Privacy Policy

1. Who We Are

Flash Loans UK is a trading name of Flash Loans UK Ltd (the “Company”, “we”, “us”, “our”). We are a credit broker, not a lender. We are authorised and regulated by the Financial Conduct Authority (FCA). Our registered office address and FCA registration details are shown in the footer of our website.

We are the data controller for personal data collected through flashloansuk.co.uk. If you have questions about this policy, contact us at privacy@flashloansuk.co.uk.

2. What Data We Collect

When you use our service, we may collect:

• Identity data: title, first name, last name, date of birth
• Contact data: email address, phone number, postal address, postcode
• Financial data: monthly income, employment status, employer name, bank name, sort code, account number, loan amount and duration requested
• Technical data: IP address, browser type and version, device information, pages visited, time spent on pages
• Usage data: how you interact with our website, referral source
• Cookie data: see our Cookie Policy

3. How We Use Your Data

We use your personal data to:

• Match you with suitable FCA-authorised lenders from our panel
• Share your application details with lenders and/or ping-tree providers to process your loan application
• Communicate with you about your application
• Comply with legal and regulatory obligations (e.g. FCA record keeping, anti-money laundering)
• Improve our website and services
• Detect and prevent fraud

4. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR:

• Consent: you consent to a soft credit search and agree to our terms when submitting your application
• Contract: processing is necessary to provide our credit broking service
• Legal obligation: we must retain records as required by the FCA
• Legitimate interests: improving our service, preventing fraud, and marketing (where applicable)

5. Who We Share Your Data With

We may share your personal data with:

• Lenders on our panel: FCA-authorised direct lenders who may offer you a loan
• Ping-tree / lead distribution providers: third party services that help match you with the most suitable lender
• Service providers: hosting (Vercel), database (Supabase), analytics, and email providers who process data on our behalf
• Regulators: the FCA, ICO, or other authorities where required by law

We will never sell your data to third parties for marketing purposes without your explicit consent.

6. Data Retention

We retain your application data for a minimum of 3 years from the date of your application, in line with FCA record-keeping requirements. Technical and analytics data is retained for up to 26 months. You can request deletion of your data at any time (subject to our legal obligations) by contacting us.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate or incomplete data
• Eraseyour data (“right to be forgotten”), subject to legal retention requirements
• Restrict processing of your data
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time

To exercise any of these rights, email privacy@flashloansuk.co.uk. We will respond within 30 days.

8. Data Security

We use industry-standard security measures to protect your data, including HTTPS encryption in transit, encrypted database storage, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be processed by service providers located outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Cookies

We use cookies and similar technologies on our website. For full details, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

12. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.