Alpha This is a new service – your feedback will help us to improve it.

Menu Search

Zopa

The information on this page is from the privacy notice published by Zopa.

You can use this page to learn about how this organisation uses personal data and find out how to make a request related to the data they hold about you.

Make a request

  • See data they hold about you

    You can ask to see what data Zopa has about you. They usually can’t charge for this, and they must respond to your request within a month.

    Why you might make this request

    You might want a copy of the data about you to understand what data the organisation has collected about you.

    By email

    Email contactus@zopa.com using this template

    Copy template to clipboard

    By phone

    020 7580 6060

    Observations from contributor

    Zopa aim to respond within 30 days.

  • Change data they hold about you

    You can ask Zopa to change inaccurate or incomplete data about you. They must respond to your request within a month. Sometimes your request can be refused.

    Why you might make this request

    If an organisation is using information about you which is incorrect, you can ask them to correct it.

    No contact information is available for this kind of request. Help us by updating this organisation on GitHub.

    Observations from contributor

    States that you can ask them to correct any information that is believed to be inaccurate. Will require supporting evidence, e.g. a copy of marriage certificate when changing name.

  • Delete data they hold about you

    You can ask that Zopa delete information about you. They must respond to your request within a month. Sometimes your request can be refused.

    Why you might make this request

    You might want to delete data about you if, for example, you have stopped using an organisation’s services.

    No contact information is available for this kind of request. Help us by updating this organisation on GitHub.

    Observations from contributor

    States that you an ask them to erase your personal information.

  • Limit how they use data about you

    You can ask that Zopa only store data about you and not use it. They must respond to your request within a month.

    Why you might make this request

    You might want the accuracy of the data to be verified or you might want the organisation to hold on to data so you can make a legal claim against them.

    No contact information is available for this kind of request. Help us by updating this organisation on GitHub.

    Observations from contributor

    States that you can ask them to stop using your personal information.

  • Stop their use of data about you

    You can ask Zopa to stop using your data for particular reasons. They must respond to your request within a month.

    Why you might make this request

    You might want to stop the organisation using your data to for direct marketing.

    No contact information is available for this kind of request. Help us by updating this organisation on GitHub.

    Observations from contributor

    States that Zopa will "always give you a right to object whenever we intend to use your personal information for our legitimate interests".

  • Export data they hold about you

    You can ask Zopa to move data about you to another service or provide it in a format that can be used by another service.

    Why you might make this request

    You might want to move your data to another organisation to get a better deal.

    No contact information is available for this kind of request. Help us by updating this organisation on GitHub.

    Observations from contributor

    States that you can "ask us to give you your personal information in a structured, commonly used and machine-readable format or have it transmitted to another data controller".

  • Challenge an automated decision

    You can ask Zopa to give you information about how they use automated decision making, or ask for a person to review an automated decision.

    Why you might make this request

    You might want to find out about an automated decision if, for example, you were rejected for a bank loan or account.

    By email

    Email contactus@zopa.com using this template

    Copy template to clipboard

    By phone

    020 7580 6060

    Observations from contributor

    You can ask for an underwriter to manually review a decision.

Organisation information

Registration country

United Kingdom

Registration number

05197592

Data Protection Officer

Organisations that use special categories of data, are public bodies, or do large scale processing must appoint a Data Protection Officer.

This organisation does not appear to have a data protection officer.

Data categories collected

Organisations must give details about what categories of data are stored and processed.

  • Bank account details

  • Email address

  • HealthSpecial category

  • Income

  • Telephone number

Observations

Gives broad categories ("contact information", "financial information", "information about your physical and mental health") rather than specific categories.

Unusual processing purposes

Organisations must provide information about what they do with data. This section highlights less common uses of data.

This privacy notice does not appear to mention any unusual processing purposes.

Third parties

Organisations must give details about other parties that personal data is shared with.

List of third parties

  • Credit reference and fraud prevention agencies

  • Our regulators or government authorities, for example the Financial Conduct Authority, the Financial Ombudsman Service and the police

  • Collection agencies and lawyers to help us collect any money you owe us

  • Our suppliers, sub-contractors and third-party data processors

  • Retailers from whom you've purchased goods or services using loans provided by us

  • Anyone to whom we may transfer all or part of our assets

  • If we are unable to offer you a loan and if you consent, to credit brokers or other lenders who may be able to arrange credit for you.

  • Callcredit

  • Experian

  • Equifax

How specific is this information?

Third parties are listed as groups

Observations

Credit reference agencies were listed seperately

Retention rules

Organisations must give details about how long data is kept.

Summary

Data is kept for up to six years after you close your account.

How specific is this information?

  • Retention rules are given without mentioning specific categories of data

  • Specific times are given for how long data is kept

Lawful bases

Organisations must justify collection and use of data under six lawful bases and provide information about their decisions

  • Consent

    * Send you marketing messages on behalf of third parties
    * Refer you to credit brokers/other lenders if we're unable to offer you a loan
    * Hold any information relating to your physical and mental health you've given us

  • Contract

    * To respond to your queries
    * To allow you to use our lending platform
    * To allow us to provide the services or financing you've requested

  • Legal obligation

    * UK/EU anti-money laundering laws and regulations
    * UK/EU/UN sanctions (which prohibit us from providing products to certain individuals)
    * Rules and regulations imposed by the Financial Conduct Authority and HMRC

  • Legitimate interests

    * Developing and providing new products and services our customers will find useful
    * Protecting our customers from unnecessary risks
    * Preventing fraud and money laundering to protect our business
    * Ensuring we and investors who lend money via our platform earn a reasonable rate of return
    * Protecting us and our customers against harm to our collective rights and interests

Security standards

Organisations must ensure that data is stored and processed securely.

Observations

Zopa "takes every reasonable measure to keep your information secure" but "can't guarantee the security or integrity of any personal information that is transferred"

How specific is this information?

This organisation provides general details about how they secure data

Data processing addendum

Some organisations offer a data processing addendum that gives data adequate protections when it leaves the EEA.

This privacy notice does not appear to have this information.

Automated decision making

Organisations must give details about how data is used to make decisions without human involvement.

Summary

This organisation uses automated decision making

Observations

Uses automation in the loan decision process, using user-provided data and data from other sources. Right to object is reiterated in this section.

How specific is this information?

The organisation mentions use of automated decision making for specific purposes

Complaint information

Organisations must give details about how to make a complaint with a data protection authority.

Summary

This privacy notice contains information about to make a complaint to a data protection regulator

Observations

Has full, linked contact details for the ICO.

How specific is this information?

This privacy notice contains specific contact details for a data protection regulator

Design recommendations

Organisations are required to provide privacy information in a transparent way. The Article 29 Working Party has provided recommendations on how to do this.

Assessment

This privacy notice:

  • Has language that is easy to understand

  • Is designed in a way that makes it easy to find information

  • Can be easily found on the organisation's website

Last updated 2018-06-29 at 08:06:09 • Download as JSONAPI documentationView on GitHubView on OpenCorporates