I am a colleague
- email at dpo@lowellgroup.co.uk
- letter at Data Protection Officer, Lowell Financial Limited, PO Box 13079, Harlow, CM20 9TE
Company |
Lowell UK Shared Services Limited |
Lowell Group Shared Services Ltd |
Lowell Financial Ltd |
Lowell Legal Ltd |
Overdales Legal Ltd |
Company number |
08336897 |
08647094 |
04558936 |
08647091 |
07407310 |
Country |
Incorporated in the UK |
Incorporated in the UK |
Incorporated in the UK |
Incorporated in the UK |
Incorporated in the UK |
Registered office
|
Ellington House, 9 Savannah Way, Leeds Valley Park, Leeds, LS10 1AB |
Ellington House, 9 Savannah Way, Leeds Valley Park, Leeds, LS10 1AB |
Ellington House, 9 Savannah Way, Leeds Valley Park, Leeds, LS10 1AB |
Ellington House, 9 Savannah Way, Leeds Valley Park, Leeds, LS10 1AB |
Ellington House, 9 Savannah Way, Leeds Valley Park, Leeds, LS10 1AB |
We collect information about your mental and physical health where we need to do so to:
Given the nature of our business, we ask you to tell us about any criminal convictions you may have, and we carry out a criminal records check as part of our employment checks. If you apply for an internal vacancy, we may carry out further checks depending on the nature of the role you apply for. Before we carry out any checks, you will be asked to complete our Background Check form which will explain which checks we intend to carry out.
From time to time, we may need to update the employment checks we have for you, but we will let you know before we carry out any more checks on you.
As part of our talent acquisition process, we will confirm the information you provide to us by contacting your former employers and your university or further education establishments. We will also ask for references for either the last two years or the last five or six years depending on the role you apply for. We may also ask for character references in some circumstances. We may collect publicly accessible information about you, for example through a Google search, to make sure that you are suitable for the role you are applying for.
We also use Experian to carry out the following checks on you if you accept an offer of employment with Lowell:
Right to work checks |
We need to confirm that you have a right to work in the UK. We may do that in person by checking your documentation or remotely using Experian to perform these checks for us. You can use Experian’s self-service app to provide your passport number (or you may be able to use your smartphone to scan the chip in your passport) or birth certificate and National Insurance number which Experian will compare to their identity verification database or with the Home Office to confirm that you have a right to work in the UK. If you have a visa, they will also tell us the amount of time remaining before your visa expires. If you can’t use the app, we may send the information to Experian for you. |
Adverse financial checks |
These checks confirm whether there is any adverse data recorded on your credit file relating to defaults, CCJs (or similar judgments from other courts), voluntary arrangements or bankruptcy. This check is called a ‘soft search’ and may leave what is known as a “soft footprint”. This means that it is not visible to any other organisations and will not affect your credit score. It can only be seen by you, us and the credit reference agency and will show as account administration on your credit file. |
Criminal record check |
Experian will also use the services of the Disclosure and Barring Service to undertake on your behalf, a criminal record check which details unspent convictions under the Rehabilitation of Offenders Act 1974 to verify the information you provide us in your application form. If you have worked overseas in the last 5 years, Experian will also do an overseas criminal check on you. For more details about Experian and how it uses and shares personal information please visit www.experian.co.uk/privacy-policies.html. More information about the Disclosure and Barring Service is available at www.gov.uk/government/organisations/disclosure-and-barring-service.
|
The personal information we have collected from you will be shared with Cifas who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice and other seriously improper conduct. If any of these are detected, you could be refused certain services or employment. Your personal information will also be used to verify your identity. For more details about how your information will be used by us and Cifas, please see the Cifas privacy notice at the bottom of this notice.
Before we carry out any checks (other than contacting your former employers and your university or further education establishments to confirm the information you have provided and your referees and character referees), we will send you our Background Check form for you to complete which will explain which checks we intend to carry out.
Depending on the type of role you accept with Lowell, we may update the employment screening checks on you from time to time.
Information that you give us
You give us information about yourself, your work experience and other relevant experience, your education, your qualifications and your circumstances:
Please see our Website User privacy notice and our Cookie notice for details of the information we collect through our website.
Information that we collect about you
We collect information about you as part of the day-to-day management of your relationship with us as a Lowell colleague, for example from your team leader or your colleagues.
We may collect information about you that is publicly accessible, for example:
Where you use our systems to:
We will also capture and review all card purchases and payments made over our internet (including card details) to prevent and detect fraud and potential breaches of our information security policy.
For more details, please see our Information Security Policy and our Acceptable Use Policy which are available on our intranet.
Information that you ask us to collect from third parties
If you specifically ask us to collect information from a third party, we will do so in accordance with your request, which we may ask you to put in writing. This may include:
Information that we obtain from Experian
We use Experian to carry out employment checks about you.
Experian is a credit reference agency. Credit reference agencies (or CRAs) hold personal information about individuals. Most of the personal information they hold relates to how you have maintained your credit accounts. They also hold address details and information taken from public sources, such as the electoral roll, public records including CCJs and bankruptcy and insolvency information. If you are financially associated with another person (which means that you have a joint credit account or mortgage with them), we will receive financial information relating to that association.
Experian will provide us with details of any of the following which are recorded on your credit file:
This check is called a ‘soft search’ and may leave what is known as a “soft footprint”. This means that it is not visible to any other organisations and will not affect your credit score. It can only be seen by you, us and the credit reference agency and will show as account administration on your credit file.
In some circumstances, Experian may also process some of the references we obtain, including:
Experian will also use the services of the Disclosure and Barring Service to undertake on your behalf, a criminal record check which details unspent convictions under the Rehabilitation of Offenders Act 1974 to verify the information you provide us in your application form.
Information that we may obtain from Cifas
The personal information we have collected from you will be shared with Cifas who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice and other seriously improper conduct. If any of these are detected, you could be refused certain services or employment. Your personal information will also be used to verify your identity.
Information that we obtain from regulatory bodies and professional associations
If you are a member of a regulated profession, such as a solicitor, we may obtain information from your regulatory body or professional association such as The Law Society.
If you have previously held a role as an approved person or you are applying for such a role with Lowell, we may also obtain information from the Financial Conduct Authority.
Information that we receive from other companies in the Lowell group
We may receive information about you from other members of the Lowell group of companies:
Call recording
We may monitor and/or record calls for the purposes of training, improving our quality and service standards and resolving issues with customer accounts or with colleagues.
CCTV images and building access
We operate CCTV at all of our premises. Whilst you are on site at any of our offices, you may be recorded by our CCTV system.
We also collect information about which areas of our premises you visit through our building access systems.
We may combine the information that you us with the information we collect about you from the other sources listed above.
We need your information in order to manage your relationship with us as a Lowell colleague on a day-to-day basis for the purposes of performing your employment contract with us. This includes:
We also use your information to comply with our legal, regulatory, professional and other corporate governance obligations, for example:
We also use your information, to meet our legitimate interests, for example:
You must make sure that the information we hold about you is up to date and you must notify us of any changes so that we can make sure that we keep your records accurate, complete and up to date.
If you don’t provide us with relevant information, we will not be able to manage your relationship with us as a colleague and meet our obligations to you.
Under the data protection laws, information revealing the following are “special categories of personal data”:
We are committed to providing equal opportunities in all areas of talent acquisition, employment, training and promotion at Lowell.
We collect information relating to:
to make sure that we are meeting our commitment and complying with our obligations under the equal opportunities legislation. We do this on the basis that this is in the substantial public interest.
Experian may collect biometric information held within your passport if you use the Experian self-service app to complete the right to work checks remotely and you use your smart phone to scan the chip in your passport.
We may collect information about your physical or mental health in order to make reasonable adjustments to your working environment for you. We only collect the minimum amount of information we need to make such adjustments. We collect this information in order to comply with our obligations as an employer under the equal opportunities legislation.
We will also need information about your physical or mental health in order to manage your absences, including paying you sick pay or maternity/paternity pay, managing your return to work when appropriate and assessing your ability to perform your role. We use this information to comply with our obligations as an employer under the employment legislation. We will collect this information either from you directly or from someone you have authorised to share this information with us, such as a family member, an occupational therapist, our onsite counsellor, our external employee assistance provider or any other medical professional. We will only collect and share information with those people if you have agreed we can do so, and we may ask you to confirm this in writing.
If we believe you are in immediate danger, including due to a medical emergency, we may process information relating to your physical and mental health conditions (including sharing this information with the emergency services and your emergency contacts) on the basis that it may be a life and death situation.
Given the nature of our business, we ask you to tell us about any criminal convictions you may have, and we carry out a criminal records check as part of our employment checks. If you apply for an internal vacancy, we may carry out further checks depending on the nature of the role you apply for. Before we carry out any checks, you will be asked to complete our Background Check form which will explain which checks we intend to carry out.
Experian use the services of the Disclosure and Barring Service to undertake on your behalf, a criminal record check which details unspent convictions under the Rehabilitation of Offenders Act 1974 to verify the information you provide us in your application form. If you have worked overseas in the last 5 years, Experian will also do an overseas criminal check on you.
We may also use the information we collect about your criminal convictions for the purposes of crime and fraud prevention and for complying with our obligations under the anti-money laundering and counter-terrorist financing legislation.
We only collect the minimum amount of information about your criminal convictions that we need for the purposes of determining whether you are suitable for the role that you are applying for with Lowell.
We collect information about your criminal convictions on the basis that we are required to do so to comply with our legal, professional, regulatory and other corporate governance obligations as employers authorised by the Financial Conduct Authority and Solicitors Regulation Authority.
Where we use information about your criminal convictions and share it with third parties for the purposes of complying with our obligations under the anti-money laundering, counter-terrorist financing and other legislation, we do so on the basis that this is necessary for us to comply with our legal obligations.
We will retain information relating to your criminal convictions for no more than 6 months from the end of the talent acquisition process for the role which you are applying for with Lowell; although we will keep the outcome of the criminal records check we carry out for 7 years from the date your employment with us ends.
The personal information we have collected from you will be shared with Cifas who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice and other seriously improper conduct. If any of these are detected, you could be refused certain services or employment. Your personal information will also be used to verify your identity.
We sometimes need to share some of your information with other organisations.
Information that we share with other companies in the Lowell group |
We may share your information with other members of the Lowell group of companies:
As Lowell is a multi-national group of companies which operates in a number of EU countries, this may involve your information being shared with Lowell companies which are outside of the UK, although these companies are all based in the European Economic Area. |
Information that we share with HMRC |
We are required by law to share information about you, including details of your salary and benefits with HMRC for the purposes of HMRC’s tax collection activities. |
Information that we share with the providers of our pension scheme |
As your employer, we are required to automatically enrol you (if you are eligible) into our pension scheme. To do this we need to share information about you including your name, address, date of birth, your National Insurance number, your salary and the amount of your pension contributions. |
Information that we share with the providers of our employee benefits |
As part of our benefits package, we offer you the opportunity to choose from a number of benefits, including:
If you choose to receive any of these benefits, we will share your information with the provider of the specific benefits you have chosen, so that they can provide you with those benefits. |
Information that we share with law enforcement and emergency services |
If we identify evidence of fraud, money laundering or any other crime (whether financial or otherwise) in relation to your employment, including where you have been the victim of identity theft, we may share those details with the police, the National Crime Agency and other law enforcement agencies. We may also share information with HMRC where appropriate. Where relevant we may also share CCTV images and call recordings with the police, the National Crime Agency and other law enforcement agencies. |
Information that you ask us to share with third parties |
If you specifically ask us to share information with a third party, we will do so in accordance with your request, which we may ask you to put in writing. |
Information that we share with Experian |
We share the following information with Experian so that Experian can carry out employment checks for us:
|
Information that we may share with Cifas |
The personal information we have collected from you will be shared with Cifas who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice and other seriously improper conduct. If any of these are detected, you could be refused certain services or employment. Your personal information will also be used to verify your identity. |
Information that we share with regulatory authorities and Ombudsman Services |
Lowell Financial Ltd and Overdales Legal Limited are authorised by the Financial Conduct Authority. This means that we are required to report certain things to the Financial Conduct Authority which may mean sharing information about you if your role means that you will be an approved person and that you will need to be approved by the Financial Conduct Authority. We may also sometimes also be required to report to the Financial Conduct Authority, any disciplinary proceedings we carry out where there has been a regulatory breach. Overdales Legal Limited are authorised by the Solicitors Regulation Authority. This means that we are required to report certain things to the Solicitors Regulation Authority which may mean sharing information about you if there is an issue or complaint in respect of your conduct. Lowell Legal Limited is no longer authorised by the Solicitors Regulation Authority, however, may be required to share information regarding previous matters. We are registered with the Information Commissioner’s Office and if you or a customer make a complaint to them, we may have to share information about you. We also deal with the Financial Ombudsman Service, the Consumer Ombudsman Service, the Legal Ombudsman Service and the Credit Services Association (known as the CSA). If you or a customer make a complaint to them, we may share information with them about you in order to resolve the complaint. Where appropriate, we may share CCTV images and call recordings with these organisations. |
Information that we share with regulatory bodies and professional associations |
If you are a member of a regulated profession, such as a solicitor, we may share information with your regulatory body or professional association such as The Law Society. If you have previously held a role as an approved person or you are applying for such a role with Lowell, we may also share information with the Financial Conduct Authority. |
Information that we share with our clients |
We may share information about you with our clients, including details of the employment checks we have carried out, the employment contract we have entered into with you and recordings of calls you have made or received with our clients for the purposes of quality assurance, resolving issues on customer accounts and evidence of our compliance with our contractual obligations to our clients. |
Information that we share with our third party suppliers |
We use a number of carefully selected third parties to supply us with other products and services, such as payroll, occupational therapy services, HR systems and IT services. The information that we share with our suppliers will depend on the nature of the products and services that they provide to us but we will only share the minimum amount of your information which is necessary for them to provide us with the products and services we need. This may sometimes involve your information being shared or stored outside of the UK and outside the European Economic Area. |
Information that we share with other third parties |
If we or any member of the Lowell group of companies merges, transfers or sells part or all of its business or assets or any of its share capital to a third party, your personal information may be disclosed to that third party and its advisers for the purposes of negotiating and completing the merger, transfer or sale. If the merger, transfer or sale does complete, that third party may use or disclose your information as set out in this privacy notice. We may also share your information with our investors, insurers, insurance brokers, lenders, external auditors, legal and other professional advisers where necessary. |
Your information is generally stored on servers and filing systems in the UK or the European Economic Area (EEA) but from time to time it may be stored in or accessed from countries outside the UK and EEA. Where this may happen, we always make sure that there are appropriate safeguards in place, such as standard contractual clauses or binding corporate rules, to guarantee that your information – and your rights – are protected to the same high standard as under UK law.
Standard contractual clauses |
These are a set of standard clauses which have been recognised by the European Commission and the Information Commissioner’s Office as providing adequate protection to personal information transferred outside the UK and EEA. When we include these clauses in a contract with one of the companies we work with, it means that if they transfer your information outside the EEA, they must make sure that your information is just as safe as it is in the EEA. |
Binding corporate rules |
These are a way for large groups of companies which are based in lots of countries around the world to transfer personal information to companies in their group in a way that complies with the UK data protection laws. The binding corporate rules must be approved by a data protection regulator before the group of companies can adopt them. When one of the companies we work with uses binding corporate rules, it means that if they transfer your information outside the UK, they have procedures in place to make sure that your information is handled in a way that makes sure that your information is just as safe as it is in the UK and EEA. |
We only keep your information for as long as we need it.
We keep the information we collect about you during the talent acquisition process and the course of your employment with us as part of your employee file for:
However, we won’t keep all of your information for so long, and we will delete some information much sooner.
For more details about the specific retention periods that will be applied to your information, please refer to our retention policy which is available on our intranet. This policy has been written by considering all the different types of information that we hold about you, understanding how long we need to keep it for and agreeing not to keep it for any longer.
We may sometimes anonymise your information so that we can use the information for our legitimate business purposes such as equal opportunities monitoring to make sure that we are meeting our commitment to valuing and promoting equality in all areas of talent acquisition, employment, training and promotion. If we do this, we will remove any information that can be used to identify you.
We don’t carry out any profiling of our colleagues who work for any of the UK Lowell group of companies.
We do not make any automated decisions about any of our colleagues or their employment with any of the UK Lowell group of companies.
Under the data protection laws, you have a number of rights in respect of your information and the way we use it. Some of these rights only apply in certain situations. We explain below what rights you have, what these mean and how they apply to the way we use your information.
You have the right to |
What does this mean? |
How does this apply to the way we use your information? |
Access your information |
You can ask for:
|
We will provide you with a copy of your personal information which we hold unless the data protection laws provide an exception that we decide to rely on, for example where there are ongoing court proceedings. We may also edit out the names of any other individuals to protect their privacy. Wherever possible, we will provide you with a copy of your personal information in the same manner you make your request unless we agree otherwise with you. This privacy notice also includes the other information you can ask for about how we process your information. |
Have your information rectified |
You can ask us to rectify your information if it is not accurate, incomplete or up to date. |
We will update or correct your information, although sometimes we may need to ask you to provide evidence to confirm the changes, for example a copy of your marriage certificate if you are changing your name because you have got married. |
Have your information erased |
This is also known as the right to be forgotten. You can ask us to delete your information where:
This right does not apply where:
|
As we rely on the fact that we are need your information to (a) perform our obligations under your employment contract with you (b) comply with our legal obligations or (c) protect you where it is a matter of life and death, for most processing of your personal information, we will only be able to delete your personal information:
|
Restrict our processing of your information |
You may ask us to restrict our processing of your personal information where:
|
We will not process your personal information whilst we consider your request. However, we will still be able to process your personal information for the purposes of any ongoing court or other legal proceedings. We will inform you if we begin processing your personal information again and explain why. |
Have your information transferred to you and/or a third party |
This is also known as the right to data portability. You can ask us to provide you with a copy of the information which you have provided to us and which we hold electronically. |
This right only applies to the information which you have provided to us which we hold electronically. It does not apply to information that we collect to comply with our legal obligations such as evidence of your right to work in the UK. We will provide this information to you in a commonly-used and machine readable format. |
Object to our processing of your information, including profiling |
You can object to our use of your information, including profiling unless:
You can also object to us using your information for marketing purposes. |
We don’t carry out any profiling of our colleagues who work for any of the UK Lowell group of companies. This right only applies to the information that we process on the basis that it is in our legitimate interests. We don’t use your information for direct marketing. |
Not to be subject to an automated decision |
You can ask us to review any automated decision which has a legal or significant effect for you. You can provide us with your point of view and any additional information that you think we need and ask for a human to reconsider our decision. |
One you have accepted an offer of employment with us, we do not make any automated decisions about you. |
We will always do our best to respond to your request within one month of receiving it and any additional information we need to confirm your identity and understand your request.
However, sometimes we may need some more time to deal with your request, particularly if it is complicated. Where this happens, we will write to you within one month and let you know why we need some more time and when we will provide you with our response.
If we are unable to carry out your request, we will send you a response explaining why.
If you would like to exercise any of your rights, please contact our Data Protection Officer by:
Our Data Protection Officer deals with data protection for all our UK companies, so whichever Lowell company your question, query or request relates to, please contact our Data Protection Officer using these contact details.
If you have any questions, concerns or complaints about the way Lowell UK Shared Services Limited, Lowell Group Shared Services Limited, Lowell Financial Ltd, Lowell Legal Limited or Overdales Legal Limited process your personal information, our Data Protection Officer will do their very best to help you. You can contact our Data Protection Officer by:
• email at dpo@lowellgroup.co.uk or
• letter at Data Protection Officer, Lowell Financial Ltd, PO Box 13079, Harlow, CM20 9TE
Our Data Protection Officer deals with data protection for all our UK companies, so whichever Lowell company your question, concern or complaint relates to, please contact our Data Protection Officer using these contact details.
If you are not happy with the way we have handled your complaint or are still concerned about our handing of your personal information, you have a right to take your complaint to the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF and www.ico.org.uk.
The Lowell group is made up of the following companies incorporated in the UK
Lowell Portfolio I Ltd |
Company number 04857418 |
Lowell Financial Ltd |
Company number 04558936 |
Lowell Legal Limited |
Company number 08647091 |
Overdales Legal Limited |
Company number 07407310 |
Lowell UK Shared Services Limited |
Company number 08336897 |
Lowell Group Shared Services Limited |
Company number 08647094 |
Lowell Receivables Financing 1 Limited |
Company number 11344999 |
Lowell Receivables Financing 2 Limited |
Company number 13403235 |
Lowell Receivables Financing 3 Limited |
Company number 13849615 |
Lowell Portfolio IV Limited |
Company number 08654105 |
Simon Bidco Limited |
Company number 09709443 |
Metis Bidco Limited |
Company number 07652466 |
Wolf Receivables Financing plc |
Company number 13949210 |
Wolf Receivables Financing 3 plc |
Company number 15073494 |
This privacy notice was updated in August 2024.
We will regularly review this notice and keep it updated to make sure that the information we provide you with is accurate and up to date.