Credibble Limited (“Credibble”, “we”, “our” and “us”) is committed to protecting the privacy of the users visiting the Credibble.co.uk website (the ‘Website’).
- users of the Website;
- those who communicate with us; and
- individuals who enquire about or receive consumer services from us (“Consumer Services”) either via the Website or through some other means (“you”)
“Personal data” is any information that relates to an identifiable natural person. Your name, address and contact details are all examples, if they identify you. The term “process” means any activity relating to personal data, including (for example) its collection, storage, transfer or other use.
Table of Contents
1. HOW CAN YOU CONTACT US?
We can be contacted by any of the following methods:
Post: Credibble Limited, Rainham House, Manor Way, RM13 8RH.
Web Address: https://www.credibble.com/contactus
Phone: 0800 228 9998
2. WHAT TYPES OF PERSONAL DATA DO WE PROCESS AND WHERE DO WE GET IT?
Depending on your use of the Website, use of consumer services and any contact with us (whether through the Website or otherwise), we will collect and/or receive the following types of information :
|Category||Type of personal data||Where collected from|
||You directly (e.g. where prompted to provide such information or when you contact us, including through the Website)|
||The device you use to access the Website|
|Consumer Services |
||You directly (e.g. where prompted to provide such information when signing up to receive consumer services) From third party sources, in relation to the ID Fraud Monitor products (e.g. where we have identified potentially stolen data relating to you or at risk information included on your social media profile).|
3.WHAT DO WE DO WITH YOUR PERSONAL DATA AND WHY?
We process your personal data for particular purposes in connection with:
- your use of our Website;
- any product(s) you have enquired about or receive from us;
- your communications with us;
- any other engagements you may have with us; and
- the management and administration of our business.
We are required by law to always have a ‘lawful basis’ (meaning a reason or justification) for processing your personal data. There are a number of lawful basis set out in data protection law but we consider the following to be most relevant to our processing of your personal data:
- The processing is necessary in order for us to enter into or perform a contract with you (“Contract”)
- The processing is necessary to comply with a legal obligation (“Legal Obligation”)
- The processing is necessary for the purposes of legitimate interests pursued by us or third party, and these are not overridden by your interests or fundamental rights (“Legitimate Interest”)
- The processing is on the basis of your consent (“Consent”)
The table below sets out the purposes for which we process your personal data and the relevant lawful basis on which we rely for that processing. Please note that where we have indicated that our use of your personal data is necessary for us to comply with legal obligations or for us to take steps, at your request, to enter into an arrangement with you (or perform it), and you choose not to provide the relevant personal data, we may not be able to enter into or continue our arrangement with you. Practically, this may mean that you are not able to access certain areas of our Website or receive certain services.
|Purposes of processing||Consent||Contract||Legal Obligation||Legitimate Interest|
|Using your Contact Information to respond to your enquiries and/or complaints|| (it is in our mutual interest to respond)|
|Using your Contact Information to send you information relevant to any services your receive from us|| (where we are required to provide any information under contract)|| (it is in our mutual interest that you be updated with pertinent information)|
|Using your Contact Information to send you direct marketing as set out in the section ‘HOW DO WE COMMUNICATE WITH YOU’ (below)|| (where consent is legally required)|| (it is in our mutual interest to ensure that you are updated of products/services that may be of interest)|
|Using Website Information to ensure the operation and performance of the Website (please also see the ‘COOKIES’ section below)|| (we need to ensure that the Website functions correctly)|
|Using Website Information to improve the functionality of the Website|| (it is in our mutual interest to improve the Website)|
|Using your Consumer Services information to provide you with the consumer services product(s) that you have enquired about or purchased.|| (where such processing is necessary for us to provide the product/service)|| (it is in our mutual interest to provide our services to you)|
|Using Contact Information, Website Information and/or Consumer Services Information to enable you to create accounts and log-in or otherwise gain access to consumer services products through the Website|| (where we are required to provide such access under contract)|| (it is in our mutual interest to provide you with a private log-in in order to access services)|
|Using any relevant personal data to establish and enforce our legal rights or to comply with a court order, law enforcement requirement (or other legally mandated request) or legal obligation|||
|Using any relevant personal data for our general record keeping and Website user management|| (where we are required to maintain such records under contract)|| (we may need to store Website user data so that we can refer back to it)|
|Using any relevant personal data in relation to the managing the proposed or actual sale, restructuring or merging of any or all part(s) of our business|||| (we have legitimate interest in being able to sell or restructure our business and maintain continuity for us or a buyer)|
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. If you do decide to withdraw your consent, we will stop processing your personal data for that purpose unless there is another lawful basis that also applies and which we are relying on – in which case, we will let you know.
Please note that in order to provide certain consumer services products (in particular, those related to your credit rating), your credit reference information will be processing in accordance with the following fair processing notices (such processing is not covered by this notice): We may also convert your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable (thereby creating anonymized data). Anonymized data is not personal data and we may use such data to conduct research and analysis, including to produce statistical research and reports. For example, to help us understand and improve the use of our Website
4. WHO DO WE SHARE YOUR PERSONAL DATA WITH AND WHY?
Credibble may share your information with the following entities:
Affiliates and Third Parties: Credibble may share your information with its affiliates—companies that control, are controlled by, or under common control with Credibble —as well as selected third parties with whom Credibble works.
These recipients within and outside our group, may be processing your personal data on our behalf as a Service Provider (see below) or they may be processing it for their own purposes as a controller in their own right.
We have summarised below the categories of recipients with whom we are likely to share your personal data.
Service Providers: Credibble may share your personal data with entities that provide services to it, such as vendors and suppliers that provide Credibble with technology, services, and/or content for the operation and maintenance of the Website. Access to your personal data by these service providers is limited to the information reasonably necessary for the Service Provider to perform its limited function. Credibble takes steps to help ensure that Service Providerskeep your personal data confidential and comply with Credibble’s privacy and security requirements.
Disclosure for Legal Reasons or as necessary to protect Credibble: Credibble may release personal data to other parties: (1) to comply with valid legal requirements such as laws, regulations, search warrants or court orders; (2) in special cases, such as a physical threat to you or others, a threat to public security, or a threat to Credibble’s system or network; or (3) cases in which Credibble believes it is reasonably necessary to investigate or prevent suspected or actual harm, abuse, fraud, or illegal conduct. Changes in Credibble’s corporate structure: If all or any part of Credibble is sold, merged or otherwise transferred to another entity (including a transfer of Credibble’s assets), the personal data you have provided to Credibble may be transferred as part of that transaction.
5. WHERE IN THE WORLD IS YOUR PERSONAL DATA PROCESSED?
Credibble is a UK based company and the majority of our processing of your personal data takes place within the UK. However, Credibble is part of a global group of companies and it may transfer your personal data to other group members outside of the UK and/or the European Economic Area. In addition, some of our Service Providers (please see above) may have processing operations in other jurisdictions.
Please be aware that the data protection laws in some jurisdictions may not provide the same level of protection to your personal data as is provided to it under UK laws. Non-UK Users: The Website is intended for users within the United Kingdom. If you use this Website from outside the United Kingdom, please be aware that information you provide to Credibble or that Credibble obtains as a result of your use of this Website may be processed and transferred to the United Kingdom and be subject to the laws of the United Kingdom.
6. HOW DO WE COMMUNICATE WITH YOU?
We will use your personal data in order to communicate relevant information in relation to your use of the Website, to respond to any queries or complaints you may have and to provide updates in relation to the consumer services and products you receive from us.
In addition, we would like to keep you up to date with other products and services that we provide and which may be of interest to you. Where you have enquired about or purchased consumer services products from us, you will have been given the option to opt out of receiving our newsletter and other marketing communications from us, in relation to similar products and services that we provide. Where you did not choose to opt out, we will send such communications to you via email.
You opt-out of receiving these marketing communications at any time by either contacting us (please see the section ‘HOW CAN YOU CONTACT US?’ above) or following the instructions within the relevant communications.
7. HOW DO WE SAFEGUARD YOUR PERSONAL INFORMATION
Credibble are committed to protecting the security of your personal data and implement appropriate technical and organisational measures taking into account the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of you, as an individual.
8. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will only retain your personal data for a limited period of time and for no longer than is necessary for the purposes for which we are processing it.
For example, we will typically retain personal data in relation to consumer services customers, for so long as they receive those services and for a period of up to 6 years following cancellation of the services.
In some cases, it may be necessary for us to retain your personal data for different periods. The factors that direct how long we will retain personal data include the following:
- any laws or regulations that we are required to follow.
- whether we are in a legal or other type of dispute with each other or any third party.
- the type of information held about you; and
- whether we are asked by you or a regulatory authority to keep your personal data for a valid reason.
What is a Cookie?
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. A device can refer to a computer, smartphone, tablet or any other device from which you gain internet access). Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device.
You can find more information about cookies at: http://www.allaboutcookies.org
For a video about cookies visit:
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.
The cookies used on the Website have been categorised based on the categories found in the ICC UK Cookie guide. A list of all the cookies used on the Website, by category, is set out below.
Category 1: Strictly necessary cookies – These cookies enable services you have specifically asked for.
These cookies are essential in order to enable you to move around the Website and use its features, such as accessing secure areas of the Website. Without these cookies certain services cannot be provided.
Category 2: Performance cookies – These cookies collect anonymous information on the pages visited.
These cookies collect information about how visitors use the Website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and anonymous. It is only used to improve how the Website works.
An example of a performance cookie we use is:
|Google Analytics||We use Google Analytics to give us insight into how our users interact with the Website. The information collected is anonymous and statistical in nature, including the number of visitors to the Website, where they have come to the site from and the pages they have visited. More information can be found at: http://www.google.co.uk/intl/en/analytics/privacyoverview.html|
Category 3: Functionality cookies – These cookies remember choices you make to improve your experience.
These cookies allow the Website to remember choices you make (such as your user name or the region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video. The information these cookies collect is anonymised and cannot track your browsing activity on other websites. An example of a functional cookie we use is:
|Cookie Compliance||These cookies are used to track the acceptance of Credibble’s use of certain cookies and place those cookies on your browser, recording acknowledgement.|
|Style||A content management session cookie used to remember selections and preferences which expires when the user exists their browser session. The cookie stores no personal data or identifiers.|
Category 4: Targeting cookies or advertising cookies – These cookies collect information about your browsing habits in order to make advertising relevant to you and your interests.
These are usually third party cookies (see further details below) used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited the website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.
How to manage cookies
Category 1, 2 and 3 cookies will be set automatically when you visit the Website. Category 4 cookies will be deployed only following your acceptance via the cookies banner.
Third Party Cookies
We may allow third party organisations to set cookies using the Website in order to deliver services. Any use of your browser information by these third parties, will be in accordance with their own fair notice documents. Therefore, if you would like more information about the cookies used by these third parties and the processing of your browser data by them, please see their individual privacy policies listed below:
|Cookie||What the cookie is used for|
|Adobe (formally Omniture)/ Hitbox||We use the Adobe SiteCatalyst analytics product to give us insights into how our users interact with the website. The information collected is anonymous and statistical in nature. To find out more , go to http://www.adobe.com/privacy/marketing-cloud.html|
|Adobe Test and Target||Adobe on-site personalisation services allow us to test new content and make our websites, apps, social networking pages, or emails more relevant to you. To learn more visit: https://marketing.adobe.com/…/cookies_target.html|
|Brighttag||We use BrightTag to manage our other tags, such as Google Analytics and Adobe SiteCatalyst. BrightTag does not capture any additional information in itself but helps us to make changes to our website and keeps the page loading times down. For more information, go to http://www.brighttag.com/products/tag–management/|
|Ensighten||We use Ensighten Services to give us insights into how our users interact with the website. The information collected is anonymous and statistical in nature. To find out more , go to: https://www.ensighten.com/privacy-policy/|
|w55c.net, crwdcntrl.net||We may allow these cookies to be set by, Lotame Solutions Inc. They also collect browsing non-personal data to support customised advertising campaigns and related activities. To find out more about these cookies and how to manage them, go to: http://www.lotame.com/legal|
|Google Analytics||Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. https://developers.google.com/…/cookie-usage|
|Google – Doubleclick||We sometimes conduct advertising campaigns using Doubleclick, a service from Google. To find out more about Doubleclick cookies and how to control them, go to: http://www.google.co.uk/policies/privacy/ads/|
|invitemedia.com||Invite Media runs a platform that allows organisations to buy or sell space on websites for online advertising. More information can be found at http://www.invitemedia.com/privacy_policy.shtml|
|netmng.com||These cookies are used for the collection of anonymous information to support the placement of relevant online advertising when you surf the internet. For more information on these cookies and how to manage then, go to http://oo.netmng.com/optout/cp/en.html|
|scorecardresearch||These cookies are set by Scorecard Research, part of comScore Inc. They collect browsing data to create reports on internet behaviour and trends. For more information visit: http://www.scorecardresearch.com/privacy.aspx|
|specificclick.net||These cookies are set by Specific Media who run an online advertising network. More information on these cookies and how to manage them can be found at http://www.specificmeadia.co.uk/privacy|
|Quantcast||These cookies are set by Quantserve who do audience research and behavioural advertising. More information about these cookies and how to manage them can be found at http://www.quantserve.com|
Please be aware that if you use different devices to view and access the Website (e.g. your computer and smartphone), you will need to ensure that each browser on each device is adjusted to suit your cookie preferences. Links to Third Party Websites: The Website may provide links to other websites that might be of interest to you. Credibble is not responsible for the security or privacy practices of other websites that you use through these links. You should exercise caution when using such websites, and you should read their privacy policies in order to better understand what information they collect about you and how they use it.
10. WHAT ARE YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA?
Data protection law provides you with a number of rights in relation to your personal data (which are summarized below). You can exercise these rights by contacting – please see the section ‘HOW CAN YOU CONTACT US’ above.
Subject to the requirements of applicable laws and certain limitations or exemption, you have the right to:
- access your personal data and be provided with certain information in relation to it, such as the purpose for which it is processed;
- require us to correct any inaccuracies in your personal data without undue delay;
- require us to erase your personal data (please be aware that the right of erasure under data protection law is not an absolute right as it only applies in relation to one or more specific circumstances);
- require us to restrict the processing of your personal data;
- receive the personal data which you have provided to us in a machine readable format, where we are processing it on the basis consent or to comply with a contract with you (please see the above tables) and such processing is automated; and
- object to a decision that we make which is based solely on automated processing of your personal data.
Credit report corrections
We want to make sure that your personal information is accurate and up to date. However, please be aware that much of the information held about you by our partnered Credit Referencing Agency, is received from lenders and banks. They are not able to automatically amend this information upon request. They must instead follow a set process of informing the relevant lender and seeking their clarity as to the validity of the data. While this process is undertaken, a note will be placed on your file that a rectification request has been made. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK data protection regulator. More information can be found on the ICO website at https://ico.org.uk/
Date last updated: May 2020