Under the new data protection law (EU General Data Protection Regulation) starting in May 2018 we have a number of lawful reasons that we can use (or 'process') your personal information. One of the lawful reasons is called 'legitimate interests'.
Broadly speaking legitimate interests means that we can process your personal information if:
So, what does this mean? When you provide your personal details to us we use your information for our legitimate business interests to carry out our work:
Before doing this, though, we will also carefully consider and balance any potential impact on you and your rights.
Our mission is to change lives every day.
We use various ways to achieve our vision of helping two million people by 2020. We will process the personal information you have supplied to us to conduct and manage our business. This will enable us to give you the most appropriate service, information, marketing and provide the best and most secure experience. These are what we consider to be our legitimate interests.
Our interests include:
We will also hold information about you so that we can respect your preferences for being contacted by us.
Where there is a relevant relationship between ourselves and you, e.g. as an employee, customer or client, you would reasonably expect us to process your information. However, when we process your personal information for our legitimate interests, we will always consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
This document was last updated: March 2018