F&I Online Ltd trading as Carplus understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits www.carplus.co.uk website (“Our Site”) and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.
In this Policy, the following terms shall have the following meanings:
We may collect personal information (which means any information about an individual whose identity is apparent or can be reasonably ascertained from such information) from you in connection with a service or product provided to you by us, including:
Where information fields are marked as mandatory on any application form that you complete, you will need to provide such information in order for us to continue with your application. Should you complete mandatory sections of the application form, but not complete the application, we may use the information provided to contact you to provide support with the application process.
We may collect information provided inconnection with the following activities:
The third parties with whom we may need to share personal information to help us provide services and products to you are detailed within this section.
Our partners, including brokers, introducers, lenders and motor dealers we work with depend upon your individual credit profile and the specific criteria determined by the lender.
Whenever you apply for any of our products and/or services we and/or our lenders will carry out checks with credit reference agencies ("CRAs"), including-
When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application.
CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to "international frameworks" intended to enable secure data sharing.
The personal information that you provide will be retained by us in accordance with applicable laws. However, in accordance with our lawful basis, data will only be retained in line with our stated policy approach and only be used for the purposes detailed, any marketing activity will only be undertaken where we have your consent, following the conclusion of your relationship or employment with Carplus or its subsidiaries and trading styles.
Our retention policies are aligned to individual rights and freedom and any request under those rights will be met in accordance with our stated lawful bases or obligations.
Sensitive personal data includes information about an individual's health and other categories of personal information which are closely protected (e.g. criminal convictions). We do not generally process such information, unless you have voluntarily provided that information to us (for example, where you have notified us of a health issue).
You agree that, to the extent that you have provided us with sensitive personal data, you provided it voluntarily and agree that we can use any sensitive personal data that you provide us to deliver products or services to you and/or determine your fitness to avail yourself of our products or services. Where possible we shall seek to minimise the collection and use of such sensitive personal data.
Where you tell us you are happy to receive information from us we may send you communications products that we perceive may be of interest to you (including in relation to products and/or services of our partners where we have your agreement).
Depending on the contact preferences you select, we will communicate with you by letter, telephone, SMS, email or other electronic means such as via social and digital media.
If, at any time, you prefer not to receive further communications from us in any or all forms (except in connection with information, products or services that you specifically request), you will have the ability to unsubscribe from such communications by means of a link provided in every email that is sent to you by us or by contacting us.
We invest appropriate resources to protect your personal information, from loss, misuse, unauthorised access, modification or disclosure, in particular:
We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorised access to systems.
We restrict access to personal information to Carplus employees, contractors and agents who need to know that information in order to process it for us and who are subject to strict contractual confidentiality obligations. They may be disciplined or their contract terminated if they fail to meet these obligations.
We and the other companies processing your data for the purposes mentioned in Section 4 may from time to time need to undertake some of the processing in countries outside of the European Economic Area. Different privacy laws may apply in these countries and you understand and unambiguously agree to the transfer of personal information to these countries and parties. We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect any information held in that country or that the service provider acts at all times in compliance with applicable privacy laws.
We will store your personal information for up to 12 months, we will store your personal information for six years from the point of last engagement with you. This is to enable us to refer to our records in the unlikely event that you want to lodge a complaint against us within six years.
If you do not exercise your right to object to marketing or unsubscribe to our marketing emails we will store your personal information for marketing purposes until you exercise your right to object or unsubscribe.
Right to access
You have the right to request copies of the personal information we hold about you at any time.
Right to rectification
You have the right to request that we correct any inaccurate personal information we hold about you.
Right to erasure
You have the right to request that we delete your personal information from our records.
Please note that we will not be able to delete your personal information whilst we are still providing our services to you. We will be able to delete your personal information once you cancel the service or once the service is completed.
Right to restrict processing
You have the right to request that we restrict how we use your personal information.
Right to object
You have the right to object to the collection and use of your personal information at any time.
Right to data portability
You have the right to obtain a copy of your personal information in a legible and compatible format such as Excel or Word.
You can exercise all your rights by contacting us on any of the above contact details.
You can lodge a complaint with us directly by contacting us on one of the above contact details.
You also have the right to lodge a complaint directly with the Information Commissioner’s Office (ICO). The ICO are the regulator who makes sure that we use your personal information in a lawful way.
You can lodge a complaint with the ICO by following this link https://ico.org.uk/make-a-complaint/ or calling the ICO on 0303 123 1113.
If you have any questions about this Privacy Statement, or you think we have incorrect information or you would like a copy of the information we hold about you, you may request details of personal information which we hold about you please do not hesitate to contact us via any of the below
Data Protection Officer
F&I Online Ltd trading as Carplus
105-109 Sumatra Road
London NW6 1PL