Loans from Hastings Direct - Privacy Notice

Type of Processing	Basis for using personal information	Basis for special categories
To assess your loan application and provide a quote	To enter into or perform a contract	We will not process your special categories of information for this purpose
To verify your identity, carry out fraud, credit and anti-money laundering checks	To enter into or perform a contract	Substantial public interest to prevent or detect unlawful acts
To communicate with you and resolve any complaints that you might have	To enter into or perform a contract We have a legitimate interest (to send you communications, record and handle complaints)	You have given your explicit consent To establish, exercise or defend legal rights
To comply with our legal or regulatory obligations	We have a legal or regulatory obligation	To establish, exercise or defend legal rights
To ensure that we consider any customers who may be in a vulnerable circumstance	We have a legitimate interest (to ensure a consistent service to all of our customers and that all customers are treated equally)	You have given your explicit consent
To provide improved quality, training and security (e.g. through recorded or monitored phone calls to / from us, or customer satisfaction surveys)	We have a legitimate interest (to develop and improve our products and services)	We will not process your special categories of information for this purpose
Managing our business operations (e.g. keeping accounting records, analysing financial results, meeting audit requirements, receiving professional advice, and holding our own insurance)	We have a legitimate interest (to carry out business operations and activities that are necessary for the everyday running of a business)	We will not process your special categories of information for this purpose
For use by the Hastings Group Holdings Limited entities for administration and business improvement purposes including trend analysis, actuarial work, pricing analysis, analysis of customer experience, planning service delivery, product development, risk assessment and costs and charges	We have a legitimate interest (to develop and improve our products and services)	We will not process your special categories of information for this purpose
To send you marketing materials about our products and services (with your permission)	We have a legitimate interest (to market our products)	We will not process your special categories of information for this purpose

Whom will we share your personal information with?

Type of Processing	Basis for using personal information	Basis for special categories
To verify your identity, carry out fraud, credit and anti-money laundering checks	To enter into or perform a contract	It is in the substantial public interest to prevent or detect unlawful acts (where we suspect fraud) To establish, exercise or defend legal rights
To set up your loan	To enter into or perform a contract	We will not process your special categories of information for this purpose
To manage and service and answer queries about your loan	To enter into or perform a contract	You have given your explicit consent
Using loan details to make decisions around new loan applications or extensions	To enter into or perform a contract	We will not process your special categories of information for this purpose
Using loan data to validate the information you provided us when you took out your loan and to prevent and identify fraud on an ongoing basis	To enter into or perform your loan agreement We have a legitimate interest (to prevent and detect fraud and other financial crime)	We will not process your special categories of information for this purpose
To prevent and investigate fraud on an ongoing basis	We have a legitimate interest (to prevent and detect fraud and other financial crime)	It is in the substantial public interest to prevent or detect unlawful acts (where we suspect fraud) To establish, exercise or defend legal rights
To comply with our legal or regulatory obligations	We have a legal or regulatory obligation	To establish, exercise or defend legal rights
To ensure that we consider any customers who may be in a vulnerable circumstance	We have a legitimate interest (to ensure a consistent service to all of our customers and that all customers are treated equally)	You have given your explicit consent
To communicate with you and resolve any complaints that you might have	To enter into or perform a contract We have a legitimate interest (to send you communications, record and handle complaints)	You have given your explicit consent To establish, exercise or defend legal rights
To provide improved quality, training and security (e.g. through recorded or monitored phone calls to / from us, or customer satisfaction surveys)	We have a legitimate interest (to develop and improve our products and services)	We will not process your special categories of information for this purpose
For debt collection purposes	To enter into or perform a contract	We will not process your special categories of information for this purpose
Managing our business operations (e.g. keeping accounting records, analysing financial results, meeting audit requirements, receiving professional advice, and holding our own insurance)	We have a legitimate interest (to carry out business operations and activities that are necessary for the everyday running of a business)	We will not process your special categories of information for this purpose
For administration and business improvement purposes including trend analysis, actuarial work, pricing analysis, analysis of customer experience, planning service delivery, product development, risk assessment and costs and charges	We have a legitimate interest (to develop and improve our products and services)	We will not process your special categories of information for this purpose
To send you marketing materials about our products and services (where we have your permission to do so)	We have a legitimate interest (to market our products)	We will not process your special categories of information for this purpose

Whom will we share your personal information with?

Type of Processing	Basis for using personal information	Basis for special categories
Communicating with you and responding to any enquiries you have	We have a legitimate interest (to respond to any enquiries)	We will not process your special categories of information for this purpose
Monitoring usage of our websites	We have a legitimate interest (to assess usage of our website)	We will not process your special categories of information for this purpose
To prevent and investigate fraud	We have a legitimate interest (to prevent and detect fraud and other financial crime)	We will not process your special categories of information for this purpose

The right to access your personal information	You are entitled to a copy of the personal information we hold about you and certain details of how we use it. We will usually provide your personal information to you in writing unless you request otherwise. Where your request has been made electronically (e.g. by email), a copy of your personal information will be provided to you by electronic means where possible.
The right to rectification	We take reasonable steps to ensure that the information we hold about you is accurate and where necessary up to date and complete. If you believe that there are any inaccuracies, discrepancies or gaps in the information we hold about you, you can contact us and ask us to update or amend it.
The right to erasure	This is sometimes known as the ‘right to be forgotten’. It entitles you, in certain circumstances, to request deletion of your personal information. For example, where we no longer need your personal information for the original purpose we collected it for or where you have exercised your right to withdrawn consent. Whilst we will assess every request, there are other factors that will need to be taken into consideration. For example we may be unable to erase your information as you have requested because we have a regulatory obligation to keep it.
The right to restriction of processing	In certain circumstances, you are entitled to ask us to stop using your personal information, for example where you think that the personal information we hold about you may be inaccurate or where you think that we no longer need to use your personal information.
The right to data portability	In certain circumstances, you can request that we transfer personal information that you have provided to us to a third party.
The right to object to marketing	You have control over the extent to which we market to you and you have the right to request that we stop sending you marketing messages at any time. Please note that even if you exercise this right because you do not want to receive marketing messages, we may still send you service related communications where necessary.
The right to object to processing	In addition to the right to object to marketing, in certain circumstances you will also have the right to object to us processing your personal information. This will be when we are relying on there being a legitimate interest to process your personal information. In some circumstances we will not be able to cease processing your information, but we will let you know if this is the case.
The right to withdraw consent	Where we rely on your consent in order to process your personal information, you have the right to withdraw such consent to further use of your personal information. Please note that for some purposes, we need your consent in order to manage your loan. We will advise you of any issues this may cause at the point you seek to withdraw your consent.
The right to lodge a complaint with the ICO	You have a right to complain to the Information Commissioner’s Office if you believe that any use of your personal information by us is in breach of applicable data protection laws and / or regulations. More information can be found on the Information Commissioner’s Office website: www.ico.org.uk. This will not affect any other legal rights or remedies that you have.

Last modified: 12:59 PM - 3 February, 2025