At Direct Commercial Finance we rely on the following legal bases for the processing of your personal information, depending upon the purpose:
Contract: where necessary to perform a contract with you or to take steps at your request before entering into a contract with you.
Consent: in some cases, we may request your consent for processing, if so this will be specific to the processing and we will inform you of the purpose and you can provide or refuse such consent at your discretion.
Legitimate Interests: where necessary for our legitimate interests or those of third parties which are not overridden by your interests, rights or freedoms. These comprise providing our services, direct marketing, fraud prevention, ensuring network and information security, indicating possible criminal acts or threats to public security, processing employee or client data and administrative transfers within our group of companies.
Legal Obligation: where Direct Commercial Finance is under any legal obligations, e.g. with respect to anti-money laundering or other regulatory matters, which requires us to process or share personal data.
Ordinarily the lawful basis relied on by Direct Commercial Finance is that of contract, legitimate interests or legal obligation depending on the purposes of the processing. However, for transparency and good housekeeping, we may also request your specific consent from time to time for e.g. prior to undertaking a credit search or taking and retaining copies of your identification documents, but where one of the other bases above applies, we do not rely on that as the sole legal basis of processing.
If you have provided consent to our processing of your personal data, your consent can be withdrawn at any time by contacting the Data Protection Officer. This will not affect processing before withdrawal or which is based on another lawful basis of processing.