Privacy & Security - Morag

Privacy & Security


We understand the importance of data security and privacy to customers and we comply with the requirements of applicable data protection laws, including the Data Protection Act 2018.

Details of the Topaz Finance Limited (trading as Morag Finance) notification to the data protection regulator may be found in the Information Commissioner’s Office Public Register of Data Controllers under registration number Z9736956.

We will not collect any information about individuals, except where it is specifically and knowingly provided by them.

For a full explanation of our policy around using and holding personal customer data, please see our Privacy Notice.

For specific information about Cookies and how they are used by our websites, please see our Cookie Policy.


Making a request for personal information

You have a legal right to obtain the personal information that we hold about you. You can do this by submitting a Data Subject Access Request (DSAR).

To request the information Morag Finance holds about you, please contact us by secure message, in writing or by phone.

If you are making a written DSAR, please ensure that your request is signed.

It will also be helpful if you could be as specific as possible about the information you want access to, as this will assist us in processing your request.

Your DSAR will be handled within one month of us receiving it. However in some cases it may take us longer to process your DSAR, for instance if we have received a number of requests from you or there is complexity in obtaining the information.

In those circumstances, we reserve the right to seek additional information from you which would enable us to process your request. Should this be the case, it may be necessary to extend the one month period by up to a further two months where necessary and we will be in touch to inform you of the reasons for this. We will also advise you of any further clarification or information we require.

Similarly, if we process a large amount of information about you, we may ask you for more information in order to clarify your request. Should this be the case, we will let you know as soon as possible that we need more information from you before responding to your request.

In both cases, the one month deadline for processing your DSAR will then commence from the date we receive this additional information from you.

There is no charge to make a DSAR in the first instance. We will provide a copy of the relevant personal information we hold about you at no cost, in line with the timeframes above.

Any DSAR made within six months of a previous request will normally be refused where the request is for duplicate information already provided to you.

However, if we do consent to provide you with duplicate information within six months of a previous request we may ask you to pay a reasonable fee to cover our administrative costs of providing this for you.

Please note, this page contains links to external websites. We are not responsible for the content of external websites.