Privacy Policy

We ask that you read this Privacy Policy carefully as it contains important information regarding your personal information. This Privacy Policy describes the categories of personal information we will process and the purposes for processing. Shire ensure that the collection and usage of your personal information is done in accordance with the General Data Protection Regulation (GDPR) and its requirements.
 

1. Introduction

1.1 This Privacy Policy is published on behalf of Shire Leasing Plc and its subsidiaries, any references to ‘Shire’, ‘we’, ‘us’ or ‘our’ is to include all companies listed below:

            1.1.1 Shire Leasing Plc – Company number 02476571

            1.1.2 Shire Securities Limited – Company number 05881283

1.2 Shire Leasing Plc (“Shire”) takes your privacy seriously, in this Privacy Policy you can find out more information about your privacy rights and how Shire gather, use and share your personal information. This will include personal information we collect directly from you, a third party or information we already hold about you.
1.3 Shire’s Data Protection Officer (“DPO”) can answer any queries you might have regarding your personal information or if you wish to exercise any of the rights mentioned within this Privacy Policy. Please contact our DPO by email at DataProtectionOfficer@shireleasing.co.uk, by telephone at 01827 689 39 or by post at 1 Calico Business Park, Sandy Way. Amington, Tamworth, Staffordshire, B77 4BF.
For more information about your rights please see Section 10.
1.4 This Privacy Policy contains up to date information about how Shire uses your personal information, this policy will update any previous information about how we process and use your personal information.

2.  About Shire

2.1 When Shire collect and use personal information about you we become responsible for this information. When we do this we are regulated by the GDPR. Under this regulation Shire is known as a ‘data controller’ of that personal information.
2.2 By personal information, we mean information which can be used to identify you. For the purposes of this privacy policy, where we refer to “you” or “your” we are referring to individuals whose information we process, this includes business owners and any key personnel from the party making the application or entering into an agreement.

3. How we collect personal information:

3.1 Shire will obtain personal information:
• Directly from yourself, from e.g. order form/application documents/telephone/email;
• Through the course of an agreement either directly from you, your association or with a business supplier/brokers who introduce you to us;
• From third party organisations such as Credit Reference Agencies (‘CRAs’) and Fraud Prevention Agencies (‘FPA’);
Shire may also obtain personal information from either monitoring or recording calls. We will record and monitor telephone calls for training, auditing, resolving queries and to improve overall quality and service delivery. When we process your personal information this will be either for our legitimate business interest, to comply with our legal obligations, to perform a contract with you or where we have your consent as set out in Section 6.

4. How we use your personal information

4.1 In order for Shire to provide you with any products or services we will need to process your name, address and date of birth. In certain circumstances we may be required to obtain additional personal information about you.

5. Automated decision making

5.1 Sometimes we use your personal information in automated processes to make decisions about you, such as credit scoring. We might also use automated processes to create a profile of you. We do this to help ensure decisions are made accurately, fairly and efficiently. Decisions Shire makes solely on automation do not result in a rejected decision.

6. Our legal basis for processing your personal information

6.1 Shire will only use your personal information where it is permitted by laws that protect your privacy rights. When you apply for finance or enter into a finance/trading agreement with us we will use your personal information where:
• It is fair to use the personal information either in our interests or someone else’s interests, where there is no disadvantage to you – we refer to this as legitimate business interest,
• We need to use the information to perform a contract with you,
• We need to use the information to comply with our legal obligations; and
• We have your consent (if consent is needed).
Where we have your consent, you have the right to withdraw this. Shire will let you know how you can do this at the time we gather your consent.

7. Sharing your personal information

7.1 Who we share your personal information with is dependent on the products or services we provide to you. For the majority of our products and services we will share your personal information with our funders, brokers, suppliers, CRA’s and FPA’s. For more information on how we use your personal information please see Section 4.
7.2 The personal information we have about you is usually gathered from you direct or through the course of an agreement, from public domain or third parties. In some circumstances we will transfer and obtain personal information from third parties where it is necessary for purposes such as credit checking and fraud prevention or for marketing purposes.
For more information on who we share information with please click here for a list of the third parties we share your personal information with and how to access their Privacy Policy.

8. Keeping your personal information secure

8.1 Shire have adopted appropriate security measures to ensure your personal information remains secure. This prevents your personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
8.2 We also have procedures in place to deal with any suspected information security breach. We will notify you and any applicable regulator of a suspected information security breach where we are legally required to do so.

9. Transferring information outside of the European Economic Area

9.1 In providing our products and services to you we may transfer your personal information outside the European Economic Area (‘EEA’). Any transfer of your personal information will be in accordance with our legal obligations to ensure the safeguarding of your personal information during such transfer. If you would like more information or the details of the safeguards we have in place to protect your personal information please contact our DPO using the details set out in Section 1.

10. Your rights

10.1 Under the GDPR you have a number of rights in terms of how we use your personal information. You have the right to object how we use your personal information. You also have the right to access the personal information we hold about you. You can also ask us to delete, restrict or correct any inaccuracies in your information. You can also ask us to provide some of your information to a Third Party.

11. Personal information retention

11.1 The length of time we keep your personal information for is dependent on how the information is used and recorded. Shire will never retain your personal information for longer than the purposes we require it for or is necessary for us to retain. Generally this will be up to seven years after the end of the agreement or application in order to comply with our legal obligations.
If you would like more information about how long we keep your information please contact our DPO using the details listed in Section 1.

12. Your online activities

12.1 Shire uses cookies to track your use of our website www.shireleasing.co.uk.

13. How to make a complaint

13.1 If you are unhappy with how we process and use your personal information you can make a complaint directly to us, you can do this by contacting our DPO with the details listed in Section 1.
13.2 We hope that we can resolve any query or concern you raise with us directly, however if we are unable to do so the GDPR also gives you right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”) who may be contacted at https://ico.org.uk/make-a-complaint.