Driva Finance Limited – Privacy Policy 

Status Disclosure 

Driva Finance Limited (FRN 1039705) is an Appointed Representative of Consumer Credit Compliance Limited, who are authorised and regulated by the Financial Conduct Authority (FRN 631736). We are a credit broker, not a lender, that introduces you to a financial provider to meet your finance demands and needs. 

You can check this on the Financial Services Register at https://register.fca.org.uk 

We are registered with the Information Commissioners Office, with an ICO registration number of ZB931647. 

1. Purpose 

This Privacy Policy explains how Driva (“we”, “us”, “our”) collects, uses, stores, and shares your personal data under the UK GDPR, Data Protection Act 2018, and related laws. We handle your personal information with care, transparency, and in keeping with regulatory standards. 

2. Data Controller 

Driva Finance Limited is the data controller. Contact details: 

Post: 55 Baker Street, London, W1U 7EU, United Kingdom 

Email: contact@drivafinance.co.uk 

Phone: 01727 326 213 

3. Information Collected 

We may collect data including but not limited to: 

• Identity Data: Name, date of birth, addresses 
• Contact Data: Email, phone number 
• Financial Data: Income, employment status, bank statements 
• Identification Data: Passport, driving licence 
• Credit Data: Credit scores, financial history, credit report 
• Technical Data: IP address, browser type, device data 
• Special Category Data: Health or vulnerability information, only with explicit consent
• Open Banking Data: Banking transaction data, only with your consent 

4. How We Collect Data 

We collect data from:

• You directly (forms, communication) 
• Referral partners (dealers, brokers) 
• Credit reference agencies (e.g., Experian, Equifax, TransUnion) 
• Fraud prevention agencies (e.g., CIFAS, National Hunter) 
• Public sources (e.g., Companies House) 
• Cookies and web analytics 

5. Consent to Conduct Credit Searches 

At Driva Finance, we work with Credit Reference Agencies (CRAs) to carry out the necessary credit and identity checks when you apply for finance through us. This process involves providing the CRAs with certain personal information and receiving information back from them. We use this information to confirm your identity, assess your creditworthiness, and verify the accuracy of the details you have provided. 

As part of this process, we may request a credit score from a CRA. Credit scoring evaluates multiple factors about you to help us understand the level of risk involved in providing finance. Each factor is given a score, which is then combined to produce an overall result. While automated credit scoring can form part of our decision-making, we will not rely solely on it when determining whether your application can proceed. 

When a search is carried out with a CRA, it will be recorded on your credit file. This is often referred to as a “credit search”. Other organisations — such as lenders or service providers — may be able to see this search when preparing their own assessments about you. 

CRAs publish a document called the “Credit Reference Agency Information Notice” (CRAIN), which explains in detail how they collect, use, and share personal data, and how they help prevent fraud. You can view the CRAIN for each of the main UK CRAs using the links below: 

• Experian: https://www.experian.co.uk/legal/crain/ 
• Equifax: https://www.equifax.co.uk/crain/ 
• TransUnion: https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference 

More information about how CRAs use personal data and your rights under UK data protection laws can be found on the Information Commissioner’s Office (ICO) website: https://ico.org.uk/for-the-public/credit/ 

6. Purposes and Lawful Bases 

We have documented the purposes and lawful basis in the following format below - Purpose: Lawful Basis

• Assess eligibility: Contract
• Match with lenders: Contract
• Comply with law: Legal obligation
• Improve service: Legitimate interest
• Provide support/dispute resolution: Contract / Legitimate interest
• Fraud prevention and identity checks: Legal obligation / Legitimate interest
• Marketing: Consent / Legitimate interest
• Support vulnerable customers: Consent / Legitimate interest
  

We may share your data with:

• Credit reference and fraud prevention agencies 
• Open banking providers (with consent) 
• Driva Pty Ltd in Australia (protected by Standard Contractual Clauses)
• Technology and cloud service providers 
• Regulators or law enforcement (where legally required) 
• Third parties you authorise 
  

Lenders

Where you apply for finance through Driva Finance Limited, we may share your personal information with one or more of our panel lenders to assess your eligibility for finance, obtain lending decisions and, where applicable, arrange and administer your finance agreement.

Lenders and their Privacy Policy

Our current lender panel includes:

• Admiral Money: https://www.admiralmoney.co.uk/privacy-policy 
• Advantage Finance: https://www.advantage-finance.co.uk/Information/UseOfYourData
• Lendable t/a Zable: https://zable.co.uk/privacy
• Carmoola: https://www.carmoola.co.uk/legal/privacy-policy
• Go Car Credit: https://gocarcredit.co.uk/privacy-policy 
• Marsh Finance: https://marshfinance.com/privacy-policy 
• Moneybarn: https://www.moneybarn.com/privacy-policy
• Oodle: https://www.oodlecarfinance.com/privacy-policy
• Tandem Motor Finance: https://www.tandem.co.uk/privacy-policy
• Marshmallow Finance: https://www.marshmallow.com/privacy-policy

Each lender acts as an independent data controller once they receive your personal information and will process your data in accordance with their own privacy policy. We encourage you to review the relevant lender's privacy policy before proceeding with your application.

8. UK International Transfers 

Any data transfers outside the UK (e.g., to Australia) are secured by appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions. 

9. Retention

We retain data for six years following the end of our business relationship or as required by FCA rules. 

10. Your Rights 

You are entitled to: 

• Access your data 
• Rectify errors 
• Erase data (where permitted) 
• Restrict processing 
• Object to processing 
• Withdraw consent 
• Request data portability 
• Complain to the ICO (https://ico.org.uk) 

We respond to requests within one month. 

11. Cookies 

We use cookies for functionality, analytics, and personalisation. You may disable cookies, but some site features may be impacted. 

12. Marketing 

We may contact you with relevant offers. You may opt out at any time via “unsubscribe” links or by contacting us directly. 

13. Vulnerable Customers 

If you feel vulnerable, please tell us so we can offer additional support, such as alternative formats or extended timeframes. 

14. Changes to this Policy 

This Privacy Policy may be updated occasionally. The latest version will always be published on our website. 

15. Contact Us 

Driva Finance Limited 

55 Baker Street, London, W1U 7EU, United Kingdom 

Email: contact@drivafinance.co.uk 

Website: www.drivafinance.co.uk

Last Updated July 2026