FORMER ACCOUNT NUMBER: XXXX XXXX XXXX XXXX
As per my letter of 9th August (enclosed) I no longer acknowledge this debt to your company as you have not provided proper documentation. Furthermore, I believe that you have committed an offence under s.78(1) of the Consumer Credit Act 1974.
You have placed a default marker on my credit files in relation to the above former account. I am contesting this continued processing of my data is an unwarranted act and I enclose a Statutory Notice to that effect, which is deemed served as of the date noted on the Royal Mail's Recorded Delivery service audit.
As you are aware, I am afforded principled rights under Schedule 1, Part 1 ("The Principles") of the Data Protection Act 1998 in relation to the manner in which my data is collated, stored and processed. Of particular note are Principles 3, 4 and 5:
"3.
personal data
shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.
4.
personal data
shall be accurate and, where necessary, kept up to date.
5. Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or purposes."
In my case, you are retaining and processing data (whether or not this is a simple renewal process of the default flag, daily or other timed factor) after the termination of the contract. As that contract is no longer in situ, then my written permission has also ceased from the date of the termination, which I will take to be the date I beleive you to have committed an offence under the CCA, the 28th of July 2006.
Principle 2 states:
"2. Personal data shall be obtained only for one or more specified and lawful purposes and shall not be further processed in any manner incompatible with that purpose or those purposes."
I emphasise the term "specified ... purposes" as in that specified within the contract, and no more. I also emphasise the term "shall not be further processed".
As you are unable to provide me with a copy of my signed credit agreement, I contest that there IS NO SUCH AGREEMENT to process my data. If you are subsequently able to provide a signed credit agreement then I contest that, as per your standard
terms and conditions
, there was only permission for you to process my data during the term of that contract. It would neither include any other permission, nor would it have implied that your percieved 'rights' to process my data would be in perpetuity.
Also, I do not recall any clear statement that gave my expressed permission for you to continue disclosing my subject data to third parties after the end of the contract. You should be fully aware that any non-agreed disclosure of personal data to third parties is a criminal offence under the Act. Section 35 only allows exemption to this clause if disclosure is necessary in the detection of crime and disclosure is so ordered by a Court. I do not believe that you have any such statutory obligation especially in such a case as this; alleged non-payment in a civil matter.
Should you believe me to be mistaken, and your standard contract does provide unlimited time extensions, then please provide me with the agreement indicating not only where I have signed, but also where this clause is specified. This should be sent to me as one of your enclosures, if you wish to contest the enclosed Statutory Notice.
You should be aware that you have, by statute, twenty-one days in which to either comply with my request, or give written notice stating your reasons and why you consider the notice unjustified. Any failure on your part to adhere to these timescales will automatically result in your non-complience with the statutory procedure. In that case, you will be expected to unconditionally comply with my Statutory Notice or I shall refer the matter to the Courts to ask for an Order to that effect. Should it be necessary to refer the matter to the Courts, then I shall also apply for Court fees and costs against
HSBC
.
I trust that I have made my position clear, and that you will make a serious effort to understand your legal obligations as a Data Controller.
I look forward to receiving your confirmation that my data file has been altered to remove all reference to my former account with HSBC, within the timescales indicated herein.
Yours faithfully,
kateandpete