Privacy Policy

1. Who we are

TAFM is a digital marketplace platform for UK business asset finance. This Privacy Policy explains how TAFM collects, uses and protects personal data in connection with the tafm.co.uk website and its associated services.

TAFM is the data controller for personal data collected through this website. If you have questions about this policy or how we handle your data, please contact us at: privacy@tafm.co.uk

2. Data we collect

We collect personal data when you:

• Submit a finance enquiry or application
• Complete the contact form
• Register an account on the platform
• Interact with the TAFM website (via analytics)

Data collected may include: name, email address, telephone number, company name and company registration details, business financial information provided as part of a finance application, asset details and supplier quotes, and device/browser analytics data.

3. How we use your data

We use personal data to: process finance enquiries and applications, communicate with you about your enquiry or application, pass structured application data to appropriate finance providers within our network (with your consent), improve the TAFM platform and user experience, and comply with legal and regulatory obligations.

We do not sell personal data to third parties. We do not use personal data for unsolicited marketing without your consent.

4. Legal basis for processing

We process personal data on the following legal bases: contractual necessity (processing required to deliver the services you have requested), legitimate interests (improving our platform, fraud prevention, security), consent (where you have explicitly agreed to specific processing), and legal obligation (where required by law or regulation).

5. Data sharing

We may share personal data with: finance providers within the TAFM network where you have submitted a finance application; technology service providers who process data on our behalf under data processing agreements; regulatory authorities where required by law. We do not share data with third parties for their own marketing purposes.

6. Data retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory requirements, and to defend against legal claims. Finance application data is retained in accordance with financial services record-keeping obligations.

7. Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you, correct inaccurate personal data, request deletion of your personal data (subject to legal obligations), object to certain processing, and lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk.

8. Cookies

We use cookies and similar technologies to operate the website and understand how it is used. See our Cookie Policy for details.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated on this page. We encourage you to review this policy periodically.