Carmoola privacy & data

Carmoola Group Limited and Carmoola Limited are joint data controllers of your personal information.

your name, date of birth, address, contact information, financial information, credit rating, car information, and device identifiers including internet protocol (IP) address and mobile device ID

bank account or payment details (for example account number, sort code, transaction data) and other financial information

location information (if you enable location services)

We may use information you provide to us about your health where it is relevant to supporting you in your use of our services.

identity and verification information (for example, a driver's licence and biometric information)

to provide our services to you

to carry out checks for security purposes, to prevent fraud and money laundering, and to confirm your identity before we provide services to you

to keep you informed about products and services you hold with us and to send you information about products or services (including those of other companies) which may be of interest to you

we have an automated decision-making process which will carry out fraud, credit and affordability assessment checks to decide whether we will accept your application

Records we share with credit reference agencies will stay on your file for six years after your file is closed, whether you've settled the debt or failed to pay it off.

if you are considered to present a fraud or money-laundering risk, they can hold your information for up to six years.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

We will only transfer your personal data to countries that have been deemed by the UK government or data protection authorities to provide an adequate level of protection for personal data.

Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

ask us to send you (or someone you nominate) a copy of the information we hold about you

ask us to correct or delete any incorrect or incomplete information we hold about you

ask us to stop using your information (we will stop using your information if there is no legal reason for us to continue to hold or use it)

object to any automated decision-making

ask us to transfer certain personal information to you or to another organisation, including service providers, in a format they can use where this is technically possible

withdraw any permission you have previously given to allow us to use your information