Privacy Policy

1. 1.1. We are committed to protecting your privacy rights as a consumer of our services. Our policy is to respect and protect your rights to privacy.
2. 1.2. Kuflink means Kuflink Group Plc and its subsidiaries.
3. 1.3. All information you provide to us will be held by Kuflink on UK based servers. Unless otherwise specified in point 9. Kuflink will not hold, transfer or use your data outside the European Economic Area (EEA), nor will we share it with others, within or outside of the EEA (except when we believe in good faith that the law requires it).
4. 1.4. We collect data on all our users in order to continually improve the services and products we offer. We also collect data to enter commercial arrangements which can include the sale of advertising space. Kuflink adheres to UK Data Protection Legislation which, from 25th May 2018, includes EU Regulation 2016/679 General Data Protection Regulation (“GDPR”).
5. 1.5. This privacy notice only relates to Kuflink’s website and platform and does not extend to your use of the internet outside of the Kuflink site.

1. 2.1. Kuflink Group Plc is registered at Level 1, Devonshire House, One Mayfair Place, Mayfair, London W1J 8AJ under company number 09084634.
2. 2.2. Kuflink Ltd is registered at Level 1, Devonshire House, One Mayfair Place, Mayfair, London W1J 8AJ under company number 08460508.
3. 2.3. Kuflink Bridging Ltd is registered at Level 1, Devonshire House, One Mayfair Place, Mayfair, London W1J 8AJ under company number 07889226.
4. 2.4 Kuflink One Ltd is registered at 21 West Street Gravesend, Kent DA110BF under company number 12206864.
5. 2.5. Kuflink Home Loans Ltd is registered at 21 West Street Gravesend, Kent DA110BF under company number 07817421.

1. 3.1. Before using our services and purchasing our products, we require that each user undertakes checks for the purposes of verifying your identity and preventing fraud and money laundering. These checks require Kuflink to collect and store personal data about you.
2. 3.2. Details of personal data we may need to collect to process these checks include, but are not limited to: name, address, date of birth, contact details, bank account numbers, national insurance number and device identifiers including IP addresses.
3. 3.3. Kuflink and fraud prevention agencies may need to enable law enforcement agencies to access your personal data to detect, investigate and/or prevent crime.
4. 3.4. We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and verifying identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested.
5. 3.5. Fraud prevention agencies can hold your personal data for different time periods, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
6. 3.6. As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more, please read section 7.
7. 3.7. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested or to employ you, or we may stop providing existing services to you.
8. 3.8. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing, or employment to you. If you have any questions about this, please contact us on the details below.
9. 3.9. Fraud prevention agencies may allow the transfer of your personal data outside of the UK. This may be to a country where the UK Government has decided that your data will be protected to UK standards, but if the transfer is to another type of country, then the fraud prevention agencies will ensure your data continues to be protected by ensuring appropriate safeguards are in place.

1. 4.1 The types of personal data that we collect and process about you will depend on your interactions with Kuflink and what products, you use.

The data collected may fall into the below categories:

Personal Data	Examples
Contact and Identity Data	Name Address Date of Birth Telephone Number Email Address Photo ID Marital Status Financial Dependents Gender Username andpassword Purchases made by you Your interests and preferences Feedback and survey response
Special Category Data	Ethnicity and race, details of criminal offence / convictions, details about vulnerable people in your household, such as children or elderly people (and we may ask for their ages and dates of birth and information about any special requirements they may have) or other information we may require to comply with guidelines on matters of public health or concern (e.g. Covid-19)
Financial Data	Credit Worthiness Outstanding Credit commitments Financial History Bank account details Incomings and outgoings Tax Status Changes in your circumstances which may affect your ability to repay Kuflink
Operational Data	Communications between us Complaints log ins Data subject access requests Correction requests details about payments to and from you and other services you have purchased through us
Technical Data	Internet protocol address login information browser type and version time zone setting browser plug-in types and versions operating system and platform identification number online identified location data and other similar identifying information required for the customer’s device(s) to communicate with websites and applications on the internet
Usage Data	how you use our website products and services, the full uniform resource locators clickstream to, through and from our site (including date and time), download errors, lengths of visit to certain pages, page interaction information, methods to browse away from the page and any phone numbers you use to call us
Marketing and Communications Data	your marketing preferences from us and our third parties and your communication preferences

2. 4.2 We will collect the information below in different ways depending on how you decide to contact us.
Direct – where you have come to Kuflink directly through our website.
• Information provided when you apply for any of our products or services
• Information provided when you use any of our online forms
• Information provided or that we collect when using our website
• Information provided when communicating with us in writing, email, or phone
• Information we obtain when you engage with us across social media platforms
Third Party – where a broker has introduced you to Kuflink or a third party is acting on your behalf and we have authority for them to act:
• Information that the third party provides as part of the application process, or on any of our online forms
• Information the third party provided when communicating with us in writing, via email, SMS or by phone
• Information provided to us on your behalf by your representatives engaging with us for you
Comparison Sites:
• Information you have entered on the comparison site as part of the application process
3. 4.3 Special Category data

   Data protection law requires us to treat special category data carefully. Special category data includes biometric data whether that be physical, physiological, or behavioural characteristics about you, health data, criminal convictions, and any religious or political data.

   We’ll only use special category data in the following scenarios:

   • detecting and preventing Financial crime;
   • comply with guidelines on matters of public health or concern (e.g., Covid-19);
   • verifying your identity using biometric data; and
   • making our services accessible to customers.

   We will also only process special categories of information where we’ve obtained your consent or where one of the limited grounds on which we can process special category data applies.

4. 4.4. We do not monitor your use of the Internet, but we do use cookie technology to monitor your use of Kuflink. This information is not stored alongside your personal data and will only be used on an anonymous, aggregated basis. We may process your personal data in conjunction with the documents and forms downloaded in order to maintain and improve the facilities we offer and to send you alerts about important updates to such content.

1. 5.1. We may on occasion obtain information from other sources, this helps us to offer you our products and services and to operate our platform. This will, on occasion, include personal information and may be obtained from sources such as:
   • Our group companies
   • Companies that introduce you to us
   • Credit Reference Agencies
   • Comparison Websites
   • Social Networks
   • Fraud Prevention Agencies
   • Public Information services such as Companies House
   • Land Registry
   • Government Agencies
   • Law Enforcement Agencies

1. 6.1. The General Data Protection Regulation states that we can only use personal information if we have a genuine reason to do. This includes providing it to third parties outside of the Kuflink Group

   Kuflink will only use your personal information for one of the following reasons

   • To fulfil a contract, we have with you
   • When it is our legal duty
   • When you consent to us
   • When it is in our legitimate interest

   A legitimate interest is when we have a business or commercial reason to use your information.

   Below is a list of all the ways in which we can use your personal information and the reason we rely on to do so.

What we use your personal information for	When we use it	Our legitimate interests
To provide an initial quotation when applying for a loan	Our legitimate interest	Ensuring customers have a clear understanding of the product they may be accepted for without having a detrimental effect on their credit rating
To manage our existing relationship with you, your business, or businesses	Fulfilling Contracts	n/a
To manage the products and services you have with us	Fulfilling Contracts or consent	n/a
To keep you about our products and services	Fulfilling Contracts or consent	n/a
To keep you updated about our products and services	Our legitimate interest or consent	Keeping new/existing customers up to date with the products and services that have and with other products and services we offer
To develop and test new and existing products and analyse how customers use our products and services	Our legitimate interest or consent	Identifying relevant customer groups and their needs and preferences, developing appropriate products and services, what we charge for them and who we provide them to, ensuring products are suitable for customers and meet expectations, so we can continue to improve our customers’ experience.
To develop and carry out marketing activities	Our legitimate interest or consent	Keeping new/existing customers up to date with the products and services that have and with other products and services we offer
To provide guidance and information about our products and services	Our legitimate interest or consent	Being efficient as to how we fulfil our legal duties, ensuring customers have a clear understanding of the product they have or may have in the future
To improve, develop and manage our brands, products, and services	Our legitimate interest or consent	Developing products and services, looking at charges and who we will provide them to
To be able to work with other companies that provide services to us and our customers	Fulfilling Contracts	n/a
To operate and provide lending and investment services	Fulfilling Contracts	n/a
To handle payments received from and provided to customers	Fulfilling Contracts	n/a
To apply charges, fees, and interest due on customer accounts	Fulfilling Contracts	n/a
To recover and collect money that is owed to us	Fulfilling Contracts	n/a
To detect, investigate, report, and seek to prevent financial crime	Our Legal Duty	n/a
To control risk for us, our corporate group, and our customers	Our legitimate interest and our legal duty	Developing products and services, looking at charges and who we will provide them to, complying with regulations that apply to us and monitoring and mitigating risks
Sharing relevant information in respect of sale of the company or any part of the business	Our legitimate interest	Complying with due diligence requirements and running the business efficiently
To obey laws and regulations that apply to us	Our Legal Duty	n/a
To respond to complaints and look to resolve them	Our Legal Duty	n/a
To run our business in an efficient and proper way	Our Legal Duty	n/a
To exercise our rights set out in agreements or contracts	Fulfilling Contracts	n/a
Statistical analysis and research	Our legitimate interest	Developing products and services that promote responsible lending and promoting products to interested parties with similar needs and wants

We sometimes use systems to make automated decisions using the personal information we have from you and other sources. Automating decisions allows us to make consistent and efficient decisions regarding the products and services we offer. These automated decisions can affect the products and services we may offer you now or in the future, or the price that we charge you for them.

Below are details of the automated decisions we make which are necessary for entering into or performing a contract:

We will hold your personal information for as long as you have a relationship with us, e.g., you have applied for a product or you are an existing customer of ours, and for a period of time after our relationship ends e.g., your application was declined, you have closed your account. How long we hold your information depends on the nature of our relationship, the type of information and the purposes for which we hold it.

The information we will retain will be such that helps us to:

• comply with legal and regulatory requirements, e.g., anti-money laundering laws and laws that require us to keep details of transactions we have been party to (loan repayments, investor payments)
• establish, exercise, and defend legal claims
• prevent and detect fraud
• pursue our or third party’s legitimate interest, e.g., developing and improving credit risk models e.g., where you are a Kuflink borrower we will retain your data for analysis and provide it to credit reference agencies so they can use it for the purposes outlined.
• deal with any complaints regarding our services
• ensure we do not send any marketing to people who have opted out
• maintain business records for analysis and audit purposes

1. 9.1. We may share your information with any member of the Kuflink Group and with some of our business partners, service providers and subcontractors in connection with the performance of any contract we enter with you or them.
2. 9.2. We may also disclose your information to third parties where you have consented for us to do so, where we are under a legal, regulatory, or professional obligation to do so, where we need to enforce or apply our various terms, policies and other agreements, or if it becomes necessary to protect the rights, property or safety of Kuflink, our customers or any other person.
3. 9.3. If we merge, re-organise or transfer all or part of our business, we may disclose the information we hold about you to successors (and potential successors) of the business.
4. 9.4. If we refer any dispute between us to the ODR Platform http://ec.europa.eu/consumers/odr, and/or we agree to engage in any alternative dispute resolution (“ADR”) procedure with you through the ODR Platform, then to the extent that your personal data is relevant to the dispute we may disclose it to the European Commission, as operator of the ODR Platform, and to any ADR provider appointed to deal with the dispute.

You may have some or all the following rights dependent upon how and why your information was collected and how we are using your information:

• Right to Access – You may have a right to request access to the personal information we hold about you (this is also known as a subject access request).
• Right to Rectification – You can request at any time that we update and correct any out of date or inaccurate personal information we hold about you; You can do this by contacting us at Hello@kuflink.com
• Right to Erasure – In some circumstances you can request that we remove all personal information we hold about you if there is no need for us to keep it; You can do this by contacting us at Hello@kuflink.com
• Right to Restrict Processing and Object to Processing – If we process your data, you can request that we stop or restrict the processing of your personal information; Email preferences can be changed using the ‘Email Preferences link in ‘My Preferences’.
• Right to Withdraw Consent – You can withdraw your consent at any time by contacting Kuflink, once consent is received, Kuflink will stop processing your personal data and where consent is the lawful basis for us processing your personal data; and

• Right to Data Portability – You can make a request for us to provide personal information you have supplied to Kuflink to a third party. There may be regulatory or legal reasons why we cannot satisfy your requests, but we will advise you of this when a request is made.

For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO)

1. 11.1. All personal data provided by you during registration onto the Platform, along with details of your download history, can be accessed via ‘My Account’.
2. 11.2. If you wish to make a data subject access request, please do so in writing, sent to the email or postal address shown below, clearly marking your correspondence as a subject access request.
3. 11.3. We do not normally charge for subject access requests unless they are ‘manifestly unfounded or excessive (e.g., repetitive). We will respond to your subject access request within one month of receiving it. In the unlikely event that your request is particularly complex, a further two months may be required but we will keep you informed if this is the case.

1. 12.1. We use the following cookies:
2. 12.1.1. Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website. They do not gather information about you that could be used for marketing purposes or remembering where you’ve been on the Internet.
3. 12.1.2. Analytical/Performance cookies: They allow us to collect information about how you use our website, such as, how you move around our website and if you experience any errors. These cookies do not collect any information that could identify you; all the information collected is anonymous and is only used to help us improve the way our website works, understand what interests our users and measure how effective our advertising is.
4. 12.1.3. Functionality cookies: These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences and improve your visit.
5. 12.1.4. NextRoll and our advertising partners use cookies and similar technologies on this site and around the web that collect and use personal data (e.g., your IP address) to select and deliver measurable personalised advertising from this site and other advertisers in NextRoll’s network, as well as to analyse and understand your use of our websites using NextRoll’s services.

By clicking “Allow”, you consent to the placement and use of cookies and similar technologies by NextRoll and its advertising partners.

If you select “Reject”, NextRoll will not serve you personalized advertising. You may still receive advertising that is not targeted or is served by other third parties that are not affiliated with NextRoll.

If you “Allow” now, you have the right to withdraw your consent at any time. To manage NextRoll’s partners and learn more, visit https://d.adroll.com/consent/choices

1. 12.2. Generally, cookies that are strictly necessary for the operation of the website will expire when you leave the website. Other cookies may be more permanent or not expire unless you actively delete them.

We carry out credit and/or identity checks when you apply for a product or service. We use CRAs to help us with this.

If you use our products or services, from time to time we may also search for information that the CRAs have about you, to help us manage those accounts.

To do this, we will supply your personal information to CRAs and FPAs and they will give us information about you. This will include information about your financial situation and financial history. CRAs and FPAs will give us publicly available information about you (including information from the electoral register) and privately held information which will include your credit history, your current financial situation, financial history information and fraud prevention information.

When we use your information and share it with CRAs and FPAs, we do so as a necessary step to assess whether or not we can enter into a contract with you. Where your loan application is approved and you choose to enter a loan through Kuflink, it will continue to be necessary for us to carry out these checks from time to time to perform the contract we have with you.

We will use the information that we receive from CRAs and FPAs to:

• Help us assess whether or not we think you can afford to take out the requested loan and meet your loan obligations
• Make sure that the offers we can provide to you are fair and appropriate to your circumstances and check the information that you have provided to us is accurate
• Meet our legal obligations to help prevent criminal activity, fraud, and money laundering
• Manage your account(s)
• Trace and recover debts where we have been unable to make contact with you via any other means that we hold your information (i.e. phone, email, letter)

When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders and other similar companies or organisations. When FPAs receive a search from us they will keep a log of the searches that we have carried out, but this will not be shared with any CRAs.

If you are making a joint application or tell us that you have a spouse or financial associate, we will link your records together, you should make them aware of how their personal information will be used by us before you complete the application. In addition, you should both also be aware that CRAs will also link your records together and these links will remain on both of your files until an approved request is received by the CRAs confirming that the financial relationship no longer exists.

We will continue to exchange information about you with CRAs and FPAs while you have a relationship with us. We will also inform the CRAs once you have finished repaying a loan with us. If you borrow money through Kuflink and do not make all your repayments in full and on time this information will be shared with CRAs who will record that information as part of your credit history. It is possible that the CRAs will then share this information with other organisations that have a relationship with them.

If you give us false or inaccurate information or if we suspect or identify fraud, we will record this and will also pass this information to FPAs and other organisations involved in crime and fraud prevention, including law enforcement agencies.

We and other organisations may access and use this information to prevent fraud, money laundering or other criminal activity. If we, or an FPA, determine that you pose a fraud or money laundering risk, we may refuse to provide the products and services you have requested, or we may stop providing existing services to you.

Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years and may result in other companies or organisations refusing to provide services, financing, or employment to you.

If you have any questions about this, please contact us at compliance@kuflink.com

The links below will provide you with further information on

• the identities of the CRAs
• their role as FPAs
• the information they hold about you
• the ways in which they use and share personal information
• the length of time that they will hold on to your information
• your data protection rights

TransUnion CRAIN

Equifax CRAIN

Experian CRAIN

Cifas

When you register with Kuflink we’ll give you the option to opt-out of receiving different categories of messages from us. These categories relate to letting you know about new products, promoting our existing products and general marketing.

We only send these messages if there is something worthwhile to tell you about. If you don’t want to receive these messages you can log into your account and change your settings

We’ll still send you messages relating to Kuflink products you have where this is necessary to provide you with good service. There also may be some messages that we’re required by law or regulation to send you even if you ask us not to.

1. 15.1. To contact Kuflink about anything to do with your personal data and data protection, including to make a subject access request, please use the following details and we will respond as soon as possible:
• hello@kuflink.com
• compliance@kuflink.com
• +44 1474 334 488
• Postal Address: 21 West Street, Gravesend, Kent, DA11 0BF.

We hope that we can resolve any query or concern that you raise about our use of your information, so please get in touch with us on the above details if you have any questions or issues with this privacy policy or with how we are using your personal information in general.

If you are dissatisfied with any response you receive from us, you may refer your complaint to the ICO. Find out more on their website.

Note:We may change our Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection. Any changes will be notified to you the first time you log in to Kuflink after the changes have been made.