CURO Group Holdings Corp. includes covered entities, including but not limited to: CURO Financial Technologies Corp., CURO Intermediate Holdings Corp., CURO Management LLC, CURO Transatlantic (UK) and Wage Day Advance Limited (UK) ) and its partners are jointly referred to in this Policy as the "Group", "CURO", "we", "us", "our" and like terms should be interpreted accordingly. (a full list of our group companies can be obtained by emailing email@example.com.)
For the purposes of the Data Protection Act 1998 the Data Controller is Wage Day Advance Limited. Wage Day Advance Limited is a registered Data Controller under the terms of the Data Protection Act 1998, details of Wage Day Advance Limited's notification to the regulator for data protection, may be found in the Information Commissioner's Office Public Register of Data Controllers at www.ico.gov.uk under registration number Z1687106.
For the purposes of the Data Protection Act 1998 the Data Controller is CURO Transatlantic. CURO Transatlantic is a registered Data Controller under the terms of the Data Protection Act 1998, details of CURO Transatlantic's notification to the regulator for data protection, may be found in the Information Commissioner's Office Public Register of Data Controllers at www.ico.gov.uk under registration number Z2309346.
For the purposes of the Data Protection Act 1998, the Group shall act as a Data Controller and handle data in accordance with the EU-US Privacy Shield Principals.
The purpose of this policy is to set out the purposes for which, and the manner in which, we may collect and use personal information about you. We ask that you read this policy carefully. By registering as a user of any products or services provided by us you consent and agree to this use. For the purposes of this policy, you (as contracting party) and possible other users are referred to as "you" or "your".
We collect information about you when you complete an online application form or contact our customer support team to access our products and services. Information is also collected when you voluntarily complete surveys, provide feedback or request additional services.
We may record telephone conversations between you and us to; monitor quality, provide training, sort out disputes and prevent criminal activity.
Further information is obtained from credit reference agencies, fraud prevention agencies as well as other organisations such as your employer when you apply for a loan or any other product or service from us.
Website usage information is collected using cookies (please see section 9 which has details of our Cookies Policy).
We may use information that you provide to us or that is obtained by us:
If you have shared information about your health or personal circumstances, this information will only be used (e.g when making a lending decision providing you with support) where we have a lawful basis for doing so.
At times we may disclose your personal information (including sensitive personal information) to other members of the Group.
This may occur for any of the following reasons:
We may also share your information with analytics and search engine providers that assist us in the improvement and optimisation of our site. Please refer to our Cookie Use Policy for more information on this.
Personal information shall be disclosed to public authorities in response to lawful requests, and may be for the purposes of meeting national security or law enforcement requirements.
In keeping you informed of our own products and services, and those of other companies within our Group and our third party partners we may use some or all of the following methods:
You have the right to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data.
With regards to third party partners with whom we may share your details, we will only share your contact details with third parties where we have your express consent to do so.
How can I get my name removed from your mailing list(s)?
If you want to be removed from our mailing list(s), please email firstname.lastname@example.org. If you agree to us providing you with marketing information, you can always opt out at a later date. Please note that it may take up to 14 days to process your request and you may receive further marketing communications in the interim whilst our suppression lists are updated.
If you have previously given us your consent to third party marketing and subsequently decide you no longer wish to be contacted by third parties for marketing purposes, please follow the instructions in their marketing communications, or consult their privacy policies for further information about unsubscribing. We will however of course remove you from our own list of third party marketing contacts and cease sharing your information with such companies. Please note that it may take up to 14 days to process your request and you may receive further marketing communications in the interim whilst our suppression lists are updated.
We make checks to confirm that the information that you have provided is true and complete. In cases where fraud is identified, your details will be passed to fraud prevention agencies. Where necessary, law enforcement agencies may access and use this information.
We may combine personal information when you tell us that you have a spouse or a financial associate. Ensure that you have their consent prior to releasing information about them. Credit references agencies link your records together and these links will remain in your files until you or your partner files for a disassociation with the credit reference agencies to break that link.
We share your loan information with credit reference agencies on a daily basis.
You can contact credit agencies to request information that they hold about you. They may charge you a small fee for this service.
Details of the credit reference agencies that we share your information with are listed below;
IMPORTANT: We recommend that you ensure that you have read use of information and privacy statements provided to you when you enter into or begin the process of entering into a loan with us, as these documents contain full details as to how your information may be used for the purposes of credit referencing as well as the consequences this may have for your credit rating and that of your financial associates.
How do I change inaccurate details stored by you?
If for any reason you are unsure about the personal and account information we are holding in your name, please contact us. We will happily review your file and update the records if required. You can call us on 0333 006 2000 or email us at email@example.com.
The Group may contract with third party service providers ("TSPs") to optimize and improve services offered. Contracts with TSPs shall include limitations and specified purposes for the data transfer. TSPs shall provide the same level of data protection as is available under the EU-US Privacy Shield Framework. The mechanism of data transfer shall be recognized as adequate in accordance with European Union Data Protection Agencies. The Group shall assume liability for data transferred to third-party service providers. If a determination is made by the TSPs that it can no longer meet its contractual obligation for onward transfer it must notify the group.
Data transfer and storage is handled securely to avoid information loss, misuse or alteration of information that we have collected from you.
We regularly review our information collection, storage and processing practices, including physical security measures.
Information attracting a high level of security as credit/debit card numbers that you share with us through the website is protected by secure socket layer (SSL) technology which encrypts data.
We retain your information securely for a minimum period of 6 years. Information that you have shared about your health or personal circumstances will not be held longer than necessary to enable us to provide you with the service that you have requested.
We may keep other information about you if it is necessary to do so to meet legitimate business needs or if required by law.
We do not collect any personal data about children. You must be over the age of 18 to register with us. By providing your details you confirm that you are over the age of 18 and have represented your age truthfully.
Covered entities, CURO Transatlantic and Wage Day Advance Limited, are part of a US based group of companies and may transfer your data outside the EU. Many of our operations are supported by website servers located in the United States. All data transfers are conducted and held securely to standards that are equal to those in the UK.
By providing us with your personal information, you consent to the transfer of your personal data outside of the EU.
We may transfer your data outside of the European Union ("EU"), but only to countries that have an adequate level of protection in line with the protection afforded to the data in the United Kingdom ("UK"). The Group complies with the US-EU Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information from European Union member countries. The Group has certified that it adheres to the Privacy Shield Principals of "notice", "choice", "liability for onward transfer", "security", "data integrity" and "purpose limitation, access and Recourse, enforcement and liability". For further information about the US-EU Privacy Shield Framework or to view our certification, please refer to the U.S. Department of Commerce's website at https://www.privacyshield.gov.
As a self-certifying member of the US-EU Privacy Shield Framework, CURO Group Holdings Corp., and covered entities (CURO Financial Technologies Corp., CURO Intermediate Holdings Corp., and CURO Management LLC) are subject to the investigatory and enforcement powers of the FTC.
You have the right to correct or request a copy of the information that we hold about you.
You can review and update the personal data we hold about you by contacting our customer support team at firstname.lastname@example.org
If you would like a copy of some or all of your personal information, please contact us by;
We may charge you a small statutory fee of £10 for this service.
If you are unhappy with the products or services that we have provided you with or are dissatisfied with the handling of your customer data, you can contact us at the details provided below:
If you are still unhappy with our final decision or do not receive a response within eight weeks, you may refer your complaint to The Information Commissioner’s Office:
The panel established by the European Data Protection Authorities (DPA’s) will serve as the independent dispute resolution body designated to address unresolved complaints and provide appropriate recourse free of charge. In certain, unresolved complaints, individuals may have the right to invoke binding arbitration at no cost to the consumer in order to reach as resolution.
Cookies are texts files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
You can set your browser not to accept cookies. However, it’s important to remember that some of our services may not function properly if your cookies are disabled.