ST ANDREW'S GROUP PRIVACY POLICY

1. Introduction St Andrew's Group plc and its group companies* have developed this privacy policy in order to assist in its position as a trusted provider of creditor insurance and to ensure it upholds and maintains visitors' rights to privacy in the on-line environment. St Andrew's Group plc ('StAG'), is a public limited company incorporated under English law with registered number 3011193 whose registered office is at St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA. StAG is the data controller, as defined by the Data Protection Act 1998, collecting the information obtained by this website, for the specified purposes as outlined below.

2. Collection and use of personal information StAG will only collect and use personal information voluntarily provided by visitors to this site. Visitors are able to browse the site without disclosing any personal information. A visitor to the site may choose to provide StAG with limited personal information as required in order to register for certain services. This personal information may be used for recruitment, administration, customer services and fraud prevention. Personal information collected by this website may be transferred to other member organisations within the StAG group where it is necessary to meet the purpose for which the information was submitted.

3. Disclosures of information Your personal information may be passed on to or used by subsidiary companies within StAG and other group companies but will not be disclosed to outside organisations and/or individuals unless:

4. Retention and accuracy of personal information Information collected from visitors to the site will only be kept to provide the required service. Once the service has been completed all the information will be destroyed in accordance with StAG's data retention policies. Should you require your information to be updated, amended or deleted from your records please contact the Data Protection Officer at St Andrew's Group plc, St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA, outlining your requirements.

5. Access to your personal information Under the Data Protection Act 1998 Visitors to this site are entitled to a copy of their personal information held by StAG on payment of a small fee. For further information please contact the Data Protection Officer at St Andrew's Group plc, St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA.

6. Information security StAG has implemented accepted standards of technical measures and security policies that protect the personal information it has under its control from:

We also use encryption and authentication procedures to protect your personal information. In addition, our staff have a personal responsibility for maintaining user confidentiality. We provide training and education to all our staff to remind them of their obligations, which are fully supported by our internal policies and procedures.

7. Cookies We use these once you register with StAG to allow us to personalise our service to you. If you do not want a cookie, you can always set your browser to deny it.

8. Notification to the Information Commissioner StAG has an obligation as a Data Controller to notify the Information Commission of the purposes for which it processes personal information. Full details of StAG's data protection notification can be obtained from the Data Protection Officer at the address below or from the Information Commissioner's website (www.dataprotection.gov.uk).

9. Contact details If you have any queries concerning your personal information of any questions on our use of the information, please contact the Data Protection Officer, St Andrew's Group plc, St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA. * St Andrew's Group plc is part of the HBOS group of companies which at the time of printing includes the Bank of Scotland, Halifax and Mentor Professional Services Limited.