Ampla Finance are committed to protecting and respecting your privacy.
Ampla Operations Limited and RS Consumer Finance Limited are trading as Ampla Finance. Ampla Operations Limited (company number 11814057) registered office is The Blade, Abbey Square, Reading RG1 3BE.
RS Consumer Finance Limited (company number 10906534) registered office is 2 Foubert’s Place, 200-206 Regent Street, London W1F 7PA. Authorised and regulated by the Financial Conduct Authority FRN: 792153
We, us, our means RS Consumer Finance Limited or Ampla Operations Limited, trading as Ampla Finance (“Ampla”/”we”/”us”) and any person to whom any of our respective rights and/or duties in connection with the agreement with you are transferred.
Group means any company within the Ampla group of companies.
This policy contains important information about the personal data we receive from you, create or obtain from other sources and explains how it will be used by us. It is important that you take the time to read this notice so that you understand how we will use your personal data and your rights in relation to your personal data.
If you have any questions about this policy, about how we process personal data or about your rights over your personal data, please contact us by email at email@example.com or write to us at Ampla Finance, 3rd Floor, The Blade, Abbey Square, Reading, RG1 3BE.
What is Personal Data?
Personal data is considered to be any information that either alone, or in combination with other information, would identify you as a living individual. For example, your name and date of birth.
Personal Information you give us
This is information about you that you give to us through the website or Ampla Hub. This may include, without limitation, your name, date of birth, residential address and contact details such as email address and telephone numbers.
We may also collect sensitive personal data about you in relation to our regulatory obligations including to treat customers fairly. Where required, we will ask for your specific consent to use your sensitive personal data.
- When you contact us: We’ll keep copies of correspondence if it is material. We may also record and store telephone conversations between you and us or us and your solicitors concerning you, for a period of 24 months. We’ll keep a record on our systems of any contact we have with you or your solicitors, but we won’t keep or record anything that’s unnecessary.
- When applying for finance: Your solicitor will provide us with certain personal information about you in order to set up your application. When you apply for finance through the Ampla Hub we will ask you for further personal information in order to assess your creditworthiness and affordability for finance in accordance with our credit policy. Please see ‘Personal information we collect’ for further details on the types of data we collect about you, either direct from you or from your solicitor.
- When entering into an agreement with us: when entering into an agreement with us you supply us with personal information. We’ll also gather information about you during your agreement, such as whenever we request an update from your solicitors or if they provide us with information about you or your case.
- When using the Ampla Hub: we collect industry standard log data that will provide us with information about your visit. This includes but is not limited to information such as your location, browser type, operating system, which pages you have visited and how you have reached our website. We use this information to provide you with relevant information and ensure that our site is working properly. We may ask for further information from you should you report a problem with our websites. If you apply for finance online, we may ask you to complete electronic identification sections.
Information we receive from other sources
- We obtain certain personal information about you from your solicitor (being your name and date of birth) and credit reference and fraud prevention agencies. Please see ‘Credit Referencing and Fraud Prevention’ below for further information.
- Intermediaries – Your Solicitor will issue us with an application form and supporting documentation on your behalf by corresponding with us by telephone, e-mail or otherwise, for the purposes of entering in to and administering your agreement. The type of information collected may include; your personal details, contact details, relevant asset or policy details including your bank account number and sort code, identification documentation, ownership documentation and sensitive information such as any medical information disclosed to us, Your Solicitor is responsible for obtaining your approval to share your personal information with us in advance of submitting an application on your behalf
- Financial/ Credit Information – We will use information provided by credit reference agencies when assessing your application for finance and to verify your or, if applicable, your representatives identity. Such information may include some details about other credit you have taken out, any credit arrangements you have met or failed to meet, and any court judgments made against you.
- Fraud Prevention Agencies – When verifying your identity as part of our application process, we may access information recorded by fraud prevention agencies within and outside the UK. This may include information about any criminal convictions and any allegations regarding criminal activity that relate to you.
- Public databases – we may obtain information about individuals from public databases. We use reputable sources including but not limited to the electoral register, The Land Registry and Companies House. We employ appropriate measures to assure the quality of information which we collect.
Information we collect or generate about you and your representatives
- Website Usage Information – Our website uses Google Analytics to automatically gather certain statistical information such as the number and frequency of visitors and their IP addresses. This information is used as aggregated statistical information about users, providing usage by IP address. This information helps us to measure how individuals use the website and our services, so that we can continually improve them.
- We may monitor and record communications with you (such as telephone conversations and emails) to resolve complaints, improve our service, fraud prevention and for training and quality assurance purposes.
- We generate data for statistical analysis.
How we use your personal data
We gather information about you so that we can provide the services and products that you may request from us. Your personal data may be used by us in the following ways:
Before We Enter Into an Agreement with You
- Before we provide financing to you, we undertake checks for the purposes of preventing fraud and money laundering, to verify your identity and to assess whether you are sufficiently likely to repay amounts which you would owe to us if we were to enter into an agreement with you. These checks require us to process personal data about you which you have provided, we have collected from you or we have received from third parties. This personal data will be used to prevent fraud and money laundering, to allow us to assess the credit risk of entering into an agreement with you and to verify your identity.
Lawful basis of processing: We process your personal data on the basis that we have a legitimate interest and legal obligation in preventing fraud and money laundering, and to verify identity, in order to protect our business, to assess the credit risk of entering into an agreement with you and to comply with laws that apply to us. Such processing is also a contractual requirement of the financing you have requested.
- Our main use of your information is to administer your agreement with us. We will use your information to process drawdown requests received from your solicitors, obtain updates from your solicitor in relation to your claim and to contact you regarding any other matter relating to your agreement. We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.
Lawful basis of processing: The use of your information in this way is necessary for the performance of the agreement with you and, initially, to take steps to enter into the agreement with you.
Credit Referencing and Fraud Prevention
- In order to process your application, we will perform credit and identity checks on you with one or more credit reference agencies (“CRAs”).
To do this, we will supply your personal information to CRAs and they will give us information about you. This will include information from your loan application and about your financial situation and financial history. CRAs will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.
We will use this information to:
- assess your creditworthiness and whether you can afford to take the loan;
- verify the accuracy of the data you have provided to us;
- prevent criminal activity, fraud and money laundering;
- manage your account;
- trace and recover debts; and
- ensure any offers provided to you are appropriate to your circumstances.
We will continue to exchange information about you with CRAs while you have a relationship with us. We will also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.
When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail at https://www.experian.co.uk/crain/index.html. CRAIN is also accessible from each of the three CRAs – clicking on any of these three links will also take you to the same CRAIN document: TransUnion https://www.transunion.co.uk/crain; Equifax https://www.equifax.co.uk/crain.html; Experian https://www.experian.co.uk/crain/index.html.
Before we provide financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process your information. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the financing you have requested. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us on the details below.
Please telephone us on 0118 321 6940 if you would like details of the credit reference and fraud prevention agencies from whom we obtain and to whom we pass information about you. You have a legal right to these details.
Lawful basis of processing: This is necessary for the purposes of our legitimate interests and our legal obligation in establishing any risks in entering into an agreement with you and any risks throughout the agreement and to prevent, detect and prosecute fraud and other crimes.
- We will give details of the loan agreement that you have with us and how it is conducted to credit reference agencies and fraud prevention agencies. If you do not repay your loan in full at the conclusion of your claim, we will tell credit reference agencies who will record the outstanding debt. The information at the end of this Privacy Declaration (under ‘How To Find Out More’) provides a link which gives you further details about how credit reference agencies, fraud prevention agencies, we and other lenders use your information in this way – we currently submit data to TransUnion.
Lawful basis of processing: Use of your information in this way is necessary for the purposes of our legitimate interests in recovering any debt owed to us and for the purposes of our legal obligation to detect and prevent fraud. We currently obtain information from TransUnion (relating to the ‘credit search’) and we currently pass information about you to TransUnion.
Please contact us at the details provided below in the ‘How to find out more’ section, if you would like the details of the credit reference agency from which we obtain information (relating to the “credit search”) and the credit reference and fraud prevention agencies to which we pass information about you in accordance with this Privacy Declaration.
Introducers, Agents and Other Third Parties
- We may pass your information to companies within our Group, who may use and update your information to assess lending risks, to administer our loan agreement with you, to recover debts, to prevent, detect and prosecute fraud and other crimes, and to manage our and any member of our Group’s relationship with you.
Lawful basis of processing: This is necessary for the purposes of our legitimate interests in establishing any risks in entering into an agreement with you and any risks throughout the agreement, the ability for us to recover any debt owed to us by you and for the administration of the agreement with you. The Group also has legal obligations that it must comply with (such as to report fraud).
- Sometimes we need to give information to the solicitor who introduced you to us for the following purposes:
- to enable the solicitor to deal with complaints made by you;
- to obtain updates in relation to your claim;
- to coordinate responses to requests made by you relating to you rights under data protection laws;
- to effect the exercise of any rights that you have under applicable laws and regulations.
Lawful basis of processing: This is necessary for the purposes of our legitimate interests in order to protect our business and to comply with relevant data protection laws that apply to us.
- If we become entitled to terminate the agreement we have with you, we may pass your information to a debt collection agency in connection with recovery of monies due on your agreement.
Lawful basis of processing: Use of your information in this way is necessary for the purposes of our legitimate interests in recovering any debt owed to us.
- We will share your information with other organisations if we sell or buy any business or assets (as we will share your data with the prospective seller or buyer), or if we or substantially all of our company assets are acquired by another party, in which case your information will be one of the transferred assets. These other organisations will also be controllers of your information and are solely responsible for protecting your personal data and processing it in line with data protection laws.
Lawful basis of processing: This is necessary for the purposes of our legitimate interests to ensure that we or our business remains commercially viable.
- We will share your information with any funder who provides the finance for your agreement.
Lawful basis of processing: This is necessary for the purposes of our legitimate interests to ensure that we or our business remains commercially viable.
- We will record phone conversations with our customers.
Lawful basis of processing: This is necessary for the purposes of our legitimate interests to enable us to properly resolve complaints, to improve our service standards and for staff training purposes.
- We use analytics tools (including Google Analytics) on our website that are provided to us by third parties acting on our behalf; we will ensure that your information is secure and protected in accordance with our obligations under data protection law.
Lawful basis of processing: We use your information in this way as it is necessary for our legitimate interests in (i) detecting fraud by understanding behaviours and patterns that correlate to committing fraud; and (ii) understanding the customer journey so that we can understand your needs and provide a better service to you, and to help us develop and improve our products and services.
These tools may process some of your personal data by converting it into statistical or aggregated data.
Retention of your information
If your application for finance is declined or if your application is accepted but you do not proceed, we keep your information for 7 years or as long as necessary to deal with any queries you may have. If your application is accepted and you proceed, we hold your information for 7 years from the date at which your agreement ends or as long as necessary thereafter to deal with any queries you may have.
Information that we provide to credit reference agencies remains on their file for 6 years after your loan agreement with us is closed, whether settled by you or upon default. Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to 6 years.
We may hold your information for a longer or shorter period from that described above where:
- the law requires us to hold your personal information for a longer period, or delete it sooner;
- you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law; and
- in limited cases, the law permits us to keep your personal information indefinitely provided we put certain protections in place.
Location of your information
The information that we collect from you may be transferred to, and stored at, a destination outside the UK and the European Economic Area (“EEA”). It may also be processed by staff operating outside the UK and the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the processing of your payment details and the provision of support services. Where adequate protections for your information do not exist under the applicable laws of that third country, we (or the party transferring your information) will take necessary steps to ensure that appropriate safeguards are put in place to maintain the same levels of protection as are needed under UK data protection legislation. Safeguards include imposing contractual obligations on the recipient of your information or subscription to ‘international frameworks’ that ensure adequate protection. Please contact us for more information about the protections that are in place.
Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.
Under the General Data Protection Regulation 2016 (Regulation (EU) 2016/679) you have certain rights including the right of access to your personal data. If anything is inaccurate or incorrect, please let us know and we will correct it. You can also update your contact details via the Ampla Hub.
You have the right to (i) be informed about how your information will be used (at no cost to you), (ii) ask us to restrict processing, (iii) if it is technically feasible, transmit your information from our systems to a third party’s system in a safe and secure way, (iv) object to our use of your information where we are using it for the purposes of our legitimate interests as described in this agreement and your rights outweigh our legitimate interests, (v) not to be subject to a decision when is it based on automated processing and it produces a legal effect or a similarly significant effect on you and if it does then you have the right to request a human intervention – please contact us using the contact details below for more information about exercising this right (vi) access your information at no cost (unless your request is unfounded or unreasonable), (vii) if your information is inaccurate or incomplete, then you can ask us to have it rectified or you can update your contact details via the Ampla Hub, (viii) in certain circumstances, you have the right to ask us to delete your personal information. For more information or to exercise your data protection rights, please contact us using the contact details below. You can also access the ICO website for further information on your data protection rights using the following link: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
You have the right to lodge a complaint with the Information Commissioner’s Office where your data has or is being used in a way that you believe does not comply with data protection laws. We encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have
Changes to this privacy declaration
We may make changes to this Privacy Declaration at any time by posting a copy of it on the Ampla Hub. Any changes will take effect 7 days after the date on which we post the modified terms on the Ampla Hub, whichever is the earlier.
How to find out more
You can contact the credit reference agencies currently operating in the UK; the information they hold may not be the same so it is worth contacting them all. They will charge you a small statutory fee.
If you have any queries or concerns about the way in which we use your information, or if you want details of the relevant fraud prevention agencies, you can contact us at:
Data Protection Officer
3rd Floor, The Blade
or send an e-mail to firstname.lastname@example.org with the subject heading “data protection query”.