Lending Done Differently

Start Your Journey
Customer
Partner
Register
Login
Apply for a Loan

Privacy Notice for Lendology CIC

This information has been produced to help you understand everything you need to know about the way Lendology collects, uses, and shares personal data, what your legal rights are and how to exercise them.

We hope you’ll take some time to read this document; we’ve tried to keep it all as simple as possible and to avoid jargon, and we’ll make our best efforts to keep you informed if there are any changes to the way we process your personal data in the future.

Lendology takes its responsibility for protecting your data very seriously. If there’s anything here you don’t understand, or if you want to ask any questions, please feel free to contact us.

Privacy at a glance 

  • We collect information to assess applications and manage loans. 
  • We only use information where we have a lawful reason. 
  • We may share relevant information with councils, public sector partners and other organisations where necessary. 
  • We take steps to keep your information secure. 
  • You have rights over your personal information. 

We are a community interest company limited by guarantee, registered in England under company number 04512225.

Registered address: Heatherton Park Studios, Heatherton Park, Bradford-on-Tone, Somerset, TA4 1EU. ICO registration: Z8200608.

Lendology CIC is authorised and regulated by the Financial Conduct Authority under firm reference number 675263 for UK credit regulated activities.

We are the ‘data controller’ for the purposes of our relationship with you.

We use health, disability, accessibility and vulnerability information to adapt our service and support fair customer outcomes. Providing this type of data is normally voluntary. We restrict access and use it only where an Article 6 lawful basis and Article 9 condition apply. You may ask us to correct or remove information, although law or regulation may require us to retain some data; we will make this clear to you, if the circumstances arises.

Decision-support systems may assist administration and assessment. We do not currently make decisions producing legal or similarly significant effects solely by automated means. If this changes, we will explain the logic, significance, likely consequences and human review before processing begins.

We use proportionate technical and organisational measures, including:

  • role-based access and least-privilege controls;
  • multi-factor authentication where technically possible;
  • encryption and secure document storage;
  • security monitoring and audit logs;
  • team member and Board member training;
  • information security, records management and data protection policies;
  • supplier checks and contractual controls; and
  • personal data breach identification, reporting and response procedures.

Some service providers may process information outside the United Kingdom. Before transferring information internationally, Lendology will identify a lawful transfer route and put appropriate safeguards in place. These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, and a transfer risk assessment where required.

You can ask us for more information about the safeguard that applies to a particular transfer.

Depending on the circumstances and lawful basis, you may have the right to:

  • be informed about how we use your information;
  • ask for access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase information where the law applies;
  • ask us to restrict how we use information;
  • receive information you provided in a structured, commonly used and machine-readable format, where data portability applies;
  • object to processing based on legitimate interests and to direct marketing;
  • withdraw consent at any time where we rely on consent, without affecting earlier lawful processing; and
  • ask for applicable safeguards where a significant decision is made solely by automated means.

These rights are qualified and do not apply in every situation. To exercise a right, contact [email protected]. We may need information to confirm your identity and understand your request. We will respond within the period required by data protection law.

We take protecting your personal information seriously. If you are unhappy with how we have handled your information, please let us know so we can look into it.

How to make a complaint You can make a data protection complaint by emailing [email protected] or calling 01823 461099 and asking to make a GDPR complaint.

If you email us, please include:

  • a brief description of your complaint
  • your preferred contact method
  • your case reference number, if you are an active customer.

For other types of complaints, please see our Complaints Policy. We can provide a provide a paper copy upon request.

What happens next?

We will acknowledge your complaint in writing within 30 days of receiving it, although we aim to respond sooner. The period starts the day after you make the complaint and includes weekends and bank holidays.

We may ask you to confirm your identity or provide evidence that you are authorised to act for someone else. If we need this, we will let you know when we acknowledge your complaint.

We will take appropriate steps to respond without undue delay, keep you informed and confirm the outcome as soon as practicable after any investigation.

If your complaint involves another organisation, such as a joint controller or third party, we may pass it to them to deal with under their own complaints process.

Where appropriate, we may also involve a partner organisation, council or joint controller in investigating your complaint.

If you remain unhappy

You have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: Information Commissioner’s Office (gov.uk)

The specifics

At a glance

  • We use information to assess enquiries and applications, administer loans, provide support, prevent fraud, meet legal and regulatory duties and improve services.
  • We work with councils and public sector partners that fund or support loan schemes.
  • We may use health or vulnerability information to understand and meet your support needs.

We collect information regarding identity, appropriate contact details, financial, property, household, communications preferences, special category and vulnerability, and fraud, legal and regulatory information.

Find out more in our Privacy Policy

At a glance

  • We use personal information to manage working relationships, Board appointments, pay and benefits, governance, regulatory duties, security and organisational improvement.
  • We collect only the information we need and restrict access to people with a legitimate business need.
  • We use different lawful bases for different purposes. We do not rely on consent where you have no genuine choice.
  • We do not use solely automated decision-making to make decisions about team members or Board members.

We collect information regarding identity, appropriate contact details, financial, performance and conduct, health and safety, wellbeing, regulatory, communications, special category, and criminal offences information.

Find out more in our Privacy Policy

At a glance

  • We use candidate information to manage applications, assess suitability, arrange interviews and complete appropriate pre-employment or regulatory checks.
  • We do not make recruitment decisions solely by automated means.

We collect information regarding identity, appropriate contact details, your application, eligibility and verification, special category information, communications and criminal offences information. 

Find out more in our Privacy Policy
Read our full Privacy Policy
Customer
Partner
Apply for a Loan