UK GDPR gives individuals a right to erasure — sometimes called the right to be forgotten. You can ask Credicorp to delete personal data we hold about you, and we will act on that request where we are legally able to do so.
When we can delete data
- Where the data is no longer necessary for the purpose for which it was collected
- Where you withdraw consent and there is no other lawful basis for processing
- Where you object to processing based on legitimate interests and those interests do not override yours
- Where data was processed unlawfully
When we must retain data despite a request
We are not able to erase records where retention is required by law. This includes:
- AML and KYB records under the Money Laundering Regulations (typically five years from the end of the relationship)
- Financial records needed to comply with HMRC requirements or the Limitation Act 1980
- Records necessary to establish, exercise, or defend a legal claim
In these cases we will tell you which data we cannot delete and why, and what we can delete in the meantime.
How to submit an erasure request
Email data@credicorp.co.uk with the subject line "Erasure Request", your full name, the company name and number, and the specific data or categories of data you want deleted. We will respond within one calendar month.
We lend only to UK limited companies and LLPs, and the loan is to the company with no director personal guarantee. As business finance outside the consumer-credit regime, it is not covered by the Financial Ombudsman Service or FSCS.
See also: How to request a copy of your business data, How long Credicorp keeps your business data.