Privacy Policy

Privacy Notice

Updated and effective as of 15 October 2025

INTRODUCTION

This privacy notice explains how Lendbroke Ltd (“Lendbroke”, “we”, “us”, “our”) collects, stores, processes, transfers, shares and uses personal information (i.e., data that identifies or relates to an individual) when you use our software-as-a-service and automation services, visit our website at www.lendbroke.com (or variations thereof), access our services, or otherwise interact with us.

LEND BROKE SYSTEMS AND SERVICES

Our software and associated services (the “Services”) are provided to business customers and their authorised users for purposes relating to their trade, business, craft or profession. This Privacy Notice applies to:

• individuals who access or apply to access the Services on behalf of a business customer (including sole traders or individual partners), and also to directors or owners of a business customer
• any other users of our website or Services, and anyone who communicates with us

It is important that you read this Privacy Notice so that you are fully aware of how and why we are using your personal information.

LENDBROKE LTD

The Services are owned and operated by Lendbroke Ltd, a company registered in England and Wales (company number 16497432) with registered office at 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.

Lendbroke Ltd is registered as a data controller with the Information Commissioner’s Office under registration number ZC006227.

CONTACT US

If you have any questions about this Privacy Notice or your information, or wish to exercise any of your rights as described in this Privacy Notice or under data protection laws, you can contact us:

By post:
Data Protection Contact, Lendbroke Ltd, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom

By email:
[email protected]

SCOPE OF THIS NOTICE

This Privacy Notice applies to our activities where Lendbroke acts as a controller (i.e., we decide how and why your personal data is processed) and where we are directly responsible to you for our handling of your data. In the section “PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT” below, we set out the types of personal data we collect as controller and the purposes for which we use it.

Please note that for some activities related to the Services we act as a processor on behalf of our business customers (for example, where our customers input data into our SaaS systems and we process that data on their instructions). In those circumstances, our customers are the controllers. We are not responsible for our customers’ privacy notices or practices. If your data is being processed in our systems by one of our customers, please refer to that customer’s privacy notice for details of how they handle your data.

PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT

We may collect and process the following categories of personal information:

(a) Information you provide to us directly, such as your name, job title, business contact details, login details, preferences and any other information you choose to provide when completing forms on our website or within our Services, signing up for communications, booking a call, making enquiries, or otherwise interacting with us.

(b) Information we receive from third parties, such as referrals or partners, business directories, publicly available sources (including Companies House), and our service providers (for example, communications or analytics providers), where permitted by law.

(c) Information we collect automatically when you use our website or Services, including technical information about your device and connection (such as IP address, browser type and version, time zone setting, operating system), as well as information about your usage and interactions (for example, pages viewed, features used, emails opened).

(d) Identity and verification information where appropriate for security, anti-fraud, contracting or compliance purposes, which may include documents such as a passport, driving licence, proof of address, and business registration or director/owner details.

(e) Billing and transaction information relating to invoices and payments (we do not process or store full payment card details; payments are handled by our payment providers).

We may combine the information we collect about you from different sources as described above to help us provide and improve the Services.

We will indicate where the provision of certain personal information is required for us to provide specific Services or respond to a request. If you choose not to provide such information, we may be unable to provide the relevant Services.

ANONYMOUS DATA

We may anonymise and aggregate any personal information we collect (so that it no longer identifies you). We may use anonymised information for purposes including testing our IT systems, research, data analysis, improving our Services and developing new features, and we may share such anonymised information with others.

WHAT WE DO WITH YOUR PERSONAL INFORMATION

We will only use your personal information if we have a lawful basis to do so. The purposes for which we use your information and the lawful bases relied upon include:

• To provide and operate the Services, manage your or your organisation’s account, and perform our contracts with our customers. Lawful basis: performance of a contract; legitimate interests (to deliver and improve our Services).


• To communicate with you about the Services, including service updates, notices, and administrative messages. Lawful basis: performance of a contract; legitimate interests (to ensure effective operation and support of the Services).


• To respond to enquiries, provide customer support and manage our relationship with you and our customers. Lawful basis: legitimate interests (to operate our business and provide support).


• To conduct onboarding, due diligence proportionate to our Services (for example, verifying business details or key contacts), prevent fraud and maintain security. Lawful basis: legitimate interests (to protect our Services and business); legal obligations where applicable.


• To improve and develop our website and Services, including troubleshooting, testing, analytics and research. Lawful basis: legitimate interests (to improve and secure our Services).


• To send marketing communications to business contacts about our Services, where permitted. You can opt out at any time. Lawful basis: legitimate interests (B2B marketing); consent where required by law.


• To comply with legal and regulatory obligations, and to establish, exercise or defend legal claims. Lawful basis: legal obligation; legitimate interests.

CREDIT CHECKS

Lendbroke Ltd does not carry out credit reference checks directly. Our business customers or partners may conduct their own checks independently and under their own policies. We therefore do not share your data with credit reference agencies for our own purposes.

DISCLOSURE OF YOUR PERSONAL INFORMATION TO THIRD PARTIES


We may share your personal information with trusted third-party service providers who perform services for us or on our behalf as required to achieve the purposes described above. These include providers of IT and cloud hosting, CRM and automation platforms, email and communications tools, analytics, payment processing, accounting and professional advisers (legal, compliance, accounting). These third parties act as processors and only process your information on our instructions under appropriate contracts.

If you are interacting with us on behalf of a business customer, we may share your information with that customer (for example, your employer) where appropriate to manage the Services. We may also disclose your information where required by law, regulation, court order or to establish, exercise or defend legal claims, or in connection with a corporate transaction (for example, a merger, acquisition or asset sale), in which case data will be shared under appropriate safeguards.

We do not sell personal information.

INTERNATIONAL TRANSFERS

Some of our service providers may process or store your personal data outside the United Kingdom and European Economic Area. Where personal data is transferred internationally to a country that has not been deemed to provide an adequate level of protection, we implement appropriate safeguards such as standard contractual clauses approved by the UK or European Commission, and we assess the transfer risks to ensure your data remains protected.

SECURITY OF YOUR PERSONAL INFORMATION

We use appropriate technical and organisational measures to protect personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage. Measures include access controls, authentication, encryption in transit where appropriate, logging and monitoring, and staff confidentiality obligations. Despite these measures, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

HOW LONG WE KEEP YOUR PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary to fulfil the purposes we collected it for, including to satisfy legal, regulatory, tax, accounting or reporting requirements. We may retain information for a longer period in the event of a complaint, dispute or if we reasonably believe there is a prospect of litigation in relation to our relationship with you.

By way of guidance, we generally retain:


• customer and account records for up to 6 years after the end of the customer relationship
• financial and accounting records for 6 years (or longer if required by law)
• general enquiries for up to 12 months
• marketing contact details until you opt out or we determine they are no longer needed
• identity/verification materials, where collected, for up to 5 years or as required by law

YOUR RIGHTS

Subject to applicable law, you have the following rights in respect of your personal information:

• Right of access – to obtain a copy of your personal data
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure – to request deletion of your data in certain circumstances
• Right to restriction – to request we limit processing in certain circumstances
• Right to object – to object to processing based on our legitimate interests and to direct marketing
• Right to data portability – to receive certain data in a structured, commonly used and machine-readable format or request we transfer it to another controller
• Right to withdraw consent – where we rely on consent, you may withdraw it at any time (this does not affect processing prior to withdrawal)

Not all rights are absolute, and we may be entitled to refuse requests where exceptions apply. To exercise your rights, please contact us using the details in the “CONTACT US” section.

COOKIES AND OTHER TRACKING TECHNOLOGIES

We use cookies and similar technologies on our website and within the Services to improve functionality, analyse usage and enhance your experience. For more information, including how to manage your preferences, please see our Cookies Policy.

COMPLAINTS

If you have any questions or concerns regarding this Privacy Notice or our data protection practices, please contact us using the details above. You also have the right to lodge a complaint with the UK Information Commissioner’s Office at https://ico.org.uk/. We would appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.

CHANGES TO OUR PRIVACY NOTICE

We may update this Privacy Notice from time to time. Any changes will be posted on our website with an updated effective date. If we make any material changes, we may notify you by email or by means of a prominent notice on our website prior to the change becoming effective.

LENDBROKE LTD

Company number 16497432

Company number 16497432

Registered office address

61 Bridge Street, Kington, England, HR5 3DJ

Registered office address

61 Bridge Street, Kington, England, HR5 3DJ

LENDBROKE LTD

Company number 16497432

Company number 16497432

Registered office address

61 Bridge Street, Kington, England, HR5 3DJ

Registered office address

61 Bridge Street, Kington, England, HR5 3DJ

© All Rights Reserved.