Jigsaw Finance Limited t/a Jigsaw Finance and Car Finance First, is authorised and regulated by the Financial Conduct Authority FRN 679612. The information we ask you to provide by which you can be identified will only be used as detailed in this policy statement.
This policy is to outline Jigsaw Finance Limited's' responsibilities in ensuring the Data we collect, use and store from our Data Subjects complies with the General Data Protection Regulation.
This policy has been adopted by our Compliance Committee on behalf of the Board and applies to everyone involved in our business. For the avoidance of doubt, this includes all officers and beneficial owners of the business as well as all employees (i.e. permanent, contract, and temporary staff).
This policy also applies to our Appointed Representatives (ARs). In all our dealings with our ARs, we manage their compliance and are subject to regular audits.
If anyone covered by the scope of this policy has any queries, these should be raised with the Risk and Compliance Director.
Jigsaw Finance Limited is authorised and regulated by the Financial Conduct Authority FRN 679612. The information we ask you to provide by which you can be identified will only be used as detailed in this policy statement.
For the purposes of the General Data Protection Regulation (GDPR), Jigsaw finance is the 'data processor' and the 'data controller' (i.e. the company who is responsible for controlling and the processing of your personal data).
Jigsaw Finance Limited is a credit broker and not a lender. We can introduce you to a limited number of lenders and their finance products. We are not an independent financial advisor; we will provide details of products available, but no advice or recommendation will be made. You must decide whether the finance product is right for you.
Whichever lender Jigsaw Finance Limited introduces you to, we will typically receive commission from them (either a fixed fee or a fixed percentage of the amount you borrow).
All of the lenders that Jigsaw Finance Limited work with could pay commission at different rates and the commission values could vary between finance products, but the commission we receive does not influence the interest rate you will pay. Jigsaw Finance Limited's aim is to secure finance for you at the lowest interest rate available from our panel of lenders.
This policy document contains the following sections:
Information We Collect
How We Use the Information We Collect
How We Share the Information
Automated Credit Scoring
Retention of Your Personal Information
Your Rights Under General Data Protection Regulation Law
Accessing and Changing Your Personal Information
Third Party Websites
Lodging A Complaint with A Supervisory Authority
We will collect personal information or personal data about you in various ways, including:
When you apply for finance via an introducer, complete an application form or a contact form.
The information we collect in relation to an application, product or service may include but not restricted to; name, address, telephone number, email address, date of birth, employment details (including income), details of expenditure, passport information, driving license details, bank details, credit history, insurance details, dependants, associates, transaction and credit card information.
Should you advise us, or we identify you as a “Vulnerable Customer” then we may need to collect personal sensitive information i.e. health information regarding a disability, illness or impairment.
This information, if mandatory as part of the application will have to be provided in order for us to continue with your application.
Should you apply online to any of the group companies, we collect information about your computer hardware and software i.e. your IP address, browser type, domain names, access times and referring web site addresses. This information is used by Jigsaw Finance Limited to maintain the quality of the service and to provide general statistics regarding the use of the web site.
When you participate in any market research or promotions provided by the Jigsaw Finance Group.
Information provided to the business, from business partners, and from other organisations such as credit reference agencies and fraud prevention agencies.
If you require assistance from us relating to a product or service we offer, or to make or assist with a complaint.
Should you apply to us for a job vacancy or take employment with Jigsaw Finance or its subsidiaries.
Your data may be provided to us by third parties outside of our business that we have affiliations with. We will only use this information where these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.
We use the information collected from you to provide you with the services we offer and for the lawful processing of the data based on the following;
The data subject has given consent to the processing of their personal data for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Subject to applicable laws we will monitor and record calls, email, text messages, social media messages and other communications. In particular, telephone calls between us and you in connection with the application and any loan may be recorded for these purposes.
Provide you with information you require or have requested.
Assess any credit application, which will include confirming your identity and the prevention of fraud or money laundering.
Where you have chosen to be made aware of our products and services.
To deliver marketing communications, website improvements, new products & services to you relating to our business via email, phone, SMS or post as requested. You have the right to opt out at any time by putting your request in writing along with your full name and email it to email@example.com.
Send you other business-related communications.
Responding to any communication you send us.
To handle any enquiry or complaint you make relating to our business or websites.
To carry out our HR activities and payroll operation, including third party employment suppliers and governing bodies.
We may share your personal information with the following parties;
Other companies owned and operated by Jigsaw Finance Ltd.
Our legal & professional advisors such as our auditors, legal advisors in the event of the sale or restructuring of our business.
Third party loan service providers and administration companies who undertake the day to day servicing of our business. Your information will be submitted to the most appropriate lender from our selected panel of lender (see below).
Other third parties acting on our behalf such as our IT software and maintenance providers for analytical and storage purposes (see below).
We may also use or disclose information to the extent required by law, court order, as requested by other government law enforcement authority, or to enforce legal rights.
Law enforcement agencies and regulatory bodies if necessary such as HMRC, the Financial Conduct Authority and the Information Commissioners Office.
Courts, in order to comply with a legal agreement for the administration of justice.
Fraud Prevention Agencies.
Credit Reference Agencies (see below).
Personal information will not be transferred by Jigsaw Finance Limited outside of the UK or the EU.
List of third parties
|Credit reference agencies||TransUnion International UK Limited, Experian Ltd, Equifax Ltd|
|Insurance Distributors||Longshoot Limited T/A Motor Insurance Distribution|
|Third party service providers||
Credit Reference Agencies
In processing your application, we will carry out a credit search, to determine the most suitable lender to meet your requirements, however this will not impact your credit score.
We may share your information with more than one finance provider, which could result in one or more further credit searches being carried out by the chosen lender/s. They will/may perform credit and identity checks on you with one or more credit reference agencies ("CRAs"), which will/may result in their search being visible to other organisations that make credit searches.
When your information is shared by us or by the chosen lender/s with a CRAs, the CRAs will provide back personal information. This will include information about your financial situation and financial history. CRAs will supply to them/us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information. This information will be used to:
Assess your creditworthiness and whether you can afford to take the product;
Verify the accuracy of the data you have provided to us;
Prevent criminal activity, fraud and money laundering;
Ensure any offers provided to you are appropriate to your circumstances.
The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail at each of the three CRAs websites – clicking on any of these three links will take you to the same CRAIN document:
Searches will also be made in respect of Directors and Partners of firms applying for credit. Information held about you by the credit reference agencies may already be linked to records relating to other people with whom you have a financial association. In connection with your application you may be treated as financially linked with them and assessed with reference to any such associated records.
Joint Applicants or Guarantors
If you provide personal information about someone else, for example a joint application or a Guarantor, you must only do so with the consent of the other person. If you enter into a product jointly with another person your data will be shared with the other person.
If you provide information about others, you confirm that the other person has given you authority to act on their behalf and has agreed that you can provide their personal data.
Should data be transfered outside of the UK, then it will only be transferred to the EU.
There will be circumstances where we will only process your data if we have your consent to do so. For example, if you provide us with data that is classed as a special category of data such as health information, criminal records of convictions and offences, or allegations of criminal offences. We will only process this with your permission (unless we feel the processing is necessary to protect your vital interests or if the law allows us to do so). You have a right at any time to ask us to stop the processing of that specific data.
Several companies in our lending panel operate automated credit scoring systems as part of their assessment process. However, your application is also subject to a manual assessment by our underwriting team. If your application is rejected solely based on a credit scoring system, you can request that your application is manually assessed as part of the reconsideration.
If your application for finance is declined or if your application is accepted but you do not proceed, we will retain your information for 3-years or as long as necessary to deal with any queries you may have.
If your application is accepted and you proceed, then we will retain your information indefinitely following the end of your contract for the following:
in case of queries – We will retain it in case of queries from you,
in case of claims – We will retain certain parts of your personal information for the period in which you might legally bring claims against us and,
in accordance with legal and regulatory requirements – We carefully consider whether we need to retain your personal information after the period described above in case of a legal or regulatory requirement.
We may hold your information for a longer or shorter period from that described above where:
the law requires us to hold your personal information for a longer period, or delete it sooner;
you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law; and
in limited cases, the law permits us to keep your personal information indefinitely provided we put certain protections in place.
Your personal information is protected under data protection law and you have a number of rights which you can enforce against us as your data controller. You should be aware that these rights do not apply in all circumstances. If you seek to exercise one against us it will at that stage be explained to you whether the right does apply to you based on the facts.
Your rights are as follows:
The right to be informed
To be informed about the collection and use of your personal data.
The right to object
To, in some cases, object to the processing of your personal information.
The right to restrict processing
To, in some cases, to restrict the processing of your personal information.
The right to erasure
To have your personal information erased is also known as the “Right to be Forgotten”.
The right of access
To request access to the personal information held about you and to obtain certain prescribed information about how we process it.
The right to data portability
To move, copy, and transfer certain personal information also known as Data Portability.
The right to rectification
To have your personal information corrected if it is inaccurate and to have incomplete personal information completed in certain circumstances.
The right in relation to automated decision-making
To be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
If for any reason you are concerned that the personal information we hold about you is incorrect, or if you would like your personal information removed from our records please contact us by email at firstname.lastname@example.org and we will be happy to review, update or remove information as appropriate.
If you asked to be removed from our database, we will mark your account "Closed" but will keep your information as per the retention period requirements. However, if you close your account then your personally identifiable information will not be used by us for any further purposes, nor sold or shared with third parties unless required by law.
In accordance with the General Data Protection Regulation you may request details of personal information we hold about you. Any requests should be made to: Compliance Manager, Jigsaw Finance Limited, Genesis Centre, Innovation Way, North Staffs Business Park, Stoke on Trent, Staffordshire, ST6 4BF.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable procedures to safeguard and secure the information we collect online.
We currently protect personal data using safeguards such as firewalls and data encryption and password protection. Our buildings have secure access on all floors and staff operate under strict data controls.
Whilst we will use all reasonable efforts to protect such personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data which are transferred from you or to you via the internet.
Jigsaw Finance may also share your information with other companies within the Jigsaw Finance Group for the administration of any products or services provided to you by any company within the Group.
They may also provide you with information about other products and services that they offer.
If you have provided your consent, we may also share your information with marketing agencies, who provide marketing services on behalf of the Group, to promote the products and services provided by the Group. If you have previously agreed to us using your personal information for marketing purposes, you may change your mind at any time by putting your request in writing along with your full name or by email it to email@example.com.
Please be aware that we will not sell or otherwise disclose any personal data provided to us to any other party without your express permission.
Under the General Data Protection Regulation, you have the right to report a concern with a Supervisory Authority which in the United Kingdom is The Information Commissioner’s Office (ICO).
You can report concerns via the ICO website, but please allow us the opportunity first to understand your issue and see if we can resolve matters with you.
You can visit its website for more information: www.ico.org.uk
Jigsaw Finance Limited
Stoke on Trent
Phone 01782 450745
Please note that this policy will be reviewed, and may change, from time to time. The revised policy will be posted to this page so that you are always aware of the information we collect, how we use it and under what circumstances we disclose it.
Last updated: 27th November 2023.