Rosebud Finance

In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Rosebud Finance would like to provide you with the following details.

Identity and contact details of the data controller

Lancashire County Developments Ltd, a private limited company with registration number 01624144 and its registered office is County Hall Lancashire County Council, Democratic Services Department, Preston, Lancashire, England, PR1 0LD.

Rosebud Finance is provided by Lancashire County Developments Ltd which is a wholly owned subsidiary of Lancashire County Council. It is managed and delivered by Lancashire County Council who shall also be a data controller of any personal data that is provided in connection with its ongoing relationship with Rosebud Finance and Lancashire County Developments Ltd. Personal data will be processed by Lancashire County Council in accordance with Lancashire County Council's full privacy notice.

Contact details of the data protection officer

Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

Rosebud Finance provides companies in Lancashire the platform to access funding to support their ambitious growth plans and as a result create employment opportunities in the county. Loans can be utilised by companies to develop technology and innovation, acquire plant and equipment, and complete mergers and acquisitions. Our team offer hands-on support to eligible companies with their application and process to draw down funds along with a specialist relationship management service for the duration of the loan period.

Lancashire County Council (through Lancashire County Developments Ltd) will request personal data from prospective clients and then work to support the client's business growth plans.

Consent to process personal data will be sought by Lancashire County Council and Lancashire County Developments Ltd.

Lancashire County Council and Lancashire County Developments Ltd will process personal data when handling all enquiries, when processing of legal agreements relating to investment approval, drawdown of funds, personal guarantee in relation to security of loan and when collecting agreed payments.

Categories of personal data being processed

Contact details including name, address, email address, contact telephone number(s) and contact preferences;
Identity details including title, name, current address, former addresses, date of birth, national insurance number, ID documents and biometric data to verify your ID;
Technical details about the way in which you use our website and complete the loan application online including your IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access our website;
Details of your loan application including company details, loan amount, connected businesses and key persons;
Income and expenditure details;
Details of any previous CCJs/IVAs;
Bank details;
Details of any disabilities;
Ethnicity;
Credit reference and AML checks;
Details of the success of your application, including reasons for rejection if applicable;
Details of any loan repayments, including any arrears;
Any other personal data provided to us during the course of the application process.

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with the UK GDPR is:

(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes

Where you agree to sign up to newsletters or other forms of communications – LCC relies on your consent for the processing of their personal data for these purposes.

(b) Contract: the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract. For example:

to deliver a contractual service to you; or
because you have asked us to do something before entering into a contract (e.g apply for a loan).
Rosebud will process data to ensure loan agreement documents (contract) between LCDL/LCC and the third party can be drawn down.

(c) Legal obligation: the processing is necessary for compliance with a legal obligation that we are subject to. For example, for the purposes of complying with anti-money laundering obligations or for the purposes of the prevention/detection of fraud.

(f) Legitimate Interests: pursued by us or by a third party.

Legal basis for processing special categories of personal data

The legal basis for processing your special category personal data, in accordance with the UK GDPR and the Data Protection Act 2018:

Where it is needed in the public interest, such as for equal opportunities monitoring, the prevention and detection of crime or fraud and/or protecting the public from dishonesty;
Where we have obtained your explicit consent;
Where it is needed in relation to legal claims
Where it is needed to protect your interests (or someone else's interests) and you are not capable of giving your consent;

Where you have already made the information public.

Recipients of the data

Lancashire County Council
Lancashire County Developments Ltd
Evolutive
Creditsafe UK

The following councils who support you with your Rosebud Finance application and engagement

Burnley
Chorley
Fylde
Hyndburn
Lancaster
Pendle
Preston
Ribble Valley
Rossendale
South Ribble
West Lancashire
Wyre

Information we share

Company personnel contact details
Individual client name
Individual client contact details
Individual date of birth
Individual national insurance number
Documents relating to Individual proof of identity and address
Nature of business loan enquiry
Notes relating to business loan enquiry
Outcome of any job creation including details of the job (position, hours)

Any transfers to another country

Retention periods

Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.

File type	Description	Security	Retention period
Email	Emails held in Outlook that haven't been exported or moved elsewhere.	Encrypted used when emailing personal data to partners.	1 year from the date received and then automatically deleted.
Data record (fields as listed above under “What data will be shared”)	Database records containing the fields required to process enquiry and/or application	Data held on a password protected system which is regular backed up	6 years from completion of loan payments and term
Hard copy file	Forms and other paperwork regarding enquiry and/or application	Files are mainly stored securely in locked cabinets and due care and attention is taken to avoid unlawful or unauthorised disclosure while in use	6 years from completion of loan payments and term

Cookies

The Rosebud Finance website (www.rosebud.co.uk) uses cookies to distinguish you from other users of our website. Full details about the website’s use of cookies can be found in our Cookies Policy for the Rosebud Finance website.

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

to be informed via Privacy Notices such as this.
to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
of rectification, we must correct inaccurate or incomplete data within one month.
to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ

Email: dpo@lancashire.gov.uk

To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information about this specific project then please contact a member of the Rosebud team on rosebud@lancashire.gov.uk

For more information about how we use personal information see Lancashire County Council's full privacy notice.

If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).