1.1. We are committed to protecting your privacy rights as a consumer of our services. Our policy is to respect and protect your rights to privacy.
1.2. 21Finance means 21Finance Ltd.
1.3. All information you provide to us will be held by 21Finance on UK based servers. Unless otherwise specified in point 9. 21Finance will not hold, transfer or use your data outside the European Economic Area (EEA), nor will we share it with others, within or outside of the EEA (except when we believe in good faith that the law requires it).
1.4. We collect data on all our users in order to continually improve the services and products we offer. We also collect data to enter commercial arrangements which can include the sale of advertising space. 21Finance adheres to UK Data Protection Legislation which, from 25th May 2018, includes EU Regulation 2016/679 General Data Protection Regulation ("GDPR").
1.5. This privacy notice only relates to 21Finance's website and platform and does not extend to your use of the internet outside of the 21Finance site.
2.1. 21finance Ltd (incorporated in England and Wales: Co. No. 12347126) has its registered office at 12 Hemlet Row, London, EC1V 3QJ
3.1. Before using our services and purchasing our products, we require that each user undertakes checks for the purposes of verifying your identity and preventing fraud and money laundering. These checks require 21Finance to collect and store personal data about you.
3.2. Details of personal data we may need to collect to process these checks include, but are not limited to: name, address, date of birth, contact details, bank account numbers, national insurance number and device identifiers including IP addresses.
3.3. 21Finance may need to enable law enforcement agencies to access your personal data to detect, investigate and/or prevent crime.
3.4. We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and verifying identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested.
3.5. Fraud prevention agencies can hold your personal data for different time periods, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
3.6. As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more, please read section 7.
3.7. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested or to employ you, or we may stop providing existing services to you.
3.8. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing, or employment to you. If you have any questions about this, please contact us on the details below.
3.9. Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to 'international frameworks' intended to enable secure data sharing.
4.1 The types of personal data that we collect and process about you will depend on your interactions with 21Finance and what products, you use.
The data collected may fall into the below categories:
| Personal Data | Example |
|---|---|
| Contact and Identity Data | Name Address Date of Birth Telephone Number Email address Gender Marital Status Financial Dependents Age Username and Password Purchasing made by you Customer Service Records Feedback and survey response |
| Special Category Data | Ethnicity and race, details of criminal offence/convictions, details about vulnerable people in your household, such as children or elderly people (and we may make a note of this), Health Information and data relating to your health requirements (May may have) or other information we may require to comply with guidelines on number of public health or concern (eg. Covid-19) |
| Financial | Credit Worthiness Outstanding Credit commitments Income Bank account details Incoming and outgoings Employment Changes in your circumstances may affect your ability to repay 2Finance |
| Operational | Communications between us Complaints Notes Product/Service access requests Correction requests Details about payments to and from you and other services you have purchased |
| Technical Data | Internet protocol address login information browser type and version time zone setting browser plug-in types and versions operating system and platform Identification number cookie data location data and other similar identifying information required for the customer's device(s) to communicate with websites and applications on the internet |
| Usage Data | how you use our website products and services, the full Uniform resource location (URL), to through and from our site (including date and time), download errors, length of visit to certain pages, page interaction information, methods to browse away from the page and any phone numbers you use to call customer services |
| Marketing and Communications Data | your marketing preferences from us and our third parties and your communication preferences |
4.2 We will collect the information below in different ways depending on how you decide to contact us.
Direct - where you have come to 21Finance directly through our website.
Information provided when you apply for any of our products or services
Information provided when you use any of our online forms
Information provided or that we collect when using our website
Information provided when communicating with us in writing, email, or phone
Information we obtain when you engage with us across social media platforms
Third Party – where a broker has introduced you to 21Finance or a third party is acting on your behalf and we have authority for them to act:
Information that the third party provides as part of the application process, or on any of our online forms
Information the third party provided when communicating with us in writing, via email, SMS or by phone
Information provided to us on your behalf by your representatives engaging with us for you
Comparison Sites:
Information you have entered on the comparison site as part of the application process
4.3 Special Category data
Data protection law requires us to treat special category data carefully. Special category data includes biometric data whether that be physical, physiological, or behavioural characteristics about you, health data, criminal convictions, and any religious or political data.
We'll only use special category data in the following scenarios:
detecting and preventing financial crime,
comply with guidelines on matters of public health or concern (e.g., Covid-19)
verifying your identity using biometric data; and
making our services accessible to customers.
We will also only process special categories of information where we've obtained your consent or where one of the limited grounds on which we can process special category data applies.
4.4. We do not monitor your use of the Internet, but we do use cookie technology to monitor your use of 21Finance. This information is not stored alongside your personal data and will only be used on an anonymous, aggregated basis. We may process your personal data in conjunction with the documents and forms downloaded in order to maintain and improve the facilities we offer and to send you alerts about important updates to such content.
5.1. We may on occasion obtain information from other sources, this helps us to offer you our products and services and to operate our platform. This will, on occasion, include personal information and may be obtained from sources such as:
Our group companies
Companies that introduce you to us
Credit Reference Agencies
Comparison Websites
Social Networks
Fraud Prevention Agencies
Public Information services such as Companies House
Land Registry
Government Agencies
Law Enforcement Agencies
6.1. The General Data Protection Regulation states that we can only use personal information if we have a genuine reason to do. This includes providing it to third parties outside of 21Finance Ltd.
21Finance will only use your personal information for one of the following reasons
To fulfil a contract, we have with you
When it is our legal duty
When you consent to us
When it is in our legitimate interest
A legitimate interest is when we have a business or commercial reason to use your information.
Below is a list of all the ways in which we can use your personal information and the reason we rely on to do so.
| What we use your personal information for | When we use it | Our legitimate interests |
|---|---|---|
| To provide an initial quotation when applying for a Mortgage /Insurance Cover | Our legitimate interest | Ensuring customers have a clear understanding of the product they may be accepted for without having a detrimental effect on their credit rating |
| To manage our existing relationship with you, your business, or businesses | Fulfilling Contracts | N/A |
| To manage the products and services you have with us | Fulfilling Contracts or consent | N/A |
| To keep you updated about our products and services | Fulfilling Contracts or consent | N/A |
| To keep you updated about our products and services | Our legitimate interest or consent | Keeping new/existing customers up to date with the products and services that have and with other products and services we offer |
| To develop and test new and existing products and analyse how customers use our products and services | Our legitimate interest or consent | Identifying key/relevant customer groups and their needs and preferences, developing appropriate products and services, whilst also ensuring that when we contact customers and make suggestions, we can continue to improve our customers' experience |
| To develop and carry out marketing activities | Our legitimate interest or consent | Keeping new/existing customers up to date with the products and services that have and with other products and services we offer |
| To provide guidance and information about our products and services | Our legitimate interest or consent | Being efficient as to how we fulfil our legal duties, including supporting those under disadvantage of any sort and what is right for customers |
| To improve, develop and manage our brands, products, and services | Our legitimate interest or consent | Developing products and services, looking at changes and who we will provide them to |
| To be able to work with other companies that provide services to us and our customers | Fulfilling Contracts | N/A |
| To operate and provide mortgages and insurance services | Fulfilling Contracts | N/A |
| To handle payments received from and provided to customers | Fulfilling Contracts | N/A |
| To apply charges, fees, and interest due on customer accounts | Fulfilling Contracts | N/A |
| To recover and collect money that is owed to us | Fulfilling Contracts | N/A |
| To detect, investigate, report, and seek to prevent financial crime | Our Legal Duty | N/A |
| To control risk for us, our firm, and our customers | Our legitimate interest and our legal duty | Developing products and services, looking at changes and who we will provide them to, ensuring we treat customers fairly that apply to us and customers |
| Sharing relevant information in respect of sale of the company or any part of the business | Our legitimate interest | Complying with our diligence requirements and legal obligations |
| To obey laws and regulations that apply to us | Our Legal Duty | N/A |
| To respond to complaints and look to resolve them | Our Legal Duty | N/A |
| To run our business in an efficient and proper way | Our Legal Duty | N/A |
| To exercise our rights set out in agreements or contracts | Fulfilling Contracts | N/A |
| Statistical analysis and research | Our legitimate interest | Developing products and services that promote responsible lending and promoting products to interested parties |
2.1. 21Finance Ltd (incorporated in England and Wales: Co. No. 12347126) has its registered office at 12 Hemlet Row, London, EC1V 3QJ
We sometimes use systems to make automated decisions using the personal information we have from you and other sources. Automating decisions allows us to make consistent and efficient decisions regarding the products and services we offer. These automated decisions can affect the products and services we may offer you now or in the future, or the price that we charge you for them.
Below are details of the automated decisions we make which are necessary for entering into or performing a contract:
Automated DecisionWhat Automation Occurs
Pricing
Where you have requested a mortgage/Insurance cover, we will decide what rate of interest to charge based on what we know about you from your application and other sources.
Tailored Products & Services
We may place customers in or monitor certain customer groups – who have similar characteristics. We use this to learn about customer needs and wants so we can make better and more informed decisions. This also helps us tailor our products and services to our customer's needs.
Detecting Fraud
We use your personal information to monitor and assess if your account is being used or suspected to be used for fraud or money laundering. We look for traits adopted by fraudsters or look for trends of activity that do not match your usual activity.
Operating Accounts
When you apply for an account, we will check that the product or service is suitable for you. We will also check that you meet the requirements to open an account or receive the product or service applied for.
Account Lifecycle Management
When you have a mortgage/insurance cover arranged through 21Finance, we will periodically assess the performance of your products. Dependent upon the assessment outcome this may result in us contacting you to further understand your current situation.
We will hold your personal information for as long as you have a relationship with us, e.g., you have applied for a product or you are an existing customer of ours, and for a period of time after our relationship ends e.g., your application was declined, you have closed your account. How long we hold your information depends on the nature of our relationship, the type of information and the purposes for which we hold it.
The information we will retain will be such that helps us to:
9.1. We may share your information with some of our business partners, service providers and subcontractors in connection with the performance of any contract we enter with you or them.
9.2. We may also disclose your information to third parties where you have consented for us to do so, where we are under a legal, regulatory, or professional obligation to do so, where we need to enforce or apply our various terms, policies and other agreements, or if it becomes necessary to protect the rights, property or safety of 21Finance, our customers or any other person.
9.3. If we merge, re-organise or transfer all or part of our business, we may disclose the information we hold about you to successors (and potential successors) of the business.
9.4. If we refer any dispute between us to the ODR Platform http://ec.europa.eu/consumers/odr, and/or we agree to engage in any alternative dispute resolution ("ADR") procedure with you through the ODR Platform, then to the extent that your personal data is relevant to the dispute we may disclose it to the European Commission, as operator of the ODR Platform, and to any ADR provider appointed to deal with the dispute.
You may have some or all the following rights dependent upon how and why your information was collected and how we are using your information:
There may be regulatory or legal reasons why we cannot satisfy your requests, but we will advise you of this when a request is made.
For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner's Office (ICO).
11.1. All personal data provided by you during registration onto the Platform, along with details of your download history, can be accessed via 'My Account'.
11.2. If you wish to make a data subject access request, please do so in writing, sent to the email or postal address shown below, clearly marking your correspondence as a subject access request.
11.3. We do not normally charge for subject access requests unless they are 'manifestly unfounded or excessive (e.g., repetitive). We will respond to your subject access request within one month of receiving it. In the unlikely event that your request is particularly complex, a further two months may be required but we will keep you informed if this is the case.
12.1. We use the following cookies: 12.1.1. Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website. They do not gather information about you that could be used for marketing purposes or remembering where you've been on the Internet. 12.1.2. Analytical/Performance cookies: They allow us to collect information about how you use our website, such as, how you move around our website and if you experience any errors. These cookies do not collect any information that could identify you; all the information collected is anonymous and is only used to help us improve the way our website works, understand what interests our users and measure how effective our advertising is. 12.1.3. Functionality cookies: These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences and improve your visit. 12.1.4. NextRoll and our advertising partners use cookies and similar technologies on this site and around the web that collect and use personal data (e.g., your IP address) to select and deliver measurable personalised advertising from this site and other advertisers in NextRoll's network, as well as to analyse and understand your use of our websites using NextRoll's services. By clicking "Allow", you consent to the placement and use of cookies and similar technologies by NextRoll and its advertising partners. If you select "Reject", NextRoll will not serve you personalized advertising. You may still receive advertising that is not targeted or is served by other third parties that are not affiliated with NextRoll. If you "Allow" now, you have the right to withdraw your consent at any time. To manage NextRoll's partners and learn more,visit https://d.adroll.com/consent/choices. 12.2. Generally, cookies that are strictly necessary for the operation of the website will expire when you leave the website. Other cookies may be more permanent or not expire unless you actively delete them.
We carry out credit and/or identity checks when you apply for a product or service. We use CRAs to help us with this.
If you use our products or services, from time to time we may also search for information that the CRAs have about you, to help us manage those accounts.
To do this, we will supply your personal information to CRAs and FPAs and they will give us information about you. This will include information about your financial situation and financial history. CRAs and FPAs will give us publicly available information about you (including information from the electoral register) and privately held information which will include your credit history, your current financial situation, financial history information and fraud prevention information.
When we use your information and share it with CRAs and FPAs, we do so as a necessary step to assess whether or not we can enter into a contract with you. Where your loan application is approved and you choose to enter a loan through 21Finance, it will continue to be necessary for us to carry out these checks from time to time to perform the contract we have with you.
We will use the information that we receive from CRAs and FPAs to:
When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders and other similar companies or organisations. When FPAs receive a search from us they will keep a log of the searches that we have carried out, but this will not be shared with any CRAs.
If you are making a joint application or tell us that you have a spouse or financial associate, we will link your records together, you should make them aware of how their personal information will be used by us before you complete the application. In addition, you should both also be aware that CRAs will also link your records together and these links will remain on both of your files until an approved request is received by the CRAs confirming that the financial relationship no longer exists.
We will continue to exchange information about you with CRAs and FPAs while you have a relationship with us. We will also inform the CRAs once you have finished repaying a loan with us. If you borrow money through 21Finance and do not make all your repayments in full and on time this information will be shared with CRAs who will record that information as part of your credit history. It is possible that the CRAs will then share this information with other organisations that have a relationship with them.
If you give us false or inaccurate information or if we suspect or identify fraud, we will record this and will also pass this information to FPAs and other organisations involved in crime and fraud prevention, including law enforcement agencies.
We and other organisations may access and use this information to prevent fraud, money laundering or other criminal activity. If we, or an FPA, determine that you pose a fraud or money laundering risk, we may refuse to provide the products and services you have requested, or we may stop providing existing services to you.
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years and may result in other companies or organisations refusing to provide services, financing, or employment to you.
If you have any questions about this, please contact us at hello@21finance.com
The links below will provide you with further information on
When you register with 21Finance we'll give you the option to opt-out of receiving different categories of messages from us. These categories relate to letting you know about new products, promoting our existing products and general marketing.
We only send these messages if there is something worthwhile to tell you about. If you don't want to receive these messages you can log into your account and change your settings.
We'll still send you messages relating to 21Finance products you have where this is necessary to provide you with good service. There also may be some messages that we're required by law or regulation to send you even if you ask us not to.
15.1. To contact 21finance about anything to do with your personal data and data protection, including to make a subject access request, please use the following details and we will respond as soon as possible:
We hope that we can resolve any query or concern that you raise about our use of your information, so please get in touch with us on the above details if you have any questions or issues with this privacy policy or with how we are using your personal information in general.
If you are dissatisfied with any response you receive from us, you may refer your complaint to the ICO. Find out more on their website.
We may change our Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection. Any changes will be notified to you the first time you log in to 21finance after the changes have been made.