Privacy Notice

1. Introduction

This Privacy Notice explains how Propensio Finance Limited (“we”, “our”, “us”) collects, uses, and protects your personal information when you use our website, apply for a loan, and throughout the term of your agreement with us.

Our registered office is:
Building 3, Callflex Business Park, Golden Smithies Lane, Wath-Upon-Dearne, Rotherham, S63 7ER.

For the purposes of UK data protection law (including the Data Protection Act 2018 and UK GDPR), we act as the data controller. You can contact us at:

Email: DPO@propensio.co.uk
Telephone: +44 (0)1709 808 990
Data Protection Officer: Jill Burton

We are committed to protecting your privacy and complying with applicable data protection legislation. This Notice explains what information we collect, why we collect it, and your rights.

2. What information do we process?

We process information about you including:

• Name
• Address
• Date of birth
• Contact details
• Marital status
• Employment information (e.g., job title, income)
• Credit record and records of your account

We collect this information from you as part of your loan application and during the term of any agreement.

We will also collect this information from:

• Searches of Credit Reference Agencies (CRAs) and Fraud Prevention Agencies (FPAs) records relating to you and other people with whom you are linked financially
• Public records (e.g., the electoral roll)
• Third parties (e.g., credit brokers where you have provided information and consented for it to be passed to us)

Provision of this information is a contractual requirement. If you do not provide us with your information, we will not be able to lend to you.

We do not routinely process special category data (such as health information, ethnicity, or biometric data). If we ever need to process such data (for example to assess affordability in exceptional circumstances) we will only do so where permitted by law and with your explicit consent, or where another lawful basis applies under UK GDPR.

3. Why we process this information

We collect information for the following purposes:

• To make credit decisions
• To process your loan application
• To communicate with you by telephone, email, SMS, or post
• To manage your account, make collections, and undertake debt tracing
• To prevent fraud and money laundering
• To report to CRAs and FPAs
• To report to our regulator, the Financial Conduct Authority, where required

Lawful bases for processing:

• Performance of a loan agreement or steps prior to entering into one
• Compliance with legal obligations
• Legitimate interests, such as managing operations, preventing fraud, and promoting responsible lending

4. Who we disclose information to

Information may be shared with:

• The holding companies, subsidiaries, or subsidiary undertakings of Propensio Finance Limited
• Third parties to which we transfer, charge, or assign your agreement, or which manage your loan or provide services for us
• In the event that we sell or buy any business or assets
• Law enforcement agencies or regulatory bodies where required by law
• Credit Reference Agencies (CRAs) and Fraud Prevention Agencies (FPAs) to which we may report positive, delinquent, and default data about your account(s) on a regular basis

When CRAs receive a search from us, they place a search “footprint” on your credit file whether or not the application proceeds. Records remain on file for six years after closure, whether settled or defaulted.

We share information with the following CRAs:

• Equifax
• Experian
• CreditSafe

The Credit Reference Agencies (CRAs) we work with have produced a joint notice called the Credit Reference Agency Information Notice (CRAIN). This explains how CRAs use and share personal data, including the purposes for credit checking, fraud prevention, and account management.

You can view the latest CRAIN here:

https://www.experian.co.uk/legal/crain

This notice applies to all UK CRAs, including Equifax, Experian, and TransUnion (and is relevant for CreditSafe where applicable).

You can also view individual CRA privacy policies:

• https://www.equifax.co.uk/privacy-hub
• https://www.experian.co.uk/privacy/privacy-policies
• https://www.creditsafe.com/gb/en/legal/privacy-policy.html

Electronic Income Verification

As part of our credit assessment process, we may use trusted third-party providers to verify your income electronically. These include Experian, Equifax, Oohmoohlah (Open Banking services), and Konfir (UK) Ltd. All providers act on our behalf and comply with strict data protection obligations.

For more information on how these providers handle your data, please refer to their privacy notices:

• https://www.experian.co.uk/privacy/privacy-policies
• https://www.equifax.co.uk/privacy-hub
• https://oohmoolah.com/docs/oohMoolahPP20250213.pdf
• https://www.konfir.com/legal/privacy-notice

Document Verification

As part of our affordability assessment process, we may use trusted third-party providers to verify the authenticity of documents you supply (such as payslips or bank statements). We use Fraudfinder UK for this purpose. This provider acts on our behalf and complies with strict data protection obligations.

For more information on how Fraudfinder UK handles your data, please refer to their privacy notice:

• https://www.fraudfinderai.com/privacy-policy/

We will never transfer your information to an e-marketing list and your information will not be transferred outside the United Kingdom.

5. Where we store your information

We store your information on secure servers within the United Kingdom, protected by firewalls and passwords.

We keep information for as long as needed to manage your account, and for a maximum of six years afterwards, unless a longer period is required by law.

6. Your rights

Under UK GDPR, you have the following rights:

• Right of access – to obtain a copy of the information we hold about you
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”) – in certain circumstances
• Right to restrict processing – in certain circumstances
• Right to data portability – to transfer your data to another provider
• Right to object – to processing based on legitimate interests
• Right to lodge a complaint – with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at customerservices@propensio.co.uk. You may also contact the ICO at www.ico.org.uk or by calling 0303 123 1113.

7. Cookies

Our website uses cookies to provide you with the best experience. Please see our website for further information:

Cookies

8. Questions or concerns

If you have any concerns regarding our use of your information, please notify us as soon as possible.

For further information or to make a complaint, email our Data Protection Officer at DPO@propensio.co.uk. If we cannot resolve your complaint, you can contact the ICO at:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113