As a result of Data Protection legislation and associated regulation, you are entitled to be assured that your personal data is collected, processed and stored for specific purposes and that this is done so securely and confidentially. We, as Data Controllers, have responsibilities under Data Protection laws to inform you of the data we collect, why we collect it, how we process it and with whom it will be shared. This is set out in our Privacy Notice, a copy of which you may already have been given.
Should you require any further details or wish to enquire on the details we hold on you please contact the firm’s Data Protection Representative via the following:
Post: Data Protection Representative, Enterprise Finance, 3rd Floor, Premiere House, Elstree Way, Borehamwood, WD6 1JH
Tel: 020 8 731 5333
Who we are
Enterprise Finance Ltd (EFL) is a mortgage adviser and packager of mortgage loans. We act with your financial adviser or broker, who provides us with your personal data to effect an application for a second charge mortgage. Depending on the circumstances, EFL may provide you with advice on the most suitable loan available based on your financial circumstances or, where your adviser provides this recommendation, will package your application for submission to the chosen lender.
Where we provide advice to you, we will need to collect details on your income and expenditure, details of any loans you have outstanding (both mortgage and personal lending), and your credit history and repayment profiles. This data will be passed to the chosen mortgage lender.
In any instance where EFL acts as packager of your application, EFL will source a number of loan options for you, based on the information provided by your adviser and once they recommend a specific product we will collect all information that is required by the lender to complete drawdown of the required funds.
EFL is authorised and regulated by the Financial Conduct Authority (FCA). Our Firm Reference Number is 302964. You can obtain further details on the company from the FCA’s website at: https://register.fca.org.uk/.
The company is also registered with the Information Commissioners Office (ICO) as a Data Controller. The firm’s registration number with the ICO is: Z6765361 and further details can be obtained from the ICO’s registers at: https://ico.org.uk/esdwebpages/search
What data we collect
We will only collect such data that is needed to underwrite your loan application. This includes:
- Your name
- Your current and previous address(es)
- Your date of birth
- Details on your financial profile including your income and expenditures
- Your identification documents (e.g. copies of passport or drivers licence)
- Other relevant details required to establish your identity
- Other relevant information pertinent to the application for a loan as may be required by the lender
Details that we will never require from you include:
- Your religious views
- Your political views
- Your sexual orientation
- Your medical history
- Your trade union memberships
Why we collect your data
Under Data Protection laws we must have a legal basis for the collection of your data. This means that there must be a specific reason for us to request your data. Enterprise Finance collects data for the maintenance of a contract for a loan application and for the preparation of entry into this contract. The information is used and processed in order for us to provide you with advice and to submit to lenders for their underwriting of your application.
Sources of information
All initial data that we gather about you will be provided by your financial adviser or broker acting under your instruction.
Using that data, we will obtain further data from those external companies who maintain data on your credit history (i.e. CRAs) and Fraud Prevention Agencies as well as the Land Registry.
With whom do we share your data
Your data will be shared with other, external data processors to assist us in providing you with finance. These include:
- Mortgage Lenders
- Credit Reference Agencies (CRAs)
- Fraud Prevention Agencies
- Our parent company, Enra Group Ltd
- Our regulator, the FCA
- Statutory Bodies on their lawful request, e.g. NCA, police forces
In order to provide you with finance, EFL will pass your details to mortgage lenders in order that they can underwrite and assess your application to provide the loan funds. The chosen mortgage lender who commences the underwriting of your application will act as Data Controller and will provide you with a copy of their Privacy Notice detailing how they use your data. They may also require further information to process the application which they will ask us to gather and submit to them.
CRAs maintain credit profile data on consumers within the United Kingdom. As part of the application process, your details will be shared with the CRA in order that we can view your credit history and profile. This provides details on loans, credit accounts, personal finance and utilities that you maintain or have maintained displaying how you have managed their repayments. While this informs our decision on providing you with finance, this is not the sole criteria for our decision.
Enterprise Finance is part of the Enra Group of companies. As a result, a number of the functions which are common to each firm within the Group is undertaken centrally by Enra. This will entail sharing your data with Enra for the purpose of maintaining and administering your loan contract as well as processing your data for internal statistical purposes only.
The FCA and other Statutory Bodies
Where the firm is regulated, we have an obligation to report certain personal data to the FCA, a statutory body set up under legislation. We have further requirements, where requested by other statutory bodies, such as the National Crime Agency, police forces, the Serious Fraud Office, etc. to provide specified personal data on their lawful request for information. This is done on a confidential basis and, through legislation, you will not be entitled to be informed of when this transfer of data has occurred. Details of what data we have submitted to these entities are also exempt from disclosure under a Subject Access Request.
Data Protection legislation provides you with express rights which include:
Your right to object or request erasure of the data we hold
You may object to Enterprise Finance holding or processing your personal data and/or request that we remove this data from our storage. Please be advised, however, that should you request that this takes place before a loan completes then we will be unable to provide you with advice or complete the loan application. Please contact the firm’s Data Protection Representative for further details or to exercise your rights.
Your right to correct your data
Where your or we become aware of an error in the data that Enterprise Finance processes or holds, you have a right to have that data corrected. You can inform our Data Protection Representative of any errors that need to be corrected.
Your right to a copy of your data
You also have the right to request either the details of the data we hold on you or to request a copy of this. We are obliged to provide this to you within 30 days of receipt of your request. Please contact the firm’s Data Protection Representative to request this.
Your Right to Data Portability
You have the right to request that data which we hold is passed to another Data Controller for their use on your behalf via a “machine readable” format. This can be requested from the Data Protection Representative of Enterprise Finance.
Your Right to Complain
You have a right to complain, via our Data Protection Representative, in regards to how and why we process, or any errors we have made in the processing of, your data. Your complaint can also be made to the Information Commissioners Office:
Post: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Telephone: 0303 123 1113
Enterprise Finance will only retain your data for as long as is necessary. In all cases this will be for a period of 7 years from the drawdown of your loan facility and where your loan does not complete, from the time when the decision is made to refuse credit by the lender or where you decide not to proceed. We are obliged to retain your data for this period in order to meet our regulatory and legislative obligations.
All Data that Enterprise Finance collects is controlled and stored within the UK. We do not transfer data to any entity outside of the UK or the EEA. Where this does occur, we will inform you of the situation and seek your consent prior to the initiation of the transfer.
A ‘cookie’ is a piece of data that a website transfers to the internet browser on your computer’s hard disk, which lets the website “remember” who you are. It will usually contain a unique, randomly generated, number. Major commercial and business websites generally employ cookies. They cannot be used by themselves to identify you, and we will not attempt to use them for this purpose. You can delete cookies manually – if you wish to do so, please consult your browser help manual. (There are also websites that help you do this.) “Session cookies” stay in your browser only until you close it. “Persistent cookies” stay in your browser for longer – how long depends on the “lifetime” of the relevant cookie.
Use of ‘COOKIES’
We use session cookies to allow you to carry information across pages and avoid you having to re-type it. We may use persistent cookies so we can recognise your number (but not identify you further) when you return to our website, and, potentially, to enable us to note your interests, and arrange or edit content to match your interests, or those of borrowers generally, in a better way. Third parties may also serve cookies through this website. They may be used to put together statistics to help understand how people use the site, or to check whether, and how often, particular content is being viewed.
Some pages may contain these electronic markers to allow us to count up the people who have visited these pages. They collect limited information, including the time when the page was viewed, and the cookie number. We may also carry web beacons placed by third party advertisers in order to track a campaign’s effectiveness, but, again, these will not collect information that would allow you to be identified personally.