Red Star Financial Management Ltd

Privacy Notice

Created on 11/07/2025

Please read the following information carefully. This Privacy Notice details what personal data we collect and process and how we shall use it, your rights, and how we safeguard your information in accordance with data protection laws, including the UK GDPR, the Data Protection Act 2018 and the Data Use and Access Act 2025. This Privacy Notice applies to:

  • Customers and business contacts of Red Star Financial Management Ltd.
  • Individuals whose data may be processed when visiting this website.

About Us

At Red Star Financial Management, we are committed to upholding individuals’ rights to privacy and data protection, ensuring that all data processing is conducted fairly and lawfully. As a company that specialises in managing Personal Contract Purchase claims, we collect and process your personal information to assess your eligibility, manage your claim, and ensure regulatory compliance.

Red Star Financial Management Ltd is a Private Limited Company registered in England and Wales with number 07044178. Its registered office is: St Georges House, Peter Street, Manchester, M2 3NQ.

Contact Us

If you have any questions about this privacy notice or the information we hold about you, please contact our Data Protection Officer at [email protected] or by letter to: Data Protection Officer, Red Star Financial Management Ltd, St Georges House, Peter Street, Manchester, M2 3NQ. If it would be helpful to have this notice provided in another format, please let us know.

Changes to this Privacy Notice

We continually review our Privacy Notice and update it where necessary. We advise that you regularly check our Privacy Notice for updates. Where we make significant changes to our policy, we may contact you to inform you.

Your Rights

You have the right to:

  • Request access to your personal data (a “data subject access request”).
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data in certain circumstances.
  • Object to processing of your personal data in certain circumstances, including direct marketing.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or to a third party in certain circumstances.
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you want to exercise any of these rights, please contact our Data Protection Officer using the contact details listed above. You will not usually have to pay a fee. We try to respond to all legitimate requests within one month.

Keeping Your Data Secure

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

How Long Will We Store Your Personal Data?

We maintain retention schedules which define the periods for which we will store your personal data. We will only store personal data for as long as we have a legitimate need to retain it. When we no longer need this information, we will anonymise your data and/or dispose of it securely. A copy of our retention schedule is available by request to the DPO.

Transfer of Your Information Outside the United Kingdom

Red Star Financial Management Ltd may transfer your personal data to our trusted service provider based in South Africa, who assists us by performing administrative tasks related to your claim. If we transfer your personal data out of the UK, we will ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented, including transfers only to countries deemed to provide an adequate level of protection, or the use of the International Data Transfer Agreement/Standard Contractual Clauses.

The Data We Collect About You

We may process different kinds of personal data about you, including:

  • Identity Data: first name, maiden name, last name, marital status, title, date of birth and gender.
  • Contact Data: email address and telephone numbers.
  • Financial Data: bank account information, car finance agreement details and payment details.
  • Compliance Data: recorded calls for quality checks and staff training.
  • Technical Data: IP address, browser type and version, time zone, location, operating system and platform.
  • Usage Data: information about how you use our website, products and services.
  • Marketing and Communications Data: your marketing and communication preferences.
  • Special Categories of Personal Data: health and vulnerability related data you may voluntarily share. We will always ask for your explicit consent to record and share Special Category Data.

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data where we need to perform a contract with you, where it is necessary for our legitimate interests, where we need to comply with a legal obligation, or where we have your consent to do so. Note that we may process your personal data for more than one lawful basis depending on the specific purpose.

Sharing Your Personal Data

We may share your personal data with the parties set out below:

  • Suppliers and those who process data on our behalf, such as cloud-based software providers, email service providers and IT software services.
  • Outsourced contact and administration centres.
  • Couriers for delivery purposes.
  • Any entity to whom we are legally required or requested to make such disclosure.
  • Postcode validation services.
  • Our partner credit information firm Valifi Ltd, for the purposes of obtaining your credit file from one or more credit reference bureaus (Equifax Ltd, TransUnion Information Group Limited).

We require all employees and third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

How To Make a Complaint

If you believe that your data protection rights may have been breached, you have the right to lodge a complaint with the applicable supervisory authority or seek redress through the courts. The UK supervisory authority is the Information Commissioner’s Office, who can be contacted by calling 0303 123 1113 or by visiting ico.org.uk/for-the-public.