Your Personal Data at ClearScore

Version 1

11 May 2026

Your Personal Data at ClearScore

Who are we

‘We’ are ‘ClearScore’, part of the ClearScore Group. This privacy notice concerns the following ClearScore companies only –

ClearScore company name

Core Service

Trading address

Registered address

FCA number

ICO registration number

ClearScore company name

ClearScore Technology Limited

Core Service

Free credit report, App and credit & mortgage broking marketplace. Ancillary to the above are the following products: An online debt consolidation service; ClearScore Protect Plus, an online fraud detection and security subscription; ClearScore Protect, a free online monitoring service in which aids in fraud detection and monitoring and is provided to all ClearScore users.

Trading address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

654446

ICO registration number

ZA100119

ClearScore company name

ClearScore Everywhere Limited

Core Service

An eligibility checking service and credit & mortgage broking marketplace.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

993528

ICO registration number

Z120757X

ClearScore company name

ClearScore Home Lending Limited

Core Service

Provision of advice for regulated mortgages (first and second charge) with the option to be introduced to mortgage loan providers.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

979210

ICO registration number

ZB359170

Further details in regard to any of the above, can be found on their respective terms and conditions pages.

The kind of personal data we collect and what we do with it

The following table applies to the firms listed above, yet only in some cases, will certain personal data and it’s processing be applicable to specific service offerings. We will only collect the personal data we require for the service/s you select.

We receive the personal data (listed below) about you from a variety of places, these include:

From you – as a result of registering/signing up to or using any of our services

Indirectly from you - For example, where a loan provider may have been unable to help you and has suggested us as an alternative. Another example may be the DVLA, where you have expressed an interest in any car related products and are happy to share your details. Ongoing from lenders post introduction and where applicable there has been a sale, this may include details about the product including amount and term. If you choose to share your information with Insurers, we may receive information about whether or not you have taken out a product with any Insurers, what products you may have used, and other such details about your interaction with Insurers.

Credit Reference Agencies (CRA) – For example, if you register for a ClearScore account and use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more CRA’s on your behalf. (See controller table below)

Open Banking (where applicable)

Fraud Prevention agencies and Cybercheck partners (see tables below)

We (ClearScore Everywhere Limited) receives information from firms who act as both our Appointed Representative and Introducer Appointed Representative; the receipt of this information is necessary for us to both fulfil a contract as well as our obligations under the relevant parts of the financial services Act.

Purpose

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Applicable ClearScore Company

Lawful basis

Retention period

Purpose

To offer our services as set out above. Depending on the services sought will depend on what data is processed.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; title; previous name; date of birth; marital/ relationship status; email address; telephone number; residential address; address history; dependents; employment status and employer; income & expenditure; name of bank; bank statements; payment card details; bank account details; current debts; financial commitments; savings; benefits; Passport details; property value; deposit amount and borrowing requirements; monthly rental income; mortgage details, credit score and credit report. And in certain cases, insurance claim history, lifestyle questions and health conditions, device and IP address; cookies where applicable. Where these are considered 'special categories’ of data we require your explicit consent to record and process.(‘service specific data’). We refer to the above (where applicable) as ‘relevant service specific data’ throughout.

Applicable ClearScore Company

All ClearScore companies listed above yet only where applicable. Certain data will be used depending on the service sought.

Lawful basis

Performance of a contract Legal requirements (fraud/AML/ DBS checks etc.) Explicit consent (health conditions/ lifestyle questions etc.)

Retention period

6 years from the date you cease to be a user of our services . In cases where you are a user of our subscription services, this will be 7 years

Purpose

Marketing our own products and services by way of email, SMS in app messaging and also providing you with alerts. For example, when we believe there is another suitable product you could apply for.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address and telephone number or where applicable, inputs as part of your eligibility check for example, a loan amount or data related to your ClearScore app for example name and ClearScore unique ID number. Non-essential Cookies.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Performance Max marketing (PMAX) (see processor table below)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Non-essential cookies Email address

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Service communications (administering your account, maintain the relationship etc.)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address, telephone number and where specified, address.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract. Legal obligation.

Retention period

6 years from the date you cease to be a use of our services

Purpose

Service communications on behalf of the third parties we work with including for example: scope of service or terms and conditions etc.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a use of our services

Purpose

Data analytics to undertake analytics and product development to continually improve the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time.

Purpose

Profiling: analysis and profiling in order to provide comparison and eligibility services.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised. after this time.

Purpose

The running of the website and or app to aid in the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Cookies (see Cookie Notice); IP address; Uniform Resource Locators (URL); browser type and version; time zone setting and location; browser plug- in types and versions; operating system and platform and other technology on the devices used to access the website; page response times; download errors; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page and any phone number used to call our customer service number.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent Performance of a contract.

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time

Purpose

Call recordings

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

All calls and their contents to the ClearScore group will be recorded and as such, will concern relevant service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years from the date you cease to be a user of our services

Purpose

Discussion boards, competitions, surveys, interviews including via online and questions on our website.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years from the date you cease to be a user of our services

Purpose

Issues, problems, disputes or Data Subject Access Requests.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data, this may also include the transfer and receipt of data derived from a third party. For example, in the event a firm is linked to a dispute raised

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

Purpose

Soft credit check

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Where you decide to use our credit brokering services. A soft credit check means that it has no impact on your credit rating and is not visible to anyone other than you.

Applicable ClearScore Company

ClearScore Technology Limited; ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract Legitimate interests

Retention period

NA

Purpose

Disputes raised about the accuracy of information with a third-party lender/provider and/or Credit Reference Agencies

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; email and details of the dispute. This will also include the transfer of and receipt of data from the named Credit Reference Agency and or third-party lender/provider

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

Who do we share your data with

Data Processors

We use third party companies to help us with things that we’re unable to do. These companies are referred to as ‘data processors’.

Data processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

Below are the names of some of the third-party data processors we work with in order to deliver our services, along with some other important information we think you should know. Additionally, you can request a list of all of the data processors we work with.

Name of third-party data processor

What data they process

Why we use them and how they help with the services we offer

Applicable ClearScore Company

Lawful basis

Retention period

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website (Banks, insurance providers, lenders, credit brokers etc.) and as part of this process we also receive data from Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assess your probability of being accepted for a product based on the information you’ve provided to us and in turn for us to be able to show you any prospective offers either online or in the app. To improve their products and services to ClearScore users.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website. This also includes through the use of other third parties such as Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Where you are a user of our app, we will process your data to assess whether you are eligible for pre-approved offers based on the information shared against product provider criteria. Pre-approval is dependent on the accuracy of your information and any changes made to this information directly with the product provider can lead to a change in this pre-approved status, and you would still need to apply with the product provider who may run a hard search and verify your information before making any offer.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legitimate Interests This is something you can opt out of yet if you do so, we will not be able to show you any pre-approved offers or your probability of being accepted for a product.

Retention period

90 days

Name of third-party data processor

HD Decisions (credit broker who works with: AMEX, Barclaycard, Barclays, Vanquis, M&S, Tesco, HSBC, Santander, Nationwide, Vanquis & MBNA.)

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To facilitate the transfer of data between the ClearScore platform and HD Decisions panel of lenders in order to facilitate eligibility checks for ClearScore customers. HD Decisions returns results of their panel by way of API.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Some of our services may offer to connect you to your bank account/s; this is known as ‘Open Banking’. Open Banking allows your bank account data to be seen by you and where you have provided consent, to be viewed by us and shared with other financial services companies who will then use it make decisions. Currently, we work with D.One and Consents Online to do this.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

For the purposes of facilitating Open Banking.

Applicable ClearScore Company

ClearScore Technology Limited and ClearScore Everywhere Limited

Lawful basis

Consent by way of specific opt-in

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Verifying your identity using biometric data to offer the services set out above. Currently we work with Persona and Onfido to do this, see below for more details - ClearScore Technology and its ancillary products use Persona. ClearScore Home Lending uses Onfido.

What data they process

Government issued ID (e.g. driver’s licence, Passport) and other "biometric data", such as a video or photo of your face. “Biometric data” is personal data that relates to the physical, physiological or behavioural characteristics about you which enable us to uniquely identify you and requires your explicit consent before processing it. IP address and device

Why we use them and how they help with the services we offer

To conduct a scan that may include the use of facial recognition technology (by way of ‘selfie’) so we can compare the video or photo you submit to your ID photo, to help confirm that you are who you say you are. We retain copies of your ID and any other biometric data so we can verify you in the future and for our record-keeping and fraud prevention purposes.

Applicable ClearScore Company

ClearScore Technology Limited ClearScore Home Lending Limited

Lawful basis

Consent by way of specific opt-in

Retention period

No longer than 1 year

Name of third-party data processor

Blueshift Inc.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Blueshift as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Braze

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Braze as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Esendex

What data they process

Telephone number

Why we use them and how they help with the services we offer

SMS communications facilitator and data base.

Applicable ClearScore Company

ClearScore Limited

Lawful basis

Consent Performance of a contract

Retention period

For the performance of the contract

Name of third-party data processor

Databricks

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Internal data management platform

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

For our ClearScore Protect service, we currently work with: CyberScout Ventures Limited Spycloud, Inc. Have I been Pwned Superlative Enterprise Pty Limited Falkin

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

All our registered customers benefit from our ClearScore Protect service, upon email verification. To provide you with this service, we share the email address connected with your ClearScore account, and your passport number (if provided), with our Cybercheck Partners who use this information to identify whether any of your information may have been compromised.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract Consent where applicable

Retention period

Will only be kept for the time necessary to conduct the check after which it will be deleted.

Name of third-party data processor

Zendesk

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Zendesk is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Nova

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Nova is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Group Companies

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries for the purposes of providing our services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Google

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Analytics

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years

Name of third-party data processor

Google Meta You Tube TikTok

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Google Ad and Ad campaigns including: Performance Max (PMAX) campaigns in which include the creation of ‘lookalike’ audiences These interest-based advertising platforms may use personal information about you that they have independently collected in accordance with their privacy policy and practices, including through the use of cookies. That will help us manage and deliver our marketing, including opting you out where specified or creating lists in regard to the marketing set out above.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

71a – a third-party marketing agency

What data they process

Full name; postcode; email address and age

Why we use them and how they help with the services we offer

Facilitation and administration of Google Ad campaigns; including PMAX. For example, we will share your personal information with 71a who work with advertising networks, including social media networks like TikTok, Meta/Facebook and platforms such as Google/YouTube and Amazon, for interest-based advertising or ‘targeted’ advertising campaigns including ‘lookalike audiences’. They select and serve relevant adverts, to you and others and to make sure their adverts reach their intended audience, help analyse our site, run contests, special offers, or other events or activities, and track metrics on our behalf or in connection with our Services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

Connex

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

A third-party telephony platform

Applicable ClearScore Company

ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Nivo

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Instant messaging, administration tool.

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Consent

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Artificial Intelligence (‘AI’) -we currently use - Chat GPT, a Large Language Model used to generate responses when asked by You, we also use it to provide personalised summaries using the information we hold about you. These services are produced and managed by us yet are provided by ChatGPT as a processor. ChatGPT is owned by Open AI and is a third-party company not linked to us. Connex AI a third-party telecommunications platform. Connex AI provides automated chat bots whose role is to provide a contact for customers calling into us out of hours. The automated bot will take your details and arrange a call back. Langfuse is a third party whose open-source LLM engineering and observability platform are designed to help developers debug, monitor, and evaluate AI applications.

What data they process

Relevant service specific data User posed questions User posed requests

Why we use them and how they help with the services we offer

We use Artificial Intelligence to help you get more from your credit information. When we say, "artificial intelligence", we mean technology that enables computers to perform tasks that usually require human input—like analysing data, spotting patterns or making predictions. We use AI in several ways; for example, Caisey – Caisey is our own in-house AI. Caisey produces user summaries by providing you with personalised insights based on your credit report. Caisey considers things like your recent credit activity, your electoral roll registration, and your address history to deliver information that’s relevant and useful to you. AI also helps us better understand how people use our services, which features they find most valuable, and where we can make improvements. We use this insight to build better products, carry out research and development, and shape the future of our services. We use observability platforms to highlight any errors to us in regard to the AI tools we are using.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

NA

Name of third-party data processor

Teleperformance

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assist users with any queries they have.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years

Name of third-party data processor

Acre mortgage management software tool

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years

Data Controllers

In addition to the Processors above, we also share information with third parties for other reasons, please see below. These are known as data’ Controllers’ and so may process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share/ receive

Why we share it/ receive it

Lawful basis

Retention period

Name of third party

Third parties that make up the panel of providers (Banks, insurance providers, lenders, credit brokers etc.)

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To facilitate your request to be introduced and or take out a service To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

First charge mortgage providers

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

Conduct of first charge account and consent to place a second charge on this first mortgage To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

Firm’s that make up ClearScore Everywhere’s Appointed Representatives: ClearScore Home Lending Acre

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Firm’s that make up ClearScore Everywhere’s Introducer Appointed Representatives: Asda Blue Light Card We are Discounts

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them both to provide the relevant services as set out above and in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Where you were either introduced to our services by way of another third-party provider, or in the event we have introduced you to another third-party provider we may receive and equally share your data in order to meet legal requirements or in order to meet any contractual obligations

What data we share/ receive

Relevant service specific data Details of the complaint/issues Details relating to any enquiries and any introductions made including the product and or service taken out

Why we share it/ receive it

To assist with the complaint process To ensure ours and the third parties we work with are providing the right products and services to you as well as looking to improve ours and their services. In addition, we will both further process this data for our own commercial interests

Lawful basis

Legal obligation Performance of a contract

Retention period

6 years

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention period

6 years

Name of third party

Regulators: ICO; FCA; ASA

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To comply with the legal requirements placed on us as UK regulated companies

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Law enforcement: NCA; Police etc.

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To assist with criminal investigations; prevent fraud and money laundering.

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Credit Reference Agencies To find out more about what Equifax and the other Credit Reference Agencies do with your data, please see links below: transunion.co.uk/legal/privacy-centre/pc-credit-reference experian.co.uk/legal/crain/ equifax.co.uk/privacy-hub/crain

What data we share/ receive

If you register to use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more Credit Reference Agencies (CRA) on your behalf. Information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing and collection of debt. The CRA may also use the data to undertake statistical analysis." As part of this registration we will also undertake report matching as well as knowledge based authentication using services provided by Equifax. If you choose to apply for a product, the lender will undertake a full credit check and provide you with further privacy information for that product. More information about each CRA and what it does with personal data is available in our terms and conditions. Cookies served by Equifax are held on our website. Equifax is a consumer credit reporting agency. These cookies will be used to serve adverts to visitors based upon the websites they’ve been to previously.

Why we share it/ receive it

To offer our services as set out above. To serve adverts based on previous history

Lawful basis

Consent by way of specific opt in Legitimate interest

Retention period

Determined by the controller

Name of third party

Where you are a subscriber of Protect Plus, your data will be transferred to their respective third-party insurance provider which is: Financial & Legal Insurance Company Limited

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To offer the services set out above To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Name of third party

Acre a mortgage management software tool

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Transfers within the EEA and outside the EEA

Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA. For example, we use call centre (Teleperformance) based in India to assist with customer queries. This means we are to take extra assurance prior to any data transfers.

Should you wish to review your safeguards please contact us on the details below.

Data Security

All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data. Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

Your data rights

Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to exercise your data rights or make a data related enquiry

If you would like to know more about how we use your personal information, you can contact us using any of the following:

Phone: 0161 498 7739

Email: [email protected]

Post: FAO: Data Protection Officer, Dakota House, Concord Business Park, Simonsway, Wythenshawe, Manchester M22 0RR.

You can also complain directly to the ICO if you are unhappy with how we have used your personal data:

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO Website:ico.co.uk

Your Personal Data at ClearScore

Your Personal Data at ClearScore

Version 1

11 May 2026

Your Personal Data at ClearScore

Who are we

‘We’ are ‘ClearScore’, part of the ClearScore Group. This privacy notice concerns the following ClearScore companies only –

ClearScore company name

Core Service

Trading address

Registered address

FCA number

ICO registration number

ClearScore company name

ClearScore Technology Limited

Core Service

Free credit report, App and credit & mortgage broking marketplace. Ancillary to the above are the following products: An online debt consolidation service; ClearScore Protect Plus, an online fraud detection and security subscription; ClearScore Protect, a free online monitoring service in which aids in fraud detection and monitoring and is provided to all ClearScore users.

Trading address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

654446

ICO registration number

ZA100119

ClearScore company name

ClearScore Everywhere Limited

Core Service

An eligibility checking service and credit & mortgage broking marketplace.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

993528

ICO registration number

Z120757X

ClearScore company name

ClearScore Home Lending Limited

Core Service

Provision of advice for regulated mortgages (first and second charge) with the option to be introduced to mortgage loan providers.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

979210

ICO registration number

ZB359170

Further details in regard to any of the above, can be found on their respective terms and conditions pages.

The kind of personal data we collect and what we do with it

The following table applies to the firms listed above, yet only in some cases, will certain personal data and it’s processing be applicable to specific service offerings. We will only collect the personal data we require for the service/s you select.

We receive the personal data (listed below) about you from a variety of places, these include:

From you – as a result of registering/signing up to or using any of our services

Indirectly from you - For example, where a loan provider may have been unable to help you and has suggested us as an alternative. Another example may be the DVLA, where you have expressed an interest in any car related products and are happy to share your details. Ongoing from lenders post introduction and where applicable there has been a sale, this may include details about the product including amount and term. If you choose to share your information with Insurers, we may receive information about whether or not you have taken out a product with any Insurers, what products you may have used, and other such details about your interaction with Insurers.

Credit Reference Agencies (CRA) – For example, if you register for a ClearScore account and use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more CRA’s on your behalf. (See controller table below)

Open Banking (where applicable)

Fraud Prevention agencies and Cybercheck partners (see tables below)

We (ClearScore Everywhere Limited) receives information from firms who act as both our Appointed Representative and Introducer Appointed Representative; the receipt of this information is necessary for us to both fulfil a contract as well as our obligations under the relevant parts of the financial services Act.

Purpose

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Applicable ClearScore Company

Lawful basis

Retention period

Purpose

To offer our services as set out above. Depending on the services sought will depend on what data is processed.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; title; previous name; date of birth; marital/ relationship status; email address; telephone number; residential address; address history; dependents; employment status and employer; income & expenditure; name of bank; bank statements; payment card details; bank account details; current debts; financial commitments; savings; benefits; Passport details; property value; deposit amount and borrowing requirements; monthly rental income; mortgage details, credit score and credit report. And in certain cases, insurance claim history, lifestyle questions and health conditions, device and IP address; cookies where applicable. Where these are considered 'special categories’ of data we require your explicit consent to record and process.(‘service specific data’). We refer to the above (where applicable) as ‘relevant service specific data’ throughout.

Applicable ClearScore Company

All ClearScore companies listed above yet only where applicable. Certain data will be used depending on the service sought.

Lawful basis

Performance of a contract Legal requirements (fraud/AML/ DBS checks etc.) Explicit consent (health conditions/ lifestyle questions etc.)

Retention period

6 years from the date you cease to be a user of our services . In cases where you are a user of our subscription services, this will be 7 years

Purpose

Marketing our own products and services by way of email, SMS in app messaging and also providing you with alerts. For example, when we believe there is another suitable product you could apply for.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address and telephone number or where applicable, inputs as part of your eligibility check for example, a loan amount or data related to your ClearScore app for example name and ClearScore unique ID number. Non-essential Cookies.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Performance Max marketing (PMAX) (see processor table below)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Non-essential cookies Email address

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Service communications (administering your account, maintain the relationship etc.)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address, telephone number and where specified, address.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract. Legal obligation.

Retention period

6 years from the date you cease to be a use of our services

Purpose

Service communications on behalf of the third parties we work with including for example: scope of service or terms and conditions etc.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a use of our services

Purpose

Data analytics to undertake analytics and product development to continually improve the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time.

Purpose

Profiling: analysis and profiling in order to provide comparison and eligibility services.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised. after this time.

Purpose

The running of the website and or app to aid in the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Cookies (see Cookie Notice); IP address; Uniform Resource Locators (URL); browser type and version; time zone setting and location; browser plug- in types and versions; operating system and platform and other technology on the devices used to access the website; page response times; download errors; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page and any phone number used to call our customer service number.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent Performance of a contract.

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time

Purpose

Call recordings

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

All calls and their contents to the ClearScore group will be recorded and as such, will concern relevant service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years from the date you cease to be a user of our services

Purpose

Discussion boards, competitions, surveys, interviews including via online and questions on our website.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years from the date you cease to be a user of our services

Purpose

Issues, problems, disputes or Data Subject Access Requests.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data, this may also include the transfer and receipt of data derived from a third party. For example, in the event a firm is linked to a dispute raised

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

Purpose

Soft credit check

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Where you decide to use our credit brokering services. A soft credit check means that it has no impact on your credit rating and is not visible to anyone other than you.

Applicable ClearScore Company

ClearScore Technology Limited; ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract Legitimate interests

Retention period

NA

Purpose

Disputes raised about the accuracy of information with a third-party lender/provider and/or Credit Reference Agencies

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; email and details of the dispute. This will also include the transfer of and receipt of data from the named Credit Reference Agency and or third-party lender/provider

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

Who do we share your data with

Data Processors

We use third party companies to help us with things that we’re unable to do. These companies are referred to as ‘data processors’.

Data processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

Below are the names of some of the third-party data processors we work with in order to deliver our services, along with some other important information we think you should know. Additionally, you can request a list of all of the data processors we work with.

Name of third-party data processor

What data they process

Why we use them and how they help with the services we offer

Applicable ClearScore Company

Lawful basis

Retention period

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website (Banks, insurance providers, lenders, credit brokers etc.) and as part of this process we also receive data from Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assess your probability of being accepted for a product based on the information you’ve provided to us and in turn for us to be able to show you any prospective offers either online or in the app. To improve their products and services to ClearScore users.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website. This also includes through the use of other third parties such as Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Where you are a user of our app, we will process your data to assess whether you are eligible for pre-approved offers based on the information shared against product provider criteria. Pre-approval is dependent on the accuracy of your information and any changes made to this information directly with the product provider can lead to a change in this pre-approved status, and you would still need to apply with the product provider who may run a hard search and verify your information before making any offer.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legitimate Interests This is something you can opt out of yet if you do so, we will not be able to show you any pre-approved offers or your probability of being accepted for a product.

Retention period

90 days

Name of third-party data processor

HD Decisions (credit broker who works with: AMEX, Barclaycard, Barclays, Vanquis, M&S, Tesco, HSBC, Santander, Nationwide, Vanquis & MBNA.)

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To facilitate the transfer of data between the ClearScore platform and HD Decisions panel of lenders in order to facilitate eligibility checks for ClearScore customers. HD Decisions returns results of their panel by way of API.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Some of our services may offer to connect you to your bank account/s; this is known as ‘Open Banking’. Open Banking allows your bank account data to be seen by you and where you have provided consent, to be viewed by us and shared with other financial services companies who will then use it make decisions. Currently, we work with D.One and Consents Online to do this.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

For the purposes of facilitating Open Banking.

Applicable ClearScore Company

ClearScore Technology Limited and ClearScore Everywhere Limited

Lawful basis

Consent by way of specific opt-in

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Verifying your identity using biometric data to offer the services set out above. Currently we work with Persona and Onfido to do this, see below for more details - ClearScore Technology and its ancillary products use Persona. ClearScore Home Lending uses Onfido.

What data they process

Government issued ID (e.g. driver’s licence, Passport) and other "biometric data", such as a video or photo of your face. “Biometric data” is personal data that relates to the physical, physiological or behavioural characteristics about you which enable us to uniquely identify you and requires your explicit consent before processing it. IP address and device

Why we use them and how they help with the services we offer

To conduct a scan that may include the use of facial recognition technology (by way of ‘selfie’) so we can compare the video or photo you submit to your ID photo, to help confirm that you are who you say you are. We retain copies of your ID and any other biometric data so we can verify you in the future and for our record-keeping and fraud prevention purposes.

Applicable ClearScore Company

ClearScore Technology Limited ClearScore Home Lending Limited

Lawful basis

Consent by way of specific opt-in

Retention period

No longer than 1 year

Name of third-party data processor

Blueshift Inc.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Blueshift as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Braze

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Braze as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Esendex

What data they process

Telephone number

Why we use them and how they help with the services we offer

SMS communications facilitator and data base.

Applicable ClearScore Company

ClearScore Limited

Lawful basis

Consent Performance of a contract

Retention period

For the performance of the contract

Name of third-party data processor

Databricks

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Internal data management platform

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

For our ClearScore Protect service, we currently work with: CyberScout Ventures Limited Spycloud, Inc. Have I been Pwned Superlative Enterprise Pty Limited Falkin

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

All our registered customers benefit from our ClearScore Protect service, upon email verification. To provide you with this service, we share the email address connected with your ClearScore account, and your passport number (if provided), with our Cybercheck Partners who use this information to identify whether any of your information may have been compromised.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract Consent where applicable

Retention period

Will only be kept for the time necessary to conduct the check after which it will be deleted.

Name of third-party data processor

Zendesk

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Zendesk is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Nova

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Nova is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Group Companies

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries for the purposes of providing our services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Google

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Analytics

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years

Name of third-party data processor

Google Meta You Tube TikTok

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Google Ad and Ad campaigns including: Performance Max (PMAX) campaigns in which include the creation of ‘lookalike’ audiences These interest-based advertising platforms may use personal information about you that they have independently collected in accordance with their privacy policy and practices, including through the use of cookies. That will help us manage and deliver our marketing, including opting you out where specified or creating lists in regard to the marketing set out above.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

71a – a third-party marketing agency

What data they process

Full name; postcode; email address and age

Why we use them and how they help with the services we offer

Facilitation and administration of Google Ad campaigns; including PMAX. For example, we will share your personal information with 71a who work with advertising networks, including social media networks like TikTok, Meta/Facebook and platforms such as Google/YouTube and Amazon, for interest-based advertising or ‘targeted’ advertising campaigns including ‘lookalike audiences’. They select and serve relevant adverts, to you and others and to make sure their adverts reach their intended audience, help analyse our site, run contests, special offers, or other events or activities, and track metrics on our behalf or in connection with our Services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

Connex

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

A third-party telephony platform

Applicable ClearScore Company

ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Nivo

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Instant messaging, administration tool.

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Consent

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Artificial Intelligence (‘AI’) -we currently use - Chat GPT, a Large Language Model used to generate responses when asked by You, we also use it to provide personalised summaries using the information we hold about you. These services are produced and managed by us yet are provided by ChatGPT as a processor. ChatGPT is owned by Open AI and is a third-party company not linked to us. Connex AI a third-party telecommunications platform. Connex AI provides automated chat bots whose role is to provide a contact for customers calling into us out of hours. The automated bot will take your details and arrange a call back. Langfuse is a third party whose open-source LLM engineering and observability platform are designed to help developers debug, monitor, and evaluate AI applications.

What data they process

Relevant service specific data User posed questions User posed requests

Why we use them and how they help with the services we offer

We use Artificial Intelligence to help you get more from your credit information. When we say, "artificial intelligence", we mean technology that enables computers to perform tasks that usually require human input—like analysing data, spotting patterns or making predictions. We use AI in several ways; for example, Caisey – Caisey is our own in-house AI. Caisey produces user summaries by providing you with personalised insights based on your credit report. Caisey considers things like your recent credit activity, your electoral roll registration, and your address history to deliver information that’s relevant and useful to you. AI also helps us better understand how people use our services, which features they find most valuable, and where we can make improvements. We use this insight to build better products, carry out research and development, and shape the future of our services. We use observability platforms to highlight any errors to us in regard to the AI tools we are using.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

NA

Name of third-party data processor

Teleperformance

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assist users with any queries they have.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years

Name of third-party data processor

Acre mortgage management software tool

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years

Data Controllers

In addition to the Processors above, we also share information with third parties for other reasons, please see below. These are known as data’ Controllers’ and so may process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share/ receive

Why we share it/ receive it

Lawful basis

Retention period

Name of third party

Third parties that make up the panel of providers (Banks, insurance providers, lenders, credit brokers etc.)

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To facilitate your request to be introduced and or take out a service To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

First charge mortgage providers

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

Conduct of first charge account and consent to place a second charge on this first mortgage To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

Firm’s that make up ClearScore Everywhere’s Appointed Representatives: ClearScore Home Lending Acre

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Firm’s that make up ClearScore Everywhere’s Introducer Appointed Representatives: Asda Blue Light Card We are Discounts

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them both to provide the relevant services as set out above and in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Where you were either introduced to our services by way of another third-party provider, or in the event we have introduced you to another third-party provider we may receive and equally share your data in order to meet legal requirements or in order to meet any contractual obligations

What data we share/ receive

Relevant service specific data Details of the complaint/issues Details relating to any enquiries and any introductions made including the product and or service taken out

Why we share it/ receive it

To assist with the complaint process To ensure ours and the third parties we work with are providing the right products and services to you as well as looking to improve ours and their services. In addition, we will both further process this data for our own commercial interests

Lawful basis

Legal obligation Performance of a contract

Retention period

6 years

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention period

6 years

Name of third party

Regulators: ICO; FCA; ASA

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To comply with the legal requirements placed on us as UK regulated companies

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Law enforcement: NCA; Police etc.

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To assist with criminal investigations; prevent fraud and money laundering.

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Credit Reference Agencies To find out more about what Equifax and the other Credit Reference Agencies do with your data, please see links below: transunion.co.uk/legal/privacy-centre/pc-credit-reference experian.co.uk/legal/crain/ equifax.co.uk/privacy-hub/crain

What data we share/ receive

If you register to use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more Credit Reference Agencies (CRA) on your behalf. Information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing and collection of debt. The CRA may also use the data to undertake statistical analysis." As part of this registration we will also undertake report matching as well as knowledge based authentication using services provided by Equifax. If you choose to apply for a product, the lender will undertake a full credit check and provide you with further privacy information for that product. More information about each CRA and what it does with personal data is available in our terms and conditions. Cookies served by Equifax are held on our website. Equifax is a consumer credit reporting agency. These cookies will be used to serve adverts to visitors based upon the websites they’ve been to previously.

Why we share it/ receive it

To offer our services as set out above. To serve adverts based on previous history

Lawful basis

Consent by way of specific opt in Legitimate interest

Retention period

Determined by the controller

Name of third party

Where you are a subscriber of Protect Plus, your data will be transferred to their respective third-party insurance provider which is: Financial & Legal Insurance Company Limited

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To offer the services set out above To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Name of third party

Acre a mortgage management software tool

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Transfers within the EEA and outside the EEA

Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA. For example, we use call centre (Teleperformance) based in India to assist with customer queries. This means we are to take extra assurance prior to any data transfers.

Should you wish to review your safeguards please contact us on the details below.

Data Security

All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data. Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

Your data rights

Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to exercise your data rights or make a data related enquiry

If you would like to know more about how we use your personal information, you can contact us using any of the following:

Phone: 0161 498 7739

Email: [email protected]

Post: FAO: Data Protection Officer, Dakota House, Concord Business Park, Simonsway, Wythenshawe, Manchester M22 0RR.

You can also complain directly to the ICO if you are unhappy with how we have used your personal data:

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO Website:ico.co.uk

Your Personal Data at ClearScore

Your Personal Data at ClearScore

Version 1

11 May 2026

Your Personal Data at ClearScore

Who are we

‘We’ are ‘ClearScore’, part of the ClearScore Group. This privacy notice concerns the following ClearScore companies only –

ClearScore company name

Core Service

Trading address

Registered address

FCA number

ICO registration number

ClearScore company name

ClearScore Technology Limited

Core Service

Free credit report, App and credit & mortgage broking marketplace. Ancillary to the above are the following products: An online debt consolidation service; ClearScore Protect Plus, an online fraud detection and security subscription; ClearScore Protect, a free online monitoring service in which aids in fraud detection and monitoring and is provided to all ClearScore users.

Trading address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

654446

ICO registration number

ZA100119

ClearScore company name

ClearScore Everywhere Limited

Core Service

An eligibility checking service and credit & mortgage broking marketplace.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

993528

ICO registration number

Z120757X

ClearScore company name

ClearScore Home Lending Limited

Core Service

Provision of advice for regulated mortgages (first and second charge) with the option to be introduced to mortgage loan providers.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

979210

ICO registration number

ZB359170

Further details in regard to any of the above, can be found on their respective terms and conditions pages.

The kind of personal data we collect and what we do with it

The following table applies to the firms listed above, yet only in some cases, will certain personal data and it’s processing be applicable to specific service offerings. We will only collect the personal data we require for the service/s you select.

We receive the personal data (listed below) about you from a variety of places, these include:

From you – as a result of registering/signing up to or using any of our services

Indirectly from you - For example, where a loan provider may have been unable to help you and has suggested us as an alternative. Another example may be the DVLA, where you have expressed an interest in any car related products and are happy to share your details. Ongoing from lenders post introduction and where applicable there has been a sale, this may include details about the product including amount and term. If you choose to share your information with Insurers, we may receive information about whether or not you have taken out a product with any Insurers, what products you may have used, and other such details about your interaction with Insurers.

Credit Reference Agencies (CRA) – For example, if you register for a ClearScore account and use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more CRA’s on your behalf. (See controller table below)

Open Banking (where applicable)

Fraud Prevention agencies and Cybercheck partners (see tables below)

We (ClearScore Everywhere Limited) receives information from firms who act as both our Appointed Representative and Introducer Appointed Representative; the receipt of this information is necessary for us to both fulfil a contract as well as our obligations under the relevant parts of the financial services Act.

Purpose

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Applicable ClearScore Company

Lawful basis

Retention period

Purpose

To offer our services as set out above. Depending on the services sought will depend on what data is processed.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; title; previous name; date of birth; marital/ relationship status; email address; telephone number; residential address; address history; dependents; employment status and employer; income & expenditure; name of bank; bank statements; payment card details; bank account details; current debts; financial commitments; savings; benefits; Passport details; property value; deposit amount and borrowing requirements; monthly rental income; mortgage details, credit score and credit report. And in certain cases, insurance claim history, lifestyle questions and health conditions, device and IP address; cookies where applicable. Where these are considered 'special categories’ of data we require your explicit consent to record and process.(‘service specific data’). We refer to the above (where applicable) as ‘relevant service specific data’ throughout.

Applicable ClearScore Company

All ClearScore companies listed above yet only where applicable. Certain data will be used depending on the service sought.

Lawful basis

Performance of a contract Legal requirements (fraud/AML/ DBS checks etc.) Explicit consent (health conditions/ lifestyle questions etc.)

Retention period

6 years from the date you cease to be a user of our services . In cases where you are a user of our subscription services, this will be 7 years

Purpose

Marketing our own products and services by way of email, SMS in app messaging and also providing you with alerts. For example, when we believe there is another suitable product you could apply for.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address and telephone number or where applicable, inputs as part of your eligibility check for example, a loan amount or data related to your ClearScore app for example name and ClearScore unique ID number. Non-essential Cookies.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Performance Max marketing (PMAX) (see processor table below)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Non-essential cookies Email address

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Service communications (administering your account, maintain the relationship etc.)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address, telephone number and where specified, address.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract. Legal obligation.

Retention period

6 years from the date you cease to be a use of our services

Purpose

Service communications on behalf of the third parties we work with including for example: scope of service or terms and conditions etc.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a use of our services

Purpose

Data analytics to undertake analytics and product development to continually improve the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time.

Purpose

Profiling: analysis and profiling in order to provide comparison and eligibility services.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised. after this time.

Purpose

The running of the website and or app to aid in the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Cookies (see Cookie Notice); IP address; Uniform Resource Locators (URL); browser type and version; time zone setting and location; browser plug- in types and versions; operating system and platform and other technology on the devices used to access the website; page response times; download errors; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page and any phone number used to call our customer service number.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent Performance of a contract.

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time

Purpose

Call recordings

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

All calls and their contents to the ClearScore group will be recorded and as such, will concern relevant service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years from the date you cease to be a user of our services

Purpose

Discussion boards, competitions, surveys, interviews including via online and questions on our website.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years from the date you cease to be a user of our services

Purpose

Issues, problems, disputes or Data Subject Access Requests.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data, this may also include the transfer and receipt of data derived from a third party. For example, in the event a firm is linked to a dispute raised

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

Purpose

Soft credit check

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Where you decide to use our credit brokering services. A soft credit check means that it has no impact on your credit rating and is not visible to anyone other than you.

Applicable ClearScore Company

ClearScore Technology Limited; ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract Legitimate interests

Retention period

NA

Purpose

Disputes raised about the accuracy of information with a third-party lender/provider and/or Credit Reference Agencies

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; email and details of the dispute. This will also include the transfer of and receipt of data from the named Credit Reference Agency and or third-party lender/provider

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

Who do we share your data with

Data Processors

We use third party companies to help us with things that we’re unable to do. These companies are referred to as ‘data processors’.

Data processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

Below are the names of some of the third-party data processors we work with in order to deliver our services, along with some other important information we think you should know. Additionally, you can request a list of all of the data processors we work with.

Name of third-party data processor

What data they process

Why we use them and how they help with the services we offer

Applicable ClearScore Company

Lawful basis

Retention period

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website (Banks, insurance providers, lenders, credit brokers etc.) and as part of this process we also receive data from Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assess your probability of being accepted for a product based on the information you’ve provided to us and in turn for us to be able to show you any prospective offers either online or in the app. To improve their products and services to ClearScore users.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website. This also includes through the use of other third parties such as Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Where you are a user of our app, we will process your data to assess whether you are eligible for pre-approved offers based on the information shared against product provider criteria. Pre-approval is dependent on the accuracy of your information and any changes made to this information directly with the product provider can lead to a change in this pre-approved status, and you would still need to apply with the product provider who may run a hard search and verify your information before making any offer.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legitimate Interests This is something you can opt out of yet if you do so, we will not be able to show you any pre-approved offers or your probability of being accepted for a product.

Retention period

90 days

Name of third-party data processor

HD Decisions (credit broker who works with: AMEX, Barclaycard, Barclays, Vanquis, M&S, Tesco, HSBC, Santander, Nationwide, Vanquis & MBNA.)

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To facilitate the transfer of data between the ClearScore platform and HD Decisions panel of lenders in order to facilitate eligibility checks for ClearScore customers. HD Decisions returns results of their panel by way of API.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Some of our services may offer to connect you to your bank account/s; this is known as ‘Open Banking’. Open Banking allows your bank account data to be seen by you and where you have provided consent, to be viewed by us and shared with other financial services companies who will then use it make decisions. Currently, we work with D.One and Consents Online to do this.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

For the purposes of facilitating Open Banking.

Applicable ClearScore Company

ClearScore Technology Limited and ClearScore Everywhere Limited

Lawful basis

Consent by way of specific opt-in

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Verifying your identity using biometric data to offer the services set out above. Currently we work with Persona and Onfido to do this, see below for more details - ClearScore Technology and its ancillary products use Persona. ClearScore Home Lending uses Onfido.

What data they process

Government issued ID (e.g. driver’s licence, Passport) and other "biometric data", such as a video or photo of your face. “Biometric data” is personal data that relates to the physical, physiological or behavioural characteristics about you which enable us to uniquely identify you and requires your explicit consent before processing it. IP address and device

Why we use them and how they help with the services we offer

To conduct a scan that may include the use of facial recognition technology (by way of ‘selfie’) so we can compare the video or photo you submit to your ID photo, to help confirm that you are who you say you are. We retain copies of your ID and any other biometric data so we can verify you in the future and for our record-keeping and fraud prevention purposes.

Applicable ClearScore Company

ClearScore Technology Limited ClearScore Home Lending Limited

Lawful basis

Consent by way of specific opt-in

Retention period

No longer than 1 year

Name of third-party data processor

Blueshift Inc.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Blueshift as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Braze

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Braze as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Esendex

What data they process

Telephone number

Why we use them and how they help with the services we offer

SMS communications facilitator and data base.

Applicable ClearScore Company

ClearScore Limited

Lawful basis

Consent Performance of a contract

Retention period

For the performance of the contract

Name of third-party data processor

Databricks

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Internal data management platform

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

For our ClearScore Protect service, we currently work with: CyberScout Ventures Limited Spycloud, Inc. Have I been Pwned Superlative Enterprise Pty Limited Falkin

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

All our registered customers benefit from our ClearScore Protect service, upon email verification. To provide you with this service, we share the email address connected with your ClearScore account, and your passport number (if provided), with our Cybercheck Partners who use this information to identify whether any of your information may have been compromised.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract Consent where applicable

Retention period

Will only be kept for the time necessary to conduct the check after which it will be deleted.

Name of third-party data processor

Zendesk

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Zendesk is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Nova

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Nova is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Group Companies

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries for the purposes of providing our services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Google

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Analytics

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years

Name of third-party data processor

Google Meta You Tube TikTok

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Google Ad and Ad campaigns including: Performance Max (PMAX) campaigns in which include the creation of ‘lookalike’ audiences These interest-based advertising platforms may use personal information about you that they have independently collected in accordance with their privacy policy and practices, including through the use of cookies. That will help us manage and deliver our marketing, including opting you out where specified or creating lists in regard to the marketing set out above.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

71a – a third-party marketing agency

What data they process

Full name; postcode; email address and age

Why we use them and how they help with the services we offer

Facilitation and administration of Google Ad campaigns; including PMAX. For example, we will share your personal information with 71a who work with advertising networks, including social media networks like TikTok, Meta/Facebook and platforms such as Google/YouTube and Amazon, for interest-based advertising or ‘targeted’ advertising campaigns including ‘lookalike audiences’. They select and serve relevant adverts, to you and others and to make sure their adverts reach their intended audience, help analyse our site, run contests, special offers, or other events or activities, and track metrics on our behalf or in connection with our Services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

Connex

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

A third-party telephony platform

Applicable ClearScore Company

ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Nivo

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Instant messaging, administration tool.

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Consent

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Artificial Intelligence (‘AI’) -we currently use - Chat GPT, a Large Language Model used to generate responses when asked by You, we also use it to provide personalised summaries using the information we hold about you. These services are produced and managed by us yet are provided by ChatGPT as a processor. ChatGPT is owned by Open AI and is a third-party company not linked to us. Connex AI a third-party telecommunications platform. Connex AI provides automated chat bots whose role is to provide a contact for customers calling into us out of hours. The automated bot will take your details and arrange a call back. Langfuse is a third party whose open-source LLM engineering and observability platform are designed to help developers debug, monitor, and evaluate AI applications.

What data they process

Relevant service specific data User posed questions User posed requests

Why we use them and how they help with the services we offer

We use Artificial Intelligence to help you get more from your credit information. When we say, "artificial intelligence", we mean technology that enables computers to perform tasks that usually require human input—like analysing data, spotting patterns or making predictions. We use AI in several ways; for example, Caisey – Caisey is our own in-house AI. Caisey produces user summaries by providing you with personalised insights based on your credit report. Caisey considers things like your recent credit activity, your electoral roll registration, and your address history to deliver information that’s relevant and useful to you. AI also helps us better understand how people use our services, which features they find most valuable, and where we can make improvements. We use this insight to build better products, carry out research and development, and shape the future of our services. We use observability platforms to highlight any errors to us in regard to the AI tools we are using.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

NA

Name of third-party data processor

Teleperformance

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assist users with any queries they have.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years

Name of third-party data processor

Acre mortgage management software tool

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years

Data Controllers

In addition to the Processors above, we also share information with third parties for other reasons, please see below. These are known as data’ Controllers’ and so may process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share/ receive

Why we share it/ receive it

Lawful basis

Retention period

Name of third party

Third parties that make up the panel of providers (Banks, insurance providers, lenders, credit brokers etc.)

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To facilitate your request to be introduced and or take out a service To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

First charge mortgage providers

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

Conduct of first charge account and consent to place a second charge on this first mortgage To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

Firm’s that make up ClearScore Everywhere’s Appointed Representatives: ClearScore Home Lending Acre

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Firm’s that make up ClearScore Everywhere’s Introducer Appointed Representatives: Asda Blue Light Card We are Discounts

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them both to provide the relevant services as set out above and in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Where you were either introduced to our services by way of another third-party provider, or in the event we have introduced you to another third-party provider we may receive and equally share your data in order to meet legal requirements or in order to meet any contractual obligations

What data we share/ receive

Relevant service specific data Details of the complaint/issues Details relating to any enquiries and any introductions made including the product and or service taken out

Why we share it/ receive it

To assist with the complaint process To ensure ours and the third parties we work with are providing the right products and services to you as well as looking to improve ours and their services. In addition, we will both further process this data for our own commercial interests

Lawful basis

Legal obligation Performance of a contract

Retention period

6 years

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention period

6 years

Name of third party

Regulators: ICO; FCA; ASA

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To comply with the legal requirements placed on us as UK regulated companies

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Law enforcement: NCA; Police etc.

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To assist with criminal investigations; prevent fraud and money laundering.

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Credit Reference Agencies To find out more about what Equifax and the other Credit Reference Agencies do with your data, please see links below: transunion.co.uk/legal/privacy-centre/pc-credit-reference experian.co.uk/legal/crain/ equifax.co.uk/privacy-hub/crain

What data we share/ receive

If you register to use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more Credit Reference Agencies (CRA) on your behalf. Information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing and collection of debt. The CRA may also use the data to undertake statistical analysis." As part of this registration we will also undertake report matching as well as knowledge based authentication using services provided by Equifax. If you choose to apply for a product, the lender will undertake a full credit check and provide you with further privacy information for that product. More information about each CRA and what it does with personal data is available in our terms and conditions. Cookies served by Equifax are held on our website. Equifax is a consumer credit reporting agency. These cookies will be used to serve adverts to visitors based upon the websites they’ve been to previously.

Why we share it/ receive it

To offer our services as set out above. To serve adverts based on previous history

Lawful basis

Consent by way of specific opt in Legitimate interest

Retention period

Determined by the controller

Name of third party

Where you are a subscriber of Protect Plus, your data will be transferred to their respective third-party insurance provider which is: Financial & Legal Insurance Company Limited

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To offer the services set out above To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Name of third party

Acre a mortgage management software tool

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Transfers within the EEA and outside the EEA

Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA. For example, we use call centre (Teleperformance) based in India to assist with customer queries. This means we are to take extra assurance prior to any data transfers.

Should you wish to review your safeguards please contact us on the details below.

Data Security

All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data. Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

Your data rights

Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to exercise your data rights or make a data related enquiry

If you would like to know more about how we use your personal information, you can contact us using any of the following:

Phone: 0161 498 7739

Email: [email protected]

Post: FAO: Data Protection Officer, Dakota House, Concord Business Park, Simonsway, Wythenshawe, Manchester M22 0RR.

You can also complain directly to the ICO if you are unhappy with how we have used your personal data:

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO Website:ico.co.uk

Your Personal Data at ClearScore

Your Personal Data at ClearScore

Version 1

11 May 2026

Your Personal Data at ClearScore

Who are we

‘We’ are ‘ClearScore’, part of the ClearScore Group. This privacy notice concerns the following ClearScore companies only –

ClearScore company name

Core Service

Trading address

Registered address

FCA number

ICO registration number

ClearScore company name

ClearScore Technology Limited

Core Service

Free credit report, App and credit & mortgage broking marketplace. Ancillary to the above are the following products: An online debt consolidation service; ClearScore Protect Plus, an online fraud detection and security subscription; ClearScore Protect, a free online monitoring service in which aids in fraud detection and monitoring and is provided to all ClearScore users.

Trading address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

654446

ICO registration number

ZA100119

ClearScore company name

ClearScore Everywhere Limited

Core Service

An eligibility checking service and credit & mortgage broking marketplace.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

993528

ICO registration number

Z120757X

ClearScore company name

ClearScore Home Lending Limited

Core Service

Provision of advice for regulated mortgages (first and second charge) with the option to be introduced to mortgage loan providers.

Trading address

Dakota House, Concord Business Park, Threapwood Rd, Wythenshawe, Manchester M22 0RR

Registered address

Vox Studios, Vg 203 1-45 Durham Street, London, United Kingdom, SE11 5JH

FCA number

979210

ICO registration number

ZB359170

Further details in regard to any of the above, can be found on their respective terms and conditions pages.

The kind of personal data we collect and what we do with it

The following table applies to the firms listed above, yet only in some cases, will certain personal data and it’s processing be applicable to specific service offerings. We will only collect the personal data we require for the service/s you select.

We receive the personal data (listed below) about you from a variety of places, these include:

From you – as a result of registering/signing up to or using any of our services

Indirectly from you - For example, where a loan provider may have been unable to help you and has suggested us as an alternative. Another example may be the DVLA, where you have expressed an interest in any car related products and are happy to share your details. Ongoing from lenders post introduction and where applicable there has been a sale, this may include details about the product including amount and term. If you choose to share your information with Insurers, we may receive information about whether or not you have taken out a product with any Insurers, what products you may have used, and other such details about your interaction with Insurers.

Credit Reference Agencies (CRA) – For example, if you register for a ClearScore account and use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more CRA’s on your behalf. (See controller table below)

Open Banking (where applicable)

Fraud Prevention agencies and Cybercheck partners (see tables below)

We (ClearScore Everywhere Limited) receives information from firms who act as both our Appointed Representative and Introducer Appointed Representative; the receipt of this information is necessary for us to both fulfil a contract as well as our obligations under the relevant parts of the financial services Act.

Purpose

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Applicable ClearScore Company

Lawful basis

Retention period

Purpose

To offer our services as set out above. Depending on the services sought will depend on what data is processed.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; title; previous name; date of birth; marital/ relationship status; email address; telephone number; residential address; address history; dependents; employment status and employer; income & expenditure; name of bank; bank statements; payment card details; bank account details; current debts; financial commitments; savings; benefits; Passport details; property value; deposit amount and borrowing requirements; monthly rental income; mortgage details, credit score and credit report. And in certain cases, insurance claim history, lifestyle questions and health conditions, device and IP address; cookies where applicable. Where these are considered 'special categories’ of data we require your explicit consent to record and process.(‘service specific data’). We refer to the above (where applicable) as ‘relevant service specific data’ throughout.

Applicable ClearScore Company

All ClearScore companies listed above yet only where applicable. Certain data will be used depending on the service sought.

Lawful basis

Performance of a contract Legal requirements (fraud/AML/ DBS checks etc.) Explicit consent (health conditions/ lifestyle questions etc.)

Retention period

6 years from the date you cease to be a user of our services . In cases where you are a user of our subscription services, this will be 7 years

Purpose

Marketing our own products and services by way of email, SMS in app messaging and also providing you with alerts. For example, when we believe there is another suitable product you could apply for.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address and telephone number or where applicable, inputs as part of your eligibility check for example, a loan amount or data related to your ClearScore app for example name and ClearScore unique ID number. Non-essential Cookies.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Performance Max marketing (PMAX) (see processor table below)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Non-essential cookies Email address

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

On-going unless withdrawn or no contact in the past 12 months

Purpose

Service communications (administering your account, maintain the relationship etc.)

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Email address, telephone number and where specified, address.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract. Legal obligation.

Retention period

6 years from the date you cease to be a use of our services

Purpose

Service communications on behalf of the third parties we work with including for example: scope of service or terms and conditions etc.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a use of our services

Purpose

Data analytics to undertake analytics and product development to continually improve the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time.

Purpose

Profiling: analysis and profiling in order to provide comparison and eligibility services.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Products you viewed or searched for; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) as well as service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

6 years after you cease to be a user of our services. Data will be anonymised. after this time.

Purpose

The running of the website and or app to aid in the services we offer

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Cookies (see Cookie Notice); IP address; Uniform Resource Locators (URL); browser type and version; time zone setting and location; browser plug- in types and versions; operating system and platform and other technology on the devices used to access the website; page response times; download errors; length of visits to certain pages and page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page and any phone number used to call our customer service number.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent Performance of a contract.

Retention period

6 years after you cease to be a user of our services. Data will be anonymised after this time

Purpose

Call recordings

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

All calls and their contents to the ClearScore group will be recorded and as such, will concern relevant service specific data.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years from the date you cease to be a user of our services

Purpose

Discussion boards, competitions, surveys, interviews including via online and questions on our website.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years from the date you cease to be a user of our services

Purpose

Issues, problems, disputes or Data Subject Access Requests.

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Relevant service specific data, this may also include the transfer and receipt of data derived from a third party. For example, in the event a firm is linked to a dispute raised

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

Purpose

Soft credit check

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Where you decide to use our credit brokering services. A soft credit check means that it has no impact on your credit rating and is not visible to anyone other than you.

Applicable ClearScore Company

ClearScore Technology Limited; ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract Legitimate interests

Retention period

NA

Purpose

Disputes raised about the accuracy of information with a third-party lender/provider and/or Credit Reference Agencies

Data we process (where applicable, this may differ dependant on the service) about you and any joint applicants

Full name; email and details of the dispute. This will also include the transfer of and receipt of data from the named Credit Reference Agency and or third-party lender/provider

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legal requirement

Retention period

6 years from the date you cease to be a user of our services

*Lawful basis: The UK Data Protection Act tells us we must have a lawful basis as to why we collect data and process it

Who do we share your data with

Data Processors

We use third party companies to help us with things that we’re unable to do. These companies are referred to as ‘data processors’.

Data processors can only do what the company (data Controller) has told them to do with the data, unless a legal exemption applies.

Below are the names of some of the third-party data processors we work with in order to deliver our services, along with some other important information we think you should know. Additionally, you can request a list of all of the data processors we work with.

Name of third-party data processor

What data they process

Why we use them and how they help with the services we offer

Applicable ClearScore Company

Lawful basis

Retention period

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website (Banks, insurance providers, lenders, credit brokers etc.) and as part of this process we also receive data from Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assess your probability of being accepted for a product based on the information you’ve provided to us and in turn for us to be able to show you any prospective offers either online or in the app. To improve their products and services to ClearScore users.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Third parties that make up the panel of financial services providers within this website. This also includes through the use of other third parties such as Credit Reference Agencies.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Where you are a user of our app, we will process your data to assess whether you are eligible for pre-approved offers based on the information shared against product provider criteria. Pre-approval is dependent on the accuracy of your information and any changes made to this information directly with the product provider can lead to a change in this pre-approved status, and you would still need to apply with the product provider who may run a hard search and verify your information before making any offer.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Legitimate Interests This is something you can opt out of yet if you do so, we will not be able to show you any pre-approved offers or your probability of being accepted for a product.

Retention period

90 days

Name of third-party data processor

HD Decisions (credit broker who works with: AMEX, Barclaycard, Barclays, Vanquis, M&S, Tesco, HSBC, Santander, Nationwide, Vanquis & MBNA.)

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To facilitate the transfer of data between the ClearScore platform and HD Decisions panel of lenders in order to facilitate eligibility checks for ClearScore customers. HD Decisions returns results of their panel by way of API.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

90 days

Name of third-party data processor

Some of our services may offer to connect you to your bank account/s; this is known as ‘Open Banking’. Open Banking allows your bank account data to be seen by you and where you have provided consent, to be viewed by us and shared with other financial services companies who will then use it make decisions. Currently, we work with D.One and Consents Online to do this.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

For the purposes of facilitating Open Banking.

Applicable ClearScore Company

ClearScore Technology Limited and ClearScore Everywhere Limited

Lawful basis

Consent by way of specific opt-in

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Verifying your identity using biometric data to offer the services set out above. Currently we work with Persona and Onfido to do this, see below for more details - ClearScore Technology and its ancillary products use Persona. ClearScore Home Lending uses Onfido.

What data they process

Government issued ID (e.g. driver’s licence, Passport) and other "biometric data", such as a video or photo of your face. “Biometric data” is personal data that relates to the physical, physiological or behavioural characteristics about you which enable us to uniquely identify you and requires your explicit consent before processing it. IP address and device

Why we use them and how they help with the services we offer

To conduct a scan that may include the use of facial recognition technology (by way of ‘selfie’) so we can compare the video or photo you submit to your ID photo, to help confirm that you are who you say you are. We retain copies of your ID and any other biometric data so we can verify you in the future and for our record-keeping and fraud prevention purposes.

Applicable ClearScore Company

ClearScore Technology Limited ClearScore Home Lending Limited

Lawful basis

Consent by way of specific opt-in

Retention period

No longer than 1 year

Name of third-party data processor

Blueshift Inc.

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Blueshift as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Braze

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We use Braze as a database in which it both houses are customers marketing preferences including opt in and opt out as well as aiding with our internal marketing strategy.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services or on-going where not opted out from marketing.

Name of third-party data processor

Esendex

What data they process

Telephone number

Why we use them and how they help with the services we offer

SMS communications facilitator and data base.

Applicable ClearScore Company

ClearScore Limited

Lawful basis

Consent Performance of a contract

Retention period

For the performance of the contract

Name of third-party data processor

Databricks

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Internal data management platform

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

For our ClearScore Protect service, we currently work with: CyberScout Ventures Limited Spycloud, Inc. Have I been Pwned Superlative Enterprise Pty Limited Falkin

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

All our registered customers benefit from our ClearScore Protect service, upon email verification. To provide you with this service, we share the email address connected with your ClearScore account, and your passport number (if provided), with our Cybercheck Partners who use this information to identify whether any of your information may have been compromised.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract Consent where applicable

Retention period

Will only be kept for the time necessary to conduct the check after which it will be deleted.

Name of third-party data processor

Zendesk

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Zendesk is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Nova

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Nova is used as an internal customer relationship management tool.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Group Companies

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries for the purposes of providing our services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a user of our services

Name of third-party data processor

Google

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Analytics

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate Interests

Retention period

6 years

Name of third-party data processor

Google Meta You Tube TikTok

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Google Ad and Ad campaigns including: Performance Max (PMAX) campaigns in which include the creation of ‘lookalike’ audiences These interest-based advertising platforms may use personal information about you that they have independently collected in accordance with their privacy policy and practices, including through the use of cookies. That will help us manage and deliver our marketing, including opting you out where specified or creating lists in regard to the marketing set out above.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

71a – a third-party marketing agency

What data they process

Full name; postcode; email address and age

Why we use them and how they help with the services we offer

Facilitation and administration of Google Ad campaigns; including PMAX. For example, we will share your personal information with 71a who work with advertising networks, including social media networks like TikTok, Meta/Facebook and platforms such as Google/YouTube and Amazon, for interest-based advertising or ‘targeted’ advertising campaigns including ‘lookalike audiences’. They select and serve relevant adverts, to you and others and to make sure their adverts reach their intended audience, help analyse our site, run contests, special offers, or other events or activities, and track metrics on our behalf or in connection with our Services.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Consent

Retention period

6 years

Name of third-party data processor

Connex

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

A third-party telephony platform

Applicable ClearScore Company

ClearScore Everywhere Limited and ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Nivo

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

Instant messaging, administration tool.

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Consent

Retention period

6 years from the date you cease to be a customer of our services

Name of third-party data processor

Artificial Intelligence (‘AI’) -we currently use - Chat GPT, a Large Language Model used to generate responses when asked by You, we also use it to provide personalised summaries using the information we hold about you. These services are produced and managed by us yet are provided by ChatGPT as a processor. ChatGPT is owned by Open AI and is a third-party company not linked to us. Connex AI a third-party telecommunications platform. Connex AI provides automated chat bots whose role is to provide a contact for customers calling into us out of hours. The automated bot will take your details and arrange a call back. Langfuse is a third party whose open-source LLM engineering and observability platform are designed to help developers debug, monitor, and evaluate AI applications.

What data they process

Relevant service specific data User posed questions User posed requests

Why we use them and how they help with the services we offer

We use Artificial Intelligence to help you get more from your credit information. When we say, "artificial intelligence", we mean technology that enables computers to perform tasks that usually require human input—like analysing data, spotting patterns or making predictions. We use AI in several ways; for example, Caisey – Caisey is our own in-house AI. Caisey produces user summaries by providing you with personalised insights based on your credit report. Caisey considers things like your recent credit activity, your electoral roll registration, and your address history to deliver information that’s relevant and useful to you. AI also helps us better understand how people use our services, which features they find most valuable, and where we can make improvements. We use this insight to build better products, carry out research and development, and shape the future of our services. We use observability platforms to highlight any errors to us in regard to the AI tools we are using.

Applicable ClearScore Company

All ClearScore companies listed above

Lawful basis

Legitimate interests

Retention period

NA

Name of third-party data processor

Teleperformance

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To assist users with any queries they have.

Applicable ClearScore Company

ClearScore Technology Limited

Lawful basis

Performance of a contract

Retention period

6 years

Name of third-party data processor

Acre mortgage management software tool

What data they process

Relevant service specific data

Why we use them and how they help with the services we offer

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search

Applicable ClearScore Company

ClearScore Home Lending Limited

Lawful basis

Performance of a contract

Retention period

6 years

Data Controllers

In addition to the Processors above, we also share information with third parties for other reasons, please see below. These are known as data’ Controllers’ and so may process your data for their own purposes. For example, the Police may request data from us, then further process it as part of a criminal investigation.

Listed below, are the names of the Controllers we work with in the capacity set out above, along with some other important information we think you should know:

Name of third party

What data we share/ receive

Why we share it/ receive it

Lawful basis

Retention period

Name of third party

Third parties that make up the panel of providers (Banks, insurance providers, lenders, credit brokers etc.)

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To facilitate your request to be introduced and or take out a service To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

First charge mortgage providers

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

Conduct of first charge account and consent to place a second charge on this first mortgage To build insights into the customer journey prior to and beyond the use of both our services and the partners. This helps us both to improve our respective services To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legitimate interests Legal obligation Performance of a contract

Retention period

Dependant on the controller

Name of third party

Firm’s that make up ClearScore Everywhere’s Appointed Representatives: ClearScore Home Lending Acre

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Firm’s that make up ClearScore Everywhere’s Introducer Appointed Representatives: Asda Blue Light Card We are Discounts

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

ClearScore Everywhere receives information from them in order for them both to provide the relevant services as set out above and in order for them to comply with the relevant parts of the Financial Services and Markets Act 2000.

Lawful basis

Performance of a contract Legal obligation

Retention period

6 years from the date you cease to be a customer of their services

Name of third party

Where you were either introduced to our services by way of another third-party provider, or in the event we have introduced you to another third-party provider we may receive and equally share your data in order to meet legal requirements or in order to meet any contractual obligations

What data we share/ receive

Relevant service specific data Details of the complaint/issues Details relating to any enquiries and any introductions made including the product and or service taken out

Why we share it/ receive it

To assist with the complaint process To ensure ours and the third parties we work with are providing the right products and services to you as well as looking to improve ours and their services. In addition, we will both further process this data for our own commercial interests

Lawful basis

Legal obligation Performance of a contract

Retention period

6 years

Name of third party

Third parties performing roles in fraud prevention and credit reference agencies

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

For product development purposes and to evaluate new products and services

Lawful basis

Legitimate interest

Retention period

6 years

Name of third party

Regulators: ICO; FCA; ASA

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To comply with the legal requirements placed on us as UK regulated companies

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Law enforcement: NCA; Police etc.

What data we share/ receive

Any data concerned with any visitor to our site. This may include those who took out products or not via our platform or those who merely entered partial details then left the site. This further includes customers who received advice from us and may have been introduced to other parties

Why we share it/ receive it

To assist with criminal investigations; prevent fraud and money laundering.

Lawful basis

Legal obligation

Retention period

Determined by the controller

Name of third party

Credit Reference Agencies To find out more about what Equifax and the other Credit Reference Agencies do with your data, please see links below: transunion.co.uk/legal/privacy-centre/pc-credit-reference experian.co.uk/legal/crain/ equifax.co.uk/privacy-hub/crain

What data we share/ receive

If you register to use our services, we will obtain your credit score and credit report, including information such as debt information and balances, from one or more Credit Reference Agencies (CRA) on your behalf. Information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing and collection of debt. The CRA may also use the data to undertake statistical analysis." As part of this registration we will also undertake report matching as well as knowledge based authentication using services provided by Equifax. If you choose to apply for a product, the lender will undertake a full credit check and provide you with further privacy information for that product. More information about each CRA and what it does with personal data is available in our terms and conditions. Cookies served by Equifax are held on our website. Equifax is a consumer credit reporting agency. These cookies will be used to serve adverts to visitors based upon the websites they’ve been to previously.

Why we share it/ receive it

To offer our services as set out above. To serve adverts based on previous history

Lawful basis

Consent by way of specific opt in Legitimate interest

Retention period

Determined by the controller

Name of third party

Where you are a subscriber of Protect Plus, your data will be transferred to their respective third-party insurance provider which is: Financial & Legal Insurance Company Limited

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To offer the services set out above To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Name of third party

Acre a mortgage management software tool

What data we share/ receive

Relevant service specific data

Why we share it/ receive it

To aid ClearScore Home Lending with certain parts of the customer journey including a hard credit search To aid with any complaints; legal or regulatory matters such as DSARs in connection to the both of us To fulfil any commercial agreements between ourselves and the partners we work with

Lawful basis

Performance of a contract Legal obligation Performance of a contract

Retention period

Determined by the controller

Transfers within the EEA and outside the EEA

Whilst the majority of the data we process is within the EEA, we do use Processors whose head offices are based outside the EEA. For example, we use call centre (Teleperformance) based in India to assist with customer queries. This means we are to take extra assurance prior to any data transfers.

Should you wish to review your safeguards please contact us on the details below.

Data Security

All information you provide to us is stored on our secure servers. We take all reasonable steps to maintain the security of your data. Whilst we do our best to protect your personal data; we cannot guarantee the security of your data transmitted within our systems; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.

Your data rights

Under data protection law, you have rights including:

Your right to be informed – You have the right to know what we do with any data you provide us or that we collect from you or other sources.

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You also have the right to object to the processing of your personal information in certain circumstances.

Your right to not be subject to automated decision making - You have the right not to be subject to automated decision-making yet for some services this may mean we are unable to fulfil your objectives.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to exercise your data rights or make a data related enquiry

If you would like to know more about how we use your personal information, you can contact us using any of the following:

Phone: 0161 498 7739

Email: [email protected]

Post: FAO: Data Protection Officer, Dakota House, Concord Business Park, Simonsway, Wythenshawe, Manchester M22 0RR.

You can also complain directly to the ICO if you are unhappy with how we have used your personal data:

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO Website:ico.co.uk

Your Personal Data at ClearScore