Data Privacy Statement

Catfoss Finance Limited may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

Who we are

Catfoss Finance Limited are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy policy statement.

Head Office Address: Elite House, Spellowgate, Driffield, YO25 5UP
Telephone Number: 01377 258067
ICO Registration Number: Z5552412
Company Number: 04218973
For information on all the activities we’re licensed to carry out please visit:
https://ico.org.uk/ESDWebPages/Entry/Z5552412

Why we need Customer Information

We need to know your personal data to provide you with the goods/services you are applying for. If you do not provide this information, then we will be unable to provide the goods/services advertised. We will not collect any information from you that we do not need to provide and oversee the goods/services you are applying for.

Our Legal basis for processing the data is one or more of;

–  The data subject has given consent to the processing of their personal data for one or more specific purposes.
and/or
–  The processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering a contract with them.

The legitimate interests pursued by the controller

Our legitimate interests include operating our business, fulfilling contractual obligations, ensuring system and data security, preventing fraud, supporting audit and compliance activities, and protecting TransUnion data. These interests are balanced against the rights and freedoms of individuals, with appropriate safeguards in place.

What we will do with customers information

All the personal data we hold about you will be processed by our staff and systems in the United Kingdom. Your information may be passed to third parties, where required, to provide the goods/services you have applied for, as well as where there is a legal obligation for us to provide third parties with this information e.g. The FCA or The Police.

We will use your data to process your application for goods/services applied for. This processing will include some or all the below:

Credit Reference and Affordability Checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

• Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority FCA Firm Reference Number: 742313
• TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority FCA Firm Reference Number: 805757

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

• Creditsafe Privacy / Transparency Notice:
  Transparency Notice | Customers & Suppliers
• TransUnion CRAIN (Credit Reference Agency Information Notice):
  https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
• TransUnion Bureau Privacy Notice:
  https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

• We will use this information to:
• – Assess your creditworthiness and whether you can afford to take the product;
• – Verify the accuracy of the data you have provided to us;
• – Prevent criminal activity, fraud, and money laundering;
• – Trace and recover debts; and
• – Ensure any offers provided to you are appropriate to your circumstances.

• If you are an owner, director, or partner in a business, we may also check on your business. We will also check on any proposed guarantor, so you must have their permission to disclose their information.

• Before we provide services, goods, or financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you.

Who the customers data will be shared with

We provide personal information to our third-party IT system providers who maintain our lending platforms, and we may pass your information to our technology providers, and other selected service providers for business continuity purposes only.

Our IT services providers are: “Reality”.

Data will be shared with third parties for the purposes of fraud prevention.

We sometimes need to share the personal information we process with the individual themselves, the customers broker, and our funder. Where this is necessary, we are required to comply with all aspects of the Data Protection Act 2018.

We are a credit lender not a broker.

Whether the data will be sent overseas

Catfoss Finance Limited will never send customer data outside the Uk and/or European Economic Area (EEA).

Customers Rights under UK data protection law in relation to your personal data

As a customer of Catfoss Finance Limited you have the following rights related to your data and how it’s processed:

• The right to be informed – this means we must provide, at the point of collecting the data, a privacy or verbal notice informing the individual of how their personal information will be used.
• The right of access – You have the right to request a copy of the personal data we hold about you and information about how it is used. This information must be provided free of charge.
• Right to rectification – You have the right to request that inaccurate or incomplete personal data is corrected.
• The right to erasure (“right to be forgotten”) – You have the right to request that we delete your personal data where there is no lawful reason for us to continue processing it.
• Right to restrict processing – You have the right to request that we limit how we use your personal data in certain circumstances.
• Right to data portability – You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer it to another organisation where technically feasible.
• Right to object – You have the right to object to the processing of your personal data where we rely on legitimate interests or where data is used for direct marketing.
• Rights related to automated decision-making or profiling, including meaningful information about the logic involved and potential consequences for the data subject– We may use automated systems and tools to support certain business processes, such as risk assessment, fraud prevention, affordability checks, identity verification, or record management.

These tools may analyse personal data using predefined criteria or rules to generate indicators, scores, or recommendations. However, we do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing. Any such decisions are subject to meaningful human review.

The use of these tools may influence the speed or level of review applied to an application or request, but individuals will not be subject to automatic rejection or adverse decisions without human involvement.

For further information on how to action any of these rights please contact the data protection officer at gareth@catfossfinance.co.uk

 

How customers make a complaint

Should you wish to make a complaint, you can do so by:

• Letter – Catfoss Finance Limited, Elite House, Spellowgate, Driffield, YO25 5UP
• Email – gareth@catfossfinance.co.uk
• Telephone – 01377 258067

 

The right to lodge a complaint with the Information Commissioner’s Office (ICO) or another supervisory authority. 

You have the right to complain to the UK Information Commissioner’s Office (ICO) or another relevant data protection authority if you are dissatisfied with how we manage your personal data. Their address is:Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

 

What we do to keep customers data secure

We are committed to ensuring that your information is secure to prevent unauthorised access or disclosure we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

 

The data retention period (how long data will be kept).

We keep personal data only for as long as necessary for its purpose and to meet legal or regulatory obligations. Data used for credit reference or affordability checks is retained only for as long as required and then securely deleted