This Site is operated by CUEFIN LTD t/a FlyLoan.uk (“CUEFIN LTD”, “we” or “us”). We act as a registered independent data controller within the United Kingdom. This policy details how we securely gather, handle, evaluate, and safeguard your personal credentials when you access our brokerage services, submit financing applications, or interact with our digital channels.

We treat your information in strict conformity with UK Data Protection Legislation and the UK General Data Protection Regulation (UK GDPR). We highly advise reviewing this document thoroughly alongside our primary Terms and Conditions of Business before utilizing our network.

1. What Information Do We Collect From You?

In order to better service your account, process loan applications, and enhance your digital experience, we collect and store the following classifications of your personal information:

• Identity Verification Data: Legal first and last name, historical names or titles, complete date of birth, gender, and personal marital status.
• Government Identifiers: National Insurance number.
• Contact Architecture: Verifiable residential address history, current residential status (e.g., homeowner, tenant), valid personal email address, and comprehensive telephone numbers (including home, mobile, and work lines).
• Employment & Income Profile: Current employment status and explicit details of your income or source of funds (where appropriate).
• Comprehensive Financial Profile: Personal income details, periodic expenditure variables, continuous savings balances, outstanding credit lines or commitments, pension allocations, and transactional details of your bank account.
• Technical Footprint & Traffic Habits: Device Internet Protocol (IP) address, specific device types, structured browser variants, operating platform details, location data, and online traffic habits.
• Usage & Engagement Insights: Direct qualitative customer feedback, localized survey reactions, and explicit data detailing your activity on the Site (generally captured via cookies).
• Special Category (Sensitive) Data: This includes documentation regarding physical or mental health criteria. We exclusively record or share sensitive medical identifiers when explicitly introduced by you, only where directly required to determine customer vulnerability or credit suitability, and strictly upon receipt of your explicit, informed consent.

2. Dynamic Methods of Data Gathering

We systematically compile your personal parameters through three standard channels:

• Site Interactions & Forms: Information you voluntarily submit directly through text fields and forms provided across the Site layout.
• Direct Human Connection: Whenever you communicate details to our teams directly via telephone (voice communications are recorded and/or monitored for quality control, regulatory compliance, and audit tracking), physical mail lines, email correspondence, automated SMS wires, or consumer outreach programs.
• Automated Network Tracking: Technical data instantly processed by background system scripts when you load our pages, interact with our online loan calculator modules, or click our social media touchpoints.
• Authorized External Sourcing: Profiles pulled from partner networks, introduction providers, primary panel lending institutions, and verified credit reference agencies.

3. Lawful Frameworks for Data Processing

We process data only when permitted under UK privacy structures. Our processing operations are anchored to these legal foundations:

• Your Explicit Consent: Applied when we perform direct onboarding communications across telephone, email, webchat, or SMS channels, and when maintaining your contact profiles to deliver premium future financing opportunities.
• Performance of a Contractual Obligation: Executed to actively evaluate file progress, manage your account configuration, inform you of updates to our terms, and re-engage to check active loan requirements.
• Legitimate Enterprise Operations: Processing that supports our commercial evolution without eroding your baseline privacy freedoms. This applies to:
  • Sharing data profiles with Credit Reference Agencies (CRAs) to run credit assessments, verify your legal identity, block systemic financial crimes, and evaluate linked associations (such as joint applicants or spouses).
  • Managing technical stability, running diagnostic testing routines, and improving internal website safety.
  • Refining advertising performance and evaluating consumer journeys to provide better tailored experiences.
• Legal Mandates and Public Protection: Actions taken to address formal disputes, satisfy anti-money laundering (AML) protocols, enforce safety guidelines, and comply with disclosures required by law enforcement or judicial review.

4. Secure Disclosures and Third-Party Networks

To facilitate comprehensive credit brokering, your information may be shared with specific, vetted external organizations. We do not sell user data. Recipients include:

• Panel Loan Providers & Intermediaries: Primary lending houses and specialist finance networks that evaluate eligibility criteria for funding (a full index of our active panels is permanently available upon request).
• Introducing Networks: If a third party originally referred you to us, we may communicate structural milestones regarding application progress back to that entity.
• Credit Reference Agencies (CRAs): Your information is checked against records held by major bureaus. You can review how they manage consumer identities via their standardized Credit Reference Agency Information Notices (CRAIN):
  • Equifax: www.equifax.co.uk/crain
  • Experian: www.experian.co.uk/crain
  • TransUnion: www.transunion.co.uk/crain
• Infrastructure & Platform Software Providers: External specialists delivering secure cloud hosting databases, automated processing pipelines, and firewalls strictly operational inside the UK.
• Regulatory Entities: Including the Financial Conduct Authority (FCA) and the Information Commissioner’s Office (ICO) to satisfy legal audit frameworks.
• Corporate Transitions: In the event of a structural merger, buy-out, or asset reallocation, all data will shift to the acquiring company under these identical privacy terms.

5. Data Retention Schedules

We retain your personal records only for the duration required to satisfy operational needs, regulatory rules, or statutory obligations. Our retention parameters follow this structured layout:

6. Security Frameworks and Spatial Localization

Your privacy is maintained behind state-of-the-art digital encryption systems. We host and process all personal identifiers exclusively on secure server hardware located directly within the UK. While digital web transmissions can never be completely guaranteed, we use strict procedural controls to minimize risks of loss, theft, or data corruption. We also maintain active incident response workflows to notify both you and the relevant supervisory body if an unexpected data breach occurs.

7. Cookies and Digital Telemetry

We use tracking scripts (such as Google Analytics) to monitor traffic distributions and interface dynamics without isolating your personal identity.

Consent Control via CookieFirst

To collect and manage your tracking preferences in compliance with Article 6(1)(c) of the UK GDPR, our platform integrates tracking management software developed by Digital Data Solutions BV (Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands), known as CookieFirst.

When loading our pages, CookieFirst documents your tracking preferences. This session interaction registers automated server log data, including:

• Your precise choice or withdrawal selection relative to tracking permission.
• An anonymized layout of your active IP address.
• Browser variant properties, system specifications, and exact connection timestamps.
• The globally unique tracking preferences identifier (UUID).

8. Your Legal Rights as a Data Subject

Under UK data legislation, you have strong, enforceable options regarding your data profile. You may exercise any of these options at any time:

• Right to Access: The right to demand a complete, structured copy of all personal file parameters we maintain.
• Right to Correction: The right to request immediate modification of inaccurate or outdated information.
• Right to Erasure: The right to request permanent file deletion where no overriding statutory or business requirement justifies its retention.
• Right to Restrict Processing: The right to freeze file usage temporarily while you contest profile accuracy, challenge usage legality, or preserve records for legal claims.
• Right to Portability: The right to shift personal records to another provider in an industry-standard, machine-readable format.
• Right to Object: The right to halt any processing justified by our legitimate interests, or to terminate direct marketing updates instantly.
• Right to Withdraw Consent: The right to cancel previously granted processing permissions at any stage, without impacting historical actions.

Filing Formal Privacy Grievances

If you feel we have mismanaged your privacy, you can submit a formal complaint directly to the Information Commissioner's Office (ICO) via their website: ico.org.uk/make-a-complaint/ using reference number ZA143718. For disputes regarding underlying loan brokerage services, you can also access the independent arbitration services of the Financial Ombudsman Service (FOS).

9. Marketing Opt-Out Instructions

We never hand your data profiles to unconnected third-party organizations for external marketing campaigns. You can refine your contact preferences, switch off messaging pathways, or fully opt out of communication lists at any time by contacting our Compliance Team or clicking the 'Unsubscribe' link built into our digital emails.

10. Contacting Our Compliance Office

For any queries about your data rights, to file information updates, or to submit a formal data request, please connect directly with our compliance representatives:

We review data requests with high priority and respond free of charge within one calendar month. If an inquiry is highly complex, we will contact you within that first month to provide a clear explanation for any required extension.

11. Document Evolution

We update this policy periodically to align with legal adjustments and changing corporate guidelines. Any modifications become effective once updated on this page. Information collected under past policies remains protected by those terms unless you choose to give your explicit permission otherwise.