Your data is protected with Westfield Capital

PRIVACY POLICY

1. INTRODUCTION AND SCOPEThis Privacy Policy (“Policy”) sets out the basis upon which Westfield Capital Group (“Company”, “we”, “us”, or “our”) collects, uses, processes, discloses, and protects personal data in connection with:Access to and use of our website (the “Website”);Provision of financial products and services; andAny related interactions with clients, prospective clients, intermediaries, and third parties.We are committed to ensuring that personal data is handled in accordance with applicable data protection legislation, including but not limited to:The UK General Data Protection Regulation (“UK GDPR”);The Data Protection Act 2018; andApplicable guidance issued by regulatory authorities, including the Financial Conduct Authority (“FCA”).Westfield Capital Group acts as an Appointed Representative of Westfield Leasing Limited, which is authorised and regulated by the FCA. In certain circumstances, we may act as a data controller, joint controller, or data processor depending on the nature of the processing activity.2. DEFINITIONSFor the purposes of this Policy:“Personal Data” means any information relating to an identified or identifiable natural person.“Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, or destruction.“Data Subject” means the individual to whom the Personal Data relates.“Special Category Data” refers to sensitive personal data as defined under Article 9 of UK GDPR.3. DATA CONTROLLER DETAILSWestfield Capital GroupEmail: support@westfieldcapitalgroup.co.ukTelephone: 020 8073 1914For data protection queries, please contact: support@westfieldcapitalgroup.co.uk4. CATEGORIES OF PERSONAL DATA COLLECTEDWe may collect, store, and process the following categories of Personal Data:4.1 Identity DataFull nameDate of birthGenderNationality4.2 Contact DataResidential addressEmail addressTelephone numbers4.3 Financial and Transactional DataBank account detailsIncome and employment informationCredit history and credit scoresExisting financial commitmentsLoan and repayment history4.4 Identification and Verification DataPassport or driving licence detailsProof of addressBiometric or electronic verification data (where applicable)4.5 Technical DataIP addressLogin dataBrowser type and versionDevice identifiersTime zone setting and location4.6 Usage DataWebsite interaction dataPages visitedTime spent on pagesNavigation paths4.7 Marketing and Communications DataPreferences in receiving marketingCommunication history4.8 Special Category DataWe do not ordinarily collect Special Category Data unless strictly necessary and permitted by law (e.g., for vulnerability assessments or regulatory obligations).5. METHODS OF DATA COLLECTIONWe collect Personal Data through the following means:Direct interactions (e.g., application forms, correspondence, phone calls)Automated technologies (cookies, tracking scripts)Third-party sources, including:Credit reference agenciesFraud prevention agenciesFinancial institutions and lendersPublicly available registers6. PURPOSES OF PROCESSINGWe process Personal Data for the following purposes:6.1 Contractual PerformanceAssessing and processing finance applicationsAdministering agreements and servicesManaging repayments and accounts6.2 Compliance with Legal ObligationsAnti-money laundering (AML) checksKnow Your Customer (KYC) verificationFraud detection and preventionRegulatory reporting6.3 Legitimate InterestsBusiness administration and record keepingService improvement and analyticsRisk assessment and credit evaluationInternal audit and compliance monitoring6.4 Consent-Based ProcessingDirect marketing communicationsOptional cookies and tracking technologies7. LEGAL BASIS FOR PROCESSINGWe rely on the following lawful bases under UK GDPR:Article 6(1)(b): Processing necessary for the performance of a contractArticle 6(1)(c): Compliance with legal obligationsArticle 6(1)(f): Legitimate interests pursued by the CompanyArticle 6(1)(a): Consent (where applicable)Where Special Category Data is processed, we rely on Article 9(2) conditions where applicable.8. DISCLOSURE OF PERSONAL DATAWe may disclose Personal Data to:Our principal firm, Westfield Leasing LimitedLenders, brokers, and financial partnersCredit reference agencies (e.g., Experian, Equifax, TransUnion)Fraud prevention agenciesRegulatory bodies, including the FCAProfessional advisers (legal, accounting, compliance)IT service providers and data processorsAll third parties are contractually bound to process Personal Data securely and lawfully.9. CREDIT REFERENCE AND FRAUD PREVENTION AGENCIESIn processing applications, we may:Conduct credit checksShare information with credit reference agenciesReport account performance and payment historyFraud prevention agencies may retain your data for extended periods where fraud is suspected or detected.10. INTERNATIONAL DATA TRANSFERSWhere Personal Data is transferred outside the United Kingdom, we ensure appropriate safeguards, including:Adequacy regulationsStandard Contractual Clauses (SCCs)Binding corporate rules (where applicable)11. DATA RETENTIONWe retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including:Compliance with legal and regulatory obligationsResolution of disputesEnforcement of agreementsRetention periods typically extend up to six (6) years following the termination of a customer relationship, unless a longer period is required by law.12. DATA SECURITYWe implement appropriate technical and organisational measures, including:Encryption of data in transit and at restSecure access controls and authentication mechanismsRegular vulnerability assessmentsStaff training on data protectionDespite these measures, no system is entirely secure, and we cannot guarantee absolute security.13. DATA SUBJECT RIGHTSUnder applicable data protection laws, Data Subjects have the following rights:Right of accessRight to rectificationRight to erasureRight to restriction of processingRight to data portabilityRight to objectRights relating to automated decision-making and profilingRequests may be submitted using the contact details provided in Section 3.14. AUTOMATED DECISION-MAKING AND PROFILINGWe may use automated systems to assess creditworthiness and risk. Such processing may include profiling based on financial and behavioural data.Data Subjects have the right to request human intervention and to contest decisions made solely by automated means.15. COOKIES AND TRACKING TECHNOLOGIESOur Website uses cookies and similar technologies to:Ensure functionality and securityAnalyse performance and usageDeliver targeted advertisingUsers may manage cookie preferences through browser settings or consent management tools.16. THIRD-PARTY LINKSThe Website may contain links to third-party websites. We accept no responsibility for the content, privacy practices, or policies of such websites.17. MARKETING COMMUNICATIONSWe may send marketing communications where:Consent has been provided; orWe have a legitimate interest under applicable lawsYou may opt out at any time by contacting us or using the unsubscribe link provided.18. CHANGES TO THIS POLICYWe reserve the right to amend this Policy at any time. Any changes will be published on this page with an updated revision date.19. COMPLAINTSIf you have concerns regarding our handling of Personal Data, you may contact us in the first instance.You also have the right to lodge a complaint with:Information Commissioner’s Office (ICO)Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AFWebsite: https://ico.org.uk20. CONTACT INFORMATIONFor all privacy-related enquiries:Westfield Capital GroupEmail: support@westfieldcapitalgroup.co.ukTelephone: 020 8073 1914