We ask that you read this website privacy policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and on how to contact us and supervisory authorities in the event you have a complaint.

This website privacy policy is divided into the following sections:

  • Who we are
  • Our Service
  • Our website
  • Our collection and use of your personal information
  • Our legal basis for processing your personal information
  • Further information—the personal information we collect and how we use it
  • Who we share your personal information with
  • Whether information has to be provided by you, and if so why
  • Where your personal information is held
  • How long your personal information will be kept
  • Transfer of your information out of the EEA
  • Cookies and similar technologies
  • Your rights
  • Keeping your personal information secure
  • How to complain
  • How to withdraw your consent
  • Changes to this website privacy policy
  • How to contact us
  • Changes to our Business
  • General

Who we are

This website is operated by Perfect Data Solutions Limited. Our registered office address is at Lancaster Court, 8 Barnes Wallace Road, Fareham, Hampshire PO14 5TU.  We are a limited company registered in England and Wales under company number 07407815.  Our VAT number is 120152968.  We are authorised and regulated by the Financial Conduct Authority under number 802559. Our Data Protection Officer is Neil Williams.

We collect, use and are responsible for certain personal information about you. When we do so, we are regulated under data protection and privacy laws which apply across the European Union (including in the United Kingdom) and are responsible as ‘controller’ of that personal information for the purposes of those laws.

Our Service

We provide our service through this website as an Account Information Service Provider (“AISP”) which is part of the government backed Open Banking scheme. 

We are also a credit reference agency.    

Open Banking is the secure way of providing access to your bank or building society account to providers who are registered for this purpose. 

Registered providers and participating banks and building societies are listed under the Open Banking Directory.  

Open Banking was set up by the UK Government to encourage more competition and innovation in the financial services sector.

By permitting access to your bank or building society account information (“Transaction Information”), your proposed lender, debt manager or other financial institution (“Financial Institution”) should be able to make more informed lending, credit management or other financial decisions as it will be able to verify your income, outgoings and other matters in order to assess what financial terms might be suitable for you.

By registering your details with us and by using our website you consent for us to contact your bank or building society (“Account Provider”) and to retrieve, collate and profile your Transaction Information and provide this to your Financial Institution in the form of a search.  

You also consent for us to use and share Transaction Information as a credit reference agency in order that we may update your credit file.     

Further information about Open Banking is available from www.openbanking.org.uk.

Our website

This privacy policy relates to your use of our website, www.oohmoolah.com.

Our service may link you to other websites including websites owned and operated by your Financial Institution or your Account Provider. These other third party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third party websites, please consult their privacy policies as appropriate.

Our collection and use of your personal information

We collect personal information about you when you access our website, register with us, contact us, input data into our website, compete surveys and when we receive your Transaction Information.

We collect this personal information from you, your Financial Institution and/or your Account Provider either directly, such as when you register with us, contact us or when we receive financial application details from your Financial Institution or Transaction Information from your Account Provider or indirectly, such as your browsing activity while on our website (see ‘Cookies’ below).

The personal information we collect about you depends on the particular activities carried out through our website. Such information may include:

  • your name, address, telephone and other contact details
  • date of birth
  • IP address
  • bank account and transaction details
  • details of any feedback you give us by phone, email or post
  • information about the services we provide to you

We use this personal information to:

  • create and manage your registration with us
  • verify your identity
  • provide our service to you
  • customise our website and its content to your particular preferences
  • notify you of any changes to our website or to our service that may affect you
  • improve our service
  • collate, analyse and anonymise trend data for research and commercial purposes

This website is not intended for use by children under the age of 16 and we do not knowingly collect or use personal information relating to children.

We may also collect personal information on you from places such as business directories, public registers, credit reference agencies and other commercially or publicly available sources e.g. to check or improve the information we hold (like your address) and/or to verify various details.

The collection and profiling of Transaction Information is an automated activity which requires your consent. You may withdraw your consent in accordance with the provisions set out below.      

Our legal basis for processing your personal information

When we use your personal information we are required to have a legal basis for doing so. There are various different legal bases upon which we may rely, depending on what personal information we process and why.

The legal bases we may rely on include:

  • consent: where you have given us clear consent for us to process your personal information for a specific purpose
  • contract: where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
  • legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
  • vital interests: where our use of your personal information is necessary to protect you or someone else’s life
  • public task: where our use of your personal information is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law
  • legitimate interests: where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides our legitimate interests)

Further information—the personal information we collect and how we use it

The table below explains what we use (process) your personal information for and our reasons for doing so:

What we use your personal information for

Our reasons

To provide our services to you

With your consent and for the performance of our contract with you

To prevent and detect fraud against you and us

For our legitimate interests or those of a third party, i.e. to minimise fraud that could be damaging for us and for you

Conducting checks to identify our customers and verify their identity

Screening for financial and other sanctions or embargoes

Other processing necessary to comply with professional, legal and regulatory obligations that apply to our business, e.g. rules issued by our professional regulator

To comply with our legal and regulatory obligations

Gathering and providing information required by or relating to audits, enquiries or investigations by regulatory bodies

To comply with our legal and regulatory obligations

Ensuring business policies are adhered to, e.g. policies covering security and internet use

For our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can deliver the best service to you

Operational reasons, such as improving efficiency, training and quality control

For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price

Ensuring the confidentiality of commercially sensitive information

For our legitimate interests or those of a third party, i.e. to protect trade secrets and other commercially valuable information

To comply with our legal and regulatory obligations

Statistical analysis to help us manage our business, e.g. in relation to our financial performance, product range or other efficiency measures

For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price

Preventing unauthorised access and modifications to systems

For our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for us and for you

To comply with our legal and regulatory obligations

Updating and enhancing our records

For the performance of our contract with you or to take steps at your request before entering into a contract

To comply with our legal and regulatory obligations

For our legitimate interests or those of a third party, e.g. making sure that we can contact you about our service

Statutory returns

To comply with our legal and regulatory obligations

Ensuring safe working practices, staff administration and assessments

To comply with our legal and regulatory obligations

For our legitimate interests or those of a third party, e.g. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you

Collate, profile and anonymise records for research and commercial purposes.

For our legitimate interest and/or with your consent, we will create and profile anonymised data from Transaction Information received which relate to matters such as geographical, social or economic trends.  We may sell this anonymised data as market or academic research. The data is anonymised which means that your personal data is removed.

Credit reference checks as a credit reference agency, sharing and updating your credit file

To comply with our legal and regulatory obligations

External audits and quality checks, e.g. for ISO and the audit of our accounts

For our legitimate interests or a those of a third party, i.e. to maintain our accreditations so we can demonstrate we operate at the highest standards

To comply with our legal and regulatory obligations

Who we share your personal information with

We will share your personal information with:

  • Your Financial Institution
  • Your Account Provider as required as part of our service
  • Regulators, credit reference agencies and law enforcement agencies
  • Professional advisors including solicitors, accountants and insurers who provide us with professional services
  • Companies that help us to provide services to you such as data hosting and technology companies. Such companies are authorised to use your personal information only as necessary to provide these services to us and have agreed to contractual safeguards to protect your personal information. We will not share your personal information with any unauthorised third party

Whether information has to be provided by you, and if so why

We require you to provide information to enable us to provide you with our service. We will inform you at the point of collecting information from you, whether you are required to provide the information to us.

Where your personal information is held

Information may be held at our offices and those of our service providers, representatives and agents from time to time.

How long your personal information will be kept

We will keep your personal information while you are registered with us or we are providing our service to you. Thereafter, we will keep your personal information for as long as is necessary:

  • to respond to any questions, complaints or claims made by you or on your behalf;
  • to show that we treated you fairly;
  • to keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information. Generally, we will not hold your personal information for more than 6 years.

When it is no longer necessary to retain your personal information, we will delete or anonymise it.

Transfer of your information out of the EEA

We will not transfer your personal information outside of the European Economic Area.

Cookies and similar technologies

A cookie is a small text file which is placed onto your computer when you access our website. We use cookies to improve your experience of using our website and to improve our range of services.  Our cookies are carefully selected to ensure that your privacy is protected and respect at all times.

Before our website places cookies on your computer, you will be presented with a message bar requesting your consent to set those cookies.  By giving your consent to the placing of cookies, you are enabling us to provide a better experience and service to you.  You may, if you wish, deny consent to the placing of cookies; however certain features of the website may not function fully or as intended.

Our website may place the following cookies.

Type of Cookie

Purpose

Strictly necessary cookies

These are cookies that are acquired for the operation of our website. They  include, for example, cookies that enable you to login into secure areas of our website or make use of e-payment services.

Analytical / Performance cookies

They allow us to recognise and count the number of visitors and see how visitors move around our website when they are using it.  This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

 

You can choose to enable or disable cookies in your Internet browser. By default, most Internet browsers accept cookies but this can be changed.

For further details, please consult the help menu in your Internet browser.

You can choose to delete cookies at any time; however you may lose any information that enables you to access the website more quickly and efficiently including, but not limited to, personalisation settings.

It is recommended that you ensure that your Internet browser is up to date and that you consult the help and guidance provided by the developer of your Internet browser if you are unsure about adjusting your privacy settings. 

Your rights

You have a number of important rights free of charge. In summary, those include rights to:

  • fair processing of information and transparency over how we use your use personal information
  • access to your personal information and to certain other supplementary information that this Privacy Policy is already designed to address
  • require us to correct any mistakes in your information which we hold
  • require the erasure of personal information concerning you in certain situations
  • receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
  • object at any time to processing of personal information concerning you for direct marketing
  • object to decisions being taken by automated means including profiling which produce legal effects concerning you or similarly significantly affect you
  • object in certain other situations to our continued processing of your personal information
  • otherwise restrict our processing of your personal information in certain circumstances

If you would like to exercise any of those rights, please:

  • email, call or write to us
  • let us have enough information to identify you (e.g. account number, user name, registration details),
  • let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill), and
  • let us know the information to which your request relates , including any account or reference numbers, if you have them

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

You also have the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.

How to withdraw your consent

Where we rely upon your consent in order for us to process your personal information you may withdraw your consent at any time. Please contact us if you want to do so. This will not affect the lawfulness of any processing undertaken prior to the withdrawal of your consent.

If you withdraw consent, we may not be able to provide you with our service. 

In circumstances, where your Account Provider has already permitted access to your Transaction Information you agree and understand that you shall need to contact your Account Provider directly to withdraw consent under their own terms and conditions.  

Changes to this website privacy policy

This website privacy policy was published on 18 December 2018 and last updated on the same date.

We may change this Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be made available through our website and will be deemed to be accepted by you upon your first visit following the publication of any update. You are reminded to check the relevant page of our website for updates.

How to contact us

To contact us about anything to do with your personal information including to make a subject access request, please use the following details marked for the attention of the Data Protection Officer:

Postal Address:  Perfect Data Solutions Limited, Lancaster Court, 8 Barnes Wallace Road, Fareham, Hampshire PO14 5TU

Email Address: info@lendmetrics.com

Telephone Number: 02394 211010

Changes to our Business

We may, from time to time expand or reduce or business and this may involve the sale and/or transfer of control of all or part of our business. Any personal information that you have provided will, where it is relevant for any part of our business that has been transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that information only for the same purposes for which it was originally collected by us.

In the event that any of your personal information is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.

General

You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected.

Unless and otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

This Privacy Policy is governed by and interpreted according to English Law. Any disputes arising under this Privacy Policy are subject to the exclusive jurisdiction of the English Courts.

Version 1 - (12 November 2018)