This is the Privacy Notice for Simply Business Finance Limited.
The purpose of this notice is to inform you about how and why your personal data is used so that we are as transparent as we possibly can, and to ensure that you are aware of your rights under UK data protection legislation.
The Company
Simply Business Finance Limited, is a company registered with Companies House under registration 10814890 and with the ICO under registration ZA475613.
Our postal address is The Offices, 57 Newtown Road, Hove, BN3 7BA.
You can contact us at hello@simplybusinessfince.com or on 01273 961755.
The purpose for processing your data and our basis for doing so.
We process personal data so we can provide commercial finance facilities to clients and engage with prospective clients and partners.
In processing your data, we must establish our legal basis for doing so and the legal basis can be different depending on circumstances in which we process it. References to the basis of processing e.g.,”(Article. 6.1.f)” are a reference to the article of the UK General Data Protection Regulation under which we undertake the processing in question.
If you are a customer, we will hold the following information about you:
- Your full name.
- Your postal address.
- Your email address.
- Your contact telephone number(s)
- Your data of birth.
- Your marital status.
- Your nationality
- Your signature.
We process this information so we can provide you with financial facilities, invoice you as well as maintain our communication with you. Our legal basis for doing this is Article 6.1.b – performance of a contract, this is necessary to deliver the service to you.
We will process your data to enable us to perform due diligence checks on you and your company, both at point of engagement and during our commercial relationship. This is to allow us to perform the requirements of the UK’s anti-money laundering legislation. Our legal basis for doing this is Article 6.1.c – compliance with a legal obligation.
Where we require your data in the pursuance of a contract, if you fail to provide that data, we will not be able to provide you with our products or enter into a commercial agreement.
If you are a prospective customer we have engaged with, we will hold the following information about you:
- Your full name.
- Your email address.
- Your contact telephone number(s)
We will process this information so we can communicate with you and send you occasional updates on our services. If you are from a ‘business’ entity, we may send you information as a legitimate interest activity (Article 6 1.f). If you are a sole trader and we have had conversations about providing you our services, we are able to market to you without consent as allowed by the Privacy and Electronic Communications Regulations 2003 (amended). You can ask us to stop sending you communications at any time.
Recipients of your data
As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:
- If you do not pay your bills, we may choose to engage a third party to recover any money you owe us. Lawful basis Article 6.1.f, we have a legitimate interest to pursue money owed to us.
- It is possible, though unlikely, that we might be forced to disclose your information in response to a court order or other binding mandate, including law enforcement purposes. Lawful basis is Article 6.1.c Legal Obligation
- We are required to undertake due diligence by law for anti-money laundering purposes. We us the services of AMLCC for this purpose and our lawful basis is Article 6.1.c – performance of a legal obligation.
- We will send your personal data to our lending panel so we can provide you with the appropriate financial facility. Our lawful basis for doing this is Article 6.1.b – performance of a contract.
Data processed by third parties on our behalf.
We use the services of other organisations in the processing your data. We use a cloud-based CRM platform and data is resident in the EEA by virtue of the UK / EU agreement. We use a marketing platform for email marketing, and the data is stored in the USA. This international transfer is conducted by virtue of Standard Contractual Clauses. We also use a cloud-based email and document storage platform, and this data is held in the UK. We utilise the Zoom video conference platform to conduct remote interviews and meetings.
Those organisations that process personal data on our behalf are subject to a data processing contract as required by Article 28 of the UK GPDR. This ensures that your data is handled in accordance with the UK GPDR.
Transferring your data outside of the UK
We do not transfer or process data outside the UK unless the processor we use requires it. If your data is sent out of the UK, we ensure that there are approved mechanisms to do so under Article 46 UK GDPR, such as adequacy decisions, standard contractual clauses or in exceptional circumstances, derogations.
Retention periods
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We use the criteria set out by the Financial Conduct Authority to identify how long we must retain personal data. This could range from 3 to 10 years, depending on the circumstances.
If you are a prospective customer, we will keep your information for 2 years from last meaningful contact unless you have asked us to stop contacting you. If this is the case, we will remove you from the mailing list but will keep the minimum of data to ensure you are not added back into it.
Security
The UK GDPR requires us to implement technical and organisational measures to protect your data. This means our IT systems are protected by anti-virus and anti-malware software. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website.
11. Your rights
The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:
- You have the right to get access to and copies of your personal data.
- You can in certain circumstances, restrict our processing of your data and request us to erase it (although we may have to retain some for legal reasons).
- You can ask us to rectify any inaccurate information we may be holding.
If you want to exercise any of these rights, contact us on the above email address.
You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk