Privacy Notice Dealer

We will ask for personal information to process the sale of the vehicle to you. This includes:

• Personal information identifying you – your name and date of birth.
• Contact information – your address, telephone numbers and your email address.
• Consent Information – Any permissions, consents or preferences you make us aware of. This includes information regarding how we contact you for marketing purposes.
• Payment information –If paying via a debit or credit card we will process your card payment via our card merchant. We do not store your card information for one off payments.

We will ask for personal information that enables us to conduct a credit reference check and setting up and managing your loan agreement. We will collect:

• Personal information identifying you – Such as your name and date of birth.
• Contact information – Such as your address, telephone numbers and your email address.
• Employment information – Such as your employment status and employment history.
• Financial Information – Your income, payment frequency, bank details and regular expenditure to enable us to assess your ability to afford the car finance repayments.
• Locational information – such as the IP address of your personal device used to view our website and apply online.
• Consent Information – Any permissions, consents or preferences you make us aware of. This includes information regarding how we contact you for marketing purposes.
• Proof of identification – If we are unable to prove your identity via our electronic checks, we will ask you to provide proof of identity. We also conduct Fraud Prevention checks to aid us in confirming your identity and to help us protect both you and us from potential fraud.
• Credit History – We perform Credit Reference checks. The checks provide us with information about your current credit commitments and your financial history. To find out more about how we and credit reference agencies use your data please see the section titled "Credit Reference Agencies (CRAs)."
• Driving offence and penalty points – With your permission, we, or an authorised representative, will request information from the DVLA to confirm you have a valid driving license, and whether you have any driving offences that need to be considered in our lending decision. We will ask you for consent to conduct this check on your behalf. Alternatively, you can choose to provide this information using the DVLA search service. For more information please click here. We will be unable to progress a credit application without this check being conducted.
• Payment information – In order to set up your direct debit to make your repayments, we will collect information regarding your bank, including your Bank Name, Sort Code and Account Number.

During the life of your agreement, we will collect additional personal information about you including:

• Transaction information – We will keep a record of your repayments, including the date payment has been made and the total paid per instalment.
• Communications from you – We will learn about changes to your personal information and circumstances based on any communication you make with us. This may include new contact details, changes of name, and recording changes of circumstances via emails, phone calls, text messages, social media and customer surveys. Copies of communications with you and recordings of any telephone conversations will be stored on our systems.
• Information we receive about you from approved companies – We outsource certain aspects of our business to approved companies. As they act on our behalf, they may provide us with information about you to aid us in managing your account. For more information about the firms we work with, please see “Who do you share my personal information with.”
• Sensitive information about you – Should you have a change in circumstance we may ask you to provide us with additional information to aid us in managing your account. This could include information about your mental and physical health. Where we believe there is a benefit to capture this information, we will inform you why it would be appropriate for us to hold it, including any pros or cons. We will request explicit consent from you to store and use this information.
• Payment information – If paying via a debit card we will process your card payment via our card merchant. We do not store your card information for one off payments. If paying by direct debit, we may receive new account details either directly by you, or via your bank provider when switching your direct debits from one account to another.

Should we fail to establish contact with you we will share personal information, including your name, address and telephone numbers, with approved companies to aid us to reconnect with you. The approved companies will verify the information we provide and may provide us with new address and telephone information to attempt contact with you. We may also receive information about your credit status, including changes in your credit circumstance. Should we be unable to reconnect with you, and choose to repossess your vehicle in accordance with current UK legislation, we will also pass on some of your personal information to repossession agents to enable them to collect the vehicle.

Should you fall into arrears we offer payment plans that can be set up to be automatically debit your bank account via a continuous payment authority (CPA). We will ask you to provide you card number, expiry date, name and 3 digit security number. We do not store this information, instead we convert it into a unique token that cannot be used by anyone other than Go Car Credit to debit the repayments we agree with you.

• Locational information – As part of your contract we install a Payment Reminder System, which can track the vehicles location when there is a legitimate business interest for us to do so. To find out more about legitimate interests please see "How does the law protect me."

We will share your personal information with:

• Organisations who introduce you to us – Should you come though a credit broker, price comparison website, or any other type of credit introducer we may need to share your details with them, whether you were approved for finance and went on to take out a finance agreement with us.
• Approved Car Dealerships – If you require help finding a vehicle to finance, we will pass information about you to one of our approved dealers to provide assistance. We will give them some basic information to contact you and discuss any available options. We will inform you about the car dealer and request your permission to share your personal information before doing so.
• Credit Reference and Fraud Prevention Agencies – We share your information with these agencies to aid us in making credit decisions. For more information about how we interact with Credit Reference Agencies click here.
• Payment Reminder System (PRS) agents – If you enter into a Hire Purchase Agreement with Go Car Credit, as part of your terms and conditions you will need to have a PRS device installed. We may need to pass approved device fitters personal information in order to fit your PRS at your car dealership, your home or at an agreed location.
• Warranty Companies – If purchasing a car from The World of Cars, we may include a warranty, provided by 5 Star(supported by the AA), to aid in the repair of any potential faults for a fixed period. If a warranty is provided, we will share the required personal information to enable 5 Star to set up your warranty cover and manage any claim you may make.
• DVLA – With your consent, we will share your information with the DVLA in order to confirm that you have a valid driving licence. For more information about this check please click here.
• Payment information – We use GoCardless to process your Direct Debit payments. More information on how GoCardless processes your personal data and your data protection rights, including your right to object, is available at www.gocardless.com/legal/privacy/
• Finance Companies – If purchasing a vehicle through The World of Cars, we will share your information with companies on our approved list of finance providers to aid them in making a decision to provide you with finance. You can find out more about how these companies use the information we share by viewing their Privacy Notice. A link is provided below for each of the firms we share data with:
  
  o New Look Loans - https://www.newlookloans.co.uk/privacy-policy/

• Credit Reference Agencies – We will update them with information regarding the performance of your loan with us. This includes the balance owed, repayments made and any update to personal information such as your name and address. For more information about how we interact with Credit Reference Agencies click here.
• Companies that you request us to transfer your information to.
• Companies that aid in us managing your account.
• Market research companies – These are companies that aid us in obtaining new customers through segmentation and profiling. We anonymise all personal information before sharing it with our approved panel of market research companies, ensuring you cannot be identified by these third parties.
• Payment Reminder System (PRS) agents – If there is a fault with your PRS, we will pass your personal information to one of our PRS agents to meet you and repair the fault. We also share personal information, including your surname and car registration, to set up your PRS account so we can monitor the vehicle. For more information on the PRS device, please click here.
• Payment information – We use GoCardless to process your Direct Debit payments. More information on how GoCardless processes your personal data and your data protection rights, including your right to object, is available at www.gocardless.com/legal/privacy/

Should you fail to make your repayments on time and in full, and fail to contact us, either directly or via our communications to you, we will use 3rd parties such as:

• Tracing agents – Should we receive no contact from you, we will provide information to tracing agents to help us to reconnect with you. We will pass on personal information about you to establish if your contact information has changed.
• Field agent firms – We will pass on personal information about you to enable field agents to attempt to reconnect with you.
• Repossession firms – Should we be unable to come to an arrangement with you to repay your outstanding balance, we reserve the right to repossess the vehicle in line with relevant consumer credit legislation.
• Debt Collection Agencies – We may pass your personal information, to a Debt Collection Company for the purpose of collecting any unpaid amounts on your account on our behalf. We also reserve the right to sell your agreement to another authorised firm and we will provide them with the necessary information required to service your debt.
• Solicitors – Should we be unable to agree the return of your car based on regulations and how much you have paid, we reserve the right to pass on your details to a solicitor to proceed with court action to recover the vehicle and/or any outstanding balance. We are currently represented by Shoosmiths LLP. If you would like to know more about how they use the data we share, please click here.

To satisfy our legal requirements we will share your personal information with the following agencies if there is a legal reason for us to comply:

• HM Revenue and Customs.
• The Financial Conduct Authority, Information Commissioners Office and other regulatory authorities.
• Independent complaint resolution services such as The Financial Ombudsman Service.
• Fraud agencies such as the National Crime Agency, Police and Action Fraud.
• Other 3rd parties such as The Department Work and Pensions, Local councils where car fines have been issued and DVLA
• Parties that have a vested interest in your account, such as loan funders who enable the firm to lend.

We may also share your personal information if Go Car Credit chooses to alter the way its business is structured in the future.

• We may choose to sell, transfer, or merge parts of our business, or our assets. Or we may seek to acquire other businesses or merge with them.
• During any such process, we may share your personal information with other approved companies. We’ll only do this if they agree to keep your personal information safe and private.
• If a change to Go Car Credit happens, then other parties may use your personal information in the same way as set out in this notice.

The system includes a GPS location function. The GPS feature is activated from the outset of the agreement. This data will be used to locate the vehicle in the event of Go Car Credit Limited, or one of its trading styles, needing to recover the vehicle due to breach of the agreement terms. The device also collects a range of data about the vehicle which may be used to service your account.

The data provided by the vehicle/PRS device is considered personal to you and will only be processed in accordance with relevant Data Protection legislation. The data will also be processed and may be passed to agents acting on behalf of Go Car Credit Limited, or one of its trading styles, and used to locate the vehicle following a request from the police, other relevant authorities or insurance companies.

All PRS devices are equipped with a tracking feature that will notify us of the vehicles at varying times. Access to this information is limited to key personnel within our business and we will only use the data should your car need to be repossessed or in the event of a request from law enforcement agencies.

The insertion of a PRS device is a requirement under your contract with us, and our monitoring of your vehicles position is for our own legitimate business interest.

Activities

• To carry out marketing activities and send you marketing communications.
• When we ask you to allow us to share your information – for example with approved car dealerships or firms acting on your behalf.
• When processing any sensitive personal information about you.
• To confirm you hold a valid driving license and validate the affordability of your loan - Wwe will ask for your consent to contact the DVLA. In order to see your licence on the DVLA website we will ask you to choose between one of the below methods:conduct this check by asking you to provide us with a code from the DVLA. This allows us to view your license via their database.
  
  o Giving us consent to contact the DVLA directly on your behalf (for more information on how this works, please click here )
  o Giving us consent by you providing us with a DVLA code to view your license
• You can withdraw your consent at any time in the process. Please be aware that should you withdraw your consent, or do not consent to us performing this check, we will be unable to complete your loan application.
• You can change/withdraw your consent at any time. For more information please contact us.

Activities

• Delivery of our product in line with your contract.
• Providing guidance on how best to manage your account.
• To make and manage payments made to us.
• To manage fees, charges, and interest due on your loan agreement.
• To trace your whereabouts and contact you about your account. For more information please click here.
• To collect and recover money that is owed to us.
• To collect or recover the vehicle.
• To exercise our rights as set out in your loan agreement.

Activities

• To ensure any offer made is in your best interests, as required by Financial Conduct Regulators. Specifically, that the agreement is legally enforceable, adequately explained to you and is affordable for you to repay.
• To detect, investigate, report, and seek to prevent financial crime.
• To obey laws and regulations that apply to us.
• To respond to complaints and seek to resolve them as required by Financial Conduct Regulators.

You have the right to object to any data we process via a legitimate interest. For more information please click here.

We use your personal information to help decide if your account is linked to fraud or money-laundering. If we think there is a risk of fraud, we will conduct an investigation and pass on key information to fraud prevention agencies.

We use a system to decide whether to lend money to you. This is called credit scoring. It uses past information to assess how you’re likely to act while paying back any money you borrow. This includes personal information about similar accounts you may have had before.

Credit scoring uses personal information from three sources:

• Your application form.
• Credit reference agencies.
• Information we receive from approved companies.

It gives an overall assessment based on this. We use this to help us make responsible lending decisions that are fair and informed.

Credit scoring methods are tested regularly to make sure they are fair and unbiased.

We will share your personal information with CRAs and they will give us information about you. The personal information we exchange can include:

• Name, address and date of birth.
• Your credit application.
• Details of any shared credit.
• Financial situation and history, including debt judgements, insolvency and bankruptcy information.
• Public information, from sources such as the electoral register and Companies House.

We will go on sharing your personal information with CRAs for as long as you are a customer. This will include details about your settled accounts and any debts not fully repaid on time. It will also include details of the outstanding loan including:

• Outstanding balance due.
• Details of your repayments.
• Information confirming whether you repay in full and on time.

The CRAs may give this information to other organisations that want to check your credit status. We will also tell the CRAs when you settle your accounts with us.

We’ll use this personal information to:

• Assess your affordability, to ensure you can afford the agreed repayments.
• Make sure what you’ve told us is true and correct.
• Help detect and prevent financial crime.
• Manage accounts with us.
• Trace and recover debts and assets.
• Make sure that we tell you about relevant offers.

When we ask CRAs about you they will note it on your credit file. This is called a credit search. Other lenders may see this, and we may see credit searches from other lenders.

If you ask for a quote from us, we will conduct a “Soft ”quotation credit search. Soft searches leave a footprint on your credit file, however they do not impact your credit score with credit reference agencies.

Should you progress with a full loan application, we will run a “hard” credit check. This leaves a footprint on your file that other lenders will be able to see, and it may affect your ability to obtain further credit.

If you apply for a product with someone else, we will link your records with theirs. We will do the same if you tell us you have a spouse, partner or civil partner.

You should tell them about this before you apply for our product. It is important that they know your records will be linked together, and that credit searches may be made on them.

CRAs will also link your records together. These links will stay on your files unless one of you asks the CRAs to break the link. You will normally need to give proof that you no longer have a financial link with each other.

You can find out more about the CRAs on their websites, in the Credit Reference Agency Information Notice (CRAIN). This includes details about:

• Who they are.
• Their role as fraud prevention agencies.
• The information they hold and how they use it.
• How they share personal information.
• How long they can keep your information.
• Your information protection rights.

You can find the CRAIN document to the CRA we use at https://www.transunion.co.uk/crain

We will use your information to:

• Confirm your identity.
• Help prevent fraud and money laundering.
• Fulfil any contract you have with us.

These are some of the kinds of personal information that we use:

• Name.
• Date of birth.
• Residential address.
• History of where you have lived.
• Contact details, such as email addresses and phone numbers.
• Financial information.
• Information relating to your loan.
• Employment details.
• Vehicle details.
• Information that identifies computers or other devices you use to connect to the internet. This includes your Internet Protocol (IP) address.

If we or an FPA decide there is a risk of fraud, we may stop activity on your loan account. FPAs will also keep a record of the risk that you may pose.

This may result in other organisations refusing to provide you with products or services, or to employ you.

FPAs can keep personal information for different lengths of time. They can keep your information for up to six years if they find a risk of fraud or money-laundering.

If we do transfer information to our agents or advisers outside of the EEA, we will make sure that it is protected in the same way as if it was being used in the EEA. We’ll use one of these safeguards:

• Transfer it to a non-EEA country with privacy laws that give the same protection as the EEA.
• Put in place a contract with the recipient that means they must protect it to the same standards as the EEA.
• For personal information sent to the USA, transfer it only to organisations that are part of Privacy Shield. This is a framework that sets privacy standards for personal information sent between the US and EU countries. It makes sure those standards are similar to what is used within the EEA.

To learn more, please visit the European Commission Justice website.

The Payment Reminder System (PRS) installed in your vehicle is managed by one of two firms, Imetrik who are currently based in the Canada or Passtime, based in the USA . We share information with them to manage the PRS in line with the contract we have with you.

We take great care in ensuring all firms outside the EEA have contracts in place that define how they can use your personal information and the period they can hold it for. Go Car Credit are responsible, as Data Controllers, for ensuring Imetrik and Passtime process your personal information fairly and compliantly with EU Data Protection laws.

We can only use your personal information to send you marketing communications if we have either your consent, or a 'legitimate business interest'. That is when we have a business or commercial reason to use your information. It must not unfairly go against what is right and best for you. For more information on Consent and Legitimate Interests please see “How does the law protect me?”

You can ask us to stop sending you marketing communications or change the methods we use to market to you, by contacting us at any time. Whatever you choose, you'll still receive statements, and other important information such as changes to your existing product and legal notifications regarding the status of your account.

We may ask you to confirm or update your choices, if you take out any new products or services with us in future. We will also ask you to do this if there are changes in the law, regulation, or the structure of our business.

If you change your mind you can update your choices at any time by contacting us.

Within the last six months of your loan agreement with us, we will contact you to discuss the next steps of closing your account and transferring the ownership of your vehicle to you. We will also contact you with information regarding new products and finance deals that may be relevant to you as a legitimate business interest. For more information on Legitimate Interests please see “How does the law protect me?”

You can ask us to restrict the use of your personal information if:

• It is not accurate.
• It has been used unlawfully but you don’t want us to delete it.
• It is not relevant any more, but you want us to keep it for use in legal claims.
• You have already asked us to stop using your personal information, but you are waiting for us to tell you if we are allowed to keep on using it.

If you want to object to how we use your personal information, or ask us to delete it, please contact us. Please be aware that while you have a contract with us, the justification for deleting your personal information is limited to:

• Information being processed incorrectly.
• Information being processed using inaccurate information.
• Information being processed in a way that was not stated or explained to you.

Where we have asked for your consent to process your personal information, you have the right to withdraw your consent at any time. Please contact us if you want to do so.

If you withdraw your consent, we may not be able to provide certain products or services to you. If this is so, we will tell you.