1. Introduction

RightCard Payment Services Ltd is regulated and authorised by the Financial Conduct Authority (“FCA”) and a subsidiary of Pomelo Technology US Inc. which comprise a group of companies (“Pomelo Group”or “we”) and respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. This Privacy Notice applies to personal information that we and other third-party entities collect through your use of our app, LemFi Mobile Application (“LemFi App” or “Application” or “App”), or LemFi Website.

Application users, clients, customers, account holders are referred to collectively as “Users” or "you". Please read this Notice carefully to understand our policies and practices for collecting, processing, and storing your personal information. If you do not agree with our policies and practices, you're choosing not to participate in the LemFi Student Grant Program.

Our Data Protection Officer can be contacted at the following email address: dataprivacycounsel@lemfi.com

2. Who are we?

RightCard Payment Services Ltd with its registered seat at B7b St. Faiths Street, Maidstone, Kent, England ME14 1LH, United Kingdom. For the purposes of how we use your personal information across our brands and platforms (e.g. our websites and apps) in the ways described in this Privacy Notice, RightCard Payment Services Ltd is the main Data Controller and the Sponsor of LemFi Student Grant program.

Personal information provided to, or collected by, us when you use our Student Grant Application form and associated processes is controlled by RightCard Payment Services Ltd. RightCard Payment Services Ltd will at all times be available for data subjects (customers) to address any concerns or questions and/or allow them to exercise their rights under domestic applicable data protection laws regarding their personal information.
We are committed to safeguarding the personal information of our customers, users, employees and other stakeholders, while helping our customers, employees, investors and society create a deeper impact and make the right decisions.

3. How do we collect personal information?

We collect personal data about you in the following ways:

• directly from you when you fill in information on the Student Grant Application Portal/Form, including any associated information you provide in allowing to determine your eligibility for the Student Financial Grant.

4. What data do we collect?

The information we may collect about you will vary depending on how you interact and engage with us. It may include the following:

• information such as your full name, address, date of birth, email address, telephone number, evidence of enrollment on a graduate or postgraduate education program in the United Kingdom, Personal Statement and a short video explaining your reasons for applying for a Student Grant.

5. How do we use your personal information?

We may use your information:

• to process and assess your eligibility for the Student grant.
• to make an initial decision and to assess your eligibility for grant for final shortlisting.
• to communicate effectively with you if you are awarded the grant.
• to comply with our legal and regulatory obligations.
• for any other specific purpose which we notify you of at the time your personal information is collected;

6. Why do we process your personal information?

We collect and use your personal information where it is necessary for us to carry out our lawful business activities, including allowing you to participate in the Student Grant Program and for our marketing purposes.

To assess your Student Grant application based on your academic qualification, personal statement and the eligibility criteria forming part of terms and conditions.

7. What are your personal data rights?

As a data subject, you have a number of rights:

• the right to access the personal data we hold about you;
• the right to rectify inaccurate personal data or complete it if it is incomplete;
• the right to have your personal data deleted;
• the right to request restriction of or suppression of your personal data;
• the right to obtain and make use of your personal data for your own purposes across different services ("portability");
• the right to object to the processing of your personal data in certain circumstances;
  rights related to automated decision-making including profiling, and
• the right to withdraw consent at any time. In certain circumstances, we may need to get your consent before we can access or process your personal data. If this happens, we will always ask for your consent first. If you have given us consent in the past but subsequently change your mind, you can withdraw your consent at any time.

If you think that any of the personal data we hold about you is wrong or incomplete you have the right to challenge it.

We will not make a charge for handing your rights request, unless we consider it to be manifestly unfounded or excessive involving a disproportionate effort (particularly if this is a repeated request).

We will assess your request and if we decide not to act upon it or place certain restrictions on it, we will inform you of our reasons for this.

You have the right to complain to us and to the data protection regulator, the Information Commissioner's Office. Their address is: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. They can be contacted by phone on 0303 123 1113 (local rate) or 01625 545745 if you prefer to use a national rate number.