The important bits

Privacy, in plain English.

The rule that governs everything else: your details go only to the lenders we approach for you - today that is iwoca, whose own privacy policy covers what they do with it. Never to marketing lists. Nobody buys your data from us, ever.

What we collect, and why

  • About the company - name, number, incorporation and trading dates, turnover, VAT status. To check eligibility and build a complete application.
  • About the applying director - name, date of birth, home address, residential status. Lenders need this for identity checks and, where relevant, a personal guarantee.
  • Contact details - email and mobile, so a decision can reach you.
  • How you use the site - standard analytics (Google Analytics). If you arrived from a Google ad we record which one, so we know what is worth paying for. We do not sell your browsing to anyone.

Who sees it

When you tick the consent box on the application, we share relevant data with credit providers we approach on your behalf. Those providers will share your information with credit reference agencies to run soft credit and identity checks - a soft search, which does not affect your credit score. They will also share it with fraud prevention agencies: be aware that if fraud is detected, you or others could be refused services, finance or employment.

The lenders on our panel, and their privacy policies. Once your data reaches a lender, that lender becomes a data controller in its own right and handles your information under its own privacy policy, not ours. Our panel today is:

We will name any lender we add here before we send them anything, and link their policy in the same way.

And that's the whole list. Lenders we approach for you, their credit reference agencies, their fraud prevention agencies, and the boring infrastructure that keeps a website running (hosting, email). No brokers-of-brokers, no lead resellers, no marketing lists.

How long we keep it

We keep completed application records for six years after your last activity, which is what tax and anti-fraud rules require of us, then delete them. Date of birth and home address are stripped from closed applications after twelve months, because once an application is finished there is no reason for us to still hold them. If you start an application and do not finish it, we keep what you had already typed - your company, the amount, your name and how to reach you - so you can pick up where you left off. We may email you once to ask whether you want to carry on, and only once. We never send it to a lender, because you have not agreed to that yet. Reply to say no, or email hello@finneus.co.uk, and it goes the same day. Unfinished enquiries are deleted automatically after 90 days.

Your rights

You can ask us what we hold, ask us to correct it, ask us to delete it, or object to how it's used - just email hello@finneus.co.uk and a human answers. If we let you down, you can complain to the ICO (ico.org.uk) - we are registered with them under reference ZC208281.

One honest note: once your application is with a lender, that lender is its own data controller with its own privacy policy - we'll always tell you who they are so you know exactly where your data sits.