Driva Finance Limited – Privacy Policy

Status Disclosure

Driva Finance Limited (Company Number 16538568) is an appointed representative of Consumer Credit Compliance Limited, which is authorised and regulated by the Financial Conduct Authority (FRN: 631736). We are a credit broker, not a lender. You can verify this on the Financial Services Register at https://register.fca.org.uk.

We are registered with the Information Commissioners Office, with an ICO registration number of ZB931647.

1. Purpose

This Privacy Policy explains how Driva (“we”, “us”, “our”) collects, uses, stores, and shares your personal data under the UK GDPR, Data Protection Act 2018, and related laws. We handle your personal information with care, transparency, and in keeping with regulatory standards.

2. Data Controller

Driva Finance Limited is the data controller. Contact details:
Post: 55 Baker Street, London, W1U 7EU, United Kingdom
Email: contact@drivafinance.co.uk
Phone: 01727 326 213

3. Information Collected

We may collect data including but not limited to: 

• Identity Data: Name, date of birth, addresses
• Contact Data: Email, phone number
• Financial Data: Income, employment status, bank statements
• Identification Data: Passport, driving licence
• Credit Data: Credit scores, financial history, credit report
• Technical Data: IP address, browser type, device data
• Special Category Data: Health or vulnerability information, only with explicit consent
• Open Banking Data: Banking transaction data, only with your consent

4. How We Collect Data

We collect data from:

• You directly (forms, communication)
• Referral partners (dealers, brokers)
• Credit reference agencies (e.g., Experian, Equifax, TransUnion)
• Fraud prevention agencies (e.g., CIFAS, National Hunter)
• Public sources (e.g., Companies House)
• Cookies and web analytics

5. Consent to Conduct Credit Searches

At Driva Finance, we work with Credit Reference Agencies (CRAs) to carry out the necessary credit and identity checks when you apply for finance through us. This process involves providing the CRAs with certain personal information and receiving information back from them. We use this information to confirm your identity, assess your creditworthiness, and verify the accuracy of the details you have provided.

As part of this process, we may request a credit score from a CRA. Credit scoring evaluates multiple factors about you to help us understand the level of risk involved in providing finance. Each factor is given a score, which is then combined to produce an overall result. While automated credit scoring can form part of our decision-making, we will not rely solely on it when determining whether your application can proceed.

When a search is carried out with a CRA, it will be recorded on your credit file. This is often referred to as a “credit search”. Other organisations — such as lenders or service providers — may be able to see this search when preparing their own assessments about you.

CRAs publish a document called the “Credit Reference Agency Information Notice” (CRAIN), which explains in detail how they collect, use, and share personal data, and how they help prevent fraud. You can view the CRAIN for each of the main UK CRAs using the links below:

• Experian: https://www.experian.co.uk/legal/crain/
  
  
• Equifax: https://www.equifax.co.uk/crain/
  
  
• TransUnion: https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
  
  

More information about how CRAs use personal data and your rights under UK data protection laws can be found on the Information Commissioner’s Office (ICO) website: https://ico.org.uk/for-the-public/credit/

6. Purposes and Lawful Bases

Purpose

Lawful Basis

Assess eligibility

Contract

Match with lenders

Contract

Comply with law

Legal obligation

Improve service

Legitimate interest

Provide support/dispute resolution

Contract / Legitimate interest

Fraud prevention and identity checks

Legal obligation / Legitimate interest

Marketing

Consent / Legitimate interest

Support vulnerable customers

Consent / Legitimate interest

7. Data Sharing

We may share your data with:

• Lenders
• Credit reference and fraud prevention agencies
• Open banking providers (with consent)
• Driva Pty Ltd in Australia (protected by Standard Contractual Clauses)
• Technology and cloud service providers
• Regulators or law enforcement (where legally required)
• Third parties you authorise
  
  

8. UK International Transfers

Any data transfers outside the UK (e.g., to Australia) are secured by appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions.

9. Retention

We retain data for six years following the end of our business relationship or as required by FCA rules.

10. Your Rights

You are entitled to:

• Access your data
• Rectify errors
• Erase data (where permitted)
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Complain to the ICO (https://ico.org.uk)

We respond to requests within one month.

11. Cookies

We use cookies for functionality, analytics, and personalisation. You may disable cookies, but some site features may be impacted.

12. Marketing

We may contact you with relevant offers. You may opt out at any time via “unsubscribe” links or by contacting us directly.

13. Vulnerable Customers

If you feel vulnerable, please tell us so we can offer additional support, such as alternative formats or extended timeframes.

14. Changes to this Policy

This Privacy Policy may be updated occasionally. The latest version will always be published on our website.

15. Contact Us

Driva Finance Limited
55 Baker Street, London, W1U 7EU, United Kingdom
Email: contact@drivafinance.co.uk
Website: www.drivafinance.co.uk