01992 577761
office@gandadrapers.co.uk

Terms of Use

I confirm that all the information submitted to you in this form is correct and that

I agree a creditor making a credit reference and fraud prevention Agency search may be recorded by the Agency concerned and shared with other creditors and the creditor may disclose to such agencies how you conduct your account

If you default or are suspected of fraud that other lenders may use this information about you and others with whom you are financially linked for credit assessment, debt tracing, fraud and money laundering prevention

I also agree that this application may be forwarded to another broker or agency to be determined by yourselves in the interest of the customer

I confirm that by sending this application I have read your privacy policy and agree with it’s content

Privacy Policy

All applications and the information within will be treated in the strictest confidence and all information kept will be held under the Data Protection Act 1998.

OUR PRIVACY POLICY

This privacy policy sets out how G&A Drapers uses and protects any information that you give G&A Drapers when you use this website.

G&A Drapers is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

G&A Drapers may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25 May 2018.

What we collect

We may collect the following information:

  • Name, job title and work details
  • contact information including email address, phone numbers
  • demographic information such as address and postcode
  • other information relevant to our customers or applicants such as living expenses and income
  • personal details including your banking information

What we do with the information we gather

We require this information to help approve you as a customer and meet your needs and provide you with a responsible, efficient and reliable service, we also require this information for:-

  • Internal record keeping.
  • We may use the information to inform you of our services.
  • We may periodically send you emails about our products and other information which we think you may find interesting and helpful using the email address or phone number which you have provided.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online or by post.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links from and to other websites

Our website may contain links to other websites or you may have contacted us through another website of interest to you. However, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website you have visited.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes
  • if you have previously agreed to us using your personal information for direct marketing purposes or to contact you directly, you may change your mind at any time by writing to G&A Drapers, 82-84 High Street, Epping, Essex CM16 4AE or by emailing us at of****@*************co.uk or telephoning us on 01992 577761.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting, helpful or of use if you tell us that you wish this to happen.
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to G&A Drapers, 82-84 High Street, Epping, Essex CM16 4AE
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

 

Credit Reference and Affordability Checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs). We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

– Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 742313).

– TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 805757).

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

– Creditsafe Privacy / Transparency Notice: [Transparency Notice | Customers & Suppliers]

– TransUnion CRAIN (Credit Reference Agency Information Notice): https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference

– TransUnion Bureau Privacy Notice: https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

Legal Basis for Processing Personal Data

Personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Depending on the activity, we rely on the following lawful bases:

– Performance of a contract: Where processing is necessary to deliver services or meet contractual obligations, including obligations involving TransUnion.

– Legal obligation: Where processing is required to comply with applicable laws, regulatory requirements, or statutory obligations.

– Legitimate interests: Where processing is necessary for legitimate business purposes such as system security, fraud prevention, risk management, audit, and compliance, and where such interests do not override the rights and freedoms of          individuals.

– Consent: Where required by law, and where individuals have been provided with a clear choice and the ability to withdraw consent at any time.

Where legitimate interests are relied upon, appropriate assessments are conducted to ensure that the rights and freedoms of data subjects are protected.

 

The legitimate interests pursued by the controller (if processing is based on legitimate interests). 

 

Our legitimate interests include operating our business, fulfilling contractual obligations, ensuring system and data security, preventing fraud, supporting audit and compliance activities, and protecting TransUnion data. These interests are balanced against the rights and freedoms of individuals, with appropriate safeguards in place.  

 

The source of personal data (if not obtained directly from the data subject). 

Source of Personal Data

We may collect personal data about you from:

– You directly.

– Employers/clients when you apply for a role or are considered for an opportunity.

– Referees (where relevant and permitted).

– Publicly available sources (e.g., professional networking sites, business websites, and public records).

– Credit reference agencies (CRAs) where required for consumer credit, identity, or affordability checks.

– Third-party service providers used to support recruitment, screening, and compliance processes.

Details of any international data transfers outside the UK/EU and the safeguards in place. 

We may transfer personal data to recipients or service providers located outside the UK and/or European Economic Area (EEA). Where such transfers take place, we ensure appropriate safeguards are in place, such as approved standard contractual clauses or international data transfer agreements.

Data Retention

We keep personal data only for as long as necessary for its purpose and to meet legal or regulatory obligations. Data used for credit reference or affordability checks is retained only for as long as required and then securely deleted.

Your Rights

– Right to erasure: You have the right to request that we delete your personal data where there is no lawful reason for us to continue processing it.

– Right to restrict processing: You have the right to request that we limit how we use your personal data in certain circumstances.

– Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

– Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests or for direct marketing.

– Right to complain: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are dissatisfied with how we manage your personal data.

Provision of Personal Data

Is the provision of personal data statutory or contractual? 

 

The provision of certain personal data is primarily contractual and, in some circumstances, required to meet legal and regulatory obligations. 

Personal data is required to: 

  • enter into and perform contracts with customers, suppliers, or business partners. 
  • process orders, manage accounts, and deliver goods and services. 
  • verify identity and prevent fraud; and 
  • comply with applicable legal, regulatory, accounting, and tax obligations. 

 

What are the consequences of not providing personal data? 

If you choose not to provide the personal data, we request: 

  • we may be unable to enter into a contract with you. 
  • we may be unable to fulfil orders, supply goods, or provide services. 
  • we may be unable to conduct necessary verification, compliance, or fraud prevention checks; and 
  • as a result, our services may be delayed, restricted, or declined. 

 

Where personal data is requested for optional purposes, such as marketing communications, providing this data is not mandatory, and you may withdraw your consent at any time without affecting your ability to receive goods or services from us. 

 

 

Details of any automated decision-making or profiling, including meaningful information about the logic involved and potential consequences for the data subject. 

 

Wording for the privacy policy below based on which method is used. 

Based on this if they do NOT use Automated Decision Making 

 

 Non-Automated Decision Making and Profiling Making and Profiling Making and Profiling 

We may use automated systems and tools to support certain business processes, such as risk assessment, fraud prevention, affordability checks, identity verification, or record management. 

These tools may analyse personal data using predefined criteria or rules to generate indicators, scores, or recommendations. However, we do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing. Any such decisions are subject to meaningful human review. 

The use of these tools may influence the speed or level of review applied to an application or request, but individuals will not be subject to automatic rejection or adverse decisions without human involvement. 

Contact Us

If you have any questions about privacy please contact us by post at G&A Drapers, 82-84 High Street, Epping, Essex CM16 4AE.
Telephone 01992 577761
Email of****@*************co.uk

Data Protection Officer (DPO): Joseph Cruz can be contacted at of****@*************co.uk.