CredX Ltd is committed to protecting your personal data and
privacy. This notice explains how we collect, use, store, and share your personal information
when you interact with our services.

1. Who We Are

We are CredX Ltd. We are a UK based unregulated lender:

• –  Bridging finance
• –  Auction finance

We can be contacted using the following details:

Telephone Number: 0204 628 0990

Address: The Old Rectory Business Centre, Gravesend, Kent DA11 8HN

Email address: info@credx.co.uk

Data Protection Officer/ contact: Narinder Khattoare

ICO Registration Number: ZB991146

We are an unregulated brokerage operating under applicable UK data protection laws.

2. Our Legal grounds for holding your data

The UK’s data protection laws allow us to use your personal data provided we have a lawful basis
to do so. This includes sharing it in certain circumstances, as described below.

We consider we have the following reasons (legal bases) to use your personal data:

• Performance of contract with you: we need to use your personal data to be able to
  successfully legally contract with you.
• Compliance with our legal obligations: we need to use your personal data so as to comply
  with certain legislation such as financial crime legislation.
• Legitimate interests: these are our business and commercial reasons for using your data,
  which we have balanced against your interests. We have certain legitimate interests in using
  your data which are not outweighed by your interests, fundamental rights or freedoms. These
  legitimate interests are to help prevent and detect financial crime, fraud and money
  laundering, to promote responsible lending, to support our tracing, collection and
  litigation procedures and to assist our compliance with the legal and regulatory
  requirements placed upon us.
• Your consent: You can withdraw this consent at any time, in which case we will cease to use
  it, unless we have a right and a need to continue processing it for one of the other reasons
  set out above.

More information on how we use your personal data and for what purposes is set out below.

3. Data provided by you:

• Funder application details: for example but not limited to, your name, national insurance
  number, postal address, your email address, your IP address, telephone numbers, date of
  birth, bank account details, equipment requirement details, home ownership details, reason
  for borrowing, your assets and liabilities, details of your proof of identity documentation,
  proof of address documentation, evidence of additional equity available and evidence of any
  other business interests
• When you talk to us: for example on the phone, or in person including call recordings and
  voice messages. We may monitor or record calls with you to check we have carried out your
  instructions, to resolve queries or disputes, to improve the quality of our service or for
  regulatory or fraud prevention purposes
• In writing: for example letters, emails, texts and other electronic communications
• Online: for example when you use our website
• In financial reviews, for renewals and in any surveys etc

4. Data we collect when you use our services?

• Transaction data: for example what sort of products you are selecting, the length of term,
  the types of asset you are looking at financing, business type and geographical location
• Payment data: for example, the amount, origin, frequency, history and method of your
  payments
• Usage and profile data: for example, the profile you create to use our website and how you
  use it. We gather this data from the devices you use, using cookies and other software.
• Register online or other communication methods for our services.
• Voluntarily complete a customer survey or provide feedback on any of our message boards or
  via email.
• Use or view our website via your browser’s cookies.

5. Data provided to and by third parties

• Data from persons that introduce you to us: for example brokers, product suppliers,
  financial advisers, agents, finance providers or other third parties
• Data from credit reference agencies, most likely to be either Experian, Creditsafe, Equifax
  or CallCredit
• Data from fraud prevention agencies
• Publicly available information: for example, from the land registry, companies house, the
  electoral register, other information available online or in the media, including social
  media
• Data from your representatives where relevant: for example your legal and financial advisers
  such as lawyers and accountants

In certain circumstances we may ask you to provide us with medical information if we determine
that this is a requirement for us to either proceed to enter into the agreement with you or once
we have entered into the agreement with you determine that the same is necessary for whatever
reason. Full details as to the reason for our request and how we will use this information will
be given to you at the time should we request such information from you. You will be asked to
consent to the provision of this information.

We may also require a statement signed by an independent qualified accountant as to your
financial worth which may include information such as your gross and net worth, your assets and
liabilities and information as to your available collateral or security. You will be asked to
consent to the provision of this information.

6. Special Category Data

In the course of your interactions with Credx.co.uk you may share information that is classified
as ‘Special Category Data’. This could include data about:

• Race
• Ethnic origin
• Politics
• Religion
• Trade union membership
• Genetics
• Biometrics
• Health
• Sex life
• Sexual orientation

Where you do share information relating to any of these categories e.g., when you may share
information about your health or a characteristic of vulnerability Credx.co.uk will always seek
explicit consent from you to store and process such information.

7. Why is personal data collected by us

Credx.co.uk collect personal data for a number of reasons

From time to time, we may contact you to ask for your consent to use your personal data for other
purposes. Your personal data may also be used for other purposes where required or permitted by
law.

When we and fraud prevention agencies process your personal data, we do so on the basis that we
have a legitimate interest in preventing fraud and money laundering, and to verify identity, in
order to protect our business and to comply with laws that apply to us. Such processing is also
a contractual requirement of the services or financing you have requested. We, and fraud
prevention agencies, may also enable law enforcement agencies to access and use your personal
data to detect, investigate and prevent crime. Fraud prevention agencies can hold your personal
data for different periods of time, and if you are considered to pose a fraud or money
laundering risk, your data can be held for up to six years.

In order to process your application, we may supply your personal information to credit reference
agencies (CRAs) in which case they will give us information about you, such as about your
financial history. We do this to assess your creditworthiness and product suitability, check
your identity, manage your account, trace and recover debts and prevent criminal activity. When
CRAs receive a search from us they may place a search footprint on your credit file that may be
seen by other lenders and used to assess applications for finance from you and members of your
household. The CRA may also share your personal information with other organisations. We may
also continue to exchange information about you with CRAs on an ongoing basis, including about
your settled accounts and any debts not fully repaid on time. CRAs will share your information
with other organisations. Your data will also be linked to the data of your spouse, any joint
applicants or other financial associates. We can provide you with the identities of the CRAs and
the ways in which they use and share personal information upon your request.

From time to time, we may provide your information to our partners, third parties and customer
service agencies for research and analysis purposes so that we can monitor and improve the
services (or as the case may be) we provide. We may contact you by post, e-mail or telephone (or
as required) to ask you for your feedback and comments on our services (or as the case may be).

We may also contact you about our other goods or services that may be of interest to you.

8. How will we use your data?

Our Company collects your data so that we can:

• Process your application and manage your request.
• Email you with special offers on other products and services we think you might like.

To monitor the performance of our products and services to ensure consumer outcomes are being
achieved

9. Lawful Basis for Processing Data

10. When Personal Data is shared

Your personal data may be used by our partners, lenders, brokers, agents, sub-contractors,
lawyers and by any of our or their subsidiary or associated companies before, during and after
your agreement facilitated by us. We may also use organisations to perform tasks on our behalf
including information technology service providers, repossession agents, banks and
transportation companies who we will then be sharing your personal data with and who may also
process and retain your data both before, during and after your agreement facilitated by us. Any
of these third parties may contact you by post, e-mail or telephone (or as required).

We may also share your personal data with CRAs, fraud prevention agencies, law enforcement
agencies, regulators and other authorities, the UK Financial Services Compensation Scheme any
agent that you have given us authority to communicate with and persons you ask us to share your
data with, companies that we introduce you to, market researchers tracing and debt recovery
agencies and customer service agencies for the purposes set out above. These agencies and firms
may also share your personal data with others.

If, in the future, we sell, transfer or merge all or part of our business or assets, including
the acquisition of other businesses, we may share your data with other parties. We will only do
this if they agree to keep it safe and private and to only use it in the same ways as set out in
this notice.

11. What are your data protection rights and choices?

Your personal data is protected by legal rights, which include:

• Right to be informed – Individuals have the right to be informed about the collection and
  use of their personal data
• The right of access to your personal data – Individuals have the right to access and receive
  a copy of their personal data and other supplementary information.
• The right to rectification- Individuals have the right to have inaccurate personal data
  rectified or completed if incomplete.
• The right to erasure – Individuals have the right to have their personal data erased.
• The right to restrict processing – Individuals have the right to request the restriction or
  suppression of their personal data.
• The right to portability – This allows individuals to obtain and reuse their personal data
  for their own purposes across different services.
• The right to object – this gives individuals the right to object to the processing of their
  personal data in certain circumstances, it also gives individuals the absolute right to stop
  their data being used for direct marketing
• The right in relation to automated decision making and profiling – this allows individuals
  to object to their data being used in an automated individual decision-making process
  (making a decision solely by automated means without any human involvement) and profiling
  (automated processing of personal data to evaluate certain things about an individual).
  Profiling can be part of an automated decision-making process.

There may be reasons why we need to keep or use your data, but please tell us if you think we
should not be processing your data.

If you make a request, we have one month to respond to you. If you would like to exercise any of
these rights, please contact us at our email, info@credx.co.uk

For further information on how your information is used, how we maintain the security of your
information and your rights in relation to it, please contact us via email info@credx.co.uk or call us on 020 4628 0990.

12. How long is your data kept

We will retain your personal data as long as you are a customer with us. We may retain your
personal data beyond this date for the purposes mentioned above and will in any case at all
times retain your personal data for the minimum period required by law. We may also retain your
data to deal with any disputes, to maintain records and to show we have dealt with you fairly.

We may also retain your data for research and statistical purposes in which case we will ensure
it is kept private and used only for these purposes.

Data about live and settled accounts is kept on credit files for six years from the date they’re
settled or closed. If the account is recorded as defaulted, the data is kept for six years from
the date of the default.

13. Marketing

Credx.co.uk understands that with the introduction of the Consumer Duty, it is likely the level
of communications issued by our business will increase. This will be necessary to support
customers to understand the products and services offered and to provide support to customer
throughout the lifecycle of the relationship.

Our Company would like to send you information about products and services of ours that we think
you might like.

If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop Credx.co.uk from contacting you for marketing purposes.

14. Cookies

Credx.co.uk does use cookies to track and test customer engagement and actions throughout the
customer journey or customer communications. Credx.co.uk understand that under the Privacy and
Electronic Communications Regulation (PECR) opt-in consent is required when these types of
cookies are used.

Cookies are text files placed on your computer to collect standard Internet log information and
visitor behaviour information. When you visit our websites, we may collect information from you
automatically through cookies or similar technology.

For further information, visit www.allaboutcookies.org.

How do we use cookies?

Our Company uses cookies in a range of ways to improve your experience on our website, including:

Understanding how you use our website

What types of cookies do we use?

There are a number of different types of cookies, however, our website uses:

Strictly necessary cookies – These cookies are essential in order to enable you to move
around the website and use its features, such as accessing secure areas of the website.

Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be
provided.

Performance Cookies – These cookies collect information about how visitors use a website,
for instance which pages visitors go to most often, and if they get error messages from web
pages. These cookies don’t collect information that identifies a visitor. All information these
cookies collect is aggregated and therefore anonymous. It is only used to improve how a website
works.

Functionality Cookies – These cookies are used to recognise you when you return to our
website. This enables us to personalise our content for you, greet you by name and remember your
preferences (for example, your choice of language or region).

Targeting or Advertising Cookies – These cookies are used to deliver adverts more relevant
to you and your interests. They are also used to limit the number of times you see an
advertisement as well as help measure the effectiveness of the advertising campaign. They are
usually placed by advertising networks with our permission. They remember that you have visited
a website and this information is shared with other organisations such as advertisers. Quite
often targeting or advertising cookies will be linked to site functionality provided by the
other organisation. By using our website, you agree that we can place these types of cookies on
your device.

How to manage cookies

You can set your browser not to accept cookies, and the above website tells you how to remove
cookies from your browser. However, in a few cases, some of our website features may not
function as a result.

15. Privacy policies of other websites

Credx.co.uk website contains links to other websites.]If you click on a link to another website,
our privacy policy no longer applies, and we recommend you review that sites privacy policy to
establish how they will process your data.

16. Changes to our privacy policy

Our Company keeps its privacy policy under regular review and places any updates on this web
page. This privacy policy was last updated on 28/05/2025.

17. How to contact us

If you have any questions about Our Company’s Privacy Policy, the data we hold on you, or you
would like to exercise one of your data protections rights, please do not hesitate to contact
us.

Email us at: info@credx.co.uk

Call us: 020 4628 0990

Or write to us at: The Old Rectory Business Centre, Springhead Road, Gravesend DA11 8HN

18. How to make a complaint and contact the appropriate authority

If you are unhappy about how your personal data has been used by us, please contact us and we
will be happy to register a complaint.

You also have a right to complain to the Information Commissioner’s Office which regulates the
processing of personal data. You can contact them at Information Commissioner’s Office, Wycliffe
House, Water Lane, Wilmslow, Cheshire, SK9 5AF, on 0303 123 1113 or by email to casework@ico.org.uk. See also ico.org.uk/global/contact-us/.