Privacy Policy

Last updated: 17 August 2026 

Our contact details 

Organisation: Chase Direct Ltd t/a yourmobile.com 

Contact: Director’s Office 

Phone: 0345 222 6000 

Email: [email protected] 

Address: Suite 1.02 Grosvenor House, Hollinswood Road, Telford, TF2 9TW 

Data Protection Officer 

Name: David Carter 

Email: [email protected] 

The personal information we collect 

We may collect and process the following personal information where it is relevant to our dealings with  you: 

• Name, address and phone number 

• Date of birth 

• Business and account information relevant to a quotation or telecommunications service • Information used to carry out credit reference, affordability, identity and fraud-prevention checks

• Consumer credit and identity information received from credit reference agencies, which may include identity data, credit commitments, payment history and public record information

• Call recordings and correspondence relating to quotations, verification, contracts and customer service 

How we get personal information and why we use it 

Most of the personal information we process is provided directly by you. We may use it to: 

• Provide a quotation 

• Provide, arrange and administer a telecommunications package 

• Verify identity and account details 

• Assess creditworthiness and affordability and help prevent fraud 

• Manage our contractual relationship and provide customer service 

• Meet applicable legal, regulatory, audit and compliance requirements 

We may also receive personal information indirectly from: 

• Information that is lawfully available in the public domain, including information used to identify and  contact businesses 

• Creditsafe Business Solutions Limited and its data partner, TransUnion International UK Limited, in  connection with credit reference, affordability, identity and fraud-prevention checks 

Who we may share personal information with 

Where necessary for the purposes described in this policy, we may share relevant personal information  with: 

• plan.com, the network provider, to arrange and administer telecommunications services

• Creditsafe Business Solutions Limited and TransUnion International UK Limited in connection with  credit reference, affordability, identity and fraud-prevention checks 

• Professional advisers, regulators, law-enforcement bodies or other organisations where disclosure is  required or permitted by law 

Credit Reference and Affordability Checks 

To help us assess applications, prevent fraud and meet our legal and regulatory obligations, we may  obtain information about you from credit reference agencies (CRAs). 

We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer  credit and identity data. 

• Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct  Authority (FCA Firm Reference Number: 742313). 

• TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority  (FCA Firm Reference Number: 737740). 

The information we receive may include data relating to your identity, credit commitments, payment history  and public record information. We use this information for legitimate business purposes including  creditworthiness assessment, identity verification and fraud prevention, in accordance with applicable data  protection law. 

Further information about how Creditsafe and TransUnion process personal data can be found in their  privacy notices: 

• Creditsafe Privacy / Transparency Notice: Transparency Notice | Customers & Suppliers

• TransUnion Bureau Privacy Notice: TransUnion Bureau Privacy Notice 

Lawful bases for processing 

Under UK data protection law, the lawful bases we may rely on are: 

• Consent: where we rely on your consent. You may withdraw your consent at any time by contacting  [email protected]. 

• Contract: where processing is necessary to enter into or perform a contract with you.

• Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.

• Legitimate interests: where processing is necessary for our legitimate interests, provided those  interests are not overridden by your rights and freedoms. 

Our legitimate interests 

Our legitimate interests include operating and protecting our business, providing and administering our  services, fulfilling contractual obligations, maintaining system and data security, assessing creditworthiness  and affordability, preventing fraud, supporting audit and compliance activities, and protecting data supplied  by TransUnion. We consider and balance these interests against the rights and freedoms of individuals  and apply appropriate safeguards. 

Provision of personal data 

The provision of certain personal data is necessary for us to enter into and perform a contract with you  and, in some circumstances, to meet legal and regulatory obligations. 

Personal data may be required to: 

• Enter into and perform contracts with customers, suppliers or business partners • Process orders, manage accounts and deliver goods and services 

• Verify identity and prevent fraud 

• Carry out credit reference and affordability checks where appropriate 

• Comply with applicable legal, regulatory, accounting and tax obligations

If you choose not to provide personal data that we reasonably require, we may be unable to enter into a  contract with you, fulfil an order, provide services or complete necessary verification, credit, compliance or  fraud-prevention checks. This may mean that our services are delayed, restricted or declined. 

Where we request personal data for an optional purpose, such as marketing communications, you are not  required to provide it. Where we rely on consent for an optional purpose, you may withdraw that consent at  any time. 

Automated decision-making and profiling 

We do not use automated decision-making or profiling in relation to personal data. 

Credit reference, affordability, identity and fraud-prevention information may be considered as part of our  assessment processes, but any decision that could have a legal or similarly significant effect on an  individual involves human review and is not made solely by automated processing. 

International data transfers 

We do not transfer, store or process personal data outside the United Kingdom, and we do not permit  personal data to be accessed from outside the United Kingdom. 

How we store and retain personal information 

Personal information is stored securely within the systems we use to operate our business. Access is  limited to people who need the information for legitimate business purposes. 

We keep verification calls, correspondence, customer service calls, mobile phone contract details and  personal contact information for the duration of the contract. If a contract is terminated or is not taken up,  we generally retain relevant records for between 12 and 36 months, depending on the nature of the record  and the purpose for which it needs to be retained. At the end of the applicable retention period, we  securely delete or otherwise dispose of the information, unless we are required by law to keep it for longer. 

Your data protection rights 

Depending on the circumstances and the lawful basis we rely on, you may have the following rights in  relation to your personal information: 

• Right of access: to ask us for copies of your personal information. 

• Right to rectification: to ask us to correct personal information you believe is inaccurate or complete  information you believe is incomplete. 

• Right to erasure: to ask us to delete your personal information in certain circumstances.

• Right to restriction of processing: to ask us to restrict how we use your personal information in  certain circumstances. 

• Right to data portability: to ask us to transfer information you gave us to another organisation, or to  you, in certain circumstances. 

• Right to withdraw consent: where we rely on consent, to withdraw that consent at any time.

Your right to object 

Where we rely on legitimate interests, you may have the right to object to our processing of your personal  information. You also have an absolute right to object to the use of your personal information for direct  marketing. 

You are not normally required to pay a charge for exercising your data protection rights. We will respond to  a valid rights request without undue delay and normally within one calendar month. In some  circumstances, the law allows us additional time or permits us to refuse a request; if this applies, we will  explain why. 

To exercise any of your rights, please contact us at [email protected].

How to make a data protection complaint 

If you have concerns about the way we have used or handled your personal information, you can make a  data protection complaint to us at [email protected]. 

We will acknowledge receipt of a data protection complaint within 30 days. We will take appropriate steps  to investigate the complaint without undue delay, keep you informed where appropriate, and tell you the  outcome of our investigation. 

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we  have used your personal information or with the way we have handled your complaint. 

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113 

Website: www.ico.org.uk