Privacy Notice
Within this Notice-
‘Goods’ means any products that are advertised and available for hire from us;
‘Financial Associates’ means someone with whom you have a personal relationship that creates a joint financial unit in a similar way to a married couple;
‘Personal Information’ means any information in any format or medium, from which you can be personally identified;
‘Website’ means www. RentalGoods.com
‘we’, ‘us’ or ‘our’ means RentalGoods.com, a trading name of Magman & Co Ltd, Correspondence Address: PO Box 7815, Wellingborough, Northamptonshire, NN8 9JD, Company registration number 10359147;
‘you’ or ‘your’ means the individual who visits the Website or enters into a hire agreement;
We are a Data Controller and a Data Processor, we are responsible for the processing of your personal Information. Your trust is important to us and we take safeguarding your privacy seriously.
This Privacy Notice provides you with details about how we collect, process and store your Personal Information through your use of the Website and if we hire Goods to you.
We are providing this Notice to ensure that you have all the information regarding your privacy when using our Website or hiring our Goods including how we collect, process and store your personal information; and to comply with our obligations and your rights created by applicable law, including but not limited to the General Data Protection Regulations.
We pride ourselves on keeping up to date with regard to advances in technology and legal developments, changes can result in us needing to change our policies so you should refer to this Notice on a regular basis in order to ensure that you are aware of the policies that are current at the time of your visit to the Website or when you hire Goods.
We will only collect, store or process your personal information in accordance with this Notice.
- Use of the Website
- Like all other websites, we use analytical software to gather and collect anonymous information (from which you are not personally identifiable) whilst you browse the Website.
- We use Google Analytics, which is based outside the EU but subscribes to the U.S. Privacy Shield which provides standards and security which is consistent with the General Data Protection Regulations, and has achieved ISO 27001 (information security management); ISO 27017 (Cloud security); ISO 27018 (Cloud privacy).
- Google Analytics collects the following information, which is anonymised so you cannot be personally identified:
- the device and software that you use to access the Website;
- geographical location (Country) of the server used for access;
- browser type;
- operating system;
- web pages visited;
- time and length of visit;
- referral source (how you found the Website).
- This information helps us to:
- generate reports about the usage of the Website;
- maintain a Website that is user friendly, up to date and compatible with popular equipment and software;
- maintain anonymised statistics about the popularity of webpages and the referral source;
- analyse and update security of the Website; and trace inappropriate or malicious use.
- e use cookies in accordance with our Cookie Policy.
- We will ask you for your consent before using cookies which collect personal Information, if you do not consent to us using these cookies then this will restrict certain functions and your usability of the Website, for example you will not be able to use the online enquiry or application forms; or use any online payment facilities.
- If you do not agree with how we collect or process your Personal Information, you must not use our Website.
- Enquiries
- If you make an enquiry about any Goods or services, you are required to provide us with your name, geographical address, telephone number(s) and an email address.
- This personal Information is processed for:
- a legitimate interest – in order that we can respond to your enquiry; or
- to send commercial communications including the availability of new products, special offers and discounts, newsletters and notifications), except where you opt-out of receiving such communications by clicking the box in the enquiry form; or by clicking the unsubscribe link in the communications; or otherwise informing us that you wish to opt-out.
- Making an application to hire Goods
- If you submit application to hire goods we shall:
- check our own records for information on:
- any previous personal accounts;
- and, if you have one, your financial associates previous accounts;
- if you are an owner, director or partner in a small business we may also check on your business account.
- collect and process the following personal information provided by you in your application form; and a Creditworthiness and Affordability form:
- personal details, name, address, telephone number(s) (a legal obligation to verify your identity and prevent fraud; a legitimate interest to be able to communicate with you and to consider or take necessary steps to enter into a contract);
- personal and financial circumstances and employment status (a legal obligation to perform an affordability assessment and be a responsible lender; and to consider or take necessary steps to enter into a contract);
- use your Personal Information to carry out checks with third parties, an employer, bank, landlord or personal reference (a legal obligation; a legitimate interest to verify your identity; and to consider or take necessary steps to enter into a contract);
- carry out a search with a credit reference agency (a legal obligation to perform a creditworthiness and affordability assessment and be a responsible lender; a legitimate interest to perform a risk assessment and verify your identity to prevent fraud; and to consider or take necessary steps to enter into a contract) for information on:
- your personal accounts; and
- if you are making a joint application or have ever previously made joint applications or have joint account(s) we will check your Financial Associates personal accounts.
- By asking a credit reference agency to conduct a search for us:
- we shall provide the credit reference agency with the information that you have provided to us; if you give us false or inaccurate information and we suspect or identify fraud we will record this and may also pass this information to fraud prevention agencies and other organisations involved in crime and fraud prevention;
- if you are making a joint application or tell us that you have a spouse or financial associate, we shall:
- search, link and/or record information at credit reference agencies about you both;
- link any individual identified as your financial associate, in our own records;
- take both your and their information into account in future applications by either or both of you;
- continue this linking until the account closes or is changed to a sole account and one of you notifies us that you are no longer linked.
- The credit reference agency shall:
- place a search “footprint” on your credit file whether or not this application proceeds. If the search was for a credit application the record of that search (but not the name of the organisation that carried it out) may be seen by other organisations when you apply for credit in the future;
- link together the records of you and anyone that you have advised is your Financial Associate including previous and subsequent names of parties to the account. Links between Financial Associates will remain on your and their files until such time as you or your partner successfully files for a disassociation with the credit reference agencies;
- supply to us:
- credit information such as previous applications and the conduct of the accounts in your name and of your Financial Associate(s) and/or your business accounts (if you have one);
- public information such as County Court Judgments (CCJs) and bankruptcies;
- Electoral Register information;
- fraud prevention information.
- We do not use automated processing of your Personal Information to form or make decisions in relation to your application except where authorised or required by law (for example for the detection of fraud or tax evasion).
- Entering into a hire agreement
- If we accept your application and agree to hire Goods to you then we will use your personal information:
- to provide you with pre-contract information (a legal obligation under the Consumer Credit Act 1974);
- for the administration and performance of the contract;
- to deliver the Goods to you;
- for the recording of financial transactions;
- for internal records that we are legally obliged to keep;
- to deal with complaints, disputes and legal actions;
- where necessary to protect the vital interest of you or another person;
- to send commercial communications from us (including the availability of new products, special offers and discounts, newsletters, notifications), except where you opt-out of receiving such communications by clicking the box in the enquiry form; or by clicking the unsubscribe link in the communications; or otherwise informing us that you wish to opt-out;
- to send commercial communications from selected partners, associates or affiliates, but only where you expressly request or consent to such communications.
- We will give details of your personal and/or business account (if you have one), including and how you manage it/them to credit reference agencies including names and parties to the account and a record of your payment history – whether you make payments in full and on time.
- The information which we and other organisations provide to the credit reference agencies about you, your financial associates and your business (if you have one) may be supplied by credit reference agencies to other organisations and used by them to:
- prevent crime, fraud and money laundering by, for example checking details provided on applications for credit and credit related or other facilities;
- check the operation of credit and credit-related accounts;
- verify your identity if you or your financial associate applies for other facilities;
- make decisions on credit and credit related services about you, your partner, other members of your household or your business;
- manage your personal, your partner’s and/or business (if you have one) credit or credit related account or other facilities;
- trace your whereabouts and recover debts that you owe;
- undertake statistical analysis and system testing.
- We may make periodic searches of our own records and at credit reference agencies to manage your account with us, including whether to make credit available or to continue or extend existing credit. We may also check at fraud prevention agencies to prevent or detect fraud.
- We may use and share your Personal Information with our employees, officers, agents, consultants, suppliers, processors or subcontractors insofar as reasonably necessary:
- for the purposes of conducting any business between us and you;
- in performance of a contractual obligation;
- to the extent that we are required to do so by law;
- in connection with any legal proceedings or prospective legal proceedings;
- in order to establish, exercise or defend Our legal rights;
- with the purchaser (or prospective purchaser) of any business or asset which we are (or are contemplating) selling.
- We will not share or otherwise distribute your Personal Information unless;
- we are required to do so by Law or order of a Court;
- it is necessary for the prevention of fraud or other criminal activity;
- we are required to for the purposes of establishing, exercising or defending our legal rights;
- we are required to by a purchaser in the event of us selling our business;
- you expressly consent or instruct us to do so.
- When processing of your Personal Information is based on your consent or not opting out, you may withdraw your consent or opt-out at any time by informing the Data Processor at Correspondence Address: RentalGoods.com, PO Box 7815, Wellingborough, Northamptonshire, NN8 9JD or by using a link in any communication or facility on the Website for that purpose when the processing is for direct marketing (including profiling) or historical research and statistics.
- Upon receipt of a notice withdrawing your consent to process your Personal Information we shall stop processing the Personal Information except:
- where there are compelling legitimate grounds for the processing, which override your interests, rights and freedoms; or
- the processing is for the establishment, exercise or defence of legal claims.
- We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of Personal Information, including storing of data on a secure, password and firewall protected servers.
- To process your Personal Information, we use software which is based outside of the E.U. therefore some Personal Information may be shared with our data processors and stored outside of the E.U. The Processor subscribes to the EU – US Privacy Shield Framework and has acquired ISO27001 certification to meet the required standards of the General Data Protection Regulation in relation to the security of your Personal Information.
- In order that we are able to provide you with an optimum service and to ensure that we comply with our obligations under UK Data Protection legislation, you must let us know if any Personal Information which you have provided to us changes or becomes inaccurate or out of date.
- Processing Payments
- When making any payments to us, all payments are processed by a third-party payment processing merchant and in full compliance with all recognised standards and security requirements.
- The payment processing merchant will use full encryption to ensure your payment card information remains secure, this means that orders can only be accepted from web browsers that permit communication through Secure Socket Layer (SSL) technology, it is not possible to place an order via an unsecured connection. Most web browsers support SSL.
- Where our payment processing merchant needs to retain your payment information, for example to make regular payments then they will only be used for the intended process. We do not retain or store any payment card details.
- Open Banking
ion of our Privacy Policy relates to Open Banking and should be read in conjunction with the other clauses in our Privacy Policy. In the event of conflict with any other clauses, this clause shall prevail.
6.1 What is Open Banking?
Open Banking is the secure way of providing access to your bank or building society account to providers who are registered for this purpose.
Registered providers and participating banks and building societies are listed under the Open Banking Directory.
Open Banking was set up by the UK Government to encourage more competition and innovation in the financial services sector.
As a forward thinking lender, we support the use of Open Banking as it allows us to process loan applications efficiently, securely and in our consumer’s best interests.
By permitting access to your bank or building society account information we are able to make a better lending decision as we shall be able to verify your income, outgoings and other matters in order to assess what loan terms would be suitable for you based upon what you can reasonably afford to repay.
Further information about Open Banking is available from www.openbanking.org.uk.
6.2 How will my personal data be shared and used for the purpose of Open Banking?
By proceeding with your loan application via our website you expressly consent to us sharing your personal, contact and loan application details (“the Shared Personal Data”) with our registered Open Banking partner, Perfect Data Solutions Limited (“PDS”) who are also a credit reference agency. During your loan application we shall safely and securely direct you to PDS’s secure portal (“the Portal”) for the purposes of granting PDS access to your bank or building society account information (“Transaction Information”). As soon as your Transaction Information is received it shall be reported back to us in the form of a completed search in order that we may continue to process your loan application (“the Permitted Purpose”).
Further information about PDS including their registered provider and regulatory status is available from www.lendingmetrics.com.
6.3 Is Open Banking Secure?
PDS are registered under the Open Banking Directory as an account information service provider and are also regulated by the Financial Conduct Authority as a payment services firm under number 802599. Any data you submit via the Portal will be encrypted and its usage tracked as part of set Open Banking data security standards.
We are responsible for the secure transmission of any Shared Personal Data to PDS, for safely directing you to the Portal and for the safe receipt and usage of your Transaction Information.
You will not be required to share your banking password or log in details with either us or PDS. Once you have given your explicit consent to share your bank account information on the Portal you will be directed to your own bank or building society’s login page where you will enter in your own login details directly.
Save as set out above or elsewhere in this Privacy Policy, we are not responsible for your direct data transmissions with PDS or with your own bank or building society.
6.4 How will my Shared Personal Data and Transaction Information be used?
PDS shall, subject to their own terms and conditions and privacy policy, and, if your bank or building society is registered to provide access under the Open Banking Directory, obtain your Transaction Information and submit this back to us for the Permitted Purpose. By way of example, the Transaction Information that we shall receive is likely to include information relating to your income, outgoings and credit worthiness.
PDS shall be entitled to re-access your Transaction Information for up to 90 days from the date of your original search result in order to refresh the search results, obtain a snapshot of your data or gather additional data.
PDS shall hold the Shared Personal Data and the Transaction Information they receive and retain according to their own terms and conditions and privacy policy, available on the Portal, which you will be required to read and consent to once directed there via our website.
As PDS are also a credit reference agency they may also share and keep a record of your Shared Personal Data and Transaction Information.
6.5 Will you use my Transaction Information data for any other purpose?
The Transaction Information we receive about you will only be used for the Permitted Purpose. We do not sell or share Transaction Information with any third party.
Save as set out above the information contained in the rest of this Privacy Policy deals with how we collate, use, transfer, store, delete and other terms applicable to your personal data including Shared Personal Data and Transaction Information.
6.6 Do I have to provide you with my consent to proceed?
Yes, your consent is required for us to obtain your Transaction Information data from your bank.
Where your bank or building society have already permitted access to your Transaction Information you shall need to contact them directly in order to withdraw your consent under their particular Open Banking terms and conditions.
6.7 Are any of my other rights under this Privacy Policy affected?
Your individual data protection and privacy rights including the right to access, correct, delete, object, restrict, withdraw consent, request transfer and/or make a complaint, continue to apply to relevant personal data we control or process and are dealt with elsewhere in this Privacy Policy.
Under Open Banking as your personal data is shared by your bank or building society and accessed by PDS you may also be able to exercise your individual data protection and privacy rights against either of them pursuant to their own terms and conditions and privacy policies.
- Your rights
- You have the right to know:
- the identity and contact details of the Data Controller and Data Protection Officer (where applicable);
- to know the purpose and legal basis for processing your Personal Data, and where processing is based on the legitimate interests of the Data Controller, what those legitimate interest are;
- to know whether your Personal Data is transferred or processed beyond the EU and that appropriate safeguards are in place.
- The right to access your Personal Information:
- you may require us to provide you with any Personal Information we hold about you. To obtain a copy of any Personal Information we hold contact the Data Controller at Correspondence Address: RentalGoods.com, PO Box 7815, Wellingborough, Northamptonshire, NN8 9JD;
- this information will be provided free of charge except where a request is manifestly unfounded or excessive (for example it is a repetitive request, or where we need to process large amounts of data) in which case we shall make a charge for our reasonable administrative costs in dealing with the request or refuse to respond but we must provide a justifiable reason for refusing to respond which you may seek judicial remedy or complain to the Information Commissioners Office;
- we shall provide the requested information within one month of receipt of the request, however where there is a substantial amount of information or it is difficult to collate, we may extend this timeframe by one month by providing you notice;
- as we take the issue of protecting your Personal Information seriously, we follow strict storage and disclosure procedures which mean that we may occasionally require proof of identity from you prior to disclosing such information.
- The right to erase Personal Information:
- you have the right in certain circumstances to instruct us to erase your Personal Information where:
- the Personal Information is no longer necessary in relation to the purpose for which it was originally collected/processed;
- you withdraw your consent;
- you object to the processing and there is no overriding legitimate interest for continuing the processing;
- the Personal Information was unlawfully processed or obtained;
- the Personal Information has to be erased in order to comply with a legal obligation;
- the Personal Information is processed in relation to the offer of information services to a child.
- where you have the right and you issue an instruction to erase your Personal Information, we shall use all reasonable efforts to:
- inform all third parties to whom we have disclosed your Personal Information of the requirement to erase your Personal Information which they hold;
- in the event that your Personal Information has been published online we shall endeavour to ensure that any links or references are also removed.
- we may refuse to erase your Personal Information only:
- to exercise the right of freedom of expression and information;
- to comply with a legal obligation or for the performance of a public interest task or exercise of official authority;
- for public health purposes in the public interest;
- archiving purposes in the public interest, scientific research, historical research or statistical purposes; or
- the exercise or defence of legal claims.
- The right to restrict processing:
- we shall, upon your request, restrict the processing of your Personal Information if the following circumstances arise:
- where you contest the accuracy of the Personal Information, we shall restrict the processing until we have verified the accuracy of the Personal Information;
- where you have objected to the processing where it was necessary for the performance of a public interest task or purpose of legitimate interests, and we are considering whether our legitimate grounds override your grounds;
- when processing is unlawful and you oppose erasure and you request restriction instead;
- if we no longer need the Personal Information but you require the information to establish, exercise or defend a legal claim;
- where processing of your Personal Information is restricted, the information shall be stored but no further processing shall occur;
- we shall inform any third party to whom we disclosed your Personal Information that the Information is restricted;
- we shall inform you when and restricted period comes to an end.
- The right to portable data:
- Any Personal Information where the lawful purpose for processing is consent or for the performance of a contract; which is stored by us electronically we shall hold that Personal Information in a portable format (readable in a format that will be commonly used on other computer systems) and we shall provide this information to you or directly to another organisation (where technically feasible) upon your request.
- The right to complain:
- If you are not happy with the way we collect or store your personal Information you can make a complaint to the Information Commissioners Office at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
or by using the online form at: https://ico.org.uk/concerns/handling/
However, we would appreciate you contacting us first to give us the opportunity to provide an explanation or put things right.