Your Personal Data means any information that describes or relates to your personal or financial circumstances and that identifies you directly or indirectly.

Your Personal Data may identify you directly, for example your name, address, date of birth, or contact details. It may also identify you indirectly, for example information about your employment or business activities, financial position, credit history, or property ownership.

In the context of providing assistance in relation to commercial finance, including development finance and bridging finance, Your Personal Data may include:

• Title, name, date of birth, nationality, contact details, addresses, and documents required to verify your identity

• Employment, business, and income information, including trading history

• Bank account details, tax information, loans and credit commitments, personal and business credit history, and source of funds

• Details of property ownership, development projects, or assets relevant to your finance requirements

• Information relating to companies, partnerships, trusts, or other entities connected with your finance enquiry or application

When we speak with you about your commercial finance requirements, we do so on the basis that both parties are entering into a contract for the supply of brokerage services.

In order to perform that contract, and to assist in arranging suitable finance products, we will use Your Personal Data for the purposes set out in this Privacy Policy.

We may also process Your Personal Data where it is in our legitimate business interests to do so, provided those interests are not overridden by your rights and freedoms. This may include maintaining records, responding to lender or professional adviser enquiries, preventing fraud, improving our services, or requesting feedback on our service.

In addition, we may process Your Personal Data where required to comply with legal obligations, including anti-money laundering and counter-terrorist financing legislation.

To comply with anti-money laundering and counter-terrorist financing laws, we may be required to process information relating to identity verification, source of funds, sanctions screening, or politically exposed person (PEP) status.

In limited circumstances, this may include information relating to criminal convictions or alleged offences where required by law ("Criminal Disclosures"). Such data will only be processed where legally permitted and strictly in accordance with UK data protection legislation.

We collect and record Your Personal Data primarily directly from you.

You will usually provide information during meetings, phone calls, emails, online enquiries, or other communications in order for us to assess your circumstances and progress your finance enquiry.

We may also obtain personal data from third parties, including:

• Credit reference agencies

• Commercial lenders or their agents

• Solicitors, accountants, valuers, surveyors, or other professional advisers involved in your transaction

• Publicly available sources such as Companies House

• Technology providers used for identity verification, credit checks, or compliance screening

In the course of handling Your Personal Data, we will:

• Record and store Your Personal Data in paper files, mobile devices, and electronic systems, including email, hard drives, and secure cloud-based facilities

• Restrict access to Your Personal Data to employees or consultants where necessary to provide our services or perform associated administrative tasks

• Submit Your Personal Data to commercial lenders and relevant professional advisers, electronically or in paper form, where required to progress your enquiry or application

• Use Your Personal Data to respond to queries and keep you informed of relevant developments relating to your finance enquiry

Your Personal Data may be shared with:

• Commercial lenders, including development and bridging finance providers, and their agents

• Professional advisers and third parties involved in your transaction, such as solicitors, valuers, surveyors, accountants, compliance advisers, and technology providers

Your Personal Data is shared solely for the purposes set out in this Privacy Policy and to enable us to provide our brokerage services.

Such sharing does not entitle third parties to send you marketing or promotional communications.

Calls may be monitored or recorded for training, compliance and evidential purposes.

If you give Personal Data about someone else (such as a joint applicant) then you should not do so without their permission. Where information is provided by you about someone else, or someone discloses information about you, it may be added to any personal information that is already held by us and it will be used in the ways described in this privacy notice.

Sometimes, when you make a joint application, your personal data may be shared with the other applicant. For example, details of the application will be shared with your joint applicant and vice versa.

Some of the third-party service providers we use, such as IT, cloud storage, or compliance service providers, may process personal data outside the United Kingdom.

Where Your Personal Data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection law, including UK adequacy regulations or approved contractual protections, to ensure your data remains protected.

We take appropriate technical and organisational measures to safeguard Your Personal Data against unauthorised or unlawful access, loss, misuse, alteration, or disclosure.

We also expect you to take reasonable steps to protect your own information when transferring data to us, such as avoiding unprotected communication channels and using secure methods where possible.

Your Personal Data will be retained for a minimum of six (6) years following the completion of our services. Data may be retained for longer where required to comply with legal obligations or to protect our legal interests. Once retention periods expire, data will be securely deleted or anonymised.

You have the right to:

• Request access to Your Personal Data

• Request correction of inaccurate or incomplete data

• Request deletion of Your Personal Data where applicable

• Request restriction of processing in certain circumstances

• Object to processing based on legitimate interests

• Request portability of Your Personal Data

• Withdraw consent at any time where processing is based on consent

These rights are not absolute, and there may be legal reasons why we cannot comply fully with a request.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

GDV Finance LLP
22–26 King Street
King’s Lynn
Norfolk
PE30 1HJ

Email: harry@gdvfinance.com
Telephone: 07590 665731

If we are unable to comply with a request or must handle it differently from how you have asked, we will explain this to you at the time.

If you become aware of any unauthorised disclosure of Your Personal Data, please notify us as soon as possible so that we can investigate and take appropriate action.

If you have concerns about how we handle Your Personal Data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: https://ico.org.uk/global/contact-us/