it is based upon our legitimate interests. You may also object to the processing of your personal information for the purposes of direct marketing (including profiling to the extent it relates to direct marketing) and for the purposes of statistical analysis.
Right to data portability
You have the right to receive, move, copy or transfer your personal information to a controller which is also known as 'data portability'. You have the right to this when we are processing your personal information based on consent or on a contract and the processing is carried out by automated means. You should note that this right is different from the right of access (see above) and the types of information you can obtain under the two separate rights may be different.
If you have any questions about how we treat your personal data and protect your privacy or if you have any comments or wish to seek to exercise any of your rights as outlined above, please contact us:
By post to Future Finance Loan Corporation Limited, College House, 2/3 Townsend Road, Dublin 2, Ireland, by email to email@example.com or by telephoning us on +44 (0) 20 37438700.
If you have a complaint, please contact us and we will investigate it and give reasonable redress if we consider it appropriate to do so.
You also have the right to complain to your local data protection supervisory authority. If you are in the UK, this is the Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113. www.ico.org.uk/ If you are in Ireland or if your complaint relates to cross border processing issues, our lead supervisory authority is The Data Protection Commission, Canal House, Station Road, Portarlington R32 AP23 Co. Laois, telephone +353 57 8684800, email firstname.lastname@example.org.
Conditions of use and changes to this policy
If you choose to visit our Website, your visit and any dispute over privacy, is subject to this Policy. We may make changes to the policy from time to time to reflect changes to our operations or legal or regulatory requirements; if we do so we will put a revised copy on our website and notify you of this.