Who we are

We are Asset Alliance Leasing Limited, a company incorporated and registered in England and Wales with company number 09929633 having its registered office at Arbuthnot House, 7 Wilson Street, London EC2M 2SN and with ICO registration number ZA231440. Asset Alliance Leasing Limited is part of a group which is made up of different legal entities, including:

  • Asset Alliance Limited, a company incorporated and registered in Scotland with company number SC370796 having its registered office at Alliance House, 85 Main Street, Newmains, Wishaw ML2 9BG and with ICO registration number Z2805400;
  • ATE Truck and Trailer Sales Limited, a company incorporated and registered in England and Wales with company number 03001122 having its registered office at Arbuthnot House, 7 Wilson Street, London EC2M 2SN and with ICO registration number ZA136582;
  • Forest Asset Finance Limited, a company incorporated and registered in England and Wales with company number 04953180 having its registered office at Arbuthnot House, 7 Wilson Street, London EC2M 2SN and with ICO registration number Z8362393; and

The companies above are collectively referred to as “Asset Alliance Group”

This Privacy Policy is issued on behalf of Asset Alliance Group. As such, any references to Asset Alliance, ATE Truck and Trailers, Forest Asset Finance, “we”, “us” or “our” in this Privacy Policy are references to the relevant company (as named above) in the Asset Alliance Group which is responsible for processing your data.

We are a data controller for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679) and related data protection legislation.

How to contact us

If you have any questions about this fair processing notice or our data protection policies generally, please contact us:

By post:                      GDPR, Asset Alliance Leasing Ltd, Alliance House, 85 Main Street, Newmains, ML2 9BG

By email:                    GDPR@assetalliancegroup.co.uk or richard.burchell@assetalliancegroup.co.uk

By phone:                  01698 389945

Privacy notice

We are committed to protecting your personal data and your privacy. This fair processing notice sets out the basis on which any personal data you provide to us, or that we acquire from a third party, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

The privacy policy applies to individuals who are our customers as a sole trader or who are employees or partners of a partnership that is a customer or who are directors, employees or beneficial owners of a corporate entity. This fair processing notice also applies to individuals who act or may act as guarantors on behalf of a customer.

Before we process your personal data, we are obliged to inform you of who we are, why we need to process your personal data, what we will do with your personal data and to whom we will pass your personal data.

What personal data do we collect and process?

When obtaining a quote or applying for a financing arrangement with us (whether on your own account or as a relevant individual of a corporate entity or otherwise), we receive, collect and process the following types of personal data relating to you:

  • all the personal information that you or our customer provides to us, either on-line or by paper application or by telephone, e-mail, post, via our website or through any other communications, such as:
  • your name
  • your date of birth
  • your residential address and address history
  • your contact details such as email address and telephone numbers
  • your finance requirements (if applicable).
  • all the personal information contained in the documents that you or our customer sends to us, such as copies of your identification documents (passport, drivers licence and utility bills).
  • During the course of a financing arrangement (whether such contract is on your own account or relates to you as a relevant individual of a corporate entity or guarantor or otherwise), we receive, collect and process the following types of personal data relating to you:
  • all the personal information that you or our customer provides to us by telephone, e-mail, post, via our website or through any other communications, such as updated contact information and update bank details.
  • all the personal information relating to the operation and conduct of the financing arrangement, such as account balance, payments and any arrears.
  • all the personal information provided by your or our professional advisers (such as valuers, solicitors and accountants), such as valuations or financial information.
  • Before we provide financing or any other services to you or your organisation or accept you as a guarantor, we undertake credit and identity checks using external credit reference agencies and fraud prevention agencies, and we receive further personal data relating to you in response to such checks, such as:
  • your financial situation and financial history (including any shared credit or financial information);
  • your credit information and credit history (including previous applications and conduct of accounts in your name, in the name of a financial associate or the conduct of any business accounts);
  • information verifying your identity;
  • fraud prevention information;
  • public information (such as court judgments, bankruptcies and electoral register information)

Where relevant (for example in order to confirm that you are a director of a company seeking finance from us), we collect and process personal information about you that we obtain from public registers such as Companies House.

How is your personal data used?

We process and use your personal data for the following purposes:

1. Verification of identity and fraud prevention

Purposes of processing. In order to process your application (or your organisation’s application), we undertake checks with one or more fraud prevention agencies (FPAs) for the purposes of preventing fraud and money laundering, and to verify your identity.

FPAs will process your personal data in order to provide us with information about you, which may include verification of identity and fraud prevention information. If you have requested services and financing from other providers, FPAs may receive your personal data from those providers too. FPAs may also process your personal data in order to detect and prevent fraud and money laundering by other people.

Sharing of data. We will share your personal data with FPAs, which will include information from your credit application (or your organisation’s application) for the above purposes.

We, and fraud prevention agencies, may permit law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.

Consequences of processing. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the financing or other services you have requested, or we may stop providing existing services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you.

Lawful basis of processing. When we, and fraud prevention agencies, process your personal data for the above purposes, we do so on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the financing or other services you have requested.

2. Credit checks

Purpose of processing. In order to process your application, we perform credit checks on you with one or more credit reference agencies (CRAs) at the time of the relevant financing application (or subsequently if you are a new relevant individual of a corporate entity). We may also make periodic searches at CRAs to manage your account (or your organisation’s account) with us, if we suspect fraud or if we spot that you have provided inaccurate data.

To do this, we will supply your personal data to CRAs and they will give us information about you. This will include information from your credit application (or your organisation’s application) and about your financial situation and financial history. CRAs will supply to us public (including the electoral register) information as well as shared credit, financial situation and financial history information and fraud prevention information.

We will use this information to:

  • assess your (or your organisation’s, as applicable) creditworthiness and whether you (or your organisation, as applicable) can afford to take the product;
  • verify the accuracy of the data you have provided to us;
  • prevent criminal activity, fraud and money laundering;
  • manage your account(s) (or your organisation’s account(s));
  • trace and recover debts; and
  • ensure any offers provided to you or your organisation are appropriate to your or your organisation’s
    • Sharing of data. We will continue to exchange information about you with CRAs while you have a relationship with us (whether as our customer, as a relevant individual of a corporate entity who is our customer or as a guarantor). We will inform the CRAs about your settled accounts (or your organisation’s settled accounts), as well as advise them of any missing payment or other non-compliance with the agreement(s) between you or your organisation and us. If you or your organisation borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.
    • Consequences of processing. When CRAs receive a search from us they may place a search footprint on your credit file that may be seen by other lenders.
    • If you are making a joint application, or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
    • We may also, in certain limited circumstances, check the record of other members of your family and, if you are a partner or director in a small business, also check on your business.
    • Lawful basis of processing. When we process your personal data for the above purposes, we do so on the basis that such processing is necessary for compliance with our legal obligations as a financial provider. Where the relevant agreement is directly between us such processing is a contractual requirement of the services you have requested or the guarantee that you are providing. Where the relevant agreement is with your organisation, such processing is in our legitimate interests in establishing the creditworthiness of our customers and ensuring their ability to pay for the financing or other services requested, or as applicable ensuring their ability to guarantee the payments of another person or organisation.

3. Provision of Services

  • Purposes of processing. We will process your personal data for the purpose of providing our services to you or your organisation (as applicable) including entering in to an agreement with you or your organisation and thereafter for the purposes of carrying out our obligations under any such agreement(s) and if necessary of enforcing any such agreement(s). Such processing will include assessing your application or the application for services or financing against our criteria for such services or financing. Where we have agreed to provide a financing arrangements such processing will also include:-
  • operating your account;
  • managing the relationship with you;
  • managing our credit risk;
  • dealing with payments and arrears;
  • contacting you from time to time by telephone, email or post or otherwise for the purpose of administering your account or your organisations account, including informing you of any arrears;
  • eventually closing your account.
    • Sharing of data. In the course of an agreement (including enforcement of an agreement), we may share your personal data with our third party service providers or agents who administer parts of the agreement(s) on our behalf. Such third party service providers include banks, software service providers (including document management and customer relationship management system providers), data storage providers, debt collection agents, valuation companies and dispute resolution providers. Any personal data shared with a third party service provider is strictly limited to the data required for the third party to provide the relevant services relating to the agreement(s) entered between you (or your organisation) and us.
    • We may disclose relevant personal data to any company which provides maintenance of the asset(s) relating to the agreement(s) entered between you (or your organisation) and us, as well as any party which negotiates a purchase of such asset(s) from you (or your organisation) or us.
    • We may also disclose your personal data to our or your legal advisors or the legal advisors of your organisation, in particular where this is necessary to enforce any agreement(s) entered into between you or your organisation and us.
    • Lawful basis of processing. When we, or any relevant third party service provider, processes your personal data for the above purposes, we do so on the basis that this is necessary for the performance of an agreement relating to you (where the contract is directly with you). Where the agreement is with your organisation, we process your personal data for the above purposes on the basis of our legitimate interests in performing the agreement with our customer and running our business efficiently and profitably.

4. Marketing

Purpose of processing. Where you have provided consent for us to do so, we will process your personal data in order to send you information about our services which may be of interest to you where:

  • you have provided your consent for us to do so; or
  • you are a relevant individual of a corporate entity and you have not opted out of receiving marketing communications.

Sharing of data. In the course of sending you marketing information we may share your personal data with our third party service providers or agents in their capacity as our data processors who conduct marketing on our behalf. Such third parties include software service providers including document management and marketing automation platforms. Any personal data shared with a third party service provider is strictly limited to the data required for the third party to carry out marketing services on our behalf.

Lawful basis of processing. When we, or our data processors, process your personal data for the above purposes, we do so on the basis of your consent or, where you are a relevant individual of a corporate entity, on the basis of our legitimate interests in marketing our services to persons who could reasonably expect to receive such communications as a result of our relationship.

Withdrawal of consent or objection to marketing. In the event that you do not wish to receive any further marketing communications, please contact us using the details above or click “Unsubscribe” on any marketing e-mail received from us.

5. Administrative Information

  • Purpose of processing and Sharing of data. We may share your personal data with any member of the Asset Alliance Group and any of our subsidiaries, our ultimate holding company and its subsidiaries from time to time, as defined in section 1159 of the UK Companies Act 2006.
  • We may disclose your personal data to third parties:
  • in the event we obtain funding for providing you or your organisation with the asset, we may disclose your personal data to our funder;
  • your or your organisation’s personal data may be shared with financial services organisations, such as companies which provide hire-purchase funding and banks providing such funding. This is for the purpose of securing such funding on your or your organisation’s behalf. We may provide personal data to enable such financial services organisations to carry out necessary searches in order to enable them to make a funding decision for you or your organisation and meeting their legal and regulatory requirements. In addition, these funders may share your or your organisation’s data within their group of companies who provide services to them and so that they and any other companies in their group can look after your relationship with us and them.
  • in the event that we sell or buy any business or assets, in which case we may if relevant disclose your personal data to the prospective seller or buyer of such business or assets;
  • if we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers (and their employees, directors, partners, members, beneficial owners or guarantors) will be one of the transferred assets; or
  • if you do not pay your debt, we may transfer your debt to another organisation and give them details about you and that debt.
    • Lawful basis of processing. When we process your personal data for the above purposes, we do so on the basis that we have a legitimate interest in pursuing business aims and objectives and managing our credit risk.

6. Compliance with legal obligations

Purposes of processing. We may process (including disclose) your personal data in order to comply with any legal obligations binding on us and to protect the rights, property, or safety of our staff, our customers, or others. We may also process (including disclose) your personal data to

  • our legal advisors for the purpose of establishing, exercising or defending our legal rights;
  • our auditors for the purpose of preparing management and statutory accounts.

Sharing of Data In complying with legal obligations or establishing, exercising or defending our legal rights, we may share your personal data with the following (i) the Financial Conduct Authority; (ii) HM Revenue & Customs; (iii) Courts and tribunals (iv) any other applicable regulatory authority (v) legal advisors, accountants and auditors.

Lawful basis of processing. When we process your personal data for the above purposes, we do so on the basis that such processing is necessary for compliance with a legal obligation to which we are subject (including our reporting obligations to the Financial Conduct Authority and HM Revenue & Customs, as well as our obligations under applicable legislation including the Money Laundering Regulations, Bribery Act 2010 and the Modern Slavery Act 2015) or necessary in order to protect the vital interests of a natural person, or in our legitimate interests in establishing, exercising or defending our legal rights, respectively.

Legitimate Interests

When we process your personal information for our legitimate interests (as indicated above), we acknowledge that our legitimate interests do not automatically override your interests and we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.

Your rights

Your personal data is protected by legal rights, which include your rights:

  1. to be informed how your data is processed through notices such as this;
  2. to access your personal data;
  3. to rectify your personal data if it is inaccurate or incomplete;
  4. to erase your personal data where there is no compelling reason for its continued processing;
  5. to restrict processing;
  6. to data portability; and
  7. to object, on grounds relating to your particular situation, to the processing of your personal data where the processing is based on our legitimate interests.

If you want to exercise any of these rights, please contact us using the details above.

You also have the right to complain to the Information Commissioner’s Office, which regulates the processing of personal data, about how we are processing your personal data.

In the UK, you can refer your concerns directly to the Information Commissioner’s Office, the body that regulates the handling of personal data in the UK. Find out of their website how to report a concern: https://ico.org.uk/make-a-complaint/

We will co-operate fully with the Information Commissioner’s Office in the handling of complaints against us.

Data retention

We will retain your information as long as such information is required for us to comply with our legal obligations or to carry out our obligations arising from, and administer and enforce, any agreements entered into between you and us and deal with the asset which is the subject of any such agreement. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

We will usually retain your personal data for 6 years following the expiry of all agreements for services relating to you, unless we are obliged to retain your personal data for a longer period as a result of an overriding legal obligation. Such legal obligations include our reporting obligations to the Financial Conduct Authority and HM Revenue & Customs, as well as our obligations under applicable legislation including the Money Laundering Regulations, Bribery Act 2010 and the Modern Slavery Act 2015.

Data transfers

We, fraud prevention agencies and credit reference agencies may transfer your personal data outside of the European Economic Area (EEA). Whenever we or they transfer your personal data outside of the EEA, we or they will impose contractual obligations on the recipients of that data.  Those obligations require the recipient to protect your personal data to the standard required in the EEA.  We or they may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.

Failure to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with financing or other services). In this case, we may have to cancel such financing or service you have with us but we will notify you if this is the case at the time.

The three main credit reference agencies Callcredit, Equifax and Experian (also called ‘CRAs’) each use and share personal data they receive about you that is part of, derived from or used in credit activity and this is explained in more detail in the Credit Reference Agency Information Notice available at any of the following:

  • CallCredit Limited, Consumer Services Team, PO Box 491, Leeds, LS3 1WZ or call 0330 024 7574 or callcredit.co.uk/crain
  • Equifax Limited, Customer Service Centre, P.O. Box 10036, Leicester, LE3 4FS or call 0800 014 2955 or equifax.co.uk/crain
  • Experian Limited, Customer Support Centre, PO Box 8000, Nottingham, NG80 7WF or call 0344 481 0800 or experian.co.uk/crain
Download Fair Processing Notice PDF