1. Parties and roles
For consented marketing data captured through our portals, UK Finance Leads acts as data controller up to the point of introduction. On receipt of a lead, the broker or lender partner becomes an independent controller for their subsequent processing. Where UK Finance Leads operates a campaign exclusively for a partner, the partner is controller and UK Finance Leads acts as processor under the terms below.
UK Finance Leads is registered at 145 City Road, London, EC1V 1AZ, United Kingdom.
2. Subject matter and duration
Processing is limited to the activities required to deliver agreed lead supply or campaign services and continues for the term of the partner's order form or service agreement.
3. Nature and purpose of processing
Collection, validation, vetting, suppression, enrichment and delivery of UK B2B finance enquiries for introduction to authorised brokers and lenders.
4. Categories of data subjects and personal data
- Data subjects: UK business owners, directors and decision-makers
- Data categories: business contact details, company information, finance requirement, consent metadata, call recordings where applicable
- No special category data is processed
5. Sub-processors
We use a limited set of sub-processors for hosting, telephony, CRM and email delivery. A current list is available on request. Partners will be notified of material changes and given a reasonable opportunity to object.
6. Security measures
- Encryption in transit (TLS 1.2+) and at rest
- Role-based access controls and least privilege
- Multi-factor authentication on administrative accounts
- Audit logging and monitoring
- Regular backups and tested restore procedures
- Staff training on data protection
7. Data subject rights
We provide reasonable assistance to partners in responding to data subject requests, including access, rectification, erasure and objection requests received through our portals.
8. Breach notification
Where UK Finance Leads acts as processor, we will notify the partner without undue delay and within 48 hours of becoming aware of a personal data breach affecting their data, with the information needed to meet their own regulatory obligations.
9. Audit
Partners may request a written audit response once per twelve-month period. Where on-site audit is required, reasonable scope, notice and confidentiality terms apply.
10. Return or deletion
On termination, UK Finance Leads will return or securely delete personal data processed on a partner's behalf, except where retention is required by law or to evidence consent and suppression.
11. International transfers
Where any transfer falls outside the UK or EEA, the UK Addendum to the EU Standard Contractual Clauses applies.
12. Contact
To request a counter-signed DPA tailored to your engagement, contact us via the contact page. See also our Privacy Policy and Terms & Conditions.