Who Are We?
We are Contraflex Limited, Carrowreagh Businiess PArk, Carrowreagh Road, Dundonald, Belfast,BT16 1QQ,
What Kinds of information do we process?
We process many different types of personal information based on the type or product or service that you require us to perform. Where relevant to you this may include:
• Full Name
• Date of Birth
• Email Address
• Telephone Numbers
• Financial Associations (e.g. Director of XYZ Ltd)
• Financial Details
• Nl Number
• Bank Account Details
• Companies House Company Number
• Payment Card Details (Not stored)
• Details of which services that you require us to perform
• Any other information that you have consented to us using is order to carry out the tasks that you have asked us to complete on your behalf
How we received your information
We have received this information directly from you and also from various third parties, with your consent. We only request and use information that is relevant to any of the services which you have asked us to carry out on your behalf.
You are responsible for giving accurate and up to date information to allow us to perform any services which you have asked us to complete.
How/Why We Use Your Information
We only will use your information for the purpose of providing any services you have requested us to complete on your behalf. We will only use it for reasons for which we are allowed to by law. This may fall under 3 of the GDPR lawful bases for processing:
(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations). Under the GDPR we are obliged to inform you why we intend to process the data we store and the lawful basis for us processing it.
The information is used in connection with the sale to you and/or the purchase from you of a motor vehicle that you have asked us to supply or dispose of. It is also used for the sourcing and supply of appropriate financial arrangements in connection with both the purchase and disposal of a vehicle, whether it be a new finance arrangement or the clearing of an old financial arrangement.
It can also be used for any other purpose required to allow us to perform our statutory, legal and regulatory compliance duties. It will also be used for any additional purposes as requested by yourself.
How We Share Your Information
We will not share your information with any other company for marketing reasons.
As part of the services which you require us to perform we may share the information with various agencies such as Finance companies, banks and other lenders.
To provide services requested we may process data using certain financial/office programs all of which have been GDPR approved. If your information is transferred outside the UK/EEA we will ensure that there are suitable safeguards in place (e.g. GDPR Approved Compliance Contract)
How Long and Where We Keep Your Information
We will not keep personal data beyond the time scales required by law. This is typically 6+ years for financial details. The information may be stored in a variety of secure locations including emails, electronic documents, paper
documents, software and in remote backup facilities. Appropriate software certification and file passwords have been implemented to ensure that your data is secure.
Old digital data is erased securely.
Old paper documents are shredded and then incinerated.
Your Rights Regarding Your Information
Under the GDPR you have a number of rights regarding your information, the full details of which are available at the ICO website.
• The right to be informed about the processing of your data
• The right of access to see what data we have
• The right to rectification if the data we have Is inaccurate
• The right to erasure subject to the law
• The right to restrict processing
• The right to data portability
• The right to object to processing of your data