Rights | Description |
Your right of access | You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for, whether it has been used for any automated decision making and, where we obtained it from someone other than you, where we obtained it from. |
Your right to rectification | You can ask us to change or complete any inaccurate or incomplete personal information held about you. |
Your right to erasure | You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it. |
Your right to restriction of processing | You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it. |
Your right to object to processing | Where we are processing your personal information for direct marketing purposes or on the basis of a legitimate interest, you can object to our processing of your personal information, by contacting our DPO with details of your objection. |
Your right to data portability | You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred. |
Your right to withdraw consent | If you have given us your consent to use personal information, you can withdraw your consent at any time and, update your marketing preferences. |
Personal | Contact | Transactional | Documentary |
|
|
|
|
Financial | Social | Recordings & Online Identifiers | Special |
|
|
|
|
Savings & Current Accounts | Mortgages | Insurance | Business Finance | |
Personal | ✔ | ✔ | ✔ | ✔ |
Contact | ✔ | ✔ | ✔ | ✔ |
Transactional | ✔ | ✔ | ✔ | ✔ |
Documentary | ✔ | ✔ | ✔ | ✔ |
Financial | ✔ | ✔ | ✔ | ✔ |
Recordings & Online Identifiers | ✔ | ✔ | ✔ | ✔ |
Social | ✔ | |||
Special | ✔ | ✔ | ✔ | ✔ |
Applicant | Guarantor | Referee | Occupier | Family, Friends or Dependents | Third Party Loan Providers | |
Personal | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
Contact | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
Transactional | ||||||
Documentary | ✔ | ✔ | ||||
Financial | ✔ | ✔ | ✔ | |||
Recordings & Online Identifiers | ✔ | ✔ | ||||
Social | ✔ | ✔ | ✔ | |||
Special | ✔ | ✔ |
Vehicle | Personal Loans | |
Personal | ✔ | ✔ |
Contact | ✔ | ✔ |
Transactional | ✔ | ✔ |
Documentary | ✔ | ✔ |
Financial | ✔ | ✔ |
Recordings & Online Identifiers | ✔ | ✔ |
Social | ||
Special |
Applicant | Indemnifier | |
Personal | ✔ | ✔ |
Contact | ✔ | ✔ |
Transactional | ||
Documentary | ✔ | ✔ |
Financial | ✔ | ✔ |
Recordings & Online Identifiers | ✔ | ✔ |
Social | ||
Special |
Further information about how we use your personal information and our basis for doing so
We will only use and share your information where it is necessary for us to carry out our lawful business activities. Your information may be shared with and processed by other Group companies. We want to ensure that you fully understand how your information may be used. We have described the purposes for which your information may be used in detail in a table below:
Contract |
We may process your information where it is necessary to enter into a contract with you for the provision of our products or services or to perform our obligations under that contract. This may include processing to:
|
Legal Obligation |
We are required by law to collect and process certain personal information about you. This may include processing to:
|
Legitimate Interests |
We may process your information where it is in our legitimate interests do so as an organisation and without prejudicing your interests or fundamental rights and freedoms. This may include processing to:
|
Consent |
We may process your information where you have provided us with clear and specific confirmation of your consent to do so. This may include processing to;
|
Sometimes we use your personal information in automated processes to make decisions about you, such as credit scoring or for the prevention of fraud. We might also use automated processes to create a profile of you for these purposes. We do this to help ensure decisions are made accurately, fairly and efficiently and to offer you products and services tailored to you and to reduce the risk of fraud.
Further information on when we use automated processes and the logic, significance and consequences of these processes for you.
Credit scoring
We use automated decision making using your personal information to create a profile of you for credit scoring – a method which predicts your credit worthiness based on your financial profile.
To carry out credit scoring we use information you give to us, information we obtain from credit reference agencies, and details about how you have used other products and services you have with us or the Group (for example how you are making repayments on other credit products). In some cases we will also use external data sources for credit scoring. See 9.2 of this Privacy Notice for a list of credit reference agencies we use. We analyse this information to identify a credit score based on how likely it is that debts will be re-paid.
We use credit scoring to make the following decisions about you:
Profiling for marketing
We want to ensure that you get the most relevant information about our products and services at the right time. The most effective way for us to do this is to use automated processes to create a profile of you for marketing.
We use processes to analyse your personal information to decide what products and services to offer to you and to prioritise the marketing messages you receive by:
Further information about credit reference agencies.
The data we exchange with credit reference agencies can include the following categories:
We will use this information to:
We will also inform the credit reference agencies about your settled accounts. If you borrow and do not repay in full and on time, credit reference agencies will record the outstanding debt. This information may be supplied to other organisations by credit reference agencies.
When credit reference agencies receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. Credit reference agencies will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the credit reference agencies to break that link.
If false or inaccurate information is provided and/or fraud or financial crime is identified or suspected, details will be passed to fraud and financial crime prevention agencies. Law enforcement agencies and other organisations may access and use this information. Fraud and financial crime prevention agencies may allow the transfer of your personal data outside of the UK. This may be to a country where the UK Government has decided that your data will be protected to UK standards, but if the transfer is to another type of country, then the fraud and financial crime prevention agencies will ensure your data continues to be protected by ensuring appropriate safeguards are in place.
If we, or a fraud and financial crime prevention agency, determine that you pose a fraud, financial crime or money laundering risk, we and others may refuse to provide the services and financing you have requested, to employ you, or we may stop providing existing services to you.
A record of any fraud, financial crime or money laundering risk will be retained by the fraud and financial crime prevention agencies, and may result in others refusing to provide services, financing or employment to you. Fraud and financial crime prevention agencies can hold your information for different periods of time, and if you are considered to pose a fraud, financial crime or money laundering risk, your data can be held for up to six years.
The identities of the credit reference agencies, their role also as fraud and financial crime prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the credit reference agencies are explained in more detail by each of the three credit reference agencies at the links below:
Type of Recipient | Industry | Location |
Professional Consulting Provider | Financial Services | UK, US |
Credit Reference Agencies | Financial Services | UK |
Digital Security Provider | IT | UK |
Regulatory Compliance Management Provider | Risk Management | UK |
Document Storage & Archive Management Provider | Storage & Archiving | UK |
Confidential Waste Disposal | Data destruction & Recycling | UK |
External Auditors | Audit Services | UK |
Rating & Review Platform | Business Insights | UK |
Type of Recipient | Industry | Location |
Financial Regulators | Regulator | UK |
Financial Ombudsman | Regulatory | UK |
Payment Service Providers* | Financial Services | UK, US |
Banking Services Providers | Financial Services | UK, US |
Digital Printing Provider | Financial Services | UK |
Digital Security Provider | Financial Services | UK, EEA, US |
MIG Providers | Financial Services | UK |
SMS Fulfilment Platform | IT | UK |
Software Providers | IT | UK, US, Australia, EEA, New Zealand |
Data Analytics Provider | IT | UK |
Digital Security Provider | IT | UK |
IT Service Provider | IT | UK |
Financial Data Analyst | Data | UK |
Mailing Houses | Print & Logistics | UK |
Valuers | Property | UK |
Conveyancing Partner | Legal | UK |
Lawyers & Estate Agents | Legal | UK |
Insurance Partners | Financial Services | UK |
Environmental Risk Assessors | Property | UK |
Fraud and Financial Crime Prevention Services | Financial Services | UK |
Environmental Impact Tracking | Financial Services | UK |
Broker Portal Provider | Financial Services | UK |
Type of Recipient | Industry | Location |
Loans Management Platform | IT | UK |
Online Application Platform | IT | UK |
Accounting Software Provider | IT | UK |
SMS Fulfilment Platform | Mobile Technology | UK |
Payment Services Provider* | Financial Services | UK |
We may also share personal information with a third party who purchases the whole or part of our business or that of any member of our Group. We will notify you of the details of the third party if this happens and ensure that you are provided with their privacy notice.
*Worldpay is a data controller in respect of personal data gathered by the Group for this Type of Recipient. A copy of Worldpay’s Privacy Statement can be obtained from their corporate website or by clicking the following link https://www.worldpay.com/en-gb/privacy-policy
Further information about how long we keep your personal information for.
You can obtain more specific information about how long we retain particular documents and personal information by contacting our DPO using the details above.
Category | Host(s) | Name | Purpose | Duration |
Essential | banking.cumberland.co.uk | JSESSIONID | Used to maintain session anonymity | Session |
Essential | cumberland.co.uk | incap_ses_1183_874499 incap_ses_1372_656819 incap_ses_1183_874499 incap_ses_1183_874499 visid_incap_656819 incap_ses_1183_874499 | Used to maintain existing session | Session |
Essential | cumberland.co.uk | visid_incap_874499 | Used to identify previous sessions | 12 months |
Essential | www.cumberland.couk | XSRF-TOKEN | Used to maintain site security | Seconds |
Essential | www.cumberland.co.uk | ICFUSERSESSION ICFEUDIRECTIVE | Used to allow the online enquiry forms to operate fully. This cookie is set upon arrival to any Cumberland website (excluding Cumberland Internet Banking). | Session |
Essential | www.cumberland.co.uk | cbs_session | Used to assist with the function of the Mortgage Calculator This cookie is set upon arrival onto the Calculator. | Seconds |
Essential | www.cumberland.co.uk | comm100_visitorguid_1000215 | Used to enable the functionality and security of our web chat service, provided by Comm100. For more information visit https://www.comm100.com. | Seconds |
Essential | vue.comm100.com | comm100standby_session_1000215 comm100_visitor_1000215 comm100_session_1000215 comm100_visitorguid_1000215 | Used to enable the functionality and security of our web chat service, provided by Comm100. For more information visit https://www.comm100.com. | 12 months |
Essential | cc.cdn.civiccomputing.com | comm100_visitorguid_1000215 | Used to enable the functionality and security of our web chat service, provided by Comm100. For more information visit https://www.comm100.com. | Seconds |
Essential | chatserver7.comm100.io | visitorGuid_1000215 | Used to enable the functionality and security of our web chat service, provided by Comm100. For more information visit https://www.comm100.com. | Seconds |
Essential | chatserver7.comm100.io | visitorGuid_1000215 | Used to enable the functionality and security of our web chat service, provided by Comm100. For more information visit https://www.comm100.com. | Seconds |
Essential | cumberland.co.uk borderwayfinance.co.uk | _cfuvid | Used by Cloudfare Rate Limiting to manage incoming traffic and to have better visibility on the origin of a particular request | Session |
Essential | cumberland.co.uk borderwayfinance.co.uk | visid_incap | Used by Imperva to identify users as a user of the website, forms part of the website’s security | 12 months |
Essential | cumberland.co.uk borderwayfinance.co.uk | cookiecontrol | Used to manage cookie preferences on the website | Session |
Analytical | banking.cumberland.co.uk | _gid | Used to track page visits | Seconds |
Analytical | banking.cumberland.co.uk www.cumberland.co.uk www.borderwayfinance.co.uk | _ga | Used to calculate visitor, session and campaign data for analytics | 24 months |
Analytical | www.cumberland.co.uk | __atuvc | Used to identify page shares | 12 months |
Analytical | www.cumberland.co.uk | ___utmvc | Used to enable functioning of Google Analytics. | Seconds |
Analytical | www.cumberland.co.uk | __atuvs | Used to enable visitors to share content with a range of networking and sharing platforms. | Seconds |
Analytical | www.cumberland.co.uk | _hjsession_ | Used by Hotjar to track mouse position, mouse clicks and other interactions with the website. | Session |
Analytical | www.cumberland.co.uk | _vwo_uuid_v2 | Used by Visual Website Optimiser and calculates unique traffic on a website. | 12 months |
Analytical | www.cumberland.co.uk | _insp_norec_sess | Used to track mouse position, mouse clicks and other interactions with the website. | Session |
Marketing | www.cumberland.co.uk | _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. | 3 months |
Marketing | youtube.com | YSC CONSENT | Used to identify information about how the end user uses the website and any advertising that the end user may have seen before exiting the website. | 24 months |
Marketing | youtube.com | VISITOR_INFO1_LIVE | Used by Youtube to keep track of user preferences for Youtube videos embedded in sites | 6 months |
Marketing | www.cumberland.co.uk | MUID | Used by Microsoft to store and track visits across the website | 12 months |
Marketing | www.cumberland.co.uk | sa-user-id-v2 | Used by StackAdapt to record information about website activity | 12 months |
Marketing | www.cumberland.co.uk | smct_last_ov | Used to track website activity | 12 months |
Marketing | www.cumberland.co.uk | _uetvid | Used by Bing Ads to store and track visits across the website | 13 months |
Marketing | www.cumberland.co.uk | __qca | Used by QuantCast to store and tracking audience reach fro marketing campaigns | 60 months |
Marketing | www.cumberland.co.uk | _gcl_au | Used by Google Adsense to stock and track conversions | Always On |
Marketing | www.cumberland.co.uk | __hstc _clck sa-user-id sa-user-id-v3 smc_sesn smc_refresh smc_tbv smc_tpv smc_uid smc_tag MSPTC _uetsid _insp_targlpt _insp_targlpu _insp_nv _insp_slim _insp_wid incap_ses_ _hjsessionUser_ _hjIncludedInSessionSample_ _hjMinimizedPolls | Used by HubSpot to store and time of visits to the website | 13 months |
Marketing | Adswizz | OAID | Used by AdSwizz to measure the effectiveness of our radio advertising campaigns | Session |
Last updated: 09.12.2024
Download a PDF version of our Privacy Policy