Privacy Policy
This Carbon FC Oxford Ltd privacy notice provides information on how we and any of our subsidiaries, and any 3rd party providers collect, use, secure, transfer and share your information. Carbon FC Oxford Ltd are a mortgage and insurance intermediary firm and we will collect information directly from you. It should be noted that as part of the Financial Conduct Authority’s (FCA’s) regulatory process we are Appointed Representatives of Mortgage Intelligence Limited and are required to enter your details onto their systems. Details of their Privacy Notice can be found at www.experiencemi.co.uk.
Carbon FC Oxford LTD has its head office at:
Twining House
294 Banbury Road
Oxford
OX2 7ED
1.1. Types of Information Collected.
Carbon FC Oxford Ltd will typically collect but are not limited to:
- First Name
- Middle Name
- Surname
- Previous Name
- Date of birth
- Present Address
- Residential Status
- Previous Addresses
- Landlord Details
- Nationality
- NI Number
- Employers Name
- Doctors Details
- How many Dependants
- Dependants Name
- Dependants Date of Birth
- Photographic ID
- Address ID
- Bank Statements
- Credit Card Statements
- Mortgage Statements
- Proof of Deposit
- Payslips
- Self Employed Accounts
- New Insurance Details
- Personal Loan Details
- Personal Debt Details
- Personal Expenditure
- Existing Mortgage Details
- Existing Insurance Details
- Email Address
- Phone Numbers
- New Property Details
- Solicitor Details
- Estate Agent Details
- New Mortgage Details
- Gender
- Marital Status
- Salary
- Accountant Details
- Previous employers details
- Employers Address
- Employers Phone number
- Health
- Ethnicity
- Credit Card Details
- Bank Details
- UK National
- Criminal Offences /Convictions
1.2. Methods of Collection
In our general conduct of business, we collect information relevant to the provision of mortgage and insurance intermediary advice from:
- yourself
- next of kin
- spouse / partner / family member
- Business associates
- Employers
- "Trusted Sources including:
- Government / Land / Police registers
- Credit / Default Agencies
- Financial Institutions (Banks, Building Societies, Loan Agencies, Credit Card companies)
- Insurance Companies
- Law firms
- Doctors
- Through consent to third parties disclosing information about you to us that they have collected
In addition, you may choose to submit information directly to us via several methods, including:
- in response to marketing or other communications
- through social media
- by signing up for a product or service
- through participation in an offer, program or promotion
- in connection with an actual or potential business or employment relationship with us
You may also agree to third parties disclosing information about you to us that those third parties have collected.
We, our service providers and partners collect certain information by using automated means, such as cookies and web beacons, when you interact with our advertisements, mobile applications, or visit our websites, pages or other digital assets. The information we collect in this manner may include: IP address, browser type, operating system, referring URLs and information on actions taken or interaction with our digital assets.
We may use third-party web analytics services on our websites and mobile apps. The analytics providers that administer these services use technologies such as cookies and web beacons to help us analyse how visitors use our websites and apps.
"Your Rights and Choices" section of this Privacy Notice specifies your ability to limit the usage of the information collected.
1.3. Purposes of Collection
Generally, we will collect, use and hold your information for the purposes of:
- Undertaking our regulatory responsibility for assessing the suitability of advice
- Dealing with lenders and providers to assist in providing a product or service
- Providing relevant information on mortgage and insurance products and related services that may be of interest
- Processing payments / transactions including: Accounting, Authorisation, Clearing, Chargebacks, Auditing, Billing, Reconciliation, Collection, Complaints, Enquiries, Credit Checks and related dispute resolution activities
- Protecting against and preventing fraud, money laundering, tax evasion, claims, other liabilities and managing risk exposure and agent /franchise quality, integrity, compliance and security of business processes
- Operating, monitoring, evaluating and improving our products, services, websites, mobile applications, other digital assets and business:
- Developing new products and services
- Managing communications, assessing effectiveness and optimising advertising
- Functionality of our websites, mobile applications and other digital assets
- Managing communications, assessing effectiveness and optimising advertising
- Functionality of our websites, mobile applications and other digital assets
- Enforcing our “Terms of Use”, other legal rights as may be required by applicable laws and regulations or requested by any judicial process or governmental agency having or claiming jurisdiction over us or our affiliates.
- Complying with industry standards and Carbon FC Oxford Ltd policies
- Carrying out electronic checks, including checks of your identity, using data from third parties
1.4. Lawful basis of processing
Carbon FC Oxford Ltd processes your information under the following basis:
- Performance of a contract: where you enter into a contract with us and we need to process your information as part of this contract
- Legitimate interests: some information is processed by us as part of our legitimate interests which include fraud, risk assessment, due diligence, network and information security, suppressions and managing opting out of communications, profiling, direct marketing, monitoring, web analytics, cloud storage, acquisitions, updating customer details, and other core products and services provided by the data controller
- Public interest: some information is processed in accordance with public interest
- Consent: where we process information under consent we will seek your clear and unambiguous consent prior to processing your data
1.5. Information We Share
We do not sell or otherwise disclose personal information we collect about you, except as described in this Privacy Notice or as indicated via a consent process at the time the data is collected. We share theinformation we collect with, but not limited to:
- Vetted affiliates / Financial Institutions / Insurance Companies / Mortgage Companies for business facilitation to provide required services, such as mortgages, insurance cover etc.
- Vetted affiliates for the purpose of conducting consumer research
- Formally contracted service providers to perform services on our behalf:
- Hosting Datacentres, Infrastructure, Applications (Development / Support) , Cloud Services (Software as a Service – SaaS, Platform as a Service – PaaS , Infrastructure as a Service – IaaS)
- Helpdesk, Call Centres etc.
We contractually require these service providers to safeguard the privacy and security of personal information they process on our behalf and authorise them to use or disclose the information only as necessary to perform services on our behalf or comply with legal requirements.
- Law firms
- Auditors
- Our Network Principal Mortgage Intelligence Ltd
- Credit agencies, Land Registry Office, Her Majesty’s Revenue and Customs (HMRC), Financial Conduct Authority (FCA) and other relevant regulatory bodies
- Additionally, we may share information about you if required legally to prevent harm or financial / reputation loss, for investigation of suspected or actual fraudulent or illegal activities.
We reserve the right to transfer your information in the event of a sale or transfer (wholly or partially) of our business or assets, with reasonable efforts for the acquirer to protect / use your information consistent with our Global Privacy Notice. You can exercise your rights to contact the acquiring entity with questions concerning the protection and processing of your information.
1.6. How long do we keep information for?
We will keep information for a reasonable amount of time in order to perform the purposes listed above.
We only keep your information for as long as necessary. We generally keep personal information for 7 years after last contact with you. However, we reserve the right to keep information for longer if we feel that this is in the legitimate interests of Carbon FC Oxford Ltd.
1.7. International Data Transfers
We and/or associated third parties may transfer the personal information collected about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this Privacy Notice or as otherwise disclosed to you at the time the data is collected (e.g. via program specific privacy notice).
1.8. Profiling
For the purposes of business conduct, enhancement, identification of fraud, money laundering and other potential unauthorised activities, we may engage in profiling activities via direct use or anonymisation of sensitive personal information.
1.9. Direct Profiling
Direct profiling is engaged for the fair and lawful purposes, to provide us with the ability to enforce Carbon FC Oxford Ltd “Terms of Use”, legal reporting as may be required by applicable laws, regulations, policies / standards or requested by any judicial process or governmental agency having or claiming jurisdiction over us or our affiliates; including, but not limited to:
- Background checks for customers
- Financial Viability analysis / reports
- Business partner / customer portfolio position, performance, risk positions
- Anti-money laundering
- Tax reporting
- Credit defaulting / exposure
1.10. Indirect Profiling
Indirect profiling via anonymisation of personal information is also used for preparing and furnishing aggregated data reports showing anonymised information, including, but not limited to, the following:
- Compilations, analyses, analytical and predictive models and rules, and other aggregated reports for the purpose of advising our partners / affiliates and servicing institutions, retailers and other customers regarding past and potential future patterns of service usage, spending, fraud, and other insights that may be extracted from this data.
- Compiling and communicating promotional and marketing information about products and services that we, our affiliates and other organisations that we have affiliations with have and that may be of interest to you.
- Conducting market research
- Facilitating our internal business operations, including the fulfilment of any legal requirements.
1.11. Your Rights and Choices
Your rights regarding the sensitive / personal information we maintain about you enable you to exercise choices about what personal information we collect from you, how we use that information, and how we communicate with you.
1.12. Access and Correction
You may have the right to:
- obtain confirmation that we hold personal information about you
- request access to and receive information about the personal information we maintain about you
- receive copies of the personal information we maintain about you
The right to access personal information may be limited in some circumstances by local law requirements.
To exercise these rights, please see details below of requirements:
1.13.1 Update and correct inaccuracies in your personal information
If you feel that the information we hold about you is incorrect or inaccurate you can contact us outlining the information you feel is incorrect or inaccurate
If we refuse to correct your personal information, we will provide you with a written notice that sets out the reasons for our refusal (unless it would be unreasonable to provide those reasons) and provide you with a statement regarding the mechanisms available to you to make a complaint. We will provide you with access to information we hold about you
1.13.2 Object to the processing of your personal information
If you would like to object to any processing of your information by us you can contact us outlining what processing of information you would like to object to.
1.13.2 Have the information blocked, anonymised or deleted.
If you would like us to delete, block or anonymise information we hold about you, you can contact us outlining what information you would like deleted, blocked or anonymised.
To update your preferences, ask us to remove your information from our mailing lists or submit a request to access, update, correct or delete your personal information, please contact us as specified in the “How To Contact Us” section below.
1.14. Opting out of processing
You can opt out of collection of personal information by automated means e.g. when visiting our website or visit third-party websites and interacting with our adverts, by using the Cookie Consent tool displayed in the website (the browser you use may provide options on how to opt out of receiving certain types of cookies). However, without cookies you may not be able to use all of the website features and/or online services.
Carbon FC Oxford Ltd operate a cookie policy. Some of our service providers and partners may collect information about your online activities over time and across third-party websites to customise and target our adverts.
You can at any time tell us not to send you marketing communications by:
- e-mail: info@carbonfcoxford.com
- unsubscribing via the “unsubscribe link” within the marketing e-mails you receive from us, or contacting Carbon FC Oxford Ltd as indicated below.
If we obtain your information by consent you have the right to withdraw any consent you previously provided to us.
If we process your information under legitimate interest you can object at any time on legitimate grounds, to the processing of your personal information.
Carbon FC Oxford Ltd will apply your preferences going forward. Doing so will mean that you cannot take advantage of certain Carbon FC Ltd and affiliate products, services and promotions.
The right to consent removal may be limited in some circumstances by local law requirements and you will be informed appropriately.
1.16 How to Contact Us / Complaints and Feedback
If you:
- believe we fall short of your expectations in processing your personal information
- wish to make a complaint about a breach of your personal information, applicable privacy laws / principles or have a concern about our privacy practices
- would like access and/or update information or preferences you provided to us,
Please e-mail us at: info@carbonfcoxford.com or write to us at:
Twining House
294 Banbury Road
Oxford
OX2 7ED
To assist us in responding to your request, please give full details of the issue. We attempt to review and respond to all complaints within a reasonable time.
If we cannot for lawful reasons complete your request, we will explain this to you to the extent that we lawfully can.
1.17 How We Protect Personal Information
The security of your personal information is very important, and we are committed to protecting the information we collect. We maintain administrative, technical and physical safeguards designed to protect the personal information you provide, or we collect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
We use SSL encryption on our website from which we transfer certain personal information.
We store personal information only for as long as it is necessary for the fulfilment of the purpose for which the personal information was collected, unless otherwise required or authorised by applicable law. We take measures to destroy or permanently de-identify personal information if required by law or if the personal information is no longer required for the purpose for which we collected it.
1.18 Review and Updates
This privacy notice may be updated from time to time and you should review it on a regular basis