Privacy Policy

Privacy Policy

Lendle.co.uk respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share and safeguard your information in the course of our business, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may update this policy periodically. If we make significant changes, we will update this page and, where appropriate, notify you by email. Please review this policy regularly to stay informed about how we protect your personal data.

By providing your personal data to us, you acknowledge that you have read this Privacy Policy. We will only process your data on the lawful bases described below.

Lendle.co.uk is operated by CC Financial Solutions Ltd, the Data Controller of your personal data.

ICO Registration Number: ZA229002

Registered Address:

Unit 13a, 1st Floor Offices
Dunscar Business Park
Blackburn Road
Bolton
BL7 9PQ

Our services are not intended for individuals under 18. If you are under 18, please do not use this website or submit personal data.

For all data protection queries, including exercising your rights, please contact: hello@lendle.co.uk

Regulatory Status

CC Financial Solutions Ltd operates within the UK regulated financial services sector.

Where regulated activities are undertaken, services are provided in accordance with the rules and guidance of the Financial Conduct Authority (FCA). Where applicable, firms within the Lendle network operate either as an authorised firm or as an Appointed Representative of an FCA authorised Principal Firm.

We maintain appropriate governance, compliance controls and oversight processes to ensure that customer data is handled in accordance with regulatory requirements including FCA rules, Consumer Duty expectations and UK data protection legislation.

How do we collect personal information?

We collect personal data directly from you when you submit an enquiry via our website. We may then contact you by phone, email, SMS, or other agreed communication methods to obtain information required to provide our services.

If you choose to proceed with an application, we may request additional information, which may be submitted electronically or in hard copy via postal services.

We may also receive information from third-party sources when required to support your application. These may include identity-verification providers, credit reference agencies, lenders, fraud prevention agencies and regulatory databases. Information may be shared securely via email, encrypted transfer, API integration or mail.

Information which we collect about you

When you browse our website, we automatically collect certain technical data including:

• IP address
• browser type
• device identifiers
• pages visited
• usage patterns

This helps us improve site performance and user experience.

Cookies and similar technologies may be used. Please see our Cookie Policy for further details.

You may voluntarily provide personal information through forms, calls, emails or messages. This may include:

• Name, address and contact details
• Date of birth and identification information
• Employment details and income
• Financial circumstances and credit history
• Property details
• Information about additional applicants
• Any information needed to assess your eligibility for financial products

To provide certain quotes or advice we may need to collect special category data (for example health information) or criminal-offence data (such as bankruptcy or IVA records). We will only process such data where you provide explicit consent in accordance with Article 9 UK GDPR.

We do not knowingly collect data relating to children.

If you provide someone else’s information you must ensure you have a lawful basis to do so and inform them of this Privacy Policy.

We may also ask for feedback to improve our services. Feedback is used anonymously unless you consent otherwise.

How we use your information

We use your personal data to:

• Provide tailored quotes
• Assess your eligibility for financial products
• Match your circumstances to lender criteria
• Process applications and transactions
• Conduct credit reference and fraud prevention checks
• Communicate with you regarding your enquiry or application
• Comply with legal and regulatory obligations
• Improve our services and website performance

Third Parties We Share Data With

To deliver our services we may share your data with selected third parties.

Lenders and Financial Providers

For eligibility assessment and application processing, including but not limited to:

• Oplo HL Ltd
• Central Trust Ltd
• Equifinance Ltd
• Norton Home Loans Ltd
• UK Mortgage Lending Ltd
• Together Money Ltd
• United Trust Bank Ltd
• West One Secured Loans Ltd
• Selina Finance Ltd
• Mercantile Trust Ltd

Other Third Parties

We may also share data with:

• Identity verification providers
• Credit reference agencies
• Fraud prevention agencies
• Call recording providers (e.g. Soho66 trading as PebbleTree Ltd)
• Customer feedback platforms (e.g. Reviews.io)
• Compliance consultants
• IT and cloud service providers
• Regulatory bodies such as the Financial Conduct Authority

These organisations process your data in accordance with their own privacy policies.

We may also share personal data where required to:

• comply with legal obligations
• enforce our terms
• protect our rights
• prevent fraud or financial crime

Credit Reference Agencies

In order to process your application and assess eligibility for financial products we may share your personal data with Credit Reference Agencies (CRAs).

When we submit an application or enquiry on your behalf, lenders may perform credit searches with one or more of the following CRAs:

• Experian Ltd
• Equifax Ltd
• TransUnion International UK Ltd

These organisations will provide lenders with information about you including details from your credit report, electoral register and publicly available information.

CRAs may also provide lenders with fraud prevention and identity verification information.

When CRAs receive a search request they will:

• place a record of the search on your credit file
• supply lenders with credit information about you
• retain information about your credit application

This information may be used by lenders and other organisations to:

• assess creditworthiness
• verify identity
• prevent fraud and money laundering
• manage credit accounts

Further information about how Credit Reference Agencies process personal data can be found in the Credit Reference Agency Information Notice (CRAIN) available at:

https://www.craexplained.co.uk

Fraud Prevention Agencies

Before we provide services, goods or financing to you we may undertake fraud prevention checks.

We and the organisations we share data with may access and use information from Fraud Prevention Agencies (FPAs).

If fraud is detected or suspected:

• this may prevent you from obtaining certain services, financing or employment
• records may be retained by fraud prevention agencies and shared with other organisations

Fraud prevention agencies may hold your data for up to six years if fraud is confirmed or suspected.

Data processed by fraud prevention agencies may include:

• identity data
• contact details
• financial information
• device information
• behavioural data associated with transactions

Fraud prevention agencies process your data as data controllers in their own right.

Broker and Introducer Relationships

In some cases your enquiry may be introduced to us by a broker, introducer or marketing partner, or we may refer your enquiry to a partner firm where appropriate.

Where this occurs:

• the introducer may share your personal data with us so we can contact you regarding your enquiry
• we may share limited information about your application with the introducer for the purpose of administering the referral relationship

This may include:

• confirmation that contact has been made
• application progress updates
• completion status

Introducers and partner firms act as separate data controllers and process personal data in accordance with their own privacy policies.

Why do we process your personal information?

We process personal data on the following lawful bases:

• Contract — Article 6(1)(b): To provide quotes, assess eligibility, process applications and deliver our services.
• Legal Obligation — Article 6(1)(c): To comply with applicable laws including FCA regulatory obligations, Anti-Money Laundering regulations, fraud prevention, regulatory reporting and record keeping requirements.
• Consent — Article 6(1)(a): For marketing communications, processing special category data and website analytics.
• Legitimate Interests — Article 6(1)(f): To operate, improve and secure our website and services. Where we rely on legitimate interests we undertake a Legitimate Interests Assessment.

Automated Decision Making and Profiling

We may use automated systems to assess loan eligibility, creditworthiness and fraud risk. These processes may involve profiling using financial and credit reference data.

You have the right to:

• request human intervention
• express your point of view
• contest a decision

To exercise these rights contact: hello@lendle.co.uk

How safe is your data and where we store your information

We implement appropriate technical and organisational measures including:

• encryption of data in transit and at rest
• secure servers
• access controls and role-based permissions
• audit logs and monitoring
• regular security testing
• staff data protection training
• incident response procedures

While no transmission over the internet can be guaranteed secure, we take reasonable steps to safeguard your information.

International Transfers

Where personal data is transferred outside the UK we ensure appropriate safeguards are in place in accordance with Chapter V UK GDPR, including:

• UK International Data Transfer Agreements
• International Data Transfer Addendum to EU SCCs
• transfers to countries deemed adequate by the UK Government

Transfer Risk Assessments are conducted where required.

How long do we keep your personal data

We retain personal data only for as long as necessary to meet legal, regulatory and contractual obligations.

Typical retention periods include:

• Loan and financial application records: 6 years from completion or withdrawal
• Customer correspondence: 6 years
• Anti-money laundering documentation: 5 years after the end of the business relationship
• Marketing consent records: Until consent is withdrawn
• Website analytics data: Up to 26 months

Retention periods may be extended where required to:

• comply with FCA rules
• prevent fraud
• defend legal claims

After the retention period data is securely deleted or anonymised.

Marketing Communications

We will only send marketing communications where you have provided explicit consent, or you are an existing customer and communications relate to similar services.

You may withdraw consent at any time.

If you opt into marketing via email or SMS your data may be processed by communication partners such as:

• SendInBlue (email)
• Vonage (SMS)

Your personal data rights

Under UK GDPR you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent
• Not be subject to automated decision-making without safeguards

Requests are normally responded to within one month.

Complaints

If you are dissatisfied with how we handle your data please contact us first.

You also have the right to lodge a complaint with:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

www.ico.org.uk

Contact Us

If you have any questions about this Privacy Policy or your personal data please contact: hello@lendle.co.uk