Checkout

We take our customers' and website users' privacy very seriously, and we take appropriate security measures to protect your privacy. This Privacy Policy describes how we protect and manage any Personal Data that you provide to us or that we hold about you, including how we collect, process, protect, and share that data.

Who we are

We are Credit Reporting Agency Limited, and our address is Trevithick House, Trevissome Park, TR4 8UN in Truro, Cornwall.

Some of our Most Important Promises

1. We will never sell your personal information or email address to anyone for marketing purposes.
2. We will never reveal your personal information to anyone unless we have your permission or are required to do so by a court order. or if we are required to do so as a result of a police or fraud prevention agency investigation into suspected fraudulent use of your personal data.
3. We do not store the personal information you provide when you use our Credit Score Estimator service
4. You can change your mind about receiving our marketing emails at any time. Every marketing email we send includes a simple one-click opt-out option.

How We Get Your Personal Information

You Provided Information

When you register to use our services on our website, you provide us with Personal Data. Your name, current and previous addresses, date of birth, email address, payment/card information, and password are all included. We collect and use this information to manage, provide, and administer our credit reporting services to you.

We may also keep information from any correspondence you have with us via post, email, or Secure Message. We may also record telephone calls, but only if you are informed at the outset of the call. If we do not record a phone conversation with you, we may keep brief notes on the contents of your call in our files.

We collect information about the device you use to access our services, your location, and your IP address each time you visit our website.

We Gather Information from Other Sources

You agree to our Terms and Conditions when you register to use our services. By agreeing to our Terms and Conditions, you agree to appoint us (Credit Reporting Agency Limited) as your attorney for the specific purpose of exercising your statutory rights to obtain details of all information held about you at any or all UK Credit Reference Agencies and to obtain copies of all information held about you at any or all UK Credit Reference Agencies. when requested by you to act on your behalf, to dispute items at any or all UK Credit Reference Agencies

Crediva, Equifax, Experian, and TransUnion are the credit reference agencies in the United Kingdom.

We supplement the information you provide with information obtained from third parties, such as the Royal Mail Postcode Address File, which helps confirm your address and converts it into a format that allows us to more easily retrieve your Credit Report from the Credit Reference Agencies.

We must provide the Credit Reference Agencies with your name, current and previous addresses, and date of birth in order to obtain your credit report. In exchange, the Credit Reference Agencies provide us with information about you that would normally be provided to a lender if they searched you. That information was obtained by the Credit Reference Agencies from a combination of public (such as Electoral Roll information and Court Information about judgments and insolvencies) and private (such as your account payment history from lenders or others, which they obtained with your consent) sources.

The Credit Reference Agencies are reputable businesses that operate in accordance with the General Data Protection Regulation (UK GDPR), but we cannot guarantee the accuracy or completeness of the information provided on your Credit Report. nor for the Credit Reference Agencies' data processing activities, over which we have no influence or control.

The Personal Data that each Credit Reference Agency has on file for you is governed by an independent Privacy Policy published by that Credit Reference Agency.

We also get postcode-level data, also known as geodemographic data, from Cameo (provided by Eurodirect Marketing, which is part of the TransUnion group) and Censation (provided by AFD Software). This data does not include any of your personal information.

Genuine Interest

We have a legitimate interest in processing your Personal Data because when you sign up to use our services, you appoint us as your attorney to exercise your statutory rights to obtain information held about you from Credit Reference Agencies. and the processing of this data is required in order for us to provide credit reporting services to you and to act on your behalf to dispute items on your Credit Reports when you request it.

How We Use Your Personal Information

Your Personal Data is used to manage and administer your account with us. Your IP address, device information, and location are used to help identify you, prevent fraudulent use of our services, diagnose server problems, and administer our website.

Other than for necessary purposes and fraud prevention, we do not share your Personal Data with any third party. For example, when we search you, we must provide the Credit Reference Agencies with your name, address, and date of birth. We also need to provide your email address to trusted service providers so that we can email you or confirm the deliverability of your email address on occasion. We emphasize that we will never, at any time, sell your Personal Data or email address to anyone for marketing purposes, nor will we allow any third party to use your email address for any other purpose.

The information you provide when using our Credit Score Estimator Service is used to calculate the scores you see and is not saved.

We share information about you and your use of our services (but not your Credit Report data) with trusted service providers and fraud prevention agencies to help them and us detect abuse and fraud. prevent and address illegal or suspected fraudulent internet activity on our own websites as well as websites owned and operated by third parties We have put in place security measures to protect the information under our control from loss, misuse, and alteration. These include the creation and use of passwords, strong encryption, and computer firewalls to prevent hacking. Because no data transmission over the internet can be guaranteed to be completely secure, we cannot guarantee the security of your Personal Data while it is in transit between you and us. We may have to suspend services from time to time while we investigate any attempted breach of security. Under the Terms and Conditions you agree to follow when using our services, you are required to report any suspected breach to us immediately. We also take reasonable security measures to safeguard your Personal Data while it is in storage.

Your payment/card information is used to manage your subscription with us. In relation to the processing of your subscriptions via continuous credit card authority, PayPal, or Direct Debit, we act as controller and data processor.

We commit to protecting your Personal Data at all times in accordance with our terms and conditions and in accordance with the requirements of the General Data Protection Regulation (UK GDPR) concerning data protection.

Do We Market to You Using Your Personal Information?

Any information you provide will not be used for marketing purposes by a third party. Only if you agree when you register to use our services, we may send you occasional email messages to alert you to known or potential changes to your Credit Report that we believe you should be aware of. whether you are a current or prospective subscriber to our services You can opt out of receiving such messages from us at any time by clicking on the appropriate link at the bottom of each email.

Authentication - Endeavouring to Ensure that We Only Provide Your Personal Data to You

If you use our instant, online authentication system, we will ask you questions based on your credit report, among other things. Your responses are saved and used for authentication processing, monitoring, and fraud prevention.

We may also use a Credit Reference Agency's authentication services to supplement our own authentication processes. In such instances,

• A credit reference agency search will be conducted for the purpose of verifying your identity.
• In order to verify your identity, the Credit Reference Agency may cross-reference the information you provide with any information in any database (public or private) to which the Credit Reference Agency has access.
• The Credit Reference Agency will keep a record of the search, and
• We will inform you of the Credit Reference Agency we used for this purpose.

We may need to take additional steps to confirm your identity from time to time. The reason for this is always to ensure that we only release your Credit Report to you. The information we need will differ depending on the scope of our investigation. For example, we may request original bank statements, credit card statements, and utility bills addressed to you at your current and previous addresses, as well as government-issued identification such as a copy of your passport or driver's license. We do not extract any information from the documents you provide; all of your information is kept private while being processed and is returned to you after being used to verify your addresses.

Postcode-Based and Other Aggregated Data

Our website also collects demographic and profile data. This data is not kept on an individual basis. We use this information to personalize your experience on our site by displaying content that we believe you might be interested in and displaying the content based on your preferences. We may also use your Personal Data for credit scoring and other statistical analysis, but only in aggregated form with the personal data of many other customers, and in such a way that the results of our analysis can never be used to identify you.

We do not pass your personal information to any third party except when under compulsion of law or with your consent to do so

Other Websites' Links

Links to other websites can be found on our website. Credit Reporting Agency Limited is not liable for the privacy practices or content of third-party websites.

Information Sharing

We will keep your personal information private. With the exception of the following, we will only disclose your information to other third parties as explained in this Privacy Policy, or with your authority or express consent.

Third-Party Categories

• Compliance by regulatory authorities with all legal and regulatory issues and disclosures;
• Fraud investigation and prevention agencies;
• Email or mail service providers who provide us with a fulfillment service on the condition that they keep information confidential;
• Anyone to whom we may delegate our rights and obligations under any agreement we may have with you; and
• Legal or crime prevention agencies, and/or to comply with any regulatory request if we have a legal obligation to do so.

Personal data transfer outside of the European Economic Area (EEA)

We currently do not transfer your Personal Data outside of the EEA, except for fraud prevention checks where the receiver has agreed to provide the same or similar protection as we do and to only use your Personal Data in accordance with our instructions. If we transfer your Personal Data outside of the EEA in the future for reasons other than fraud prevention checks, we will do so in accordance with the terms of this Privacy Policy. We will ensure that the receiver agrees to provide the same or similar level of protection that we do, and that they only use your Personal Data in accordance with our instructions.

How long do you keep information about me?

We keep data in accordance with our data retention policy. The retention periods correspond to the amount of time we need to keep your Personal Data to manage and administer our services to you. The retention periods vary to take into account our need to meet any legal, statutory and regulatory obligations and can vary for individual customers and for different reasons In general, we do not retain information for any longer than is absolutely necessary. Because your credit report is constantly changing, we consider it out of date when it is one month old, at which point, if there is no dispute or legal challenge, we will delete it. In the absence of compelling reasons, your Personal Data will be removed from our databases within six years of the date your account with us is closed. Our need to use your Personal Data is reassessed on a regular basis in all cases, and information that is no longer required is disposed of.

What happens if Credit Reporting Agency Limited is transferred?

We may, from time to time, expand or reduce our business operations, which may include the sale and/or transfer of control of all or a portion of our company. Any Personal Data you have provided will be transferred along with any part of our business that is being transferred, and the new owner or newly controlling party will, under the terms of this Privacy Policy, be responsible for that part. be allowed to use that information only for the purposes for which it was originally collected by us

If any of your data is to be transferred in this manner, you will be notified in advance and informed of the changes. When contacted, however, you will not be given the option of having your data deleted or withheld from the new owner or controller.

Subject Rights to Data

Subject Access Requests

The General Data Protection Regulation (UK GDPR) gives you the right to access specific Personal Data that we hold about you. This is known as a Subject Access Request. We will respond to any Subject Access Request received promptly, and always within one month of receiving the request and all necessary information from you. Our formal response will include information about the Personal Data that we have on file for you, such as the following:

• We obtained the information from the following sources:
• The purposes for processing the information, and
• Individuals or entities with whom we are sharing information

Please keep in mind that unless you are a registered customer, we are unlikely to have any Personal Data on file for you. If you want to exercise your Subject Access Rights, please log in to our website and send us a Secure Message, stating that you want to exercise your rights under the General Data Protection Regulation (UK GDPR). If you have forgotten your log in information, please click Log In and follow the on-screen instructions to re-issue it.

If you are unable to log in for any reason, you may still exercise your Subject Access Rights by writing to us at the address listed below and providing us with your full name and any previous names you may have used, as well as your current full address. Also, please include any previous addresses you have lived at in the last six years, as well as your date of birth. To ensure that we only reveal your data to you, please send us a photocopy of the details page of your passport or driving license, as well as a copy of a recent bank or credit card statement. together with your email address and mobile phone number so that we may provide the information to you

The right to be corrected

You have the right to obtain from us, without undue delay, the correction of any inaccurate data we have on file for you. You have the right, taking into account the purposes of the processing, to have incomplete Personal Data completed, including by providing a supplementary statement.

Invoking your right to rectification is not an appropriate way to achieve this if the inaccurate data is on your Credit Report. This is because any request to correct Credit Report data that we have:

• will not change the data at the source (i e at Credit Reference Agencies, or at the companies or organizations that supply them)
• would be inappropriate because the Credit Report data we have is an accurate snapshot of the data held at the various Credit Reference Agencies as of the date of the search.

We created our services to assist consumers in identifying and correcting errors on their credit reports. Please log in and send us a Secure Message, and we will advise you on the quickest and most efficient way to correct errors under other laws.

The right to be forgotten

You have the right to immediate erasure of Personal Data concerning you from us. To exercise your right, please log in and send us a Secure Message requesting that we delete your Personal Data. It is important to note that erasing data held by us will not remove your Credit Report data from Credit Reference Agencies. If you exercise your right to erasure directly to a Credit Reference Agency, you will almost certainly be informed that your right to erasure does not generally apply to Credit Report data. as there may continue to be an overriding legitimate ground for this data to be maintained by the agency, which may be claimed by the agency to be in the public interest

If you have recently paid us, we will routinely erase your data upon your request, but no sooner than 120 days after the date of your last payment. This is because we may need your information to defend against any potential claim relating to that payment.

If you have a history of a dispute with us on any matter, including a payment dispute, we will routinely refuse to erase your data on the grounds that it is required by us for the establishment, exercise, or defense of legal claims.

Right to processing restriction

Subject to certain exceptions, you have the right to request processing restrictions from us if any of the following conditions apply:

• You contest the accuracy of the Personal Data and it is restricted until the accuracy of the data is verified;
• The processing is illegal, and you oppose its erasure in favor of a restriction on its use.
• We no longer require the Personal Data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims.
• You have objected to the processing of your Personal Data while we investigate whether there are legitimate grounds to override these objections.

Obligation to notify regarding rectification or erasure of Personal Data or restriction on processing

Unless this proves impossible or involves disproportionate effort, we will communicate any rectification or erasure of Personal Data or restriction of processing described above to each recipient to whom the Personal Data has been disclosed. If you request it, we will provide you with information about those recipients.

Data portability is a legal right.

You have the right to receive your Personal Data that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without restriction from us.

The right to object

You have the right to object to the processing of Personal Data concerning you at any time, on grounds relating to your specific situation. including any personal profiling; unless the processing is required for the performance of a task in the public interest or the exercise of official authority vested in us. We will no longer process Personal Data unless we can show compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the establishment, exercise, or defense of legal claims.

Right not to be subjected to decisions solely based on automated processing

Aside from our online authentication process, which is an essential part of our fraud prevention procedures, we do not engage in any automated processing that could result in an automated decision based on your Personal Data.

Using your legal rights

If you wish to exercise any of the aforementioned Data Subject Rights, please contact our Data Protection Officer at the address listed below.

Information precision

In order to provide the best possible customer service, we must maintain accurate Personal Data about you. We take reasonable precautions to ensure the accuracy of any Personal Data or sensitive information that we collect. We make certain that the source of any Personal Data or sensitive information is clear, and we carefully consider any challenges to the information's accuracy. We also consider when it is necessary to update the information, such as when a person's name or address changes, and you can assist us by informing us of these changes as they occur.

Policy shifts

This Privacy Policy is reviewed on a regular basis. This is done to ensure that we maintain the highest standards while also protecting your privacy. We reserve the right to update, modify, or amend this Policy at any time. We recommend that you review this Privacy Policy on a regular basis to ensure that you are aware of any changes we may have made. We will not materially alter how we use information you have already provided to us without your prior consent or as otherwise permitted by the General Data Protection Regulation (UK GDPR).

If you have a complaint, please contact us.

Our general Complaints Policy is located at the bottom of our Terms and Conditions, but if you have a complaint about the use of your Personal Data or sensitive information, please contact the Data Protection Officer. using the contact information provided at the end of this Privacy Statement

If your complaint is not resolved satisfactorily, you may file a formal complaint with the Information Commissioner's Office (ICO), which can be reached at 01625 545745 or 0303 123 1113. You also have the right to sue the ICO if you believe that your rights under the General Data Protection Regulation (UK GDPR) have been violated as a result of the processing of your personal data. You have the option of appointing a third party to file the complaint on your behalf and to seek compensation.

Choosing not to receive marketing communications

If you do not want to receive future marketing communications from us, you have the following options. Please keep in mind that even if you express a preference not to receive marketing communications, we may still be required to notify you of significant changes to our terms and conditions from time to time.

• You can log in to your account and send a secure message to a professionally trained Credit Analyst.
• You can reach us via email at [email protected].
• You can unsubscribe by clicking the unsubscribe link at the bottom of each email.

Correct/Update

This website provides you with the following options for changing and modifying previously provided information.

• You can log in to your account and send a secure message to a Credit Analyst who has been professionally trained.
• Send an email to [email protected].

Cookies and Their Use

A cookie is a small text file that is saved on your browser, such as Internet Explorer or Chrome.

We use a small number of cookies to help you navigate our website. These are classified as strictly necessary, performance, referral, or advertising cookies. More information is provided below, and you can change your settings by clicking the switch at the top of each section.

Important details

Concerns and inquiries

If you have any questions or concerns about how we may use the Personal Data we hold that are not addressed in this Privacy Policy, please write to:

Officer in Charge of Data Protection
Limited Credit Reporting Agency
Trevithick Residence
Trevissome Park
Truro
Cornwall
TR4 8UN

Alternatively, send an email to [email protected].

Last modified: November 8, 2022