Last updated: 17 September 2026

1. Who we are

FinQuick is a trading brand of a company currently being incorporated in England and Wales. The legal company name, company number, registered office and data protection contact details will be added to this policy as soon as incorporation is complete.

For the purposes of UK data protection law, the FinQuick operating company will generally act as the controller of personal information collected through this website and in connection with applications and funding relationships.

2. Information we may collect

Depending on how you interact with us, we may collect personal and business information including names, dates of birth, contact details, addresses, job titles, business details, Companies House information, ownership and beneficial ownership information, identification documents, bank and transaction information, financial information, credit information, details of existing commitments, application information, correspondence and records of our dealings with you.

We may also collect technical information when you use our website, including IP address, browser and device information, pages visited, referring pages and cookie or similar technology data.

3. Where information comes from

We may obtain information directly from applicants, directors, shareholders, beneficial owners, guarantors, brokers or other representatives. We may also obtain information from public registers and third parties such as Companies House, credit reference agencies, fraud prevention agencies, identity verification providers, Open Banking or bank-data providers where access has been authorised, professional advisers and other service providers involved in an application or funding relationship.

4. How we use personal information

We may use personal information to receive and assess enquiries and applications; verify identity and business information; assess creditworthiness and affordability from a commercial lending perspective; make lending decisions; prevent and detect fraud and financial crime; administer funding agreements and repayments; manage guarantees or security; communicate with applicants and customers; handle complaints; maintain records; improve our services and website; protect our legal rights; and comply with legal, regulatory, tax, accounting and other obligations that apply to us.

5. Our lawful bases

We process personal information only where we have a lawful basis under UK data protection law. Depending on the circumstances, this may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, pursuing our legitimate interests or those of a third party, and consent where consent is the appropriate lawful basis.

Our legitimate interests may include assessing and operating commercial lending, protecting our business against fraud and misuse, managing risk, recovering sums due, maintaining security, improving our services and communicating with business contacts. Where we rely on legitimate interests, we consider the impact on the individuals concerned.

6. Credit reference and fraud prevention checks

Where appropriate to an application, we may use credit reference agencies, fraud prevention agencies and identity verification providers to help verify identity, assess an application, prevent fraud and manage risk. These organisations may process information under their own privacy notices as independent controllers.

Before we begin using a particular credit reference or fraud prevention provider, we will identify the provider and make any provider-specific privacy information or required notices available through the application journey or this policy. We will not name a provider here until the relevant supplier arrangements are in place.

7. Automated assessment

We may use technology to help assess applications and identify risk indicators. We will update this policy and the application disclosures before using solely automated decision-making that produces legal or similarly significant effects where UK data protection law requires additional information or safeguards.

8. Who we may share information with

Where necessary and lawful, we may share information with companies that provide technology, hosting, communications, identity verification, credit information, fraud prevention, banking data, payment processing, document signing, professional advice, debt administration or recovery and other services to us. We may also share information with our banks, insurers, auditors, legal and professional advisers, prospective purchasers or investors in our business or loan assets, and public authorities where disclosure is required or permitted by law.

If a broker or introducer submits an application on behalf of a business, we may communicate with that broker or introducer about the progress and outcome of the application where appropriate.

9. International transfers

Some suppliers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we will use an appropriate safeguard or other lawful transfer mechanism where required by UK data protection law.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, fraud prevention, dispute and record-keeping requirements. Retention periods will depend on the type of information and whether an application proceeds to funding. We will document and apply appropriate retention periods as our operational systems and supplier arrangements are finalised.

11. Security

We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse. No internet or electronic storage system can be guaranteed to be completely secure.

12. Your data protection rights

Depending on the circumstances, you may have rights to request access to personal information, correction of inaccurate information, erasure, restriction of processing, data portability and to object to certain processing. Where processing is based on consent, you may withdraw that consent without affecting processing that took place before withdrawal.

These rights are not absolute and exemptions may apply. We may need to verify your identity before dealing with a rights request.

13. Marketing

Where we send direct marketing, we will do so in accordance with applicable privacy and electronic communications rules. You can ask us to stop marketing communications at any time. Service and transactional communications relating to an application or funding relationship are not marketing.

14. Cookies

Our website may use cookies and similar technologies. Further information about the types of cookies used, their purpose and available controls is provided in our Cookie Policy and cookie consent controls.

15. Complaints about use of personal information

Please contact us first if you have a concern about how we use personal information so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. Further information is available from the ICO at ico.org.uk.

16. Changes to this policy

We may update this Privacy Policy as our business, suppliers, technology or legal obligations change. The latest version will be published on this page and the date above will be updated.

17. Contact us

Our legal company details, correspondence address and dedicated privacy contact details will be inserted here when the FinQuick operating company has completed incorporation.