We may share your personal information with third parties where it is necessary to enter into the finance agreement or to perform or enforce any finance agreement entered into and to comply with laws that apply to us. In particular, we may share your personal information with other Toyota group companies for this purpose and for the administration of your finance agreement.
Before we enter into any finance agreement with you we will search the files of credit reference and fraud prevention agencies who will record any searches and other information on your file.
We may share your personal information with credit reference agencies or fraud prevention agencies on the basis that we have a legitimate interest in preventing fraud and money laundering, to verify identity and to assess your creditworthiness, provided that your interests and fundamental rights do not override those interests.
We may share your personal information with third parties in the following situations and for the following reasons:
- Where required by law or regulation.
- To assess your creditworthiness and whether you can afford to take the finance product.
- To perform, administer and enforce any finance agreement entered into.
- To prevent and detect criminal activity, fraud and money laundering.
- To manage your account.
- To trace and recover debts.
- To verify your identity and the accuracy of the data you have provided to us.
- To ensure any offers of finance provided to you are appropriate to your circumstances.
Our third party service providers are required to take appropriate security measures to protect your personal information. We do not allow third party service providers to use your personal information for their own purposes, they are only allowed to use and process your personal information for specified purposes and in accordance with our instructions.
In particular, we may share your personal information with the following third parties:
Credit Reference Agencies
In order to process your application, we will perform credit and identity checks about you with one or more credit reference agencies (CRAs). These CRAs are Equifax and Experian.
To do this, we will supply your personal information to CRAs and they will give us information about you. This will include information from your credit application and about your financial situation and financial history. CRAs will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.
We will continue to exchange information about you with CRAs while you have a relationship with us. We will also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.
When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
If we share your personal information with a CRA your personal information will be used and processed by the CRA in accordance with the provisions of the Credit Reference Agency Information Notice (referred to as the CRAIN).
The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail in their respective CRAINs.
The CRAINs are accessible from each of the CRAs – clicking on any of the following links will also take you to the same CRAIN document:
Cifas is the data controller of the Cifas National Fraud Database.
The personal information we have collected from you will be shared with Cifas and fraud prevention agencies who will use it to prevent fraud and money laundering and to verify your identity. If fraud or a money laundering risk is detected, you could be refused certain services, finance or employment.
Further details of how your information will be used by Cifas and these fraud prevention agencies, and your data protection rights, can be found on the Cifas website located at: