Your right to privacy is important to us. We know that your personal data belongs to you and not to us. That's why we take the security of your information seriously and have strict policies and processes in place to ensure it is kept private and safe.
This privacy notice describes the way we collect your information, how we use it and why.
Who we are
RMP Properties is a trading style of Redbrick Survey & Valuation Limited (Redbrick). Redbrick is part of Paragon Banking Group (the Group).
The Group is made up of many different legal entities. The letterhead we use when we write to you will let you know which entity you have a relationship with.
More information on the Group can be found at www.paragonbankinggroup.co.uk.
Where we use the term 'we' in this notice we mean the relevant member of the Group who is processing your personal information.
The entity you have a relationship with will be the controller of any personal information you provide to us. The Group's Company Registration number is 2336032 and its registered address is 51 Homer Road, Solihull, B91 3QJ.
If you have any queries about how your personal information is used by us, which are not answered in this notice, please contact the Data Protection Officer (DPO) 51 Homer Road, Solihull, B91 3QJ or email [email protected].
What is personal data?
Personal data is considered to be any information that either alone, or in combination with other information, would identify you as a living individual. For example, your name and date of birth.
How do we collect your information?
The type of loan or other product you have with us will dictate how your personal information is collected. Personal information may be provided to us by;
When applying for a product or service we will ask you to provide some information about yourself for security, identification and verification purposes.
When completing any forms, we will always tell you how your information will be used in relation to the product or service you are applying for within the declaration and in any associated terms and conditions.
When you provide any information about others (eg for a joint account) you must ensure that you have their consent or are otherwise entitled to provide the information to us.
We may monitor or record phone calls with you to ensure we have carried out your instructions correctly, to resolve queries or issues, to improve our quality of service, for regulatory purposes and to help prevent or detect fraud or other crimes. We also record conversations for employee training purposes.
PRIVACY
Websites
You can visit our website without telling us who you are or revealing any information about yourself. When we ask you for personal information online it will only be in response to you applying for, or using, one of our online products or services.
We will not use information and/or any statistical analytics tool to track or collect any personally identifiable information about visitors to our site.
We will not associate any data gathered from our website with any personally identifying information from any source. If you have logged into our site, please review our Cookie Policy at www.rmpproperties.co.uk/cookies.asp to see what information may be recorded.
What personal data do we process?
We may process the following personal information;
Throughout the life of your account, you may provide the following information to us:
These pieces of information are considered to be special categories of data. We will only record them if they are relevant to the management of your account (for example, if you have a medical condition which means you require a bespoke communication approach) and we will not record this information without your explicit consent. You are able to withdraw this consent at any time, just get in touch.
On what basis are we allowed to process your personal data?
Under Data Protection law we are only allowed to process your personal data if we have a proper reason to do so. This includes sharing it outside the Group. The law allows us to process your data for one or more of the following reasons;
A legitimate interest is when we have a business or commercial reason to use your information. This reason must not unfairly go against what is right and best for you.
The table below shows the ways we may use your personal information and why;
What we use your personal information for | The reason/s why we can use your personal information |
|
|
|
|
|
|
|
|
|
|
|
|
Who do we share your personal data with and why?
We may share your personal information with the following third parties;
If you would like to see the information that these credit reference agencies hold about you, please contact them directly; they will be able to explain how you may progress your request and any charges that may apply.
Possible consequences of us processing your personal data
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services and financing you have requested, or we may stop providing existing services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, finance or employment to you. If you have any questions about this, please contact us.
Marketing
From time to time we may make you aware of products or services which are similar to the ones you currently hold with us that may be of interest to you. We will only do this if we consider this type of processing to be a legitimate business interest. You are able to get in touch and ask us to stop sending you these messages at any time. If you chose not to receive marketing information you will still receive important information about your product or service.
How long will we keep your personal information?
We will keep your personal information for as long as you are a customer of Paragon Banking Group. After you stop being a customer we may keep your data for up to 12 years for one of these reasons;
We will keep your data for longer than this if we cannot delete it for legal, regulatory or technical reasons. We will also keep it for research, fraud prevention, money laundering, capital, liquidity, risk and business forecasting purposes. When this happens, we will make sure that your privacy is protected and we will only use it for these purposes.
You or a third party may send information to us as a prospective customer. If we do not have any products that are suitable for you, or you decide not to proceed with your application for any reason, we will store the personal information provided to us for no longer than two years.
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to 6 years. In some cases, Paragon may hold your data for an indefinite period.
Your information rights
You have various rights in terms of how and why your personal data is processed. Please contact us at any time if you wish to exercise these rights:
Transfer of your personal information overseas
Some or all of your personal information may be transferred to, stored or processed by service provider of ours located in countries outside the UK. In these circumstances we will take the necessary steps to ensure that the transfer of your data is in line with UK data protection requirements and that your information is treated securely and protected to a similar standard. We may need to transfer your information in this way to carry out our contract with you, to fulfil a legal obligation, to protect the public interest and/ or for our legitimate interests.
If we do transfer information outside of the UK, we will make sure that it is protected in the same way as if it was being used in the UK.
We may put in place the approved standard contractual clauses (as approved by the European Commission) which constitute appropriate measures to ensure that your personal data is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection.
If you are an Expatriate, due to the nature of the product you have chosen, a set of transfers of your information to countries outside of the UK may be required. Our lawful basis for these transfers are because they are necessary to implement pre-contractual measures and for the performance of a contract between you and Paragon.
Whenever fraud prevention agencies transfer your personal data outside of the EEA, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the EEA. They may also require the recipient to subscribe to 'international frameworks' intended to enable secure data sharing. For further information please contact the fraud prevention agencies listed within this notice.
If you chose not to give personal information
We may need to collect personal information by law, under the terms of a contract we have with you. If you chose not to give us this personal information it may delay, or prevent us from meeting our obligations. It may also mean that we cannot perform services needed to run your accounts. It could mean that we cancel a product or service that you have with us.
Complaints
If you wish to complain about how we have treated your personal data, please contact the complaints team within your usual servicing department to discuss your concerns.
You may also refer your concerns to the Information Commissioner's Officer (ICO), the body that regulates the handling of personal data in the UK. You can contact them by:
Phone: 0303 123 1113
Writing: Information Commissioner's Officer, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Website: www.ico.org.uk
Changes to our notice
This notice was last updated in February 2019.
You can download a copy of our privacy notice in PDF format by clicking here.