Privacy Statement

Last Updated: July 2012

The Data Protection Act 1998 puts obligations on users of personal information and lays down principles for its use. This policy is designed to describe to you the ways we use your personal information and to set out your rights.

At Wave Lending ltd, a subsidiary of Bank of America Corporation, (“the Group”) we are committed to protecting your privacy, so will only use the information that we collect about you lawfully (in accordance with the UK Data Protection Act).

What personal information do we collect on you?
We collect information about you to provide you with the best possible service. We will only collect personal information where you provide us with this. We will never collect sensitive information about you without your explicit consent.

Our calls are recorded for regulatory purposes and we may monitor calls to improve our standards of service, for staff training purposes and to prevent fraud.

How do we use your personal information?
Our main use of your personal information is to provide you with the specific service you require. Any information you provide will not be kept for longer than is necessary in line with the purposes for which it was provided.

We're committed to keeping your personal information safe and secure at all times - for further details see: How do we ensure customer confidentiality?

Credit reference agencies
As an existing customer of Wave Lending Ltd we may make searches with credit reference agencies as well as information from the Electoral Register in line with the terms and conditions of the product(s) you hold with us. The agencies will keep a record of the search. Credit searches and other information which is provided to us and / or the credit reference agencies, about you and those with whom you are linked financially may be used by us and other companies, if credit decisions are made about you, or other members of your household.

This information may also be used for debt tracing and the prevention of money laundering as well as the management of your account. To prevent or detect fraud, or to assist in verifying your identity, we may make searches of the records of companies in the Group and at fraud prevention agencies who will supply us with information. We may also pass information to financial and other organisations involved in fraud prevention to protect ourselves and our customers from theft and fraud. If you give us false or inaccurate information and we suspect fraud, we will record this.

Other members of our Group and other companies may use this information if decisions are made about you or others at your address(es) on credit or credit-related services or motor, household, life or any other insurance facilities. It may also be used for tracing and claims assessment.

'Associations' linking your financial records may be created on credit reference agency records when your product is in joint names. Your financial records and those of anyone financially associated with you, may be considered in any future applications you make. This association will continue until one of you successfully files a 'disassociation' at the credit reference agencies.

Please contact Wave Lending Ltd on 0800 358 3758 or at Spectrum Building, 5th Floor, 55 Blythswood Street, Glasgow G2 7AT if you require details of the credit reference agencies and fraud prevention agencies from whom we obtain and to whom we pass information about you. You have a legal right to these details.

Who do we share your personal information with?
Where you have provided us with personal information we may share this with:

• any licensed credit reference agency where the information will be stored and used by other lenders for making credit decisions about you and other members of your household and occasionally for fraud prevention
• other members of the Group
• any insurer or prospective insurer under the Mortgage to help them decide whether to offer cover and for processing claims
• our regulators, government and enforcement agencies
• third party service providers
• market research organisations for use for research by companies in the Group
• our lawyers, auditors and external advisers
• any agent acting on our behalf for the purposes described in: How do we use your personal information?

It is also possible that your personal information will be shared with a third party as part of a proposed business transfer or acquisition of our business.

How do we ensure customer confidentiality?
All our employees are personally responsible for maintaining customer confidentiality. We provide training and education to all our staff to remind them about their obligations. Our policies and procedures are regularly reviewed.

We have in place appropriate technical and organisational measures to protect your personal information against unauthorised or lawful processing and against accidental loss or destruction of, or damage to, your personal data.

Please do not email us any confidential information, as we cannot guarantee the security of your information.

Why do we link to other websites?
We use links to other Internet sites to improve your experience of our website. However, please be aware that these websites may be owned and run by other companies and organisations. Wave Lending Ltd is not responsible for the information contained on or accessible through those websites. Your access and use of such websites remains solely at your own risk. We cannot accept responsibility for any information you divulge to a linked website.

Use of Cookies
Cookies are used to store small amounts of information on your computer to enable servers to collect certain information from your web browser. Cookies are widely used on the internet and in themselves do not identify the individual, just the computer used. Cookies and other similar technology make it easier for you to log on to and use the Website during future visits. Please note that no cookies are used on the Wave Lending Ltd website

What countries will your data be passed to?
Countries in the European Economic Area (EEA) are required to have a similar standard of protection of personal data. We may share your personal information with other members of the Group who are based within the EEA. We may also pass your data to parties (including Group companies and third party service providers) based in the USA, a country outside the EEA. The USA is not a country that is deemed to provide the same standard of protection as countries within the EEA, such as the UK. Before we transfer your data, we will however take appropriate measures to ensure that there is adequate protection as required by European data protection legislation.

What are your rights under the Data Protection Act?
You have a right, on written request and payment of a fee of £10, to receive a copy of the information held about you. Please write to us at Spectrum Building, 5th Floor, 55 Blythswood Street, Glasgow G2 7AT. If anything is inaccurate or incorrect, please let us know and we will correct it. You can help us ensure your information is accurate by informing us whenever your circumstances change.

Occasionally we may contact you, in writing, to inform you about other products or services, which may interest you. You have the right to ask us not to process your information for marketing purposes. If you do not wish to receive these details, please contact us on 0800 358 3758 or write to us at Spectrum Building, 5th Floor, 55 Blythswood Street, Glasgow G2 7AT.

You are entitled to request in writing that no decision taken by us, which significantly affects you, is based solely on the processing by automatic means, for example, your creditworthiness. You have the right to require us to reconsider the decision or to take a new decision made other than on that basis.

Can we change this Privacy Statement?
There may be developments in how we use your personal information. We will make changes to this Privacy Statement on our website to reflect any such developments.

Who should you contact if you have any questions on our privacy policy?
If you have any questions or require further information on our Privacy Statement, please contact the Compliance Department on 0800 358 3758, or write to us at Compliance Department, Spectrum Building, 5th Floor, 55 Blythswood Street, Glasgow G2 7AT.

Is Wave notified with the Information Commissioner?
Wave is notified to the Information Commissioner under notification number Z8269377.
To view these details or for any other information on advice and guidance about data protection and freedom of information, please visit the Information Commissioner's website;
www.informationcommissioner.gov.uk

The ICO Helpline is also available between 9am and 5pm Monday to Friday;
From the UK: 0303 123 1113 or (+44) 01625 545745 from outside the UK.