This policy explains how CreditLicence collects, uses, shares and protects your personal data when you use our website and our consumer credit licence application service. We are committed to protecting your privacy and handling your data openly and lawfully.
CreditLicence is a trading name of Regetus Ltd, a company registered in England & Wales (Company No. 17484244) with its registered office at 128 City Road, London EC1V 2NX. Our principal place of business is 12 Hay Hill, Mayfair, London W1J 8NR. For the purposes of UK data protection law, Regetus Ltd is the "data controller" responsible for your personal data.
If you have any questions about this policy or how we handle your data, you can contact us at privacy@creditlicence.com.
When you use our service, particularly when completing our application questionnaire, you may provide:
An FCA application asks about the people who run and own the firm. For each director, each person who will hold a senior management function and each shareholder of a third or more, we collect what the FCA's forms require: full name and previous names, date and country of birth, nationality, National Insurance or passport number, home address for the last three years, employment history for the last ten years, other directorships, and the answers to the FCA's fitness and propriety questions — including whether the person has any criminal convictions, insolvency history, county court judgments, director disqualifications or regulatory action against them.
Information about criminal convictions and offences is protected by Article 10 of the UK GDPR. We process it only because the individual has consented to that processing for the purpose of the firm's FCA application (Data Protection Act 2018, Schedule 1, paragraph 29), which we ask for at the point the information is given and again in the letter of authority each person signs. Each person can withdraw that consent at any time by emailing privacy@creditlicence.com; if they do, we cannot include them in the application. We share this information only with the FCA, through its Connect system on the firm's instruction; we do not use it for any other purpose.
Payments are processed securely by our payment provider, Stripe. We do not collect or store your full card details. Stripe processes your payment in accordance with its own privacy policy.
When you visit our website, we may automatically collect limited technical information such as your IP address, browser type, device information and how you use our site. This helps us operate, secure and improve the website. If you arrive from a Google advertisement, the click identifier in the link is recorded against any form you then send us, so that we can tell which advertising brings enquiries; it is not used for anything else.
We use your personal data to:
We rely on the following lawful bases under UK GDPR:
We do not sell your personal data. We share it only where necessary, including with:
Some of our service providers may process data outside the UK. Where they do, we take steps to ensure your data is protected by appropriate safeguards, such as UK-approved standard contractual clauses or an adequacy decision.
We keep your personal data only for as long as necessary for the purposes set out in this policy, including to meet legal, accounting or reporting requirements. Records relating to your order and our financial records are retained for six years in line with UK tax law. The application file, including the information about directors and controllers described above, is retained for six years after the FCA's decision so that we can answer any later question about the application, and is then deleted. We will securely delete or anonymise data when it is no longer needed.
Under UK data protection law you have the right to:
To exercise any of these rights, contact us at privacy@creditlicence.com. We will respond within the timeframes required by law.
Our website uses a small number of cookies necessary for it to function, and — only if you accept them — analytics and advertising cookies that help us understand how the site is used and which advertising brings enquiries. Those cookies are set by Google Analytics, Google Ads, Microsoft Advertising and HubSpot, the customer relationship management system we use to manage enquiries. No analytics or advertising cookie is set before you choose “Accept all”, and you can change your choice at any time using the Cookie preferences button. You can control or delete cookies through your browser settings. Disabling some cookies may affect how the website works.
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this policy periodically.
You can complain to us about how we handle your personal data by emailing privacy@creditlicence.com or by writing to our registered office. We will acknowledge your complaint within 30 days, look into it, keep you informed of our progress, and tell you the outcome. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
When you pay a deposit we open a client area for your firm at creditlicence.com/account. It is where you complete the application questionnaire, upload the documents we need, read and sign your application pack, see your payments and follow the progress of your application. Only the people we invite can sign in, using a one-time link sent to their email address; there is no password.
The client area's database, file storage and sign-in are provided by Supabase, which processes the data on our instructions. The data is held in the European Union, in Supabase's Ireland (EU West) region. Files are kept in private storage: only you, when signed in, and our team can open them, and each download link expires after ten minutes. When you upload a file we are notified by email with a link to it that expires after seven days. Sign-in links are sent by Resend, our transactional email provider.
The client area keeps your sign-in session in your browser's local storage so that you stay signed in on that device. It is necessary for the client area to work and is removed when you sign out. The client area pages set no analytics or advertising cookies.
Regetus Ltd, trading as CreditLicence, is the controller of the personal data in the client area, as for the rest of our service (section 1).
Access to the client area closes 30 days after the FCA's decision on your application, or 30 days after our engagement ends if that is earlier. At that point your files and answers are deleted from the client area. What we need to keep is held in our case records for your application and deleted in line with section 6.
You can ask for a copy of everything held about you in the client area, or ask us to delete it, by emailing privacy@creditlicence.com. Where we must keep something, for example while the FCA is considering your application or for our accounting records, we will tell you what we are keeping and why. Your other rights are set out in section 7.
We use essential cookies to make this site work. With your consent we also use analytics and advertising cookies — from Google and Microsoft, and from HubSpot, the CRM we use to manage enquiries — to understand how the site is used and which advertising brings enquiries. See our Privacy Policy.
