Privacy Notice

CredX Ltd is committed to protecting personal data and privacy. This notice explains how we collect, use, store and share personal information when you interact with our services.

CredX Ltd provides unregulated, business-purpose property finance exclusively to corporate borrowers. We do not provide regulated residential mortgages or consumer credit. The personal data we handle therefore relates mainly to directors, shareholders, guarantors, beneficial owners and professional advisers connected with a borrowing company, rather than to individual consumers.

1. Who we are

We are CredX Ltd, a UK-based unregulated lender. We provide:

• Bridging finance
• Auction finance
• Property investment and development finance
• Commercial property finance

We can be contacted using the following details:

Telephone: 0204 628 0990

Address: Suite 13, Regus, Admirals Park, Victory Way, Dartford, DA2 6QD

Email: info@credx.co.uk

Data protection contact: Narinder Khattoare

ICO registration number: ZB991146

CredX Ltd is registered in England & Wales, company number 16640225. Registered office: Suite F16, St George’s Business Park, Castle Road, Sittingbourne, Kent ME10 3TB.

We are a lender, not a broker. Our lending is not regulated by the Financial Conduct Authority and is provided to companies for business and investment purposes only.

2. Our legal grounds for holding your data

UK data protection law allows us to use personal data provided we have a lawful basis to do so. This includes sharing it in certain circumstances, as described below. We rely on the following lawful bases:

• Performance of a contract: we need to use personal data in order to enter into and administer a facility with a borrowing company, and to administer any guarantee or security given in connection with it.
• Compliance with our legal obligations: we need to use personal data to comply with legislation including anti-money-laundering and financial crime legislation, and company, tax and record-keeping requirements.
• Legitimate interests: these are our business and commercial reasons for using data, which we have balanced against your interests. Our legitimate interests are to help prevent and detect financial crime, fraud and money laundering, to make sound lending decisions, to support our tracing, collection and litigation procedures, and to meet the legal requirements placed upon us.
• Consent: where we rely on consent you can withdraw it at any time, in which case we will stop using the data unless we have a right and a need to continue processing it for one of the other reasons set out above.

More information on how we use personal data and for what purposes is set out below.

3. Data provided to us

Company and transaction information, for example: the borrowing company’s name, Companies House number and registered office; financial statements and management accounts; details of the security property; the purpose of the facility; the amount requested; and the proposed exit strategy.

Information about individuals connected with the borrowing company, for example: the name, date of birth, home address, contact details, nationality and identification and proof of address documents of directors, shareholders, beneficial owners and guarantors. We collect this to meet our obligations under anti-money-laundering and financial crime legislation and to verify identity.

Where an individual offers a personal guarantee, we may also collect information about their assets, liabilities, other business interests and available security, so that we can assess the guarantee.

We may also collect personal data:

• When you talk to us, for example on the phone or in person, including call recordings and voice messages. We may monitor or record calls to check we have carried out instructions correctly, to resolve queries or disputes, to improve the quality of our service, or for fraud prevention purposes.
• In writing, for example letters, emails, texts and other electronic communications.
• Online, for example when you use our website.
• In facility reviews, on renewal, and in any surveys or feedback you provide.

4. Data we collect when you use our services

• Transaction data: for example the type of facility, the term, the security property, and the borrowing company’s sector and location.
• Payment data: for example the amount, origin, frequency, history and method of payments.
• Usage data: for example how you use our website. We gather this from the devices you use, using cookies and similar technology.

5. Data provided to and by third parties

• Data from people who introduce you to us, for example brokers, professional advisers, agents and finance providers.
• Data from credit reference agencies, most likely Experian, Creditsafe or Equifax, in relation to the borrowing company and, where a personal guarantee is offered, the guarantor.
• Data from fraud prevention agencies.
• Publicly available information, for example from Companies House, the Land Registry, the electoral register (for identity verification), and other information available online or in the media.
• Data from your representatives, for example solicitors, accountants and valuers.

We may require a statement signed by an independent qualified accountant confirming the financial standing of a guarantor, which may include information about their assets, liabilities and available security. You will be asked to consent to the provision of this information.

6. Special category data

We do not routinely collect special category data — for example data about health, race, ethnic origin, religion, political opinions, trade union membership, genetics, biometrics, sex life or sexual orientation — and it is not required in order to apply for a facility.

Where an individual chooses to share information of this kind with us, we will only store and process it with that individual’s explicit consent, and only where there is a clear reason to do so.

7. Why personal data is collected

We collect personal data in order to assess, provide and administer business-purpose property finance, to verify the identity of the people behind a borrowing company, and to meet the legal obligations that apply to us.

When we and fraud prevention agencies process personal data, we do so on the basis that we have a legitimate interest in preventing fraud and money laundering and in verifying identity, in order to protect our business and to comply with the laws that apply to us. Such processing is also a requirement of the finance that has been requested. We, and fraud prevention agencies, may also enable law enforcement agencies to access and use personal data to detect, investigate and prevent crime. Fraud prevention agencies can hold personal data for different periods of time, and where an individual is considered to pose a fraud or money laundering risk, data can be held for up to six years.

In order to assess an application we may carry out searches with credit reference agencies in relation to the borrowing company and its directors, and, where a personal guarantee is offered, in relation to the guarantor. We do this to assess creditworthiness, verify identity, administer the facility, trace and recover debts and prevent criminal activity. Credit reference agencies may record that a search has taken place and may share information with other organisations. We can provide the identities of the credit reference agencies we use, and details of how they use and share information, on request.

From time to time we may provide information to our partners and to third parties for research and analysis, so that we can monitor and improve our services. We may contact you by post, email or telephone to ask for feedback on our service.

8. How we use your data

We use personal data so that we can:

• Assess and process a finance application from a borrowing company.
• Carry out identity, anti-money-laundering, credit and fraud checks.
• Prepare, issue and administer a facility, including any security or guarantee.
• Communicate with you and your professional advisers about a transaction.
• Meet our legal, tax and record-keeping obligations.
• Monitor and improve the performance of our services.
• Send you information about our products and services where you have agreed to receive it.

9. Lawful basis for processing data

Our lawful bases for processing are set out in section 2 above. In most cases we rely on the performance of a contract, on compliance with our legal obligations, or on our legitimate interests as a lender. Where none of these applies, we will ask for your consent, and you may withdraw that consent at any time.

10. When personal data is shared

Personal data may be used by our funding partners, agents, sub-contractors, solicitors, valuers and by any of our or their subsidiary or associated companies before, during and after a facility. We may also use organisations to perform tasks on our behalf, including information technology service providers and banks, who may process and retain data before, during and after a facility. Any of these third parties may contact you by post, email or telephone where required.

We may also share personal data with credit reference agencies, fraud prevention agencies, law enforcement agencies, regulators and other authorities, any agent you have given us authority to communicate with, people you ask us to share data with, tracing and debt recovery agencies, and customer service agencies, for the purposes set out above. These agencies and firms may also share personal data with others.

If in the future we sell, transfer or merge all or part of our business or assets, including through the acquisition of other businesses, we may share data with other parties. We will only do this if they agree to keep it safe and private and to use it only in the ways set out in this notice.

11. What are your data protection rights and choices?

Personal data is protected by legal rights, which include:

• The right to be informed — individuals have the right to be informed about the collection and use of their personal data.
• The right of access — individuals have the right to access and receive a copy of their personal data and other supplementary information.
• The right to rectification — individuals have the right to have inaccurate personal data rectified, or completed if it is incomplete.
• The right to erasure — individuals have the right to have their personal data erased.
• The right to restrict processing — individuals have the right to request the restriction or suppression of their personal data.
• The right to portability — individuals have the right to obtain and reuse their personal data for their own purposes across different services.
• The right to object — individuals have the right to object to the processing of their personal data in certain circumstances, and an absolute right to stop their data being used for direct marketing.
• Rights in relation to automated decision making and profiling — individuals have the right to object to their data being used in an automated decision-making process, and to profiling.

There may be reasons why we need to keep or use data, but please tell us if you think we should not be processing it.

If you make a request, we have one month to respond. If you would like to exercise any of these rights, please email us at info@credx.co.uk.

For further information on how information is used, how we maintain its security, and your rights in relation to it, please email info@credx.co.uk or call 0204 628 0990.

12. How long is your data kept

We retain personal data for the duration of the facility and for at least six years after it is repaid or the relationship ends, in order to meet our legal, tax, anti-money-laundering and record-keeping obligations. We may retain data beyond that period to deal with any dispute, to maintain records, and to show that we have dealt with you fairly.

We may also retain data for research and statistical purposes, in which case we will ensure it is kept private and used only for those purposes.

Where a search has been carried out with a credit reference agency, that agency will keep its own record in accordance with its retention policy, which is independent of ours.

13. Marketing

We may send information about our products and services to people who have agreed to receive it, or where we have a legitimate interest in doing so in a business context.

If you have agreed to receive marketing, you may opt out at any time.

You have the right at any time to ask CredX Ltd to stop contacting you for marketing purposes. Email info@credx.co.uk and we will remove you from our marketing lists.

14. Cookies

We use cookies to understand how visitors engage with our website. Under the Privacy and Electronic Communications Regulations (PECR), opt-in consent is required for certain types of cookie.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology.

For further information, visit www.allaboutcookies.org.

How do we use cookies?

We use cookies to improve your experience on our website, including understanding how the website is used.

What types of cookies do we use?

Strictly necessary cookies — these are essential to enable you to move around the website and use its features. Without them, some parts of the site cannot be provided.

Performance cookies — these collect information about how visitors use the website, for example which pages are visited most often and whether error messages are returned. They do not collect information that identifies a visitor; the information is aggregated and anonymous, and is used only to improve how the website works.

Functionality cookies — these recognise you when you return to the website, so we can remember your preferences.

Targeting or advertising cookies — these are used to deliver advertising more relevant to you, to limit the number of times you see an advertisement, and to measure the effectiveness of a campaign. They are usually placed by advertising networks with our permission, and the information may be shared with other organisations.

How to manage cookies

You can set your browser not to accept cookies, and the website above explains how to remove cookies from your browser. In a few cases, some website features may not function as a result.

15. Privacy policies of other websites

Our website contains links to other websites. If you click a link to another website, this privacy notice no longer applies, and we recommend you review that site’s privacy policy to establish how it will process your data.

16. Changes to this privacy notice

We keep this privacy notice under regular review and place any updates on this page. This privacy notice was last updated on 27 August 2026.

17. How to contact us

If you have any questions about this privacy notice, the data we hold, or you would like to exercise one of your data protection rights, please contact us.

Email: info@credx.co.uk

Telephone: 0204 628 0990

Post: Suite 13, Regus, Admirals Park, Victory Way, Dartford, DA2 6QD

18. How to make a complaint and contact the appropriate authority

If you are unhappy about how your personal data has been used by us, please contact us and we will register a complaint. Our complaints procedure is set out in our Complaints Policy.

You also have the right to complain to the Information Commissioner’s Office, which regulates the processing of personal data. You can contact them at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, on 0303 123 1113, or by email to casework@ico.org.uk. See also ico.org.uk/global/contact-us.

Because CredX Ltd is not regulated by the Financial Conduct Authority, complaints about our lending cannot be referred to the Financial Ombudsman Service. This does not affect your right to complain to the Information Commissioner’s Office about the handling of personal data.