Privacy Policy - Dorsia Finance

Privacy Policy

Policy last updated: 25 June 2026

Dorsia Finance Ltd is committed to protecting and respecting your privacy. Dorsia Finance Ltd is a broker, not a lender.

This policy explains how we collect, use, store, share and protect personal data when you use our website, contact us, apply for finance, use our services, sell a vehicle to one of our clients, act as a guarantor, director, shareholder, beneficial owner, introducer, Appointed Representative, supplier, or otherwise interact with us.

Please read this policy carefully so that you understand how we process personal data and the rights you have under data protection law.

1. Who we are

Dorsia Finance Ltd is a UK vehicle and asset finance broker. We arrange finance with selected lenders and funding partners. We do not lend our own money and we do not make final lending decisions.

For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, the data controller is:

Dorsia Finance Ltd
Wellingore Hall
Wellingore
Lincoln
LN5 0HX

Contact for privacy matters: db@dorsiafinance.co.uk

Consumer data is not transferred outside of the UK.

2. Data protection law and our responsibilities

We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations.

We are responsible for ensuring that personal data is:

  • Processed lawfully, fairly and transparently.
  • Collected for specified, explicit and legitimate purposes.
  • Adequate, relevant and limited to what is necessary.
  • Accurate and kept up to date where necessary.
  • Kept for no longer than necessary.
  • Processed securely using appropriate technical and organisational measures.

We maintain proportionate governance measures, including internal policies, staff training, access controls, supplier oversight, record keeping, data minimisation and periodic reviews of our data protection arrangements.

3. The personal data we collect

Personal data means information relating to an identified or identifiable individual. We may collect, use, store and transfer the following categories of personal data:

  • Identity data, including name, title, date of birth, marital status, nationality, gender where relevant, identification documents and signature.
  • Contact data, including residential address, previous addresses, email address and telephone numbers.
  • Financial data, including income, expenditure, assets, liabilities, bank statements, affordability information, employment details, self employment details, business income, pension income, credit commitments and settlement information.
  • Credit and affordability data, including credit search results, credit commitments, repayment history, public record information, insolvency information, financial associations and fraud prevention indicators.
  • Transaction data, including finance applications, proposal information, lender decisions, finance product details, agreement information, vehicle details, valuation information, invoices, payment records, payout records and commission records.
  • Business data, including company details, Companies House information, directorships, shareholdings, beneficial ownership, trading history, management accounts, statutory accounts, tax information and business bank statements.
  • Private seller data, including identity, contact details, vehicle ownership information, bank details where required for payment, and information needed to verify title to the vehicle.
  • Technical data, including internet protocol address, browser type and version, time zone setting, location data, device information, operating system and platform.
  • Usage data, including information about how you use our website, forms, digital tools and services.
  • Marketing and communications data, including your marketing preferences, communication preferences and records of contact with us.
  • Vulnerability information where you provide it to us or where it is relevant to ensuring fair treatment, appropriate communication or affordability assessment.
  • Criminal offence information only where it is disclosed to us, legally required, relevant to fraud prevention, or relevant to lender, regulatory or legal obligations.

4. How we collect personal data

We collect personal data in different ways, including:

  • Directly from you when you complete forms, contact us by telephone, email, website, WhatsApp, social media, post or in person.
  • When you apply for finance, request a quote, ask us to arrange finance, provide documents, sign agreements, request settlement figures, or use our services.
  • From motor dealers, brokers, introducers, Appointed Representatives, private sellers, valuers, lenders, funders, insurers, professional advisers and other third parties involved in a proposed transaction.
  • From credit reference agencies, fraud prevention agencies, identity verification providers and publicly available sources.
  • From Companies House, HM Land Registry, HMRC documentation supplied by you, court records, insolvency registers and other public or official records where relevant.
  • Automatically through our website, cookies, analytics tools and similar technologies.

5. How we use personal data and our lawful basis

We will only use personal data where the law allows us to. The main lawful bases we rely on are performance of a contract, taking steps before entering into a contract, legitimate interests, compliance with legal or regulatory obligations, consent where required, and substantial public interest where applicable to special category or criminal offence data.

We may use personal data for the following purposes:

  • To respond to enquiries and provide quotes.
  • To assess finance requirements and source suitable finance options.
  • To prepare, submit and manage finance applications with lenders and funding partners.
  • To verify identity, address, income, affordability, ownership, directorship, beneficial ownership and source of funds where relevant.
  • To carry out credit reference, affordability, identity and fraud prevention checks.
  • To manage customer relationships, including updates, service communications, complaints, settlement requests and post completion support.
  • To comply with FCA requirements, Consumer Duty obligations, anti money laundering expectations where applicable, fraud prevention requirements, accounting obligations, tax obligations, legal obligations and regulatory record keeping.
  • To administer and protect our business, website, CRM systems, IT systems, communications, document storage and internal records.
  • To manage commission disclosure, lender relationships, introducer relationships and Appointed Representative oversight.
  • To send relevant marketing communications where lawful and in line with your preferences.
  • To improve our website, services, customer experience, marketing and business operations.
  • To establish, exercise or defend legal claims.

6. Credit reference and affordability checks

To help us assess applications, verify identity, prevent fraud, assess affordability and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies, fraud prevention agencies and identity verification providers.

We currently obtain this information via Creditsafe Business Solutions Limited, which uses its data partner TransUnion International UK Limited to supply consumer credit and identity data.

Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority under Firm Reference Number 742313.

TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority under Firm Reference Number 737740.

The information we receive may include data relating to your identity, address history, credit commitments, payment history, public record information, insolvency information, financial associations, fraud prevention indicators and other information relevant to assessing creditworthiness, affordability, identity and fraud risk.

We use this information only where it is necessary for legitimate business purposes, including creditworthiness assessment, affordability assessment, identity verification, fraud prevention, regulatory compliance and responsible lending. Where required, searches may leave a search footprint on your credit file.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

  • Creditsafe Privacy and Transparency Notice: https://www.creditsafe.com/gb/en/legal/transparency-notice.html
  • TransUnion Bureau Privacy Notice: https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

7. Who we share personal data with

We may share personal data where it is necessary, lawful and proportionate. This may include sharing information with:

  • Lenders, funding partners and finance providers for the purpose of assessing, arranging, managing and completing finance applications.
  • Credit reference agencies, including Creditsafe Business Solutions Limited and TransUnion International UK Limited.
  • Fraud prevention agencies, identity verification providers and affordability assessment providers.
  • Motor dealers, brokers, private sellers, vehicle suppliers, valuers, insurers, warranty providers and other parties involved in the transaction.
  • Introducers and Appointed Representatives where they are involved in the customer relationship or transaction.
  • Professional advisers, including accountants, lawyers, auditors, compliance advisers and insurers.
  • Regulators, the Financial Ombudsman Service, the Information Commissioner’s Office, courts, law enforcement agencies, HMRC and other authorities where required or appropriate.
  • IT, CRM, cloud hosting, email, telephony, website, analytics, e signature, document management, payment and administration providers.
  • Prospective buyers, sellers or funders in the event of a business sale, business purchase, restructuring, financing arrangement or transfer of assets, provided appropriate safeguards are in place.

We require third party service providers to respect the security of personal data and to process it only in accordance with the law and our instructions where they act as processors.

8. Marketing communications

We may use your identity, contact, technical, usage and marketing data to understand what services may be relevant to you. We may contact you about our services where permitted by law, including where you have requested information from us, used our services, provided consent, or where we have a legitimate interest in keeping you informed about relevant finance services.

You can opt out of marketing communications at any time by contacting us at db@dorsiafinance.co.uk or by using any unsubscribe option provided in a marketing message.

We will not sell your personal data to third parties for marketing purposes.

9. Automated decision making and profiling

Dorsia Finance Ltd does not make solely automated decisions that produce legal or similarly significant effects. However, lenders, credit reference agencies, fraud prevention agencies, affordability providers and identity verification providers may use automated tools, scoring, profiling or decisioning systems as part of their own assessment processes. Where they act as independent data controllers, their own privacy notices will explain how they use personal data.

10. Where we store and process personal data

Personal data may be stored in the United Kingdom, the European Economic Area, or other countries where our service providers operate. Where personal data is transferred outside the United Kingdom, we will take appropriate steps to ensure that it is protected in accordance with applicable data protection law. This may include using adequacy regulations, standard contractual clauses, international data transfer agreements or other lawful safeguards.

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, secure systems, password protection, staff training, supplier due diligence and secure document management.

No internet transmission can be guaranteed as completely secure. Once we receive your information, we use procedures and security features designed to reduce the risk of unauthorised access.

11. How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, regulatory, accounting, reporting, complaints handling, fraud prevention and business record keeping purposes.

Retention periods will vary depending on the type of data, the nature of the relationship, the finance application, whether finance completed, applicable lender or regulatory requirements, and whether we need to retain information to establish, exercise or defend legal claims.

Where personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention procedures.

12. Your rights

Under data protection law, you may have the following rights in relation to your personal data:

  • The right to be informed about how your personal data is used.
  • The right of access to the personal data we hold about you.
  • The right to rectification where personal data is inaccurate or incomplete.
  • The right to erasure in certain circumstances.
  • The right to restrict processing in certain circumstances.
  • The right to data portability in certain circumstances.
  • The right to object to processing based on legitimate interests and to object to direct marketing.
  • Rights relating to automated decision making and profiling.

Some rights are subject to conditions and exemptions. For example, we may need to retain certain records to comply with legal or regulatory obligations, for fraud prevention, for complaints handling, or to establish, exercise or defend legal claims.

To exercise your rights, please contact db@dorsiafinance.co.uk.

13. Complaints

If you have a complaint about how Dorsia Finance Ltd handles personal data, please contact us first at db@dorsiafinance.co.uk so that we can investigate and respond.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

14. Cookies and website technologies

Our website may use cookies and similar technologies to distinguish you from other users, improve your browsing experience, understand how visitors use our website, support website functionality and improve our services.

Cookies do not usually identify you directly, but they may identify your device or browser. You can usually set your browser to refuse cookies or alert you when cookies are being used. Some website features may not work properly if cookies are disabled.

Where required by law, we will ask for your consent before using non essential cookies.

You find out more by reading our cookie policy.

15. Links to other websites

Our website or communications may contain links to third party websites. Those websites have their own privacy policies. We are not responsible for how third party websites collect, use or protect personal data. Please review their privacy policies before submitting personal data to them.

16. Changes to this policy

We may update this policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you by email or other suitable means. Please check this policy regularly for updates.

17. Contact

Questions, comments and requests regarding this privacy policy should be sent to db@dorsiafinance.co.uk.