General Data Protection Regulation

Important Changes - What does it mean for you?

The new General Data Protection Regulation came into effect from the 25^th May 2018.  Therefore, we would like to make you aware of how we handle your data here at West Cheshire Credit Union.

We have a policy in place to protect the interest of our members and in doing so we abide by these guidelines to ensure data is handled in accordance with the principles of GDPR.

Please take time to read the following as it defines the way in which we handle personal data and any associated third parties we deal with or act on behalf of.

How do we protect your data?

To protect the security of your personal data, we implement appropriate measures, which involves technical and organisational security measures.  This includes physical and technical security safeguards and a robust governance model that ensures adequate policies, procedures and controls are in place throughout our organisation.

Types of personal data we collect and use

• Whether or not you become a customer, we are bound by Anti Money Laundering Regulations to ask for proof of identification and place of residence. In the course of doing so, we may check central databases for said information such as electoral roll, credit reference agencies or ask for hard copy evidence of the aforementioned.  We collect this directly from the source and this information is then held on our database.  This is NOT shared with any other parties outside of West Cheshire Credit Union, unless demanded by authorities as part of any fraud investigations.
• Full name, personal information including contact details (e.g home address, address history, email address, home and mobile telephone numbers.
• Date of birth and or age (e.g to make sure eligibility to apply) and National Insurance Number.
• Financial details (eg salary and details of any other income, and details of accounts held with banking providers).
• Information from credit reference agencies or fraud prevention agencies, electoral roll, court records of debt judgements and bankruptcies and other publicly available documents relating to your financial history.
• Employment status.
• Income and expenditure details to assist with making informed decisions regarding affordability of loan applications.
• Beneficiary details, which we use in a contact situation in the event of your death.
• If you are a payroll member we will also ask for your employer, payroll number and job title this is to aid with administration.
• Your banking details, regarding setting in place standing orders, or for withdrawal of funds purposes.
• DWP details which relate to Child Benefit Payments to process payments in a timely manner.

Providing your personal data

We will inform you if providing some personal data is optional, including that where we are required to ask for consent to process it.  In all other cases you must provide your personal data so we may process your application to join, apply for loans and generally manage your account.

• To other parties connected with your account, or those of whom you have given consent to act on your behalf.

 Sharing your personal data

Subject to the applicable data protection law, we may share your data with;

• Our legal and other professional advisors, including our auditors.
• Fraud prevention agencies, credit reference agencies, DWP and debt collection agencies, when we open your account and periodically during your account.
• Pre-paid debit card companies, in order to process your payments and withdrawals (if you use this scheme).
• Your employer, payroll department if you participate in our Payroll Deduction Saving Schemes.
• Our banking providers, this is to process savings withdrawals and loan deposits.
• Courts, to comply with legal requirements, and for the administration of justice.
• We do not share your information with third party marketing agencies.

Your consent to share data

We will comply to share your data when;

• You request us to disclose your personal data to other people or organisations.
• To send you marketing communications where we have asked for your consent to do so.

Your rights under applicable data protection law

Your rights are as follows (noting these rights don’t apply in all circumstances and that data portability is only relevant from May 2018)

• The right to be informed about our processing of personal data.
• The right to have your personal data corrected if it is inaccurate and to have incomplete personal data completed.
• The right to object to process your personal data.
• The right to restrict processing of your personal data.
• The right to have personal data erased.
• The right to request access to your personal data and information of how we process it.
• The right to move, copy or transfer your personal data.

Using your personal data; the legal basis and purpose

We will use your personal data;

• To register you as a member of West Cheshire Credit Union and to ensure qualification under our common bond criteria.
• For good governance, accounting, managing and auditing our business.
• To search credit reference agencies if you are over 18 and apply for a loan with West Cheshire Credit Union.
• To send you statements and updates on your account.
• For compliance with legal and regulatory requirements.
• To verify your identity, make credit and fraud prevention and anti-money laundering checks.

Retention of data

Criteria in place to determine retention periods of your personal data;

• We retain data in accordance with legal and regulatory requirements.
• We will retain your personal data after your account has been closed or has otherwise come to an end and in line with legal or regulatory guidelines.