NM FINANCE DATA PROTECTION + PRIVACY POLICY

From 25th May 2018 the EU General Data Protection Regulation (GDPR) came into force which, in effect, replacing The Data Protection Act 1998 (DP). Although some of the UK DP law remains unchanged, there are significant enhancements designed to help strengthen and unify data protection for individuals across the European Economic Area.

For further information and the full General Data Protection Regulation, go to the Information Commissioner’s Office (ICO) website using https://ico.org.uk.

The information contained within this data protection policy sets out how we use the information you provide us. This policy also provides information regarding your privacy rights and how the law protects you.

How the law protects you

Lawful conditions for processing personal data
We will only process your personal data when we meet one of the following lawful conditions:

• When we have a lawful contract with you;
• When it is our legal duty;
• When we have a legitimate interest;
• If we need to act in your vital interests; or
• When you have provided us consent to process it.

If we process your personal data that has been obtained from someone other than you, we will let you know without undue delay.

Who is collecting your personal information

NM Finance, Portal House, 7b Alkmaar Way, Norwich International Business Park, Norwich, NR6 6BF. The point of contact for all personal data related queries is the Data Privacy Manager.

Why we collect your personal information

We collect personal information provided by you to enable us to create a contract with you which we then fulfil in accordance with the terms and conditions of the contract and our Data Protection Policy. We also need to collect your personal information to meet the legal & compliance obligations placed upon us.

Your information may also be used for other specific purposes but only after you have given your consent, for example, to receive newsletters.

How is it collected

The way in which we collect personal information from you is determined by the way you engage with us. This could be through conversations with staff, communication via emails, letters, completed application form or health questionnaires, via our website contact form, registering for competitions and/or during financial reviews before the end of the fixed period of your product.

Automated decision

When obtaining a Decision in Principle (DIP), also referred to as an Agreement in Principle (AIP), we submit your information via the Lender’s online automated decision-making process. We do not use any in-house automated processing mechanisms.

Where else may we obtain information about you

We may also obtain personal information about you from third parties such as credit reference agencies who we check with in relation to the product or service you’re enquiring about or applying for. We will obtain your authority first before conducting any credit checks.

Who will it be shared with

We may share your personal data with the appropriate:

• Credit reference agencies to carry out our checks. A record of these checks is kept by the credit reference agency and may impact your ability to obtain credit elsewhere for a short time.
  • NM Finance conduct credit checks through TransUnion (formerly Callcredit), for further information about TransUnion and the information it holds click the link below:
    https://www.callcredit.co.uk/legal-information/bureau-privacy-notice
• Banks, Mortgage Lenders & Insurance Companies in the course of processing, and submission of, your application.
• Fraud prevention agencies to check if false or inaccurate information has been provided to us. Where the possibility of fraud is identified, the same information may be accessed by law enforcement to prevent fraud and money laundering.
• UK regulators and authorities in order that we comply with our legal obligations to organisations such as the Bank of England, the Prudential Regulation Authority and the Financial Conduct Authority.
• Appointees who are instructed to act on your behalf such as a solicitor, a valuer, an accountant, an insurance company and/or an estate agent.

Your information may be used for other purposes for which you have either given your specific permission or, in very limited circumstances, when required by law or where permitted under the General Data Protection Regulation.

Keeping in touch

We will always ask you if you are happy (i.e. seek your consent) to receive communications about NM Finance news, events, products and competitions when you apply for a product/service, and before any such information is sent. If you decline at that time or you alter your preferences any time thereafter, we will act upon your instruction immediately. If appropriate, we will remove your details from the appropriate mailing list and add them to our company suppression list.

Security of your personal information

We take all reasonable technical and procedural precautions to prevent the loss, misuse or alteration of your personal information. All business data is stored off-site on a server at a secure location and managed by a trusted third-party contractor. NM Finance Ltd do not operate internationally; our business services are limited to the United Kingdom.

Retention of your personal information

We will retain your information for as long as it is needed to provide you with our services and manage our relationship and also to comply with our legal obligations, resolve disputes and enforce our agreements. In practice this could be throughout your lifetime, but this does not prejudice your right to request that your personal data is no longer processed by us (The Right to Object).

Information on your rights

The GDPR puts much greater emphasis on transparency of processing and accountability by all parties involved in handling personal data and also extends your rights in respect of your personal data. It should be noted that these are qualified in so much that they do not necessarily apply in all situations. For ease of visibility, the ‘rights’ are listed directly below.

• Right to be informed (to be told how we process your data)
• The right to access (to see what information we hold about you)
• Right to rectification (to have your personal data updated if you notify us of changes)
• Right to erasure (to have the data we hold about you deleted or destroyed)
• Right to restrict processing (under certain circumstances you can ask us to postpone processing)
• Right to data portability (to be provided with your personal data in a useful electronic format)
• Right to object (to stop us from processing your data for example, for direct marketing)
• Rights related to automated decision making and profiling (where a decision is based solely on automated processing)

For a more detailed explanation about each of these rights please look at our Data Protection Policy or the Information Commissioner’s Office (ICO) website using https://ico.org.uk

Exercising your rights and access to your personal information

If you wish to exercise your right to access to your personal data, please contact the Data Privacy Manager. We will then contact you to check your identity and may request documents to prove it. For all other queries regarding your personal data and the exercising of all of your rights, please contact the Data Privacy Manager in the first instance using the address shown below.

N M Finance Ltd
Portal House
7b Alkmaar Way
Norwich International Business Park
Norwich
NR6 6BF

A paper copy of the NM Finance Data Protection Policy can be provided if requested in writing to the address shown.

Your options if you have a complaint:
If you do have cause for concern or a complaint regarding the way we are handling your personal data, we ask that you contact us in the first instance. This way we can resolve any issues at the earliest opportunity.

If you are still unhappy, or you do not wish to contact first you are, in any event, entitled to complain to the ICO. You may also seek judicial remedies against us or any of the third parties we interact with on your behalf, for damages (both material and non-material) arising from breaches of the GDPR. For more information please visit the ICO website using https://ico.org.uk.

Apr 25 v7

Website Cookie Policy

Effective Date: 30-Apr-2025
Last Updated: 30-Apr-2025

What are cookies?

 

How do we use cookies?

Types of Cookies we use

 

Manage cookie preferences

Cookie Settings