This Notice sets out how your personal information will be used by JBR Capital Ltd and/or the JBR Capital Group.
INTRODUCTION
(a) The terms set out in this Notice apply to any information you give JBR Capital Ltd and/or any member of the JBR Capital Group from time to time. It will also apply to any information you have already provided.
(b) We may revise or supplement our Notice from time to time for any of the following reasons:
- to provide for the introduction of new or improved systems, methods of operation, services or facilities;
- to reflect an actual or expected change in market conditions or general vehicle lending practice;
- to comply with or anticipate any changes in any legal or regulatory requirement;
- to ensure that our business is run prudently;
- to make our Notice clearer or more favourable to you; or
- to rectify any mistake that might be discovered from time to time.
Your continued use of any of our services following any update to this Notice will constitute your acceptance of any changes.
(c) You must not send us personal information about someone else without first getting his or her consent for it to be used and disclosed in the ways set out in our Notice. If you give us information (including personal information) on their behalf, you confirm that the other person has given you permission to act on his/her behalf and has agreed that you can:
- provide their personal information to us;
- give consent on their behalf to the processing of their personal data;
- receive on their behalf any data protection notices; and
- give consent to the transfer of the individual’s personal data abroad.
When you give us information about someone else, or someone else discloses a connection with you, that information may be taken into account with your personal information when assessing your application to receive our products or services.
(d) We treat your privacy very seriously and we understand that you will wish to know how we will use the information we collect from or about you. We use your personal information in accordance with our Notice and will fully comply with all applicable UK data protection legislation (including the EU General Data Protection Regulation that came into force on 25 May 2018, as amended or replaced). It is important that you take all necessary and appropriate steps to protect your data yourself, for example, by ensuring that all passwords are kept secure.
(e) JBR Capital Group consists of JBR Capital Ltd, JBR Auto Holdings Ltd, JBR Auto Finance Ltd, JBR Auto Services Ltd and JBR Capital DD Limited together with the holding companies (and other subsidiaries of those holding companies) and any direct or indirect subsidiaries of those companies.
INFORMATION WHICH WE MAY COLLECT ABOUT YOU
We may collect and process the following information about you:
- Information you provide (either directly or through an agent such as a dealer, solicitor, independent financial advisor or introducer) by completing an application for our products and services, whether in writing, on our website, over the telephone, Live chat, WhatsApp or by some other means. This information may include your name, address, contact details, date of birth, bank details, details about your employment and financial information.
- Monitoring and recording of other personal data supplied by you when you contact us by other means (such as by email, telephone, Live chat, WhatsApp etc), and records of any correspondence from you or anyone acting on your behalf.
- Personal details that you provide to us via our website when you complete our online form (such information may include, but may not be limited to, your name, telephone number, postal address and email address).
- Details of transactions you carry out with us.
- Your credit history.
USE OF INFORMATION COLLECTED
We will act proportionately and responsibly when we process, transfer or disclose your information and we will act in accordance with applicable UK data protection laws. We use your personal data for the following purposes:
- we may process, transfer and disclose your information to provide you with products and services;
- verifying your identity;
- taking credit decisions;
- detecting and preventing fraud;
- complying with laws and regulations (including the rules of any regulatory authority) and public duties;
- in order to accurately carry out your instructions and/or comply with our regulatory obligations;
- assisting in improving our services and in the interests of security and crime prevention;
- market research and providing you with information via mail, telephone or other means;
- about JBR Capital Group’s products or services from time to time (see ‘Marketing’ below for further information);
- analysis in order to assess and improve our business or the business and services of the JBR Capital Group.
Where you have applied for credit or where we have agreed to provide credit to you, we may from time to time make searches of your record at a credit reference agency. Your record includes searches made and information given by other businesses. Details of our searches will be kept by the agency and will be seen by other organisations that make searches with the agency for the purposes of credit assessment, debt recovery, management of your accounts, prevention of money laundering and fraud, and statistical analysis.
Where you have applied for credit or where we have agreed to provide credit to you, we will regularly submit your data to credit reference agencies. This is done in order to promote responsible lending, and helping to prevent over-indebtness for our customers, helping prevent and detect crime and fraud and anti-money laundering services, and support other activities such as identity verification, supporting tracing and debt collection. Your credit rating could be affected if you do not keep your repayments up to date. The Credit Rating Agencies may, in turn, share your personal data with Fraud Prevention Agencies, resellers, distributors and agents, public bodies, law enforcement and regulators, as well as any additional data Processors. The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at https://www.transunion.co.uk/crain. You can request get a copy of information which we and the credit reference agencies (CRAs) hold and that you have a right to see under GDPR.
The credit rating agencies will use your information for the following purposes:
- screening, credit reporting and affordability checks;
- verifying identity, age, residence, and preventing and detecting criminal activity, fraud and money laundering;
- account management;
- tracing and debt recovery;
- statistical analysis, analytics and profiling; and database activities.
We may at any time search your record with a fraud prevention agency. If at any time you give us or procure the giving of false or inaccurate information and we suspect fraud we will record this. The fraud prevention agency will use information recorded for statistical analysis about fraud and will also share it with other organisations who will use it to prevent fraud and to help make decisions on finance proposals requested by you, members of your household or any other businesses associated with you.
Where you apply for credit we will tell you, where permitted by law, if we make a decision about you relating to your credit scoring or eligibility for our products or services solely using an automatic decision making process. You can then request a review by us of the decision using other means.
If a joint application is made, or the application refers to a business or financial partner, this may result in the CRA’s associating you with the other party when you and/or they make any application for finance in the future. In addition, if you are making an application on behalf of any other person(s), by doing so you confirm that you have their authority to disclose their personal information to us, and to give consent on their behalf to the use of their personal data as set out in this Notice.
We use your personal data on the following legal bases, depending on the purpose of our processing:
- to enable us to perform a contract between you and us (if you entered into a contract with us for products or services);
- your consent (for example, in respect of marketing);
- otherwise in our legitimate interests (for example, to make available the website to you); or
- to comply with a legal obligation.
Where the processing of your personal data by us is based on your consent, you may withdraw your consent at any time, by emailing us at info@jbrcapital.com. If you withdraw your consent, this will not affect the lawfulness of any processing which has taken place before you have withdrawn your consent.
MARKETING
We may from time to time contact you about products and services available from JBR Capital Group which we believe may be of interest to you. We may do this by post or by phone unless you have told us in writing not to; and by e-mail, text or other electronic means if you have told us that we can. We use WhatsApp for Business as one of our contact methods available to our customers. Where you contact us through WhatsApp, the same data policies will apply and we will ensure that your information will be treated with the same level of confidentiality and security when your personal data is concerned.
If you have opted in for marketing, your data could be used for Facebook Custom Audiences in order to best tailor the advertising to every potential customer’s needs. This data will not be transferred to or used by any third party, and it will be used solely for the marketing purposes of JBR Capital Group.
If you have come through our direct channel after August 2022 your data will be used for Trustpilots Automates Feedback Service in order to collect verified reviews. Please refer to Trustpilot’s Privacy Policy here.
You can tell us at any time if you change your mind, by email at info@jbrcapital.com or in writing to our office address.
DISCLOSURE OF YOUR INFORMATION
We may disclose your personal information to the following recipients:
- Where you have been introduced to us by an introducer such as a dealer or finance broker, we will inform the introducer about the outcome of your application and whether we have agreed to provide you with the product or service for which you have We may also disclose information about you and your relationship with us throughout the term of that relationship. If you do not wish us to disclose this information, please inform us in writing at info@jbrcapital.com.
- We engage other companies and individuals to perform functions on our behalf, including our data hosting and payment processing suppliers. We do not share your personal information with our agents or suppliers except as is necessary in order to enable them to provide us with a service.
We may also disclose your personal information to third parties in the following circumstances:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer.
- If JBR Capital Ltd is acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
- If the rights to any agreement between you and a JBR Capital Group company are assigned to a third party.
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect the rights, property, or safety of JBR Capital Ltd, any JBR Capital Group company, our customers, or others.
- Your personal information may be passed to and used by companies within JBR Capital Group and our agents and sub- contractors who administer or process the information on our Please contact us at info@jbrcapital.com for an up- to-date list of the current members of JBR Capital Group.
SECURITY AND INTERNATIONAL TRANSFERS OF PERSONAL DATA
We are committed to ensuring that your information will be treated confidentially and securely, and we have put in place appropriate measures to ensure the security of your personal data.
We may transfer your data abroad to other countries outside the European Economic Area, for the purposes of this Notice. If we do so, we shall undertake an assessment and adopt adequate safeguards, in accordance with applicable data protection laws, to ensure any third party recipient will provide adequate security of personal data and your rights to privacy. For further information on the adequate safeguards used by us, please contact us at info@jbrcapital.com.
RETENTION OF YOUR PERSONAL DATA
Your information will only be held for as long as we need to process it in accordance with our legitimate interests, and in accordance with UK data protection laws.
YOUR RIGHTS
You may at any time request access to and/or, if incorrect, rectification of your personal data by writing to us at info@jbrcapital.com. We reserve the right to ask you for proof of your identity.
You may also request from us details of the credit reference agencies and fraud prevention agencies with which we may have carried out searches. If there are any inaccuracies in the information we hold about you, please notify us of this in order that we may correct the information we hold about you.
Under the GDPR, or any equivalent rules in the UK, you may be entitled to additional rights in relation to our handling of your personal data. For example, the right to have your personal data erased, the right to object to or restrict us from processing your personal data, and the right to data portability. If you would like to exercise these rights once they come into force, please contact us at info@jbrcapital.com.
Should you have any complaints about how we handle your personal information, please contact us at info@jbrcapital.com. Should we be unable to resolve your complaint and you wish to take your complaint further, you may do so by contacting the UK Information Commissioner’s Office.
HOW TO CONTACT US
If you have any comments or questions about our Notice please contact us at info@jbrcapital.com or in writing to JBR Capital Ltd, 773 Finchley Road, Hampstead, London, NW11 8DN.
Fraud Prevention
If you apply for finance, the personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance, or employment. Further details of how your information will be used by us and these fraud prevention agencies, and your data protection rights, can be found by clicking on the full notice below.
FULL NOTICE FOR FRAUD PREVENTION SERVICES
GENERAL
1. Before we provide services, goods or financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you.
2. The personal data you have provided, we have collected from you, or we have received from third parties will be used to prevent fraud and money laundering, and to verify your identity.
3. Details of the personal information that will be processed include, for example: name, address, date of birth, contact details, financial information, employment details, device identifiers including IP address and vehicle details.
4. We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.
5. We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested.
6. Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
AUTOMATED DECISIONS
7. As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more please contact us using the details above.
CONSEQUENCES OF PROCESSING
8. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or to employ you, or we may stop providing existing services to you.
9. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us on the details above.
DATA TRANSFERS
10. Fraud prevention agencies may allow the transfer of your personal data outside of the UK. This may be to a country where the UK Government has decided that your data will be protected to UK standards, but if the transfer is to another type of country, then the fraud prevention agencies will ensure your data continues to be protected by ensuring appropriate safeguards are in place.
YOUR RIGHTS
11. Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
12. For more information or to exercise your data protection rights, please contact us using the contact details above.
13. You also have a right to complain to the Information Commissioner’s Office which regulates the processing of personal
