This Privacy Notice outlines how MFDP Limited ("MFDP") will collect, use, store your personal data and the circumstances in which we may share it.
MFDP is committed to using your personal data fairly and lawfully and in accordance with the EU General Data Protection Regulation ("the GDPR") and Data Protection Act 2018 ("the Act"). For the purpose of GDPR, MFDP is the Data Controller.
As we will have purchased your debt and have contacted you to discuss repayment, you may share personal data about yourself and your circumstances with us through the use of our website or within telephone calls, emails or otherwise. We also receive personal data about you from third parties such as companies that have sold your debt to us.
The personal data that we collect ourselves and receive from third parties may include the following: your name, address, e-mail address, telephone numbers, debt information, payment history, credit reference information and any other information relating to your account.
Also, if you visit our website, we may automatically collect information and personal data about your device for system administration, including where available your IP address, operating system/device identifier and browser type. We do this to help us analyse how customers use the website (including behaviour patterns and the tracking of visits across multiple devices), to establish more about our website users and to assist us in managing your account.
To find out more about how these cookies are used and to opt-out of being tracked, please see our Cookies Policy found on this website.
Please note that we may combine personal data we receive from other sources with personal data you give to us and personal data we collect about you.
Some categories of personal data are more sensitive, these are known as special categories of data, for example:
As a Financial Conduct Authority ("FCA") regulated firm, we are required by them to understand whether our customers could be regarded as vulnerable and this may involve collecting and using special category personal data. We may, for debt collection purposes, ask you to provide details regarding your special category personal data or you may voluntarily give such personal data to us.
If you ever disclose this type of personal data to us we will only keep this on record if it is necessary for the services we are providing. Where we do need to keep this data, we will always request your explicit consent to do so. We may share any of your special category personal data with third parties but only with your explicit consent.
If you disclose special personal data to us without us having the opportunity to obtain explicit consent from you, for example if you send a letter or email to us detailing your medical situation, then it will be deemed that you have given your consent for us to process that data and store it on our systems.
You have the right to withdraw your consent for your special personal data to be held and processed by us at any point and you can do so by contacting us by telephone or in writing.
B. How we use your personal data
We may use personal data held about you in the following ways:
Please note that as a user of our website, you are responsible for keeping any passwords used to access your personal account information confidential.
If you require further information about the purposes for which we use your personal data then please contact our Data Protection Officer:
By letter: Data Protection Officer, MFDP Limited, 800 Mandarin Court, Centre Park, Warrington, Cheshire, WA1 1GG.
By email: dpo@mfdp.co.uk
As part of the process of recovering a debt, it may be necessary to share your personal data with third parties outside of MFDP and there is therefore a legitimate interest to do so. The types of companies that we may share your personal data with are:
We have systems in place to ensure that any personal information you provide to us will be processed in accordance with data protection legislation. Those systems are designed to ensure that such personal information will remain secure and prevent unauthorised access. Your personal information will remain confidential and will not be disclosed unless we are required to do so pursuant to a legal or regulatory obligation/process.
Our use of your personal data for the purposes set out above is to recover an outstanding debt therefore there is a contractual and legal obligation to do so. As indicated above we may also pass your personal data to third parties in order to manage your account effectively, this is also for our legitimate business interests.
Additionally, we will rely on consent when processing special category personal data about you in relation to your health or personal circumstances. This will only be in when you choose to divulge this information to us in order to help us understand your circumstances and therefore manage your account appropriately. You have the right to withdraw your consent for us to store/process your special category personal data at any time.
We will keep your personal data for as long as we are managing your account i.e. until the debt has been repaid.
We will then retain your personal data for six years from the date your account is closed with us. This is to ensure we can handle any complaints you may raise about how we managed your account, for accounting purposes and to fulfil our legal and regulatory obligations.
There may be occasions where the data that we collect from may need to be transferred or stored outside of the European Economic Area ("EEA"). In such circumstances, the companies that we work with will adhere to their contractual obligations and under the strict data protection laws that govern such transfers.
For more information, please visit the Information Commissioners website at www.ico.org.uk and search for “international transfers”.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website.
The Act gives you the right to access personal data that we hold about you. In order to make this request please contact us using the details below:
You have the right to request that we transfer the personal data that we hold about you to another Data Controller. You can exercise this right by contacting us on the below details.
We receive personal data directly from original creditors, third parties and directly from you and we are reliant on you and other third parties providing us with correct information. If you believe that any of the personal data we hold is incorrect, it is important that you make us aware as soon as possible so it can be rectified. You can exercise this right by contacting us on the below details.
You have the right to object to the use of your personal information, or to ask us to delete/remove your personal information if you believe we no longer have a lawful basis to process it. If you feel that we should not be processing your personal data then you can submit this request to the details below.
If you believe that we are processing your personal data unlawfully or you believe that we no longer need your personal data then you have the right to request that we restrict the processing of your personal data. You can exercise this right by contacting us on the below details.
How to Contact:
If you have any queries relating to your rights listed above or would like to access your personal data then please contact our Data Protection Officer:
By letter: Data Protection Officer, MFDP Limited, 800 Mandarin Court, Centre Park, Warrington, Cheshire, WA1 1GG.
By email: dpo@mfdp.co.uk
We may store information about you by using cookies. A cookie is a small file which is downloaded onto your computer (or any other device) when you visit a website. In common with many other websites we use cookies to assist us in operating the website. Cookies enable you to remain logged into the website without the need to re-enter your user credentials/personal data. Cookies help us track website usage when you log into the secure area and display information relevant to you. Cookies will automatically be removed when you log out of the website or close your Internet browser.
You can choose to disable the use of cookies when you visit our website. You can do this through your browser settings. You can find more information about rejecting cookies from www.allaboutcookies.org. However, if you do reject cookies this may prevent you from accessing/using certain sections of our website.
We reserve the right to amend this policy from time to time and if we do we will bring the new terms to your attention when you visit the site.
If you would like to make a complaint or have a query about how we use your personal data, you can contact us on the below details:
By letter: Data Protection Officer, MFDP Limited, 800 Mandarin Court, Centre Park, Warrington, Cheshire, WA1 1GG.
By email: complaints@mfdp.co.uk
If you are not satisfied with our resolution of your concerns then you have the right to complain to the Information Commissioner’s Office. Their contact details are as follows:
Address: Information Commissioner’s Officer, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
