Who we are
Why do we have a Privacy Notice?
Data protection principles
GDPR sets out sets out seven key principles:
- Lawfulness, fairness and transparency; which means we must have a valid lawful basis in order to process your personal data
- Purpose limitation; which means any data we collect must be for a specified, explicit and legitimate purpose
- Data minimisation; which means the data we collect must be relevant and limited to what is necessary for the collection purpose
- Accuracy; which means we must take all reasonable steps to make sure the information we hold about you is accurate and up to date
- Storage limitation; which means data should be kept in a form which permits identification of data subjects for no longer than is necessary for the collection purpose
- Integrity and confidentiality (security); which means data should be processed in a manner that ensures appropriate security of the personal data
- Accountability; which means that the data controller must take responsibility for complying with the principle
The information we hold about you
- Personal and contact information
- Financial information such as income, expenditure, debts and assets
- Socio-demographic information such as your nationality and profession
- Consent to pass your details to a third party to assist you with your chosen debt solution
- Communications information such as date, time or method you wish to be contacted by us
- Marketing preferences
- Information about your health and wellbeing
How do we collect your personal information?
- When you call our telephone advice helpline
- When you request a call back from us
- When you use our website
- When you provide us with feedback about our service
- When you ask us to send you information
How we will use your information
- Where the data is required to perform a contract we have entered into with you.
- Where we need to comply with a legal obligation, such as a court order or to maintain regulatory compliance.
- Where the information is necessary for our legitimate interests. This lawful purpose relates to the processing of your data in a way that you would reasonably expect us to, for example, the provision of debt advice.
- Where you have given your explicit consent for us to process your information in a particular way, such as opting to receive specific direct marketing communications from us.
- Where we need to protect your vital interests
- Where it is needed in the public interest
Sharing of your data
Which third parties do you share data with?
- Solution providers that you have consented to speak with
- For auditing and regulatory purposes (from time to time, we may be required to share data with official bodies such as the Charity Commission, the Financial Conduct Authority and the Information Commissioner’s Office)
- For quality management purposes
- To compile statistics and undertake research
Transferring information outside the EEA
How long do we keep your data for?
Protecting your data
- Data portability – you have the right to request a copy of the data we hold about you in a machine readable format so that you are able to transfer it to another party. If you want to request a copy of the information we hold about you, please contact email@example.com detailing your request.
- Request erasure – you have the right to request that we delete your personal information where there is no legal reason for us continuing to process it. In accordance with the charity’s data retention policy, our data is anonymised so that we can continue to undertake important research and monitor trends. If you want to request that we erase the information we hold about you, please contact firstname.lastname@example.org detailing your request.
- Object to processing – you have the right to of object to Debt Advice Foundation processing your personal information where there is no legal basis for continuing to do so. This includes the processing of any information for direct marketing purposes. If you want to request that we discontinue processing your information, please contact email@example.com detailing your request.
- Request rectification – you have the right to make sure all information we hold about you is accurate and up to date. If you want to provide us with updated information, please contact firstname.lastname@example.org detailing your request.
- Request access – you have the right to access the information we hold about you. If you want us to provide you with a copy of the information we hold about you, please contact email@example.com detailing your request.
- Restrict processing – you have the right to suspend the processing of your information. This is could be used in situations where further investigation into a data request is required such as establishing the accuracy of your data or an objection to processing request has been made.
- Withdraw consent – you have the right to withdraw consent for us process your data, where you have given explicit consent, at any time. Once we have received your withdrawal notice, we will discontinue processing of your data unless we have a lawful basis to continue doing so. If you want to withdraw consent for processing your information, please contact firstname.lastname@example.org detailing your request or click unsubscribe on any direct marketing email we have sent you if your consent related to receiving direct marketing email communications from us.
Data Protection Officer
If you’re unable to call our free debt helpline number 0800 043 40 50 right now, you can fill in the form below and one of our advisors will call you back at a time of your choosing.