Credit Union Privacy Notice
Brecon & District Credit Union Ltd (BDCU) requires personal information from members to meet legal obligations and/or form a contract. Without this information membership may not be possible
It is important that you read this notice and any additional Privacy notices that we may provide to ensure that you are aware of how the Credit Union is using your data.
Data Protection Principles
Personal information that we hold about you must be:
- Accurate and up to date
- Used lawfully, fairly and in a transparent way
- Collected only for valid purposes that have been explained to you
- Relevant to the purposes we have told you about
- Only kept as long as is necessary
- Kept securely
How we use your personal data
BDCU will only use your personal data legally. This may be in the following areas:-
- To perform a contract – e.g. To deal with your account and send information on it, to carry out a credit check, to consider any applications and to undertake statistical analysis.
- For legal reasons- e.g. To compile a members register, confirm your identity, carry out auditing requirements and comply with legislation.
- Legitimate Interest- e.g. To recover any debts owed.
- Consent – As a membership organisation we can communicate with our membership but would require consent for marketing.
We will share your information outside the Credit Union. This may include:-
- Credit reference agencies & debt recovery agencies e.g. experian.co.uk, www.equifax.co.uk, www.bflsolutionsltd.co.uk
- Credit reference agencies will provide information about your financial history. Data is shared with the agency to assess your credit worthiness, trace and recover debts and prevent criminal activity. The agency will share your data with other organisations.
- Organisations that confirm your identity (to adhere to money laundering requirements)
- The authorities (if required by law) e.g. HM revenue and customs, National Crime Agency
- Organisations/Suppliers that provide a service to our members e.g. Insurers
- IT providers
If we have to share data with a third party we expect them to respect the security of your data and treat it in accordance with the law.
The Credit Union does not directly send data outside the European Union.
Personal information will be retained as long as necessary to fulfil the purposes that it was collected for. This will include satisfying legal, accounting and reporting requirements. Details of retention periods are available in the Data Protection Policy.
- To ensure that we hold accurate information please keep us informed if your personal information changes.
- Right to be informed – You have the right to be informed about how your personal information is processed
- Right to access – You have the right to access your personal information and to check that we are lawfully processing it.
- Right to correction – You have the right to have any incomplete or inaccurate information held on you corrected.
- Right to erasure – You have the right to ask for the removal of personal information where there is no good reason for the Credit Union to continue processing it. You may not erase data that is needed to meet a legal obligation.
- Right to object to processing – You have the right to object to the processing of personal information where legitimate interest is being relied on and you object on this ground. You may also object where the Credit Union is processing your personal information for direct marketing purposes.
- Right to restrict processing – You have the right to suspend the processing of personal information, for example if you want the Credit Union to establish its accuracy.
- Rights to data portability – You have the right to request the transfer of your data.
- You will not have to pay a fee to access your personal information. However the Credit Union may charge a reasonable fee if your request for access is excessive.
- Right to withdraw consent – If the lawful purpose for the processing of your personal information is your consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
Rights related to automatic processing.
BDCU does not use an automated decision making process when processing members loan applications.
Job applicants, current and former employees
When individuals apply to work at BDCU we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example where we want to take up a reference or obtain a ‘disclosure’ from the Criminal Records Bureau we will not do so without informing them beforehand unless the disclosure is required by law.
Personal information about unsuccessful candidates will be held for 6 months after the recruitment exercise has been completed, it will then be destroyed or deleted. Once a person has taken up employment with BDCU we will compile a file relating to their employment, this will be kept securely.
Credit Union website
When someone visits the website run by BDCU www.breconcreditunion.co.uk we will collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. We collect this information in a way which does not identify anyone.
Cookies let you navigate between pages efficiently, remembering your preferences, and generally improve the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests. The cookies used on this website have been categorised based on the categories found in the ICC UK Cookie guide.
Our website uses:
Category 1: Strictly necessary cookies:
These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website.
Category 2: Performance Cookies:
These cookies collect anonymous information on the pages visited.
These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor.
Category 3: Functionality Cookies:
These cookies remember choices you make to improve your experience.
These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features.
The Credit Union has a team responsible for overseeing Data Protection. If you have any questions about this privacy notice or how the Credit Union handles your personal information, please contact BDCU. The Credit Union will aim to respond to your request or query within one month or provide an explanation of the reason for any delay.
If you feel that the Credit Union’s processing of your personal information infringes data protection laws you have a legal right to lodge a complaint with the Information Commissioners Office.
You can contact them via their website https://ico.org.uk or phone 0303 123 1113
We reserve the right to update this privacy notice at any time and will provide a new privacy notice when substantial updates are made.
Contact details of the Credit Union:-
Name Brecon & District Credit Union Ltd
Address Steeple House
Brecon LD3 7DJ
Phone 01874 620104
E mail firstname.lastname@example.org