ClearScore Home Lending Privacy Policy

Version 1

25 June 2025

1. Who are we?

1.1 ‘We’ ClearScore Home Lending Limited t/a ClearScore.

1.2 We act as an Appointed Representative of ClearScore Everywhere Limited who are authorised and regulated by the Financial Conduct Authority (Ref 662079).

1.3 We operate from: Dakota House, Concord Business Park, Simonsway Manchester M22 0RR and are registered at Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH.

1.4 We are registered with the Information Commissioners Office (‘ICO’) ZB359170 and regulated by them for the purposes of data protection.

1.5 Our mortgage services are in relation to advice relating to second charge mortgages also known as a "secured loan" or "homeowner loan".

1.6 We act as a mortgage intermediary (broker) and not a lender. We are paid for loan completions once they are paid out to the customer only. Check out our scope of service for further information.

2. The kind of personal data we collect & what we do with it

2.1 In order to offer our services, we have to collect data from you, including personal and in some cases sensitive data also known as ‘special category’.

2.2 Set out below, are the kinds of data we collect, for what purpose it is collected and the lawful basis*:

Purpose

Data we process

Lawful basis

Retention of data

Purpose

To offer our services as set out in 1.5 and 1.6 above. To comply with regulatory obligations.

Data we process

Full name; previous name; age; DOB; marital/ relationship status; residential address; dependents; employment status and employer; Financial information (where applicable) for you and any financial associates including bank statements; payment card details; current debts; financial commitments; savings; income & expenditure and in some instances health conditions. In addition we may also request and store copies of your credit reference check, driving licence, proof of address and residency or Passport, marriage certificate or where applicable, probate documentation. Status of property including valuation and land registry details. (‘mortgage application data’)

Lawful basis

Performance of a contract Legal obligation Consent

Retention of data

6 years from the date you provided your information.

Purpose

Marketing our own products and services by way of email and or SMS as well as provide you with alerts such as when we believe there is another suitable product you could apply for.

Data we process

Email address and telephone number.

Lawful basis

Consent

Retention of data

On-going, unless withdrawn or no contact in the past 12 months.

Purpose

Marketing our partner, Cream

Data we process

Name, email address, telephone number and loan details

Lawful basis

Consent

Retention of data

6 years

Purpose

Service communications

Data we process

Email address, telephone number and where specified, address.

Lawful basis

Performance of a contract. Legal obligation.

Retention of data

6 years from the date you provided your information and where relevant.

Purpose

Call recordings

Data we process

All calls and their contents to ClearScore will be recorded.

Lawful basis

Regulatory and Legal requirements

Retention of data

6 years from the date you provided your information.

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

3. Where do we collect your data from

3.1 Most of the personal information we collect and process is provided to us directly by you.

3.2 We will receive information from credit reference agencies and fraud prevention agencies, ClearScore also uses soft searches to work out whether you're eligible for a product this includes checking any outstanding credit, defaulted payments or anything else relevant to the lending criteria and to ensure any product/s offered are suitable and affordable.

3.3 We may also receive personal information indirectly from third party firms you may have contacted directly and provided your consent to share your data with. For example, from a comparison site such as our sister company, ClearScore Everywhere Limited or another mortgage broker.

4. Who do we share your data with

Data Processors

4.1 Companies such as us, may use third parties to help them with things they are unable to do. These companies are referred to as data ‘Processors’. Processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

4.2 Listed below, are the names of the Processors we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party Processor

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party Processor

NIVO

What data we share

Mortgage application data Written communications throughout the application journey Correspondence from the lender where we have made a personal recommendation and where you have consented to proceed.

Why we share it

For the purposes of fulfilling the secured loan.

Lawful basis

Performance of a contract. Legal obligation

Retention of data

6 years from the data collected.

Name of third party Processor

Equifax

What data we share

Mortgage application data

Why we share it

To undertake a soft credit check.

Lawful basis

Legal obligation

Retention of data

6 years

Name of third party Processor

Surveyor/s - ClearScore works with 2 different surveying companies. Details of which will be provided to you as and when applicable.

What data we share

Full name; address and contact details.

Why we share it

To undertake a survey of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

Valuation company/ies – we work with 2 different valuation companies. Details of which will be provided to you as and when applicable.

What data we share

Full valuation: Full name; address and contact details. Drive by valuation: Full Name and Address.

Why we share it

To undertake a valuation of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

(Where applicable, Courier) FieldConnect Limited

What data we share

Full Name; address and contact details.

Why we share it

Upon the request of the customer, to collect mortgage related paperwork from the customers address in which it is returned to us in order to further facilitate the application.

Lawful basis

Consent

Retention of data

6 years

Name of third party Processor

Connex One

What data we share

Mortgage application data and Voice recordings

Why we share it

For the purposes of operating our Solutions Centre and Compliance purposes.

Lawful basis

Legal obligation Performance of a contract

Retention of data

6 years

Name of third party Processor

ClearScore Everywhere Limited

What data we share

Mortgage application data

Why we share it

Technical support to enable the facilitation of contact with new prospect where consent has been given.

Lawful basis

Performance of a contract

Retention of data

6 years

Data Controllers

4.3 In addition to the Processors above; we also share information with third parties for other reasons, please see below. These are known as joint Controllers or simply, data’ Controllers’ and so process data jointly with us for the purposes of the services set out above, yet may also process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

4.4 Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party

Those who make up the panel of mortgage lenders. Note, this is only applicable where ClearScore has provided advice and made a personal recommendation in which case, full disclosure of the lender/s will then be provided.

What data we share

Mortgage application data Surveyor report Valuation report

Why we share it

To facilitate your request and subsequent application for a secured loan.

Lawful basis

Performance of a contract.

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties who may have introduced you into us.

What data we share

Mortgage application data and where applicable, a record; in which details that we have sent information about a third party to you. For example, in the form of their terms and conditions or scope of service.

Why we share it

To facilitate your request to be introduced. To keep a record of information we have sent to you. To keep a record of any products or services you took out with/through them.

Lawful basis

Performance of a contract Legal obligation

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share

Mortgage application data.

Why we share it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention of data

6 years

Name of third party

Regulators, including but not limited to: ICO; FCA as well as independent government bodies such as the Financial Ombudsman Service ‘FOS’.

What data we share

Any data concerned with any visitor to our site. This may include those who took out products via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us.

Why we share it

To comply with the legal requirements placed on us as a regulated company.

Lawful basis

Legal obligation

Retention of data

NA

Name of third party

Law enforcement: NCA; Police

What data we share

The same as the above

Why we share it

To assist with criminal investigations.

Lawful basis

Legal obligation

Retention of data

NA

5.Transfers within the EEA and outside the EEA

5.1 Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA including the USA. This means we are to take extra assurance prior to any data transfers.

5.2 Should you wish to review your safeguards please contact us on the details below.

6. Data Security

How we store your personal information

6.1 All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data, and we are ISO27001 certified.

6.2 Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems, any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

7. Your data rights

7.1 Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision-making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

7.2 You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

8. How to make a data related complaint

8.1 If you have any concerns about our use of your personal information, you can contact us using any of the following –

FAO: The Data Protection Officer

Phone

0161 498 7739

Email

[email protected]

Post: ClearScore Complaints, Dakota House, Concord Business Park, Wythenshawe, Greater Manchester, M22 0RR, UK.

8.2 You can also complain to the ICO if you are unhappy with how we have used your data:

The ICO’s address

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number

0303 123 1113

ICO Website

www.ico.org.uk

ClearScore Home Lending Limited Data Privacy & Protection

1. Who are we? 2. The kind of personal data we collect & what we do with it3. Where do we collect your data from4. Who do we share your data with5.Transfers within the EEA and outside the EEA6. Data Security7. Your data rights8. How to make a data related complaint

ClearScore Home Lending Privacy Policy

Version 1

25 June 2025

1. Who are we?

1.1 ‘We’ ClearScore Home Lending Limited t/a ClearScore.

1.2 We act as an Appointed Representative of ClearScore Everywhere Limited who are authorised and regulated by the Financial Conduct Authority (Ref 662079).

1.3 We operate from: Dakota House, Concord Business Park, Simonsway Manchester M22 0RR and are registered at Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH.

1.4 We are registered with the Information Commissioners Office (‘ICO’) ZB359170 and regulated by them for the purposes of data protection.

1.5 Our mortgage services are in relation to advice relating to second charge mortgages also known as a "secured loan" or "homeowner loan".

1.6 We act as a mortgage intermediary (broker) and not a lender. We are paid for loan completions once they are paid out to the customer only. Check out our scope of service for further information.

2. The kind of personal data we collect & what we do with it

2.1 In order to offer our services, we have to collect data from you, including personal and in some cases sensitive data also known as ‘special category’.

2.2 Set out below, are the kinds of data we collect, for what purpose it is collected and the lawful basis*:

Purpose

Data we process

Lawful basis

Retention of data

Purpose

To offer our services as set out in 1.5 and 1.6 above. To comply with regulatory obligations.

Data we process

Full name; previous name; age; DOB; marital/ relationship status; residential address; dependents; employment status and employer; Financial information (where applicable) for you and any financial associates including bank statements; payment card details; current debts; financial commitments; savings; income & expenditure and in some instances health conditions. In addition we may also request and store copies of your credit reference check, driving licence, proof of address and residency or Passport, marriage certificate or where applicable, probate documentation. Status of property including valuation and land registry details. (‘mortgage application data’)

Lawful basis

Performance of a contract Legal obligation Consent

Retention of data

6 years from the date you provided your information.

Purpose

Marketing our own products and services by way of email and or SMS as well as provide you with alerts such as when we believe there is another suitable product you could apply for.

Data we process

Email address and telephone number.

Lawful basis

Consent

Retention of data

On-going, unless withdrawn or no contact in the past 12 months.

Purpose

Marketing our partner, Cream

Data we process

Name, email address, telephone number and loan details

Lawful basis

Consent

Retention of data

6 years

Purpose

Service communications

Data we process

Email address, telephone number and where specified, address.

Lawful basis

Performance of a contract. Legal obligation.

Retention of data

6 years from the date you provided your information and where relevant.

Purpose

Call recordings

Data we process

All calls and their contents to ClearScore will be recorded.

Lawful basis

Regulatory and Legal requirements

Retention of data

6 years from the date you provided your information.

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

3. Where do we collect your data from

3.1 Most of the personal information we collect and process is provided to us directly by you.

3.2 We will receive information from credit reference agencies and fraud prevention agencies, ClearScore also uses soft searches to work out whether you're eligible for a product this includes checking any outstanding credit, defaulted payments or anything else relevant to the lending criteria and to ensure any product/s offered are suitable and affordable.

3.3 We may also receive personal information indirectly from third party firms you may have contacted directly and provided your consent to share your data with. For example, from a comparison site such as our sister company, ClearScore Everywhere Limited or another mortgage broker.

4. Who do we share your data with

Data Processors

4.1 Companies such as us, may use third parties to help them with things they are unable to do. These companies are referred to as data ‘Processors’. Processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

4.2 Listed below, are the names of the Processors we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party Processor

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party Processor

NIVO

What data we share

Mortgage application data Written communications throughout the application journey Correspondence from the lender where we have made a personal recommendation and where you have consented to proceed.

Why we share it

For the purposes of fulfilling the secured loan.

Lawful basis

Performance of a contract. Legal obligation

Retention of data

6 years from the data collected.

Name of third party Processor

Equifax

What data we share

Mortgage application data

Why we share it

To undertake a soft credit check.

Lawful basis

Legal obligation

Retention of data

6 years

Name of third party Processor

Surveyor/s - ClearScore works with 2 different surveying companies. Details of which will be provided to you as and when applicable.

What data we share

Full name; address and contact details.

Why we share it

To undertake a survey of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

Valuation company/ies – we work with 2 different valuation companies. Details of which will be provided to you as and when applicable.

What data we share

Full valuation: Full name; address and contact details. Drive by valuation: Full Name and Address.

Why we share it

To undertake a valuation of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

(Where applicable, Courier) FieldConnect Limited

What data we share

Full Name; address and contact details.

Why we share it

Upon the request of the customer, to collect mortgage related paperwork from the customers address in which it is returned to us in order to further facilitate the application.

Lawful basis

Consent

Retention of data

6 years

Name of third party Processor

Connex One

What data we share

Mortgage application data and Voice recordings

Why we share it

For the purposes of operating our Solutions Centre and Compliance purposes.

Lawful basis

Legal obligation Performance of a contract

Retention of data

6 years

Name of third party Processor

ClearScore Everywhere Limited

What data we share

Mortgage application data

Why we share it

Technical support to enable the facilitation of contact with new prospect where consent has been given.

Lawful basis

Performance of a contract

Retention of data

6 years

Data Controllers

4.3 In addition to the Processors above; we also share information with third parties for other reasons, please see below. These are known as joint Controllers or simply, data’ Controllers’ and so process data jointly with us for the purposes of the services set out above, yet may also process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

4.4 Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party

Those who make up the panel of mortgage lenders. Note, this is only applicable where ClearScore has provided advice and made a personal recommendation in which case, full disclosure of the lender/s will then be provided.

What data we share

Mortgage application data Surveyor report Valuation report

Why we share it

To facilitate your request and subsequent application for a secured loan.

Lawful basis

Performance of a contract.

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties who may have introduced you into us.

What data we share

Mortgage application data and where applicable, a record; in which details that we have sent information about a third party to you. For example, in the form of their terms and conditions or scope of service.

Why we share it

To facilitate your request to be introduced. To keep a record of information we have sent to you. To keep a record of any products or services you took out with/through them.

Lawful basis

Performance of a contract Legal obligation

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share

Mortgage application data.

Why we share it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention of data

6 years

Name of third party

Regulators, including but not limited to: ICO; FCA as well as independent government bodies such as the Financial Ombudsman Service ‘FOS’.

What data we share

Any data concerned with any visitor to our site. This may include those who took out products via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us.

Why we share it

To comply with the legal requirements placed on us as a regulated company.

Lawful basis

Legal obligation

Retention of data

NA

Name of third party

Law enforcement: NCA; Police

What data we share

The same as the above

Why we share it

To assist with criminal investigations.

Lawful basis

Legal obligation

Retention of data

NA

5.Transfers within the EEA and outside the EEA

5.1 Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA including the USA. This means we are to take extra assurance prior to any data transfers.

5.2 Should you wish to review your safeguards please contact us on the details below.

6. Data Security

How we store your personal information

6.1 All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data, and we are ISO27001 certified.

6.2 Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems, any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

7. Your data rights

7.1 Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision-making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

7.2 You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

8. How to make a data related complaint

8.1 If you have any concerns about our use of your personal information, you can contact us using any of the following –

FAO: The Data Protection Officer

Phone

0161 498 7739

Email

[email protected]

Post: ClearScore Complaints, Dakota House, Concord Business Park, Wythenshawe, Greater Manchester, M22 0RR, UK.

8.2 You can also complain to the ICO if you are unhappy with how we have used your data:

The ICO’s address

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number

0303 123 1113

ICO Website

www.ico.org.uk

ClearScore Home Lending Limited Data Privacy & Protection

1. Who are we? 2. The kind of personal data we collect & what we do with it3. Where do we collect your data from4. Who do we share your data with5.Transfers within the EEA and outside the EEA6. Data Security7. Your data rights8. How to make a data related complaint

ClearScore Home Lending Privacy Policy

Version 1

25 June 2025

1. Who are we?

1.1 ‘We’ ClearScore Home Lending Limited t/a ClearScore.

1.2 We act as an Appointed Representative of ClearScore Everywhere Limited who are authorised and regulated by the Financial Conduct Authority (Ref 662079).

1.3 We operate from: Dakota House, Concord Business Park, Simonsway Manchester M22 0RR and are registered at Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH.

1.4 We are registered with the Information Commissioners Office (‘ICO’) ZB359170 and regulated by them for the purposes of data protection.

1.5 Our mortgage services are in relation to advice relating to second charge mortgages also known as a "secured loan" or "homeowner loan".

1.6 We act as a mortgage intermediary (broker) and not a lender. We are paid for loan completions once they are paid out to the customer only. Check out our scope of service for further information.

2. The kind of personal data we collect & what we do with it

2.1 In order to offer our services, we have to collect data from you, including personal and in some cases sensitive data also known as ‘special category’.

2.2 Set out below, are the kinds of data we collect, for what purpose it is collected and the lawful basis*:

Purpose

Data we process

Lawful basis

Retention of data

Purpose

To offer our services as set out in 1.5 and 1.6 above. To comply with regulatory obligations.

Data we process

Full name; previous name; age; DOB; marital/ relationship status; residential address; dependents; employment status and employer; Financial information (where applicable) for you and any financial associates including bank statements; payment card details; current debts; financial commitments; savings; income & expenditure and in some instances health conditions. In addition we may also request and store copies of your credit reference check, driving licence, proof of address and residency or Passport, marriage certificate or where applicable, probate documentation. Status of property including valuation and land registry details. (‘mortgage application data’)

Lawful basis

Performance of a contract Legal obligation Consent

Retention of data

6 years from the date you provided your information.

Purpose

Marketing our own products and services by way of email and or SMS as well as provide you with alerts such as when we believe there is another suitable product you could apply for.

Data we process

Email address and telephone number.

Lawful basis

Consent

Retention of data

On-going, unless withdrawn or no contact in the past 12 months.

Purpose

Marketing our partner, Cream

Data we process

Name, email address, telephone number and loan details

Lawful basis

Consent

Retention of data

6 years

Purpose

Service communications

Data we process

Email address, telephone number and where specified, address.

Lawful basis

Performance of a contract. Legal obligation.

Retention of data

6 years from the date you provided your information and where relevant.

Purpose

Call recordings

Data we process

All calls and their contents to ClearScore will be recorded.

Lawful basis

Regulatory and Legal requirements

Retention of data

6 years from the date you provided your information.

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

3. Where do we collect your data from

3.1 Most of the personal information we collect and process is provided to us directly by you.

3.2 We will receive information from credit reference agencies and fraud prevention agencies, ClearScore also uses soft searches to work out whether you're eligible for a product this includes checking any outstanding credit, defaulted payments or anything else relevant to the lending criteria and to ensure any product/s offered are suitable and affordable.

3.3 We may also receive personal information indirectly from third party firms you may have contacted directly and provided your consent to share your data with. For example, from a comparison site such as our sister company, ClearScore Everywhere Limited or another mortgage broker.

4. Who do we share your data with

Data Processors

4.1 Companies such as us, may use third parties to help them with things they are unable to do. These companies are referred to as data ‘Processors’. Processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

4.2 Listed below, are the names of the Processors we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party Processor

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party Processor

NIVO

What data we share

Mortgage application data Written communications throughout the application journey Correspondence from the lender where we have made a personal recommendation and where you have consented to proceed.

Why we share it

For the purposes of fulfilling the secured loan.

Lawful basis

Performance of a contract. Legal obligation

Retention of data

6 years from the data collected.

Name of third party Processor

Equifax

What data we share

Mortgage application data

Why we share it

To undertake a soft credit check.

Lawful basis

Legal obligation

Retention of data

6 years

Name of third party Processor

Surveyor/s - ClearScore works with 2 different surveying companies. Details of which will be provided to you as and when applicable.

What data we share

Full name; address and contact details.

Why we share it

To undertake a survey of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

Valuation company/ies – we work with 2 different valuation companies. Details of which will be provided to you as and when applicable.

What data we share

Full valuation: Full name; address and contact details. Drive by valuation: Full Name and Address.

Why we share it

To undertake a valuation of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

(Where applicable, Courier) FieldConnect Limited

What data we share

Full Name; address and contact details.

Why we share it

Upon the request of the customer, to collect mortgage related paperwork from the customers address in which it is returned to us in order to further facilitate the application.

Lawful basis

Consent

Retention of data

6 years

Name of third party Processor

Connex One

What data we share

Mortgage application data and Voice recordings

Why we share it

For the purposes of operating our Solutions Centre and Compliance purposes.

Lawful basis

Legal obligation Performance of a contract

Retention of data

6 years

Name of third party Processor

ClearScore Everywhere Limited

What data we share

Mortgage application data

Why we share it

Technical support to enable the facilitation of contact with new prospect where consent has been given.

Lawful basis

Performance of a contract

Retention of data

6 years

Data Controllers

4.3 In addition to the Processors above; we also share information with third parties for other reasons, please see below. These are known as joint Controllers or simply, data’ Controllers’ and so process data jointly with us for the purposes of the services set out above, yet may also process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

4.4 Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party

Those who make up the panel of mortgage lenders. Note, this is only applicable where ClearScore has provided advice and made a personal recommendation in which case, full disclosure of the lender/s will then be provided.

What data we share

Mortgage application data Surveyor report Valuation report

Why we share it

To facilitate your request and subsequent application for a secured loan.

Lawful basis

Performance of a contract.

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties who may have introduced you into us.

What data we share

Mortgage application data and where applicable, a record; in which details that we have sent information about a third party to you. For example, in the form of their terms and conditions or scope of service.

Why we share it

To facilitate your request to be introduced. To keep a record of information we have sent to you. To keep a record of any products or services you took out with/through them.

Lawful basis

Performance of a contract Legal obligation

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share

Mortgage application data.

Why we share it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention of data

6 years

Name of third party

Regulators, including but not limited to: ICO; FCA as well as independent government bodies such as the Financial Ombudsman Service ‘FOS’.

What data we share

Any data concerned with any visitor to our site. This may include those who took out products via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us.

Why we share it

To comply with the legal requirements placed on us as a regulated company.

Lawful basis

Legal obligation

Retention of data

NA

Name of third party

Law enforcement: NCA; Police

What data we share

The same as the above

Why we share it

To assist with criminal investigations.

Lawful basis

Legal obligation

Retention of data

NA

5.Transfers within the EEA and outside the EEA

5.1 Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA including the USA. This means we are to take extra assurance prior to any data transfers.

5.2 Should you wish to review your safeguards please contact us on the details below.

6. Data Security

How we store your personal information

6.1 All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data, and we are ISO27001 certified.

6.2 Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems, any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

7. Your data rights

7.1 Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision-making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

7.2 You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

8. How to make a data related complaint

8.1 If you have any concerns about our use of your personal information, you can contact us using any of the following –

FAO: The Data Protection Officer

Phone

0161 498 7739

Email

[email protected]

Post: ClearScore Complaints, Dakota House, Concord Business Park, Wythenshawe, Greater Manchester, M22 0RR, UK.

8.2 You can also complain to the ICO if you are unhappy with how we have used your data:

The ICO’s address

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number

0303 123 1113

ICO Website

www.ico.org.uk

ClearScore Home Lending Limited Data Privacy & Protection

1. Who are we? 2. The kind of personal data we collect & what we do with it3. Where do we collect your data from4. Who do we share your data with5.Transfers within the EEA and outside the EEA6. Data Security7. Your data rights8. How to make a data related complaint

ClearScore Home Lending Privacy Policy

Version 1

25 June 2025

1. Who are we?

1.1 ‘We’ ClearScore Home Lending Limited t/a ClearScore.

1.2 We act as an Appointed Representative of ClearScore Everywhere Limited who are authorised and regulated by the Financial Conduct Authority (Ref 662079).

1.3 We operate from: Dakota House, Concord Business Park, Simonsway Manchester M22 0RR and are registered at Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH.

1.4 We are registered with the Information Commissioners Office (‘ICO’) ZB359170 and regulated by them for the purposes of data protection.

1.5 Our mortgage services are in relation to advice relating to second charge mortgages also known as a "secured loan" or "homeowner loan".

1.6 We act as a mortgage intermediary (broker) and not a lender. We are paid for loan completions once they are paid out to the customer only. Check out our scope of service for further information.

2. The kind of personal data we collect & what we do with it

2.1 In order to offer our services, we have to collect data from you, including personal and in some cases sensitive data also known as ‘special category’.

2.2 Set out below, are the kinds of data we collect, for what purpose it is collected and the lawful basis*:

Purpose

Data we process

Lawful basis

Retention of data

Purpose

To offer our services as set out in 1.5 and 1.6 above. To comply with regulatory obligations.

Data we process

Full name; previous name; age; DOB; marital/ relationship status; residential address; dependents; employment status and employer; Financial information (where applicable) for you and any financial associates including bank statements; payment card details; current debts; financial commitments; savings; income & expenditure and in some instances health conditions. In addition we may also request and store copies of your credit reference check, driving licence, proof of address and residency or Passport, marriage certificate or where applicable, probate documentation. Status of property including valuation and land registry details. (‘mortgage application data’)

Lawful basis

Performance of a contract Legal obligation Consent

Retention of data

6 years from the date you provided your information.

Purpose

Marketing our own products and services by way of email and or SMS as well as provide you with alerts such as when we believe there is another suitable product you could apply for.

Data we process

Email address and telephone number.

Lawful basis

Consent

Retention of data

On-going, unless withdrawn or no contact in the past 12 months.

Purpose

Marketing our partner, Cream

Data we process

Name, email address, telephone number and loan details

Lawful basis

Consent

Retention of data

6 years

Purpose

Service communications

Data we process

Email address, telephone number and where specified, address.

Lawful basis

Performance of a contract. Legal obligation.

Retention of data

6 years from the date you provided your information and where relevant.

Purpose

Call recordings

Data we process

All calls and their contents to ClearScore will be recorded.

Lawful basis

Regulatory and Legal requirements

Retention of data

6 years from the date you provided your information.

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

3. Where do we collect your data from

3.1 Most of the personal information we collect and process is provided to us directly by you.

3.2 We will receive information from credit reference agencies and fraud prevention agencies, ClearScore also uses soft searches to work out whether you're eligible for a product this includes checking any outstanding credit, defaulted payments or anything else relevant to the lending criteria and to ensure any product/s offered are suitable and affordable.

3.3 We may also receive personal information indirectly from third party firms you may have contacted directly and provided your consent to share your data with. For example, from a comparison site such as our sister company, ClearScore Everywhere Limited or another mortgage broker.

4. Who do we share your data with

Data Processors

4.1 Companies such as us, may use third parties to help them with things they are unable to do. These companies are referred to as data ‘Processors’. Processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

4.2 Listed below, are the names of the Processors we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party Processor

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party Processor

NIVO

What data we share

Mortgage application data Written communications throughout the application journey Correspondence from the lender where we have made a personal recommendation and where you have consented to proceed.

Why we share it

For the purposes of fulfilling the secured loan.

Lawful basis

Performance of a contract. Legal obligation

Retention of data

6 years from the data collected.

Name of third party Processor

Equifax

What data we share

Mortgage application data

Why we share it

To undertake a soft credit check.

Lawful basis

Legal obligation

Retention of data

6 years

Name of third party Processor

Surveyor/s - ClearScore works with 2 different surveying companies. Details of which will be provided to you as and when applicable.

What data we share

Full name; address and contact details.

Why we share it

To undertake a survey of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

Valuation company/ies – we work with 2 different valuation companies. Details of which will be provided to you as and when applicable.

What data we share

Full valuation: Full name; address and contact details. Drive by valuation: Full Name and Address.

Why we share it

To undertake a valuation of the property in which the application is associated with.

Lawful basis

Performance of a contract

Retention of data

6 years

Name of third party Processor

(Where applicable, Courier) FieldConnect Limited

What data we share

Full Name; address and contact details.

Why we share it

Upon the request of the customer, to collect mortgage related paperwork from the customers address in which it is returned to us in order to further facilitate the application.

Lawful basis

Consent

Retention of data

6 years

Name of third party Processor

Connex One

What data we share

Mortgage application data and Voice recordings

Why we share it

For the purposes of operating our Solutions Centre and Compliance purposes.

Lawful basis

Legal obligation Performance of a contract

Retention of data

6 years

Name of third party Processor

ClearScore Everywhere Limited

What data we share

Mortgage application data

Why we share it

Technical support to enable the facilitation of contact with new prospect where consent has been given.

Lawful basis

Performance of a contract

Retention of data

6 years

Data Controllers

4.3 In addition to the Processors above; we also share information with third parties for other reasons, please see below. These are known as joint Controllers or simply, data’ Controllers’ and so process data jointly with us for the purposes of the services set out above, yet may also process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

4.4 Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share

Why we share it

Lawful basis

Retention of data

Name of third party

Those who make up the panel of mortgage lenders. Note, this is only applicable where ClearScore has provided advice and made a personal recommendation in which case, full disclosure of the lender/s will then be provided.

What data we share

Mortgage application data Surveyor report Valuation report

Why we share it

To facilitate your request and subsequent application for a secured loan.

Lawful basis

Performance of a contract.

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties who may have introduced you into us.

What data we share

Mortgage application data and where applicable, a record; in which details that we have sent information about a third party to you. For example, in the form of their terms and conditions or scope of service.

Why we share it

To facilitate your request to be introduced. To keep a record of information we have sent to you. To keep a record of any products or services you took out with/through them.

Lawful basis

Performance of a contract Legal obligation

Retention of data

6 years or longer where retained for marketing purposes.

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share

Mortgage application data.

Why we share it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention of data

6 years

Name of third party

Regulators, including but not limited to: ICO; FCA as well as independent government bodies such as the Financial Ombudsman Service ‘FOS’.

What data we share

Any data concerned with any visitor to our site. This may include those who took out products via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us.

Why we share it

To comply with the legal requirements placed on us as a regulated company.

Lawful basis

Legal obligation

Retention of data

NA

Name of third party

Law enforcement: NCA; Police

What data we share

The same as the above

Why we share it

To assist with criminal investigations.

Lawful basis

Legal obligation

Retention of data

NA

5.Transfers within the EEA and outside the EEA

5.1 Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA including the USA. This means we are to take extra assurance prior to any data transfers.

5.2 Should you wish to review your safeguards please contact us on the details below.

6. Data Security

How we store your personal information

6.1 All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data, and we are ISO27001 certified.

6.2 Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems, any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

7. Your data rights

7.1 Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision-making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

7.2 You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

8. How to make a data related complaint

8.1 If you have any concerns about our use of your personal information, you can contact us using any of the following –

FAO: The Data Protection Officer

Phone

0161 498 7739

Email

[email protected]

Post: ClearScore Complaints, Dakota House, Concord Business Park, Wythenshawe, Greater Manchester, M22 0RR, UK.

8.2 You can also complain to the ICO if you are unhappy with how we have used your data:

The ICO’s address

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number

0303 123 1113

ICO Website

www.ico.org.uk

ClearScore Home Lending Limited Data Privacy & Protection

1. Who are we? 2. The kind of personal data we collect & what we do with it3. Where do we collect your data from4. Who do we share your data with5.Transfers within the EEA and outside the EEA6. Data Security7. Your data rights8. How to make a data related complaint