Privacy Policy - Our No Marketing Promise
Your data is precious to us. Here is how we protect it.
Data Controller & Contact Details.
The Data Controller (or Controller) is Quick Loans Ltd, and we are responsible for processing and storing the personal data, or data, that you provide to us along with any data that you provide in the future or which is obtained, observed or inferred about you.
Quick Loans Ltd holds a registration with the UK data protection regulator, the ICO (Information Commissioner's Office), covering the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (UK GDPR). Our ICO registration number is ZB551472.
Should you want to know more about how we use your data, or wish to exercise your rights as detailed in this Privacy Notice, or under the DPA/UK GDPR, we can be contacted by:
Email: help@quickloans.co.uk
Post: Vicarage Chambers, 9 Park Square East, Leeds, LS1 2LH
Short Summary
While we would urge you to read the whole of this privacy notice, we understand that sometimes you just want to get on with things. This summary is designed to give you a quick overview of what we do with your data.
Our principal business is that of a credit broker. We will therefore use the data that you provide in the application to allow us to do this.
We will therefore collect the information that you enter into the web form and transmit this securely to one or more lenders from our panel. We send applications directly to lenders – never to other brokers. These third parties will use this data to assess your application. This may involve searching the records held by Credit Reference Agencies (CRA) or Fraud Prevention Agencies (FPA).
These third parties will either accept or decline the application. If they accept the application you will be transferred to their website to continue the process. This will then be in accordance with their Privacy Notice.
We keep a record of your application for one year so that we can meet our regulatory reporting obligations. Your data is never used for marketing, and nobody receives it from us for marketing.
By submitting your data you are agreeing to us processing your data in accordance with this Privacy Notice. Where you give us data on behalf of someone else you confirm that you have given them the information provided in the Privacy Notice and that they have not objected to their data being used in this way.
Purpose for processing your data.
Your data is being processed by us in an attempt to find you a loan.
Legal basis for processing your data.
The legal basis for processing your data simply means what gives us the right to use your data in the way that we do. There are many possible legal bases for processing data but we use just three.
For finding you a loan we use the legal basis that the processing is necessary for the performance of a contract, or to take steps to enter a contract, with you. The contract you have asked us to perform is that of finding you a loan.
We keep a record of your application because we must be able to report to our regulator. For this we use the legal basis that the processing is necessary to comply with a legal obligation.
When you send us a message through our Contact Us page, we use your details only to reply to you. For this we rely on our legitimate interest in answering your query. We also rely on our legitimate interest in keeping our website secure when our servers record visit details such as IP addresses.
Processing your data for our own legitimate interests.
We only use our own legitimate interest as a legal basis in two situations: when we reply to a message you have sent us through our Contact Us page, and when our servers keep short-term records of visits to protect the website. We never use it for marketing.
Collecting data
We only collect data from the application forms and the Contact Us form displayed on our websites.
This includes your contact details, previous addresses, date of birth, your income and expenditure and your bank account number and sort code.
If you send us a message, we collect your name, your email address, your mobile number if you choose to give it, and your message.
Like almost every website, our servers automatically record technical details of each visit, such as your IP address, the type of browser you use and the pages you request. We use these server logs only to keep the website secure and working properly.
This website doesn't use cookies – see the Cookies section below.
Using your data
The principal use of your data is to pass it electronically to the lenders on our panel to try and find you a loan.
When this process is complete we keep a record of your application for one year for regulatory reporting, as explained in the retention section below. The third parties may also keep your data and should tell you about this if you ask them.
Recipients or categories of recipient of your data
We are required under the regulations to tell you who we pass your data on to. Where it is not possible to list these organisations by name, we are allowed to list them by category. The following are categories of recipients of your data:
Authorised and Regulated Lenders
Our IT, hosting and email providers, who store and handle data for us under contract and may not use it for their own purposes
Cloudflare, which runs the spam check on our Contact Us form
Google, which shows adverts on one page of our website (see Cookies below)
Transfers to third countries and the safeguards
Ordinarily we only knowingly transfer your data to organisations within the UK and European Economic Area (EEA).
When we do this we will always make sure that the people or organisations are registered with the relevant Data Protection Authority for that country. This should protect you and your Data to the levels specified by the current regulations. In the UK this is the Information Commissioner's Office.
Two services we use may handle limited technical data outside the UK and EEA. Cloudflare checks that our Contact Us form is being used by a person rather than a bot, using details such as your IP address and browser. Google may process similar details when it shows an advert (see Cookies below). Both rely on recognised safeguards for international transfers, such as the UK International Data Transfer Addendum or the UK-US data bridge.
Should any organisation that we pass your data to then pass this outside of the EEA or UK it will be their responsibility, under their own data protection registration, to ensure that the proper safeguards are in place.
Direct marketing by us and third parties
We do not use your data for direct marketing, whether for our own products or anyone else’s, and we never pass your details to third parties for marketing.
Retention period for your data
We keep your data only for as long as we need it:
Applications – one year from the date you apply, so that we can meet our regulatory reporting obligations.
Messages sent through our Contact Us page – six months from the date you send them.
Website server logs, including IP addresses – 90 days, to protect the website against misuse and attacks.
Complaints – three years from the date we receive them. This is the regulatory standard: the Financial Conduct Authority’s complaint-handling rules require us to keep complaint records for at least three years.
Applications are held on our secure web servers for no more than a week. Every Sunday they are moved to offline storage at our offices, where they stay until the end of the retention period. After that, your data is deleted.
Your Rights
Under the UK GDPR you have several ‘rights’ that you may exercise in relation to your data. This section gives details of these rights and how they may be used.
Your right of access
Under the Regulations you have the right to obtain confirmation that your data is being processed and also access to the data we hold. You are entitled as well to supplementary information, however this largely corresponds to the information which is provided in this document, where a copy will be supplied.
Generally, you have the right to obtain this information free of charge and within 1 month of us receiving your request.
If we still hold your data, we will send you a copy. As we keep applications for one year, messages for six months, server logs for 90 days and complaints for three years, after those periods we will only be able to confirm that we hold no data about you.
Your right to rectification
Under the Regulations you have the right to have your data rectified if it is inaccurate or incomplete.
If we still hold data about you that is inaccurate or incomplete, we will correct it.
Where we have disclosed your data on to third parties, when it is possible to do so, we will inform them of the rectification. We will also, where appropriate, advise you of the third parties that your data was passed to.
As we will not know the incorrect data that we passed to such third parties we will simply send across the information you have provided. If you think that this will be insufficient to allow them to locate your previous (inaccurate or incomplete) data, then it would be helpful to advise us of both the old and new data.
Your right to erasure
Under the Regulations, in some circumstances, you can require us to erase your data and to prevent us from processing it.
If we still hold your data, we will erase it, unless we need to keep it to meet our regulatory reporting obligations. If that is the case, we will tell you.
Where we have disclosed your data on to third parties, when it is possible to do so, we will inform them of your request to have your data erased.
Your right to restrict processing of your data
Under the regulations you have the right to ‘block’ the processing of your data.
Once your application has been passed to our panel of lenders, we do not process your data any further. We simply keep a record of it for regulatory reporting until it is deleted.
Where we have disclosed your Data on to third parties, when it is possible to do so, we will inform them of the restriction on processing your data.
Your right to data portability
Under the regulations you can require us to provide certain data you have provided to us in a structured, commonly used, machine readable form. In simple terms, this means a computer file containing your Data which another organisation can import directly into their computer systems. The aim of this right is to make it easier for you to switch providers without having to manually obtain and re-enter all your details.
If we still hold data that you provided to us, we will send it to you, or to another organisation, in a machine readable format.
Objecting to how we use your data
Under the regulations, you can object to us processing your data for the following purposes:
Where we process your data for our own legitimate interests.
Where we process your data for direct marketing purposes.
Where we process your data for research purposes.
We do not process your data for direct marketing or research. We only rely on our legitimate interest when we reply to a message you have sent us, and when we keep server logs for security. You can object to either at any time.
Your right to withdraw consent at any time
You have the right to withdraw your consent as a legal basis for processing your data at any time.
We do not use consent as the legal basis for processing your data, so you will not need to exercise this right.
Complaining to the data protection regulator
If you are unhappy with anything we have done, or not done, regarding your data and the Data Protection Regulations, you have the right to make a complaint to our supervisory authority. In the UK, the regulator responsible for data protection is the ICO, the Information Commissioner’s Office. They can be contacted by:
Phone – 0303 123 1113
Live Chat – Via https://ico.org.uk/concerns/
Post – Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
As a responsible organisation, we would always rather work with you directly to resolve your complaint ourselves before you contact our supervisory authority. If you would be happy for us to do this, please contact us using one of the methods in the first section of this document. You can always refer the matter to the ICO at any point if you are unhappy with the way we are dealing with it.
Provision of your data
You are not legally or contractually required to provide us with any of your personal data. If you choose not to provide such data as requested in the application form we will not be able to provide the service of loan brokerage to you.
If you do provide the requested data to us, you will be required to ensure that it is accurate and complete, otherwise it may affect our ability to provide the service to you.
Automated Decision Making (ADM) and your right in relation to ADM and profiling
Under the regulations, in some circumstances you may have the right not to be subject to a decision which has been based on automated processing and produces a legal or similarly significant effect on you. Under these circumstances your rights include obtaining human intervention, expressing your point of view or obtaining an explanation of the decision and then challenging it.
While lenders may have processes to give an automated response, we do not use ADM or profiling in our processes.
The security of your data
We take all reasonable steps to protect your data for as long as we hold it. Applications are moved off our web servers every week to offline storage at our offices.
We will collect the data on our secure website and ensure that when it is transmitted to lenders it is encrypted with a recognised encryption method such as https.
We cannot however be responsible for any data that you send outside this website such as emails or webmail. This is often not secure and can transit through several countries before it is delivered.
Please also be aware that when you are using public workstations (such as those in internet cafés or public libraries) these may not be fully secure.
Such data losses will be deemed outside our control and we will not be liable to you for these.
People Under 18
Our service is only for adults aged 18 or over who live in the UK. We don't knowingly collect data about anyone under 18. If we find that we hold data about someone under 18, we will delete it.
Cookies
Quick Loans doesn't set any cookies of its own. Browsing our pages and guides leaves nothing stored on your phone or computer.
There is one exception. If we can't match your application with a lender, the page that tells you may show an advert from Google. Google may use cookies and similar technology to show and measure that advert, and, if you agree, to make the adverts more relevant to you. Before any of this happens, Google asks for your choice in its own consent message, and you can say no. You can change your choice at any time using the link in that message, or manage how Google uses your information at Google's Ad Settings. Google's use of this data is explained in how Google uses information from sites that use its services.
Our Contact Us form uses Cloudflare Turnstile, a security check that confirms a real person is sending the message. It doesn't place advertising cookies and is used only to keep spam out.
Last update 20/10/2026