UK data protection law gives individuals a set of rights over their personal data. These apply to the people connected to a borrowing company, such as directors and contacts, because that is whose personal data we process. Some rights are absolute and some can be limited where another law applies.
Your main rights
- Be informed about how your data is used, through our privacy notice.
- Access a copy of the data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure in certain circumstances.
- Restriction of processing while a query is resolved.
- Portability of data you provided, in a reusable format, where it applies.
- Object to certain processing, including direct marketing.
- Rights related to automated decisions, explained separately.
Where rights have limits
Some rights do not apply when we must keep data to meet a legal obligation, such as anti-money-laundering records, or to defend a legal claim. In those cases we will explain why a request cannot be fully met.
How to use a right
You can exercise any of these by contacting our data protection team. We will normally respond within one month. If you are unhappy with our handling, you can complain to the Information Commissioner's Office.
See also: Glossary: vulnerability, Glossary: what is a data controller? and A plain-English glossary of business-lending terms.