- Introduction
This Privacy Notice explains how Propensio Finance Limited (“we”, “our”, “us”) collects, uses, and protects your personal information when you use our website, apply for a loan, and throughout the term of your agreement with us.
Our registered office is:
Building 3, Callflex Business Park, Golden Smithies Lane, Wath-Upon-Dearne, Rotherham, S63 7ER.
For the purposes of UK data protection law (including the Data Protection Act 2018 and UK GDPR), we act as the data controller. You can contact us at:
Email: DPO@propensio.co.uk
Telephone: +44 (0)1709 808 990
Data Protection Officer: Jill Burton
We are committed to protecting your privacy and complying with applicable data protection legislation. This Notice explains what information we collect, why we collect it, and your rights.
- What information do we process?
We process information about you including:
- Name
- Address
- Date of birth
- Contact details
- Marital status
- Employment information (e.g., job title, income)
- Credit record and records of your account
We collect this information from you as part of your loan application and during the term of any agreement.
We will also collect this information from:
- Searches of Credit Reference Agencies (CRAs) and Fraud Prevention Agencies (FPAs) records relating to you and other people with whom you are linked financially
- Public records (e.g., the electoral roll)
- Third parties (e.g., credit brokers where you have provided information and consented for it to be passed to us)
Provision of this information is a contractual requirement. If you do not provide us with your information, we will not be able to lend to you.
We do not routinely collect or process special category personal data (such as information about your health, ethnicity or biometric data).
In limited circumstances, we may process information relating to your health, vulnerability or capacity to manage financial decisions where this is necessary to support you in managing your account, or to assess whether it is appropriate for us to enter into or continue a credit agreement with you. Such information may be taken into account when assessing an application where permitted by law and necessary to ensure fair and responsible lending.
Where we process this type of information, we will only do so where permitted by law. This may include where:
- you have provided your explicit consent; or
- processing is necessary for reasons of substantial public interest, including identifying and supporting customers in vulnerable circumstances, ensuring fair treatment, and meeting our regulatory obligations.
- Why we process this information
We collect information for the following purposes:
- To make credit decisions
- To process your loan application
- To communicate with you by telephone, email, SMS, or post
- To manage your account, make collections, and undertake debt tracing
- To prevent fraud and money laundering
- To report to CRAs and FPAs
- To report to our regulator, the Financial Conduct Authority, where required
Lawful bases for processing:
- Performance of a loan agreement or steps prior to entering into one
- Compliance with legal obligations
- Legitimate interests, such as managing operations, preventing fraud, and promoting responsible lending
- Automated decision-making
We use automated decision-making systems, including profiling, as part of our credit assessment and account management processes.
This means we may automatically analyse your personal information (including credit reference data, application information, and electronic verification checks) to:
- Assess your eligibility for a loan
- Determine appropriate lending terms
- Help prevent fraud and financial crime
These processes may result in decisions that have a significant effect on you, such as whether your application is approved or declined, or the terms on which credit may be offered.
Your rights
You have the right to:
- Request human intervention in an automated decision
- Express your point of view
- Challenge and request a review of the decision
You can exercise these rights by contacting us at customerservices@propensio.co.uk.
We implement appropriate safeguards to protect your rights, freedoms and legitimate interests when using automated decision-making.
- Who we disclose information to
Information may be shared with:
- The holding companies, subsidiaries, or subsidiary undertakings of Propensio Finance Limited
- Third parties to which we transfer, charge, or assign your agreement, or which manage your loan or provide services for us
- In the event that we sell or buy any business or assets
- Law enforcement agencies or regulatory bodies where required by law
- Credit Reference Agencies (CRAs) and Fraud Prevention Agencies (FPAs) to which we may report positive, delinquent, and default data about your account(s) on a regular basis
When CRAs receive a search from us, they place a search “footprint” on your credit file whether or not the application proceeds. Records remain on file for six years after closure, whether settled or defaulted.
We share information with the following CRAs:
- Equifax
- Experian
- CreditSafe
The Credit Reference Agencies (CRAs) we work with have produced a joint notice called the Credit Reference Agency Information Notice (CRAIN). This explains how CRAs use and share personal data, including the purposes for credit checking, fraud prevention, and account management.
You can view the latest CRAIN here:
https://www.experian.co.uk/legal/crain
This notice applies to all UK CRAs, including Equifax, Experian, and TransUnion (and is relevant for CreditSafe where applicable).
You can also view individual CRA privacy policies:
- https://www.equifax.co.uk/privacy-hub
- https://www.experian.co.uk/privacy/privacy-policies
- https://www.creditsafe.com/gb/en/legal/privacy-policy.html
Electronic Income Verification
As part of our credit assessment process, we may use trusted third-party providers to verify your income electronically. These include Experian, Equifax, and Oohmoohlah (Open Banking services). All providers act on our behalf and comply with strict data protection obligations.
For more information on how these providers handle your data, please refer to their privacy notices:
- https://www.experian.co.uk/privacy/privacy-policies
- https://www.equifax.co.uk/privacy-hub
- https://oohmoolah.com/docs/oohMoolahPP20250213.pdf
- Where we store your information
We store your information on secure servers within the United Kingdom, protected by firewalls and passwords.
We keep information for as long as needed to manage your account, and for a maximum of six years afterwards, unless a longer period is required by law.
- Your rights
Under UK GDPR, you have the following rights:
- Right of access – to obtain a copy of the information we hold about you
- Right to rectification – to correct inaccurate or incomplete data
- Right not to be subject to a decision that is based solely on automated processing if the decision has legal or similarly significant effects on you
- Right to erasure (“right to be forgotten”) – in certain circumstances
- Right to withdraw consent – where processing is based on your consent
- Right to restrict processing – in certain circumstances
- Right to data portability – to transfer your data to another provider
- Right to object – to processing based on legitimate interests
- Right to lodge a complaint – with the Information Commissioner’s Office (ICO)
To exercise any of these rights, contact us at DPO@propensio.co.uk. You may also contact the ICO at www.ico.org.uk or by calling 0303 123 1113.
- Cookies
Our website uses cookies to provide you with the best experience. Please see our website for further information:
- Questions or concerns
If you have any concerns regarding our use of your information, please notify us as soon as possible.
For further information or to make a complaint, email our Data Protection Officer at DPO@propensio.co.uk. If we cannot resolve your complaint, you can contact the ICO at:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113