This Privacy Notice lets you know what happens to any Personal Data that you give to us, or any that we may collect from or about you specifically in relation to the Start Up Loan product.
1. Who we are and who is responsible for your Personal Data
1.1 Fashion Angel (the Company), 62 Sutton Crescent, Barnet, Herts, EN5 2SS. Fashion Angel is a credit broker authorised by the Financial Conduct Authority (FCA), not a lender.
Fashion Angel is an official Delivery Partner for The Start Up Loans Company. The Start Up Loans Company is a wholly owned subsidiary of British Business Finance Ltd which itself is a wholly owned subsidiary of British Business Bank plc.British Business Bank plc is a development bank wholly owned by HM Government which is not authorised or regulated by the Prudential Regulation Authority (PRA) or the Financial Conduct Authority (FCA). British Business Bank plc and its subsidiary entities are not banking institutions and do not operate as such.
1.2 This Privacy Notice explains how we use the Personal Data that we receive, collect or generate in relation to the Start Up Loan product and through our Start Up Loan webpage https://fashion-angel.co.uk/fashion-business-start-up-loans
1.3 In this Privacy Notice:
“Personal Data” means any data which relates to a living individual who can be identified from that data or from other information which is in the possession of, or is likely to come into the possession of, Fashion Angel (or its representatives or service providers). In addition to factual information, it includes any expression of opinion about an individual and any indication of the intentions of the Company or any other person in respect of an individual.
2. What information we collect about you
2.1 Many of the services offered by the Company require us to collect Personal Data about you in order to perform our services, evaluate our marketing activities and offer our products and services.
2.2 We may collect and process the following Personal Data about you:
A. Information that you provide to us.
We may collect personal data about you (including your name, address, telephone number, email address, age, image/photograph, financial information, work and education history, gender and ethnicity) from:
We have set out below a description of the types of information about you which we may collect and process in different situations when you interact with us. The nature of our relationship with you will determine the kind of Personal Data we might ask for;
B. Information that we collect or generate about you. This includes (by way of non-exhaustive list):
C. Information we obtain about you from other sources:
In addition to the categories of Personal Data described above, we will also process further anonymised information and data that is not processed by reference to a specific individual.
3. How we use your information
3.1 We will process Personal Data primarily to provide you with a service or product you have requested. However, there may be times when we are required to process Personal Data that is not part of our core business, for example where we have to comply with legal obligation or a public duty required of us by law.
3.2 Your Personal Data may be stored and processed by us in the following ways and for the following purposes:
A. Maintain and improve customer experience
B. Let people know about products and service updates
C. Market products and services
Once you have given your consent to marketing, we may display offers, promotions, products or services on the Site which we think will interest you based upon the information we collect from your cookies. We will keep your contact details for marketing purposes for as long as we have your consent to do so or until you tell us that you no longer wish to receive marketing materials by email, post or telephone. You may withdraw your consent to direct marketing by any means and at any time by contacting us using any of the methods detailed in the “CONTACT US” section below. You can also unsubscribe from the newsletter by clicking on the ‘unsubscribe’ link included at the bottom of the relevant email
Please note that we may also use your Personal Data in case studies that we produce which will then be used for advertising and marketing purposes. We will obtain your consent to do this in advance.
D. Deal with complaints
E. Fulfil our legal obligations
F. Product and service designs and improvement
G. Equality and monitoring purposes
H. Maintain our business processes
I. Comply with internal policies
J. Monitor our copyright materials
K. Legal rights
L. Credit worthiness checks
We may use the information you provide to us to perform a credit check. In order to do this we may share your information with credit reference agencies. We will use the information we receive from credit reference agencies to:
– assess your application for credit and/or;
– check details on applications for credit and credit related or other facilities;
– verify your identity and, the identity of your spouse, partner or other directors/partners but only if they are a party to your application;
– undertake checks for the prevention and detection of crime, fraud and/or money laundering; and
– undertake periodic statistical analysis or testing to ensure the accuracy of existing and future products and services.
M. Credit processing
If you borrow and do not repay in full and on time, the credit reference agencies will be advised and steps will be taken to trace you and to recover the debt owed either by the finance partner who provided the loan or through a contract debt collection agency.
We may make periodic searches of our own group records and at credit reference agencies to manage your account, including whether to make credit available or to continue or extend existing credit.
WILL WE SHARE YOUR INFORMATION WITH ANYONE ELSE?
We may share your information only if:
EU or non-EU
Digital forms & survey
The Enterprise Fund Limited (trading as GC Business Finance)
Data hosting / CRM
Start Up Loans Company
4. The legal bases for our processing of your Personal Data
4.1 We make sure that our use of Personal Data complies with law and the law allows us and requires us to use Personal Data for a variety of reasons, for instance where:
A. we need to do so in order to perform our contractual obligations with you (or any organisation with which you are associated);
B.we have obtained your consent;
C. we have legal and regulatory obligations that we have to discharge;
D. we may need to do so in order to establish, exercise and/or defend our legal rights or for the purpose of legal proceedings;
E. the use of your Personal Data is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the Company; and/or
F. the use of your Personal Data as described is necessary for our legitimate business interest (or the legitimate interests of the Start Up Loans Company), such as:
– allowing us to effectively and efficiently manage and administer the operation of our business;
– maintaining compliance with internal policies and procedures;
– monitoring the use of our copyrighted materials; and/or
– enabling quick and easy access to information on our services and products.
5. Sensitive Personal Data that we collect about you
5.1 Certain forms of “sensitive personal data” are subject to specific protection or restriction by law in certain territories, including the EU. For these purposes, “sensitive personal data” is data relating to: racial or ethnic origin; criminal activity or proceedings in certain countries; political opinions; religious or philosophical beliefs; trade union membership genetic data, biometric data, data concerning health or sex life or sexual orientation. We will only process your sensitive personal data if permitted by law and only if one of the following conditions is met:
A. you have given explicit consent in writing to the processing of the data;
B.the processing is necessary for the prevention or detection of crime or acts of dishonesty, malpractice or other improper conduct; or
C. there is any other legal or regulatory justification for processing.
6. How we may use automated decision making
6.1 We sometimes make decisions about you using only technology, where none of our employees or any other individuals have been involved. For instance, we may do this to decide whether to offer you a product or service.
6.2 We’ll do this where it is necessary for entering into or performing the relevant contract, is authorised by laws that apply to us, or is based on your explicit consent. However, you have the right to appeal an automated decision. You may do so by contacting us, using the contact details shown below.
7. How we safeguard your information
7.1 We will keep Personal Data secure by taking appropriate technical and staff measures to protect it against the unauthorised or unlawful processing and against accidental loss, destruction or damage.
7.2 We have extensive controls in place to maintain the security of our information and information systems. Client files are protected with safeguards according to the sensitivity of the relevant information. Appropriate controls (such as restricted access) are placed on our computer systems. Physical access to areas where Personal Data is gathered, processed or stored is limited to authorised employees.
7.3 As a condition of working with us, Fashion Angel third party providers are required to follow all applicable laws and regulations, including in relation to data protection laws. Access to sensitive Personal Data is limited to those who need to it to perform their roles. Unauthorised use or disclosure of confidential client information is prohibited and may result in disciplinary measures.
7.4 When you contact a Fashion Angel representative about your file, you may be asked for some Personal Data. This type of safeguard is designed to ensure that only you, or someone authorised by you, has access to your file.
7.5 We review this Privacy Notice and our other data protection policies annually to make sure they are appropriate and up to date. We also carry out regular audits to monitor our security policies and procedures and revise them if necessary.
8. How long we keep your information
8.1 How long we will hold your Personal Data for will vary and will be determined by the following criteria:
A. the purpose for which we are using it – the Company will need to keep the data for at least as long as is necessary for that purpose; and
B. legal obligations – laws or regulations may set a minimum period for which we have to keep your Personal data.
More information on retention periods for certain types of Personal Data is set out below at paragraph 8.2.
8.2 The following retention periods are applicable for all applicants registered in the Company scheme:
A. Successful Loan Applicant details: a maximum period of six years after you have fulfilled all loan payment obligations;
B. Unsuccessful Loan Applicants details: a maximum of six years after loan application rejection;
C. Mentor Details: a maximum of 2 years after a request to take them off the scheme.
9. Where we transfer your information to
9.1 We will not routinely transfer your Personal Data to, or store it, outside the European Economic Area (“EEA”).
9.2 If we do transfer your Personal Data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. This may be done in a number of different ways, for instance:
– the country that we send the data to might be approved by the European Commission as offering an adequate level of protection for Personal Data;
– the recipient might have signed up to a contract based on “model contractual clauses” approved by the European Commission, obliging them to protect your Personal Data;
– where the recipient is located in the US, it might be a certified member of the EU-US Privacy Shield scheme; or
– in other circumstances the law may permit us to otherwise transfer your Personal Data outside the EEA.
9.3 The Personal Data that we collect from you may also be otherwise transferred to, and stored at, destinations outside the EEA. It may also be processed by individuals operating outside of the EEA who work for one of our suppliers.
9.4 In all cases, however, we will ensure that any transfer of your Personal Data is compliant with the applicable data protection law.
9.5 You can obtain more details about the protection given to your Personal Data when it is transferred outside the EEA (including a copy of the standard data protection clauses which we have entered into with recipients of your Personal Data) by contacting us through the methods listed in the ‘How to contact us’ section below.
10. Who we share your information with
10.1 We may share your Personal Data within the Start Up Loans Company as part of British Business Bank group of companies for the purposes described above. You can find out more about British Business Bank by visiting https://british-business-bank.co.uk/.
10.2 We may also share your Personal Data outside of the British Business Bank group with the following third parties:
11.1 We may use your information to provide you with marketing information that you request or that we feel may interest you by post, email and/or telephone (including SMS) as follows:
– If you are an existing customer or have taken steps to become a customer by using the Website or contacting us, we may contact you by post, email and/or telephone (including SMS) with information about products and services which are similar to those we previously provided to you, unless, at the time we collect your contact information, you have indicated that you do not want to receive marketing information; or
– If you are a new customer, we may contact you by post, email and/or telephone (including SMS) if you have consented to receiving such information.
11.2 We will not pass your information to third parties for their marketing purposes, but if you have indicated that you wish to receive promotional material relating to events or promotional offers, that we have negotiated on your behalf, with our preferred partners then we may contact you by post, e-mail and/or telephone (including SMS) with such promotional material and offers.
11.3 We operate an integrated communications programme, which means we use your Personal Data to communicate with you through several different channels; including direct mail and email. Our aim is to keep you up-to-date with information to help you run your business; however, if you feel you no longer wish to receive communications from us, you are able to ‘opt out’ of them individually at any time. Please see 11.4 below for information about how to do this.
11.4 If you do not want us to use your information for marketing purposes, please indicate your preference via the relevant boxes on any forms you submit when you are providing your contact information. You may also change your preferences by clicking on the relevant link at the bottom of any marketing emails you may receive. You may also ask us at any time not to use your information for marketing purposes by contacting us via the methods listed in the ‘How to contact us’ section below.
12. Confidential information
12.1 Please note that under the Freedom of Information Act 2000, we are only permitted to protect information that is actually confidential in law and where, if we were to disclose it, we could be sued for breach of confidence.
12.2 Information you give us which you may consider confidential, or may mark as confidential, may in fact not be confidential in law. However, in respect of any information we receive from you that is truly confidential, we will take steps to ensure it remains confidential.
12.3 Unauthorised disclosure or misuse of Personal Data by staff will lead to disciplinary action.
13. Your rights under data protection legislation
13.1 You have a number of legal rights in relation to the Personal Data that we hold about you. These rights include:
13.2 You can exercise your rights by contacting us using the details set out in the “How to contact us” section below.
14. Changes to this Privacy Notice
14.1 We may make changes to this Privacy Notice at any time by sending you an email with the modified terms or by posting a copy of them on our Website.
14.2 Any changes will take effect 7 days after the date of our email or the date on which we post the modified terms on the Website, whichever is earlier. Your continued use of our Website after the expiry of this period means that you agree to be bound by the modified Privacy Notice.
15. How to contact us
15.1 Questions, comments or requests, relating to this Privacy Notice or the Start Up Loans scheme, can be directed to:
Phone: 0208 216 3411 (9.30am – 5.30pm, Monday to Friday)
Post: Fashion Angel, 62 Sutton Crescent, Barnet, EN52SS
15.2 If you have any questions or comments regarding how we handle your Personal Data, please contact our Data Protection Officer Alison Lewy at:
Email Address: email@example.com
Postal Address: 62 Sutton Crescent, Barnet, EN52SS.
15.3 In the event that you would like to lodge a complaint, relating to our use of your personal data, you can do so by writing to the Data Controller, Fashion Angel, 62 Sutton Crescent, Barnet, EN5 2SS or at firstname.lastname@example.org. We will aim to respond within 30 days. If you are unsatisfied with how a complaint has been handled, you can log a complaint to the ICO or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113 (9am – 4.30pm, Monday to Friday)
Keep updated with industry news, events and special offers