At teapotNG, we're committed to keeping your information private and secure. This notice sets out the personal data we collect and what we will do with it. If you have any questions about this policy, you can email us at support@teapotng.com[Links to mailing address] THE DATA THAT WE COLLECT We will collect personal data on anyone who applies to teapotNG. We may collect and process the following personal data about you: Your name, date of birth, residential address, email address and phone number If you take funding from us, your account information such as transaction and repayment history Where you are a sole trader, additional information that helps us to understand your personal ability to afford repayments (such as income and expenditure and number of dependents) Documentary evidence confirming your identity and address (such as a passport, driving licence or utility bill) Records of communications (e.g. call recordings, emails and chat transcripts) Technical information about your device and website usage (please see our Cookies Policy[Will link to the Use of cookies policy page.] for more details) Information about your personal finances (including bank statements) Other information that you provide to us voluntarily This information may have been collected directly from you through your online account or may have been submitted by someone else, such as another director of the company. We may also obtain information about you from credit reference and fraud prevention agencies, please see the section on data sharing below for more detail. WHAT WE WILL DO WITH YOUR DATA Before we provide services or financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you. Your personal data will be used to prevent fraud and money laundering, and to verify your identity. The personal information that will be processed as part of such checks includes the type of personal data described above. We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, in order to protect our business and to comply with laws. Such processing is also a contractual requirement of the services or financing you have requested. Below is a list of the other ways in which we may use your personal data, the reasons we rely on to do so and what our legitimate interests are. Data sharing We may share your personal information with third parties in the following circumstances: We may report to credit reference and fraud agencies as described below In accordance with our legal obligations, we may permit law enforcement agencies to access and use your personal data to detect, investigate and prevent crime We may use the following third-party processors to assist us in providing services to you: oProviders of software platforms which enable us to provide services to you and your business (such services will include email, data analytics, hosting and data storage) oProviders of telecommunications and postal mail services oSocial media sites, for the purposes of conducting market research and running marketing campaigns (it is important to note that when sharing data with these sites, we ensure that your data is only used in accordance with our instructions) If your details were originally passed to teapotNG via a third party (such as a referral platform) we may report your application outcome and loan status back to that platform; and We may instruct third parties to act on our behalf in order to collect an outstanding debt. Credit Reference Agencies In order to process your application, we will perform credit and identity checks on you with one or more credit reference agencies. We may also make periodic searches at credit reference agencies to manage your account with us. To do this, we will supply your name, date of birth and address history to the credit reference agencies and they will give us information about you. Credit reference agencies will supply to us both public and shared credit, financial situation, financial history, and fraud prevention information. We will use this information to: Assess your creditworthiness and whether you can afford to take the product Verify the accuracy of the data you have provided us Prevent criminal activity, fraud and money laundering Manage your account(s), including conducting ongoing credit checks to ensure that you or your business remains eligible for the agreed credit facility Trace and recover debts In utilising the data held with credit reference agencies, we must abide by the Principles of Reciprocity by contributing the same level of credit performance data that we receive. As such, we will continue to exchange information about your repayment history with credit reference agencies while you have a relationship with us. We will also inform the credit reference agencies about your settled accounts. If you borrow and do not repay in full and on time, credit reference agencies will record the outstanding debt. This information will be provided to other organisations than run a credit check on you with the credit reference agencies, such as other finance providers. When credit reference agencies receive a search from us, they will place a search footprint on your credit file that may be seen by other lenders. The identities of the credit reference agencies, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share information, data retention periods and your data protection rights with the credit reference agencies are explained in the Credit Reference Agency Information Notice. Automated Decisions We may also automatically decide whether to lend to your business, how much to lend, at what interest rate and under what terms. You have rights in relation to automated decision making, such as the right to request human intervention or challenge a decision in certain circumstances. If you want to know more, please contact us using the contact details above. Retention The period for which we may retain data about you will depend on the purposes for which the data was collected, whether you have requested deletion of the data, and whether we have any legal obligation to retain the data (for example, for regulatory compliance). We will not retain data about you for longer than is necessary to fulfil the purposes for which the data was collected. For example, we will typically keep your data for up to 10 years after you last had an active account or product with us, or after you made or started an application. We may keep your personal data for a longer period where it is necessary for legal, regulatory or operational purposes. Protecting your data We implement, and regularly review, technical and organisational measures designed to protect personal data that we process from unauthorised disclosure, use, alteration or destruction. For example, we limit staff access to personal data and enforce two-factor authentication. Your rights Your personal data is protected by legal rights, which include your right to: Object to, or request a restriction of, our processing of your personal data (for example, you can request that we don’t use your personal data for purposes of direct marketing) Request that your personal data is erased or corrected Request access to your personal data Obtain and reuse certain personal data for your own purposes For more information or to exercise your data protection rights, please contact us using the contact details above. To exercise any of your rights, or if you have any other questions about our use of your personal information, please e-mail dataprotection@teapotng.com [Links to mailing address] You may also use these contact details if you wish to make a complaint to us relating to your privacy. If you are unhappy with the way we handled your personal information or any privacy query or request that you have raised with us, you also have a right to complain to a data protection regulator in the place where you live or work, or in the place where you think an issue in relation to your data has arisen. Changes to this notice We may update this notice (and any supplemental privacy notice), from time to time. We will notify of the changes where required by law to do so. Last modified - July 2019 JOB CANDIDATES At teapotNG, we’re committed to keeping your information private and secure. This notice sets out the personal data we collect and what we will do with it. This notice is applicable to all candidates applying for, or enquiring about, a role within teapotNG. If you have any questions about this policy, you can email us at jobs@teapotng.com.[Links to mailing address] THE PERSONAL DATA WE COLLECT We will collect personal data on anyone who submits a CV to us or applies for a role at teapotNG. We may collect and process the following personal data about you: Your name, date of birth, residential address, email address, phone number and nationality. Your CV and any supporting documentation (such as proof of qualifications). Any other information you voluntarily provide to us. This information may have been collected directly from you or may have been submitted by someone else, such as a recruitment agency. We may also process technical information about your device and website usage (please see our Cookies Policy [Redirects to use of cookies policy page.]for more details) as well as internal records concerning: Your communications with us (e.g. emails) Interview notes Any test or assessment results We may also collect and process publicly available information about your career experience and qualifications from sources such as LinkedIn. What we will do with your data The personal information you provide us will only be used for the purposes of assessing your suitability for a role within teapotNG, conducting interviews and managing the recruitment process. This is on the basis that we have a legitimate interest in ensuring that we have the right talent to help drive the business. How long will we retain your information for? The period for which we may retain data about you will depend on the purposes for which the data was collected, whether you have requested deletion of the data, and whether any legal obligations require the retention of the data (for example, for legal or regulatory compliance). We will not retain data about you for longer than is necessary to fulfil the purposes for which the data was collected. For example, if your application is unsuccessful, we will typically keep your data for up to 18 months from the date of your last communication with us. For successful applicants, we will typically keep your data for up to 10 years after your employment has ended. We may keep your personal data for a longer period where it is necessary for legal, regulatory or operational purposes. Automated decisions As part of assessing your application, decisions may be made by automated means. Your rights Your personal data is protected by legal rights, which include your right to: Object to, or request a restriction of, our processing of your personal data Request that your personal data is erased or corrected Request access to your personal data Obtain and reuse certain personal data for your own purposes For more information or to exercise your data protection rights, please contact us using the contact details above. We may update this notice (and any supplemental privacy notice), from time to time. We will notify of the changes where required by law to do so.