Privacy Policy

This Privacy Policy is issued by RewardRate, a trading name of Amigo Loans Ltd, and is addressed to individuals outside our organisation that we interact with, including our customers, applicants and visitors to our website.

This Privacy Policy may be amended or updated from time to time to reflect changes in our practices, the way we collect and use your information, or changes in the law.

We encourage you to read this Privacy Policy carefully, and to regularly check this page to review any changes we might make     .

We will process your information as per our contractual and legal obligations to ensure we’re lending safely, responsibly and legally. This includes:

  • Performing adequate checks to confirm your identity and to ensure your suitability and affordability for a loan or to guarantee a loan.
  • Protecting and preventing criminal activity (i.e., fraud, money laundering).
  • Managing the loan and recovering the debt you owe us (including via court proceedings).
  • Reporting repayment history to credit reference agencies.
  • Responding to and complying with our regulatory requirements.

How will we collect your information

We will collect information:

  • That you provide to us through our website and any communication with us including Facebook Messenger.
  • That you provide to a loan broker that is passed to us (with your consent).
  • From third parties, such as banks, credit reference and fraud prevention or investigation agencies, or any other company that helps us make lending decisions or assessments in respect of credit-related decisions.
  • You may discuss sensitive data with us, and we may process this information, based on your own economic well-being.
  • Where you have applied for a loan with a loan brokerage company and they have passed your information to us, we will use our legitimate interests to contact you about the application we have received on your behalf and process your information in line with the loan you have enquired about.
  • Through customer surveys.

What information will we collect?

We will collect any information we need from you in order to process your application and to manage your loan repayments, as well as any other information which we reasonably need to operate your account, make decisions about you or fulfil our regulatory obligations.

The information we may collect about you includes identity data, contact data, financial data, transaction data, profile data, usage data, marketing data and communications data and aggregated data such as:

  • Your name, date of birth, addresses and contact information.
  • Your affordability (income and expenditure).
  • Card and bank account information. If you provide us with any debit card and bank details, either during the loan application or subsequently, we will keep those details and will use the details in line with the consent you provide to us, unless you advise us otherwise.
  • Documents and data to verify your information (such as bank statements, payslips, and homeownership and identification documents).
  • Biometric information to confirm your identity.
  • Information collected from the Credit Reference Agencies     .
  • Details of the loans you have and have had with us and all transactions.
  • Details of when you contact us and when we contact you.
  • We may keep any email address or phone number(s) that you communicate with us on or that you tell us about.
  • If a card is identified as having been used fraudulently then we will maintain a record of its use for reporting and preventing fraud.
  • We may be given sensitive information such as medical information. We will hold and process this information to allow us to make decisions about you and your accounts with us.     Information about your computer including your IP address, operating system, browser type and location. For more details please see our Cookie Policy.
  • We will record and/or monitor the calls, texts, emails and letters you send to us or receive from us.

We will also collect information for the purpose of staff training and system improvement.

 

How we will use your information

We will use your information to process the loan you have applied for or applied to guarantee, and to manage your account, or the account you guarantee with us.

We will use your information:

  • To make, or assist in making, credit decisions about you, assess lending risks, and to check the details that you have let us and others have. To identify, prevent, detect or address fraud, money laundering and other crimes.
  • To contact you (using any contact details that you have given to us) via email, SMS, letter, telephone or send you push notifications about managing your loan with us, including if you fall into arrears or if we have out of date information.
  • To contact you (using any contact details that you have given to us) for marketing and survey purposes, or ask another organisation to contact you, about our products and services, unless you tell us that you prefer not to receive marketing.
    To collect and manage payments, and to recover any debt you owe us both on your current loan and on any previous or subsequent loans, unless you advise us otherwise.
  • To manage interest on your account including if you are a RewardRate customer.
  • To respond to complaints.
  • To exercise our rights set out in agreements or contracts and to comply with our regulatory obligations.
  • To display interest-based ads to you, or to create target custom audiences, using information we have collected on our website (such as email addresses or phone numbers) or other third party platforms on social media.      

We will also use your information to run our business in an efficient and correct way. This includes managing our financial position, business planning, statistical research, governance, monitoring risk and auditing.

We will use your information:

  • To detect, investigate, report, monitor and analyse our business
  • To carry out market research, to develop and manage our brand, product and services.
  • To improve and adapt our existing product and service as well as develop new ones.
    To carry out internal and external audits.
  • To test our processes and systems.
  • To obey laws and regulations that apply to us.
  • To manage security and risk for us and you.

Where you have consented for your details to be passed to us by a loan broker that we work with, and they have notified Amigo that you are looking for a loan, we will store and process your information so you have the option to complete your application without having to re-enter in your details and so we can contact you about our product and let you know what loan options are available to you.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may not be able to provide you with the services but we will notify you if this is the case at the time.

How long we will store your information

  • If you have an application with us, we will store your information for 3 months, 1 year or 2 years depending on your individual circumstances (providing we have no reason to keep your data).
  • If you have a loan with us, we will keep your information indefinitely until your loan has settled. Once your loan has settled, and providing we have no ongoing relationship with you or any reason to keep your data, we will remove your information after 7 years.
  • If you have interacted with us through social media or a ChatBot that is featured on our website, all information you have submitted will be stored for one year on the platform we use to manage this communication unless you request otherwise. 
  • If you have subscribed to us on Facebook Messenger, we will store your data on the platform we use to manage this communication as long as you are subscribed. If you unsubscribe to this feature, by selecting the ‘unsubscribe feature’ in Facebook Messenger, your data will be deleted after 90 days.

 

Who we will share your information with

We will share your information with our employees who:

  • Manage your applications, accounts, payments, outstanding balances, and services
  • Respond to your queries and complaints
  • Explore new ways of doing business
  • Audit our internal processes for monitoring and training purposes
  • Test our systems

We may also share your information with other parties such as:

  • Your guarantor / borrower on your loan if you have a Guarantor Loan or are a guarantor.
  • Any third-parties you give us authority to speak with about your account
  • Companies who verify your information for us
  • Credit reference and fraud investigation or prevention agencies:
    •  the information which you give us may be disclosed to a credit reference or fraud prevention agency which may keep a record of that information; and
    •  the agency may disclose that information, and the fact that a search was made, to its other customers for the purposes of verifying identity, assessing the risk of giving credit, preventing fraud and tracing debtors;
  • Organisations that introduce you to us (loan brokers)
  • Companies you ask us to share your data with
  • When we are legally obliged to, for example, to the courts to recover money you owe us, respond to your complaints via the Financial Ombudsman Service or to the police for criminal activity
  • Third party companies who help us document, record, assess and test our internal processes and systems, process your information, store your data, to assist us in carrying out and reviewing surveys
  • Organisations we use to help us improve, adapt and develop our existing and future products and services          
  • Organisations we use to help us manage and respond to customer queries via Facebook Messenger or any ChatBots that may be featured on our website, or any RewardRate app.
  • Know Your Customer (KYC) service providers to help us with identity verification or fraud checks such as Jumio
  • Organisations that print written statement and notices
  • Organisations that assist us with technical analytics

We may need to share your personal information with other organisations to provide you with the product or service you have chosen:

  • If we store details of your debit card for payment purposes, we will share transaction details with companies which help us to provide this service (such as Visa and Mastercard).
  • If you use direct debits, we will share your data with the Direct Debit scheme, its members and third-party providers     
  • Any companies that we transfer your loan to.

Because of the nature of our business and the other organisations we work with, we may transfer your information to other countries. We will only transfer your information so that it may be used as we have described. The other countries may have different laws regarding the use of your information than those that apply in the UK.

If we transfer your information to organisations located outside of the UK, we will ensure your data is afforded a similar level of protection  and that we have agreed specific contracts provide a similar level of security required by the laws in the UK, or the Information Commissioner’s Office (ICO) considers that county to provide the same level of protection.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

Credit searching

When you apply for a RewardRate Loan, we will look at your credit file at credit-reference agencies ("CRAs") such as TransUnion, Equifax or Experian. The CRAs will give us credit information about you including information from the electoral register. If you’re a borrower, this credit search is used to check your identity and your eligibility for a loan. If you’re a guarantor, this information will be used to check your identity and make credit decisions about you. The CRAs will add details of our searches and your application to the record which they hold about you. If you’re a borrower or a guarantor, the CRAs will also add details of    the applicable loan agreement with us, the payments made under it and any default or failure to keep to its terms. Your credit-reference agency records will be seen by other organisations that make searches with those agencies. Information held about you by the CRAs may already be linked to records relating to one or more of your partners. For the purposes of this application you may be treated as financially linked and your application will be assessed with reference to any “associated” records.

If you would like further information about how we report to CRAs please contact us on [email protected]. 

While you are a customer of ours, we may carry out extra credit searches so we can manage your account. We and other organisations may use and search these records (including access and use from other countries) for example to:

  • Help make decisions about credit and credit-related services and other facilities for you and members of your household;
  • Verify the accuracy of the data you have provided to us;
  • Trace debtors, recover debt, prevent fraud, and to manage your accounts and other facilities;
  • We may also conduct credit searches in relation to complaints you may make, if necessary to investigate the complaint.

The identities of the CRAs, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail here. This information is also accessible from each of the three main CRAs – clicking on any of these three links will also take you to the same document:

How we use your information to make automated decisions

We use systems to make automated decisions about you to help us make sure our decisions are quick, fair, efficient and correct, based on what we know. Automated decisions can affect the products we may offer you now or in the future. They are based on personal information that we have or that we are allowed to collect from others. There may also be occasions when your information is referred to an underwriter for manual review.

  • We use a system to decide whether to lend money to you when you apply for a loan. The system will use information from your application form, credit reference agents and data we may already hold about you, including what we have collected from any previous loans you have had with us.
  • We use a third party’s system that helps us detect fraud and money laundering.
  • We may use any data we already hold about you and your payment history with us to help us make decisions on how we should lend to people in the future.

Third Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, you should read the privacy policy of every website you visit.

Your rights

  • You have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update, correct or remove your information, as long as we are not legally required to hold it or we hold it to meet a legitimate expectation or for you or us to meet a legal obligation.
  • If we are using your data because we deem it necessary to do so, and you do not agree, you have the right to ask to remove your information, or ask us to stop processing your information. If you would like to do so, you can contact us at [email protected]. In cases where you ask us not to contact you, we may still hold your information so that we know not to use it. If you request us to remove your information, we will only refuse your request if we are of the view that it is necessary to keep your information and we are legally permitted to do so, or we have the legal right to process the information for another specific reason. For example, if you have an ongoing relationship with us, or we have a legal reason to keep it. Alternatively, you have the right to  restrict the processing of your personal data in certain circumstances. This means that you can limit the way that we use your data and can be used as an alternative to requesting the erasure of your data.
  • Where we have obtained your consent to process your personal data for certain activities (for example, marketing), you may withdraw your consent at any time by contacting us at     [email protected].     .
  • You may also have the right to instruct us to transfer the data we hold about you. We will help with this – either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format. To do this just contact us by phone, in writing, or by using the email address above.
  • Your rights regarding our use of your information are not absolute. If we decide not to act on a request that we receive from you, we will inform you of our legal reason(s) for not acting on your request.
  • You have the right to ask us what personal information we hold about you. If you wish to know something specific or have been unable to find the answer to your question in this policy or in our website, you may want to make a DSAR request instead. A Data Subject Access Request (or a 'DSAR') is a way for our customers to obtain all of the information we hold about them. This information may also be referred to as a data request. When you make a DSAR we will share this data with you. 
  • You can make a DSAR  by contacting us on [email protected] or in writing to RewardRate, 11a Avenue Centre, Commercial Road, Bournemouth, Dorset, BH2 5RP.

 

How to complain

If you are unhappy with how we have used your data, you can tell us about it by contacting us on [email protected]. We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the email address set out above. You can also contact the Information Commissioner’s Office (ICO) which is the authority responsible for data protection in the UK.

You can contact the ICO at:            

Information Commissioner’s Office,
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

You also have the right to object to the way we use your information in certain circumstances. For example, where we use your information to make certain automated decision about you as described above. You can also object to our use of your information for direct marketing purposes.

To exercise your right to object (or to request that someone review an automated decision that we have made about you) please contact us at [email protected].

Generally, you are not required to pay any charge to us for exercising your rights. If you make a request to us about your data, we have one month to respond to you.

Controller

The controller of your information is:

  • Amigo Loans Ltd trading as RewardRate, 11a Avenue Centre, Commercial Road, Bournemouth, Dorset, BH2 5RP.

We are registered with the Information Commissioner’s Office in the UK with registration number Z8738456.

You can contact us at [email protected] or by writing to us at the above address.    

Security

We recognise how important it is to protect and manage the information you share with us. We use computer safeguards such as firewalls and data encryption to keep your details safe. Our security systems meet or exceed industry standards and we are constantly monitoring internet developments to ensure our systems evolve as required. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.