Information we share
There are certain circumstances where we may transfer your personal data to employees, contractors and to other third parties Some examples of when your personal information is transferred to other third party organisations are as follows:
- We may share information about you with other members of our group of companies so that we can provide the best service across our group. They are bound to keep your information in accordance with this Privacy Notice;
- We may also share your information with certain contractors, service providers or advisors and they may process your personal data for us. They are always required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the performance of their function. A list of these entities can be found here.
- If we're discussing selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality – or if sold, to buyers who can continue to provide services to you;
- If we're required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example the Police; OFGEM or BEIS – or to defend any legal claims.
- Your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.
Where your information will be held
When we share your information, your information will be transferred within the European Economic Area.
When you provide us with this information you are consenting that we may collect and use it in the way we've set out.
We will keep your information for as long as it is reasonably necessary. It will depend on factors such as whether you've still got an active account or any outstanding debt with us or have interacted with recent offers. We will retain and use your registration information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
We will only transfer data to jurisdictions outside the scope of the European General Data Protection Regulation (GDPR) where the appropriate safeguards set out in the GDPR are in place.
You may have certain rights in relation to your information including a right to access or to correct the information we hold on you. Some of these rights will only apply in certain circumstances however, such as the right to be forgotten or the right to request that we move your information to another company. They will generally not be available if there are outstanding contracts between us, if we are required by law to keep the information or if the information is relevant to a legal dispute. If you would like to exercise, or discuss, any of these rights, please contact the Data Protection Officer.
Security and accuracy
We are committed to keeping your personal information safe. We've got physical, technical and administrative measures in place to prevent unauthorised access or use of your information and we ensure that we comply with our own internal security policies. We also require that our suppliers protect such information from unauthorised access use and disclosure.
We will also routinely refresh our information to ensure we keep it up-to-date.