Dakson Merchant Ltd (referred to as “Dakson”, “we”, “us” or “our” in this notice) respects your privacy and is committed to protecting your personal data. This privacy notice explains what personal data we collect, what we do with it, who we share it with, how long we keep it for and what legal rights you have.
1. The personal data we hold about you
Your identity and contact data
This includes personal information about you (for example your name, date of birth, residential address, nationality, passport number) and your contact details.
In most cases the information is provided by you during the set up or request of our services, in the form of identity documents, and any other personal data you could shared with us. In some cases, it may be provided by a third party where you have given your consent for them to share it with us.
We may be provided with additional identity and contact data by third parties that we use to perform due diligence (for example, fraud prevention agencies). In addition, we may source identity and contact data from publicly available sources such as Companies House or Electoral Registers.
Banking and service data
This is information about your existing banking accounts and any other products and services that you need to share with us. It includes things like bank account numbers, account balances and information about transactions or payments. The information is generated as you use our services and in some cases it is shared with us by the organisations we use to provide our investment and merchant banking services.
Where you have linked your account to one of our partner services we may hold banking data for these services. This will only be when you have provided your consent for us to do so.
Information you permit us to access on your phone if you are our customer
This is information stored on your phone that you explicitly permit us to access (for example, your address book, photos and geolocation data).
This is information about the phone you use (for example the browser version, time zone settings, phone operating system, IMEI number, IP address and other technical settings). This information is collected automatically when you use our app.
Special category data
This is information that is considered more sensitive by regulators and includes your race, ethnic origin, political views, religion, trade union membership, genetics, biometrics, health and sexual orientation. With the exception of the copy of Passport or ID that you provide so we can verify your identity, we do not process this category of data. However, it is possible that we may hold special category data when it is included on documentation that you have given us (for example your ID document). When this is the case, we will only process this information in strict accordance with the law.
2. What do we do with your personal data
We only use your personal data in order to provide our services and where there is a lawful basis to do so.
To fulfil our contract with you, we will use your personal data to:
- Administer and provide our services.
- To develop and provide a high-quality user experience through our app.
To fulfil our legal obligations we will use your personal data to:
- Verify your identity when you apply for a service with us.
- Check applications against certain fraud prevention and sanctions databases.
- Implement measures to identify and prevent financial crime (for example, money laundering, fraud and terrorist financing).
- To make responsible advising decisions.
We utilise the latest technology to make automated decisions for the verification of identities and the identification of financial crime. If you are rejected or negatively affected on the basis of an automated decision or automated profiling, you will be notified about this and you have the right to appeal.
It is in our legitimate interests to use your personal data to:
- Keep you informed of the status of our services you use.
- Provide a world class customer service experience.
- Perform a soft credit search to assess your suitability for our services.
- Check applications against certain fraud prevention databases.
When we and fraud prevention agencies process your personal data, we do so on the basis that we have a legitimate interest in preventing fraud and money laundering, in order to protect our business and to comply with the laws that apply to us. Such processing is also a contractual requirement of the services you have requested.
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services you have requested, or we may stop providing existing services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies and may result in others refusing to provide services, financing or employment to you.
As part of this processing of your personal data, decisions may be made by automated means. If you are rejected or negatively affected on the basis of an automated decision or automated profiling, you will be notified about this and you have the right to appeal.
With your consent, we will use your personal data to:
- Provide you with information about our products and services that we think you may like.
- Invite you to participate in market research activities (such as focus groups, interviews and surveys).
- Provide you with information about third party products and services that we think you may like.
- Market our products.
- Operate our Hub (where you may choose to take advantage of a wide range of our partners’ products and services).
You may withdraw your consent to receive marketing messages at any time by setting your preferences in our app settings, or by following the opt-out link contained in marketing emails.
3. Who we share your personal data with
We will share your personal data with organisations and partners that enable our services you use. This includes:
- Group companies, affiliates and branches of Dakson Merchant Ltd.
- Organisations that help us to verify your identity.
- Organisations that help us to provide our service. This includes:
- Card issuers.
- Financial service providers.
- Exernat Data Controller in relation to all necessary activities relating to the operation of the services including: allowing you to receive, activate and use your debit cards if required; making and receiving payment transactions, meeting legal requirements regarding our services; answering your requests and providing information to you.
- Payment service providers and technical and non-technical processors.
- The providers of our IT and cyber security services.
- Credit reference agencies. For details on how they use your personal data, see https://www.equifax.co.uk/crain, https://www.experian.co.uk/crain/index.html and https://www.transunion.co.uk/crain..
- Organisations that provide our customer service tools.
- Any organisations that enable our services that you use.
To fulfil our legal obligations, we may share your personal data with:
- Government and law enforcements agencies the in the pursuit of financial crime prevention and in the fight against terrorism.
- Fraud prevention agencies and providers of due diligence services.
- Any organisation that we are legally required to do so.
Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.
Where you have provided your consent, we may share your personal data with:
- Organisations that provide marketing and advertising services.
- Organisations that provide services to our group.
- Anyone you give us explicit permission to do so.
To provide the best services we partner with and use service providers that are based outside the European Economic Area. We will only partner with organisations that meet the EU Commission’s data privacy requirements and where a contractual agreement is in place to protect our customers’ personal data in accordance with the EU GDPR requirements.
In all cases, we will only share the personal data that is absolutely necessary to provide our services, fulfil our obligations to you and to fulfil any legal requirements.
4. How long we keep your personal data
We hold our customers’ personal data for six years following the ending of our business relationship unless:
- The law requires us to hold your personal information for a longer period, or delete it sooner.
- You exercise your right to have your personal data erased from our systems (where it applies).
- We have a legitimate reason to keep it (for example, helping us to respond to queries or complaints, to show that we have given you fair treatment, in the fight against financial crime).
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
5. Your rights
Your rights under the EU General Data Protection Regulation (GDPR) include:
The right to access personal data we hold about you
You may request access to all the personal data we hold about you. This is known as a ‘subject access request’.
The right to have your personal data erased from our systems
You may request that we delete some or all of the personal data that we hold about you. This may not always be possible, as we are required by law to keep some information.
Other rights provided by the GDPR
- If you believe that any of the personal data we hold about you is inaccurate, you have the right to have it updated (for example, you may wish to update your personal or contact details).
- You may object to, or request that we restrict the processing of your personal data (for example, you may withdraw your consent for marketing at any time).
- You may ask that we provide a copy of your personal data in a structured, commonly used and machine-readable format. You can request that we provide this to you directly, or that we transfer the data to third party of your choosing.
- Where we have used technology to make an automated decision, or to evaluate your suitability our services, you have the right to challenge the decision directly with a member of our customer service team.
To exercise any of these rights, simply submit a request to the customer service team via the chat function in our app, by emailing firstname.lastname@example.org, or by calling the number on the client's restrictes area of our website. We will aim to fulfil all requests within one calendar month.
6. Making a complaint
If you are unhappy about our management or use of your personal data you are entitled to make a complaint. We would prefer that complaints are emailed to email@example.com, but you may register your complain via any of our customer service channels.
If we fail to resolve your complaint to your satisfaction, you may pursue your complaint via the Information Commissioner’s Office. Details of how to do so can be found at https://ico.org.uk/make-a-complaint/
If you have any questions or would like to know more, don’t hesitate to contact our Customer Service or write to us at 71-75 Shelton Street, Third Floor, London, England WC2H 9JQ.