We may collect identity details, contact details, date of birth, address history, account or reference numbers, financial information, employment or income information, expenditure information, application information, payment information, complaint information, marketing preferences, cookie preferences, technical data, website usage data and any other information you choose to provide.
Where relevant, we may collect credit reference, affordability, identity verification, fraud prevention, anti-money laundering, sanctions screening, public record and risk assessment information.
We may collect special category data, such as health, vulnerability or accessibility information, only where you choose to provide it or where it is necessary for us to support you, make reasonable adjustments, or comply with legal or regulatory obligations.

We may collect personal data directly from you when you complete an enquiry form, application form, web-chat, complaint form or contact us by telephone, email or post.
We may also collect personal data from brokers, intermediaries, introducers, lenders, funders, servicing partners, credit reference agencies, Creditsafe Business Solutions Limited, TransUnion International UK Limited, fraud prevention agencies, identity verification providers, anti-money laundering providers, sanctions screening providers, public records, Companies House, the electoral register, court records, insolvency registers, payment service providers, banks, professional advisers, regulators, law enforcement agencies and service providers who support our application, screening, compliance, customer management, IT, hosting, analytics or communications processes.
Where we obtain personal data from third parties, we will only do so where we have a lawful basis and where the use of that data is necessary for legitimate business, legal, regulatory, fraud prevention, creditworthiness, affordability, identity verification or customer management purposes.

To help us assess applications, verify identity, assess affordability, prevent fraud, manage risk, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies and third-party data providers.

We may obtain this information through Creditsafe Business Solutions Limited. Creditsafe may use its data partner TransUnion International UK Limited to supply consumer credit, identity, affordability and related data.

• Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority. FCA Firm Reference Number: 742313.
• TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority. FCA Firm Reference Number: 737740.

The information we receive may include data relating to your identity, address history, credit commitments, repayment history, credit accounts, credit searches, financial associations, court judgments, insolvency records, public record information, fraud prevention indicators, and affordability or risk indicators.

We use this information for legitimate business purposes including assessing creditworthiness, assessing affordability, checking identity and address information, preventing and detecting fraud, money laundering and financial crime, managing risk, supporting regulatory compliance, making lending, broking, funding or product suitability assessments, managing applications, accounts, arrears, complaints or customer relationships, and protecting our business, customers, systems and third-party data provider information.

When a credit reference or identity check is carried out, the credit reference agency or data provider may keep a record of the search. This is sometimes known as a search footprint. Depending on the type of search, it may be visible to you and, in some cases, to other organisations that later search your credit file.

Further information about how Creditsafe and TransUnion process personal data can be found in their privacy and transparency notices

• respond to enquiries, applications and requests.
• assess whether we can provide, arrange, refer, fund or administer a product or service.
• assess creditworthiness and affordability.
• verify identity, address and contact information.
• prevent and detect fraud, money laundering, misuse of services and financial crime.
• process payments and manage accounts.
• handle complaints and customer service requests.
• manage existing customer, broker, introducer, supplier and business partner relationships.
• comply with legal and regulatory obligations.
• keep the Website, systems and data secure.
• administer, maintain and improve the Website.
• send marketing communications where permitted by law.
• record and respect marketing and cookie preferences.
• support vulnerable customers and make reasonable adjustments where needed.
• establish, exercise or defend legal claims.

We will only use your personal data where we have a lawful basis to do so under UK data protection law. Depending on the activity, we may rely on contract, legitimate interests, legal obligation, consent, substantial public interest or another lawful basis permitted by law.

Contract
We may use your personal data where necessary to take steps at your request before entering into a contract, or where necessary to perform a contract with you.

Legal Obligation
We may use your personal data where necessary to comply with legal or regulatory obligations, including financial services, consumer credit, anti-money laundering, fraud prevention, complaints handling, tax, accounting, court order or regulatory obligations.

Consent
We may rely on consent for certain marketing communications, non-essential cookies, or certain special category data where explicit consent is required. You can withdraw consent at any time.

Substantial Public Interest
Where you provide health, vulnerability or accessibility information, we may process that information where necessary for reasons of substantial public interest, such as supporting vulnerable customers, making reasonable adjustments, preventing fraud or complying with legal and regulatory obligations.

Legitimate Interests
Our legitimate interests include operating and managing our business, responding to enquiries and applications, assessing suitability, creditworthiness and affordability, verifying identity and contact details, preventing and detecting fraud, fulfilling contractual obligations, managing business relationships, ensuring system and data security, supporting audit and compliance activities, protecting our rights and systems, protecting TransUnion data where applicable, improving our Website and services, and maintaining accurate business records. These interests are balanced against your rights and freedoms, with appropriate safeguards in place.

The provision of certain personal data is primarily contractual and, in some circumstances, required to meet legal or regulatory obligations. Personal data may be required to respond to your enquiry or application, assess whether services can be provided, enter into and perform contracts, process applications and payments, verify identity, prevent fraud, carry out credit reference and affordability checks, manage complaints and comply with legal, regulatory, accounting, tax and record keeping obligations.
If you choose not to provide personal data that we reasonably require, we may be unable to respond to your enquiry, verify your identity, carry out necessary checks, enter into or perform a contract, provide or arrange services, meet legal or regulatory obligations, or our services may be delayed, restricted or declined. Where personal data is requested for optional purposes, such as marketing, providing it is not mandatory and you can withdraw consent or opt out at any time.

We may share personal data where necessary and lawful with website hosting providers, IT and cloud providers, customer relationship management providers, payment providers, analytics providers, web-chat and communications providers, brokers, introducers, lenders, funders, servicing partners, credit reference agencies, Creditsafe, TransUnion, fraud prevention agencies, identity verification providers, anti-money laundering providers, sanctions screening providers, professional advisers, insurers, regulators, law enforcement agencies, courts, HMRC, public authorities and organisations involved in a business sale, merger, transfer, restructuring or financing arrangement.

Where third parties process personal data on our behalf, we require them to protect it and only use it in accordance with our instructions and applicable law. We will not sell your personal data to third-party marketing companies.

Some service providers may process or access personal data outside the United Kingdom. Where we transfer personal data internationally, we will take steps to ensure it is protected in accordance with UK data protection law, such as relying on an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or another lawful transfer mechanism.

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, regulatory, accounting, reporting, fraud prevention, audit, complaint handling and business record obligations.

• website enquiry data may be kept for up to 18 months where you do not proceed with a product or service, unless a longer period is required.
• application, customer, account, loan, mortgage, broker, introducer or service records may be kept for the duration of the relationship and then for the applicable legal, regulatory or limitation period.
• credit reference, affordability, identity verification and fraud prevention data will be retained only for as long as necessary for the purpose for which it was obtained and to meet legal, regulatory, audit or evidential requirements.
• complaint records may be kept for as long as necessary to investigate, resolve and evidence the complaint.
• marketing preference records may be kept for as long as necessary to respect opt-out or consent choices.
• cookie consent records may be kept for as long as necessary to manage and evidence cookie preferences.

When personal data is no longer required, we will securely delete it, anonymise it or destroy it.

We may use automated systems, models or tools to support business processes such as risk assessment, fraud prevention, affordability checks, creditworthiness assessment, identity verification, compliance screening, customer verification, record management and application processing.

These tools may analyse personal data using predefined criteria, rules, risk indicators, scores or algorithms. Automated tools may help us identify risk, verify information, prioritise review, detect inconsistencies, support affordability assessments or make recommendations to our staff.

We do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing without meaningful human involvement. Where automated processing supports a decision, the outcome will be subject to appropriate human review before any final adverse decision is made, such as declining, restricting or materially affecting an application or service.

You have the right, in certain circumstances, to request human intervention, express your point of view, obtain an explanation of the decision, and challenge a decision made solely by automated means.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, secure hosting, encryption where appropriate, staff training, supplier due diligence, monitoring, backup procedures, incident response processes and physical, electronic and managerial safeguards.

• Right to be informed.
• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restrict processing.
• Right to data portability.
• Right to object.
• Rights relating to automated decision-making and profiling.
• Right to withdraw consent where processing is based on consent.
To exercise your rights, contact sp@goldfundinguk.com or write to Gold Funding Limited, 16 Kings Close, London NW4 2JT. We may need to verify your identity before responding.

We may contact you with information about our products and services where permitted by law. You can ask us to stop sending marketing communications at any time by clicking an unsubscribe link, using any preference tool we provide, or contacting us at info@goldfundinguk.com. If you opt out, we may keep a suppression record to respect your preference.

The Website may contain links to other websites, platforms or third-party services. We do not control those websites and are not responsible for their privacy practices. You should read their privacy and cookie policies before providing personal data.

If you are unhappy with how we handle your personal data, please contact us first so that we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at www.ico.org.uk or by telephone on 0303 123 1113.

We may update this Privacy Policy from time to time. Any updated version will be posted on the Website. Where changes are material, we may provide additional notice, such as a website banner or direct communication. This Privacy Policy was last updated in July 2026.

This Cookie Policy explains how the Website uses cookies and similar technologies.

Cookies are small files placed on your device when you visit our site. We use cookies to recognise you and your preferences, improve the performance of our site and to create statistical data.

Cookies generally fall into one of the following categories:

Strictly necessary cookies which are cookies that are essential to allow you to use a website and its features; performance cookies which collect information about how visitors use a website to create aggregated, anonymous information that does not identify the visitor; functionality cookies which allow the website to remember you and provide a more personalised service; and targeting or advertising cookies which are used to deliver adverts relevant to you.

Cookies may be session cookies, which are deleted when you close your browser, or persistent cookies, which remain on your device for a set period or until deleted. Cookies may also be first-party cookies set by our Website or third-party cookies set by another organisation.

Some of our cookies remain on your device between your browsing sessions.
You can disable our cookies by changing the settings on your browser but doing so might mean you are unable to use certain features of our site.

• make the Website work properly.
• keep the Website secure.
• remember your cookie choices.
• understand how visitors use the Website.
• improve the Website and customer experience.
• measure marketing campaigns.
• support online forms, web-chat or Website features.
• personalise content or provide advertising where permitted.

Strictly Necessary Cookies
These cookies are required for the Website to work properly and securely. They may enable core functions, remember cookie preferences, support secure forms, manage sessions and protect against fraud or misuse. They do not usually require consent.

Performance And Analytics Cookies
These cookies help us understand how visitors use the Website, such as pages visited, time spent on pages, links clicked, browser type, device type, approximate location, error messages and how users reached the Website. These cookies are used only where permitted by law and, where required, with your consent.

Marketing Cookies
Marketing cookies may be used to make advertising more relevant to you and to measure campaign effectiveness. These cookies are used only where permitted by law and, where required, with your consent.

Third-Party Cookies
Some Website pages may include third-party content, such as embedded videos, maps, social media buttons or external tools. These third parties may set their own cookies. We do not control third-party cookies, and you should read the relevant third party’s cookie policy for more information.

When you first visit the Website, you may see a cookie banner or cookie settings tool. You can use this to accept non-essential cookies, reject non-essential cookies, change preferences or withdraw consent. You can also control cookies through your browser settings. If you block or delete cookies, some parts of the Website may not work properly.
Useful information about managing cookies can be found at www.aboutcookies.org and www.allaboutcookies.org.

We may update this Cookie Policy from time to time. Any updated version will be posted on the Website. Where changes are material, we may provide additional notice, such as a website banner. This Cookie Policy was last updated in July 2026.