We are Jump Finance Ltd, trading as Creditplus, company number 12665481 and whose registered office is Suite 7 Wessex House St. Leonards Road Bournemouth Dorset BH88QS.  ('we', 'us' or 'our'). We take the privacy of our customers very seriously. We ask that you read this Privacy Policy ('the Policy') carefully as it contains important information about how we will use your personal data.

For the purposes of the Data Protection Act ('DPA'), we are the Data Controller’ (i.e. the company who is responsible for, and controls the processing of, your personal data). This Policy was last updated in April 2021 in line with the General Data Protection Regulation (GDPR) reform that took effect from May 2018. The reform set out more rights for individuals and greater transparency in how personal data is processed by Data Controllers, such as consent, distribution, marketing and deletion. As we are a credit intermediary, we undertake a number of financial tasks that relate to consumer credit. Our firm’s lawful basis for processing your personal data is done so under the following, set out in Article 6 of the GDPR.

Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).

Legitimate Interest: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. This includes for the purposes of fraud prevention and indicating possible criminal acts.

Personal data we may collect

We will obtain personal data about you (including your name, address, date of birth, contact information, interests, payment details and financial information) and those whose personal data you have with express authority disclosed to us (‘others’) whenever you complete an online or paper form, make a telephone enquiry with us, or visit our showroom to receive our services. If you submit an online enquiry you will be required to agree to the terms of this Policy which include permitting us to contact you for the purposes of the finance related enquiry via the contact means of which you provide us with the details of. i.e. email address, telephone number, etc.

For example, we will obtain personal data when you contact us for any reason, or purchase services. In certain circumstances, we may hold sensitive personal data if you provide us with such information if you feel that it is relevant for the purpose of your enquiry, but we will not ask for such information. Any sensitive personal data obtained and recorded will only be done so with your explicit consent.

How we use personal data

We will use the personal data you disclose to us for the purposes described in Our Terms. These purposes include:

• to assist us in processing your enquiries and obtaining the services which you require;
• to help us identify you and any accounts that you hold with us;
• undertaking credit checks;
• administration;
• research, statistical analysis and behavioural analysis;
• customer profiling and analysing your preferences;
• marketing (providing you have opted-in) [for further information see ‘Marketing and opting-in’ below];
• fraud prevention and detection;
• billing and order fulfilment;
• customising our website and its content to your particular preferences;
• to notify you of any changes to our website or to our services which may affect you;
• security vetting; and
• improving our services

There will be circumstances where we will only process your data if we have your consent to do so. For example, if you provide us with data that is classed as a special category of data such as health information, criminal records of convictions and offences, or allegations of criminal offences. We will only process this with your permission (unless we feel the processing is necessary to protect your vital interests or if the law allows us to do so). You have a right at any time to ask us to stop the processing of that specific data.

Creditplus Partners

Our Lenders – who we refer your application on to, to find you the most suitable finance deal.

• Advantage Finance – www.advantage-finance.co.uk/home/privacy.asp
• Autolend – https://www.autolend.co.uk/privacy
• Automoney – www.automoneymotorfinance.co.uk/privacy-policy/
• Billing Finance – https://billingfinance.co.uk/fair-processing-notice/
• First Response Finance – https://www.firstresponsefinance.co.uk/about-us/privacy-policy/
• Glenside Motor Finance – https://glensidefinance.co.uk/privacy-notice/
• Go Car Credit – https://gocarcredit.co.uk/privacy-notice/
• JBR Capital – www.jbrcapital.com/customer-policies/privacy-policy/
• Loans Warehouse – www.loanswarehouse.co.uk/legal/privacy-cookie-policy
• LUV Car Loans – www.luvcarloans.co.uk/privacy-policy/
• Mallard Finance – https://www.mallardfinance.co.uk/pdf/privacy.pdf
• Marsh Finance – www.marshfinance.com/privacy/
• Moneybarn – www.moneybarn.com/privacy-policy/
• Oodle – www.oodlecarfinance.com/privacy-notice
• Secure Trust Bank – https://www.securetrustbank.com/privacy-statement/
• Specialist Motor Finance – www.thefundingcorporation.com/privacy-policy/
• Startline Motor Finance – https://www.startlinemotorfinance.com/privacy/
• T Dot UK Limited – https://t.uk/b-privacy/
• Zopa – https://www.zopa.com/privacy-notice

Our database system provider and credit reference agency – The system we use to receive your application details and the credit reference agency we use to process your information.

• Auto Convert (Blue Owl Network Ltd) – www.autoconvert.co.uk/privacy-policy/
• Equifax – https://www.equifax.co.uk/About-us/Privacy_policy.html

Our protection partners – In order to offer you additional products, to help protect your purchased vehicle in relation to warranty and GAP/RTI insurance.

• AMS Insurance Services Limited - https://www.ams-gap.com/privacy-statement
• A1 Approved Warranty - https://www.creditplus.co.uk/a1privacy.html

Marketing and opting-in

We may share your personal data with organization's as set out in the 'Disclosure of personal data' section below. If you have opted-in to receive our marketing material, we will ensure that it is to your requirements and granular. We or they may contact you or others (unless you have asked us or them not to do so) by mail, telephone, text message, email. The nature of these marketing communications relate to information on products, services, promotions and special offers which we believe may be of interest to you or others. If you or others would prefer not to receive any further direct marketing communications from us or our business partners, it is possible to opt out at any time. See further 'Your rights' below.

Disclosure of personal data

We may disclose personal data which you provide to us to:

• Our agents and service providers (e.g. providers of web hosting, maintenance services or potential funders);
• Law enforcement agencies in connection with any investigation to help prevent unlawful activity;
• Our business partners in accordance with the ‘Marketing and opting out’ section above, specifically being:
• our group companies (as defined in the Companies Act 2006);
• finance companies with whom we deal for the purposes of providing our services to you;
• Insurance companies with whom we deal for the purposes of providing our services to you and to verify information provided to us by you; and
• other third parties with whom we deal with in the course of providing our services to you; and
• Any regulators within whose jurisdiction we operate within from time to time.

Please be aware that we will not sell or otherwise disclose any personal data provided to us to any other party.

Keeping data secure

We currently safeguard personal data by storing it on a CRM protected by password and shall ensure that from time to time we use no lesser technical and organisational measures to safeguard personal data which is disclosed to us. Whilst we will use all reasonable efforts to safeguard such personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data which are transferred from you or to you via the internet.

Monitoring

We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of quality assurance, training, fraud prevention or compliance purposes.

Information about other individuals

If you give us information about others, you confirm that the other third party person has appointed you to act on his/her behalf. This is also relevant where others are concerned if you indeed ask another person to act on your behalf as a third party.

Under the third party authorisation, the other person can:

• Give consent on his/her behalf to the processing of his or her personal data for the purposes and reasons set out in this Policy; and
• Receive on his/her behalf any data protection notices.

Such authorisation will remain in place until this has been revoked, either by verbal or written communication.

Use of Google Analytics Advertising

We use Google Analytics Advertising Features (‘GAAF’) through our website, which means that certain information about the traffic on our website is collected. In light of using GAAF, We will not facilitate the merging of personally-identifiable information with non-personally identifiable information collected through GAAF unless we receive your express consent to that merger.

Furthermore, we are hereby notifying you that:

• The specific GAAF feature(s) which we have implemented are:
• Remarketing with Google Analytics
• Google Display Network Impression Reporting
• Google Analytics Demographics and Interest Reporting
• We use first-party cookies (such as GAAF cookies) or other first-party identifiers, and third-party cookies (such as advertising cookies) or other third-party identifiers together and that this is done in the ways detailed under the sub-heading ‘Use of First- & Third-Party Cookies and Identifiers’ below; and
• You can opt-out of the GAAF you use, including through Ads Settings, Ad Settings for mobile apps, or any other available means such as the Google Analytics currently available opt-outs accessible via tools.google.com/dlpage/gaoptout.

Your rights

You have the right to request access to your personal data which we process. This formal request is made under the DPA and is referred to as a Subject Access Request. If you wish to exercise this right and make a Subject Access Request, you should;

• Put your request in writing; either by Email or by letter.
• Include proof of your identity and address (e.g. a copy of your driving licence or passport, and a recent utility or credit card bill);
• Specify the personal data you want access to, including any account or reference numbers where applicable.

You have the right to require us to correct any inaccuracies in your data free of charge. If you wish to exercise this right, you should:

• Either speak to us via telephone or put your request in writing;
• Provide us with enough information to identify you (e.g. account/order number, username, registration details); and
• Specify the information that is incorrect and what it should be replaced with.

You have the right to the erasure of your data, to restrict the processing of your data, the right to request transfer of your personal data and the right to withdraw consent at any time. If you wish to exercise these rights, you should:

• Either speak to us via telephone or put your request in writing;
• Provide us with enough information to identify you (e.g. account/order number, username, registration details)
• Specify what data, if not all is to be erased,
• Specify where you would like your personal data to be transferred
• Let us know if you would like to withdraw your consent to the use/processing of your information.

You also have the right to ask us to stop processing your personal data for direct marketing purposes. If you wish to exercise this right, you should:

• Put your request in writing (an email sent to complaints@creditplus.co.uk with a header that says ‘unsubscribe’ is acceptable);
• Provide us with enough information to identify you (e.g. account/order number, username, registration details);
• If your objection is not to direct marketing in general, but to direct marketing by a particular channel (e.g. email or telephone) please specify the channel you are objecting to.

All individuals who are the subject of personal data held by the firm are entitled to:

1. Obtain confirmation about what information we hold about them and to access copies of that information.
2. Request the correction of inaccurate personal information.
3. Request the erasure of their personal information.
4. Restrict how their personal information is used.
5. Receive their personal information in a legible and transferable format. For example, in an Excel format.
6. Stop the use of their personal data.
7. Object to their personal information being used for an automatic decision.
8. Be informed about why their personal information is being collected and how it will be used.

The firm must make it easy for individuals to exercise their rights in relation to their personal information. Where an individual makes any of the above requests we must comply within one month.

The firm cannot charge a fee to an individual for exercising his rights unless the request from the individual is excessive. For example, because it is a repetitive request that has previously been complied with.

Any charge should be limited to the administrative cost of complying with the request.

The Compliance Officer will always verify the identity of anyone making a request to exercise his individual rights before actioning the request.

Data Retention

We will only process your personal data providing you have given your consent for us to do so. Under the provisions of the DPA, our firm’s lawful basis for processing personal data is based on a Legitimate Interest.

The legitimate interest relates to a legal requirement for the firm to hold your personal data and financial information on record for up to a total of six years. This six-year period satisfies the requirement of our regulator, The Financial Conduct Authority and is also in line with other financial industry retention periods.

International Transfers

In the normal course of business there may be a need for Jump Finance Ltd or any other firm associated to the business, usually when processing an application for credit, personal data would have to be transferred outside of the European Economic Area (EEA) where those countries do not typically have the same protections and safeguards in place for the protection of personal data to those countries within the EEA.

Jump Finance Ltd deal with a number of large, international corporations where data is likely to be transferred in this way. Assurances and processes will always be put in place and considered before any international transfer to a non-EEA country is undertaken to ensure the protection and security of the personal data.

Complaints/spam

Under the GDPR, you have the right to lodge a complaint with the Supervisory Authority, the Information Commissionaires Office (ICO), who are the national authority responsible for the protection of personal data.

A complaint can be made to the ICO via their website: ico.org.uk or through their helpline: 0303 123 1113.

If you have a received an email or other communication sent by us that you believe is spam or in violation of our acceptable use policies, please contact us via one of the methods below.

Our contact details

We welcome your feedback and questions. If you wish to contact us, please send an email to complaints@creditplus.co.uk or you can write to us at Creditplus, Suite 7 Wessex House St. Leonards Road Bournemouth Dorset BH88QS or call us on 01202 684898. We may change this Policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version which will apply each time you deal with us.