Privacy policy

Who we are

u3man (info@u3man.be) collects your application. We are fully GDPR compliant, under both the UK GDPR and the EU GDPR. This policy says what we keep and who we give it to.

We are not a credit lender and we are not a credit broker. We do not decide the credit card or the credit limit. We retain your personal data and the business data, and we pass both to a chosen merchant so that merchant can acquire a business credit card for the business.

What the application is

The form is an application for a credit card with a credit limit, for an incorporated business. A soft credit check on your personal details, and a hard credit check on the business details, will be carried out by the merchant — not by u3man. See the Terms and conditions for what those checks mean.

Data we retain

When you apply, we keep:

• Your name, date of birth, nationality, mobile number, email and home address.
• Your role in the business, and whether you can bind it.
• The business legal name, company number, trading name, what it does, addresses, turnover and the limit requested.
• The bank account name, sort code, account number and bank name, so a Direct Debit can be set up if a card is opened.

We generate a temporary password for your account and pass it to you. You must change it. We do not store the new password you set. A draft of the form may sit in this browser until you submit or clear it. That draft does not include the bank account number.

Consent to share your data and to be contacted

By applying, you consent to your data being submitted to the merchant we use, and to other third parties used to obtain the credit card, and to those parties contacting you for that purpose. Third parties can include the merchant who acquires the card and the firms that merchant uses, such as a credit reference agency for the soft check on you and the hard check on the business.

The purpose is limited to obtaining the credit card: assessing the application, opening the account, and contacting you about it. This consent is the basis for that disclosure and contact (Article 6(1)(a) of the UK GDPR and the EU GDPR). You can withdraw it by emailing info@u3man.be before the data has been passed on. After it has been passed on, the merchant is responsible for what it holds, and we will tell them you have withdrawn consent where we are able to.

Why we keep it, and who receives it

We keep the data so we can take the application and pass it to the chosen merchant and to the other third parties used to obtain the credit card. The merchant uses it to consider the card, run the soft credit check on you and the hard credit check on the business, and, if it agrees, open the card. Those parties may contact you about the application. We also email a copy of the enquiry to info@u3man.be so the application can be handled.

Taking the application itself is done because you asked us to, before a credit card can be offered (Article 6(1)(b)). Passing the data on, and the merchant or a third party contacting you about the card, is done with your consent (Article 6(1)(a)). The tick-box on the form is that consent. We do not sell personal data.

After we pass the application on, the merchant is responsible for the data it holds, including the credit checks and any credit agreement. Their own privacy notice applies to that part.

How long we keep it

We retain the application only so we can pass it to the merchant and answer questions about what we sent. We delete it, or reduce it so it no longer identifies you, within 12 months after the enquiry is closed, unless a longer period is required by law. If we are still sending you marketing, we keep the contact details used for that until you opt out. An opt-out is actioned and those details are taken off the marketing list.

Marketing by email, phone or post

We reserve the right to use your email address, telephone numbers and postal address to send marketing by email, by phone and by post. This is about the business credit card and related services. We do not sell these contact details.

Where the law allows marketing to a business contact on the basis of legitimate interests, that is the basis we use. Where consent is required, we rely on the fact that you have given us those contact details in the application and have accepted this policy. You can refuse or withdraw that at any time, and we will stop. Email info@u3man.be or use the unsubscribe link in an email. A phone call can be stopped by saying so on the call. Postal marketing stops once we have actioned the opt-out.

Your rights

You can ask for a copy of the personal data we hold, ask us to correct it, erase it, restrict it, or send it to someone else, and you can object to how it is used. Email info@u3man.be. How we meet the GDPR in full is set out in the GDPR notice. You can also complain to the UK Information Commissioner’s Office or, in Belgium, the Data Protection Authority.