How do you keep my information secure?

Looking after your information is one of our most important responsibilities. This article summarises the practical measures behind that and points you at the formal detail in our Privacy Policy.

The basics

• Encryption in transit. The connection to this website, our online forms and our payment page is encrypted using TLS. You should see https:// in the address bar — if you do not, please contact us before sending personal information.
• Access controls. Access to customer records is limited to colleagues who need it for their role, logged centrally, and reviewed regularly.
• UK-based processing. Customer information is held on systems located in the United Kingdom. Where we use third-party processors, they are listed in our Privacy Policy and contracted under UK data-protection terms.
• Retention with purpose. We keep your information only for as long as we need it for the original purpose — for example, to administer your account, meet our regulatory record-keeping obligations, or defend against a future complaint or claim.

Calls and recordings

Calls to and from Credicorp Limited are recorded — see our Audio Recording page for the full detail. Recordings are stored on the same secure systems as the rest of the customer record and are subject to the same access controls and retention rules.

Sharing your information

We share information only where there is a clear lawful basis to do so. The most common cases are:

• credit reference agencies — see our article on credit-file impact;
• our regulators and government bodies, where the law requires us to;
• service providers operating on our behalf under contract;
• related group companies (for example CM Beyer Limited in the UK and Credicorp Pty Limited in Australia) only where a specific shared service applies and a lawful basis exists.

You have rights over the information we hold — to see it, to correct it and, in some cases, to ask for it to be deleted. Those rights are set out in the Privacy Policy, and the quickest way to exercise them is the General Support Enquiry form on our Forms & Requests page (mark it as a data request) or by emailing our privacy team.