Introducer privacy policy

We will use the personal data provided to carry out due diligence on your business. We will process your personal data, and that of any other directors and beneficial owners of your business, in order to carry out fraud and money laundering checks. The data will be processed on the basis that we have a legal obligation in preventing fraud and money laundering, and to verify your identity in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services you have requested.

The information you provide us about you and other directors and beneficial owners of your business will be shared with credit reference and fraud agencies in order to conduct the above-mentioned checks and will be retained for as long as permitted for legal, regulatory, fraud and other financial crime prevention purposes. Please refer to section 5 and 6 of our customer privacy policy for more information on how your data will be used by credit reference and fraud agencies.

We also use third party data-processors who assist us in providing our services to you (such services will include email, identity verification, lead management, hosting and data storage). Some of the data processors we use are outside the EU, or may host your personal data outside the EU. Please see section 8 of our customer privacy policy for detail on the safeguards we have in place where personal data is transferred outside the EU.

We will not retain data about you for longer than is necessary to fulfil the purposes for which the data was collected. We will typically keep your data for up to 6 years from the end of any business relationship. We may keep your personal data for a longer period where it is necessary for legal, regulatory or operational purposes.

You have rights in relation to the personal data we hold, including the right to access the data, the right to have it erased, the right to have it rectified, the right to restrict processing, the right to data portability and the right to object to us processing it. All rights are subject to limitations but please contact us if you require further information. You also have a right to complain to the Information Commissioner's Office which regulates the processing of personal data.

iwoca Ltd is registered in England & Wales, company registration number 07798925. Registered office: 10 Queen Street Place, London EC4R 1AG. Our main trading address is 101 New Cavendish Street, London, W1W 6XH. If you have any questions about how we will process your personal data, you can contact our Data Protection Officer at dpo@iwoca.co.uk.

Please make sure that those whose personal data you have provided to us are given a copy of this privacy notice.