How applicant data is handled.

This policy is a launch draft and must be finalised with the legal entity name, controller details and contact address before formal appointments.

Data we collect at first application

Full name, email, phone, UK postcode and optional message.
Eligibility and acknowledgement checkboxes.
Timestamp, user agent, referrer and a hashed IP address for security and abuse prevention.

Data we do not collect on the first form

Do not submit passport, driving licence, NI number, bank details or proof of address through the initial form.

Purposes

To review initial eligibility and contact the applicant.
To prevent spam, abuse and duplicate submissions.
To maintain consent and audit records.

Your rights

You may ask what data is held and request correction or deletion where the law allows. AML record retention may restrict deletion after formal KYC or appointment. You may complain to the ICO.

Official resource

ICO UK GDPR guidance for organisations