Alpha This is a new service – your feedback will help us to improve it.

Menu Search

Funding Xchange

The information on this page is from the privacy notice published by Funding Xchange.

You can use this page to learn about how this organisation uses personal data and find out how to make a request related to the data they hold about you.

Make a request

Organisation information


Open banking service

Registration country

United Kingdom

Registration number


Data Protection Officer

Organisations that use special categories of data, are public bodies, or do large scale processing must appoint a Data Protection Officer.


Data Protection Officer

Email address

Data categories collected

Organisations must give details about what categories of data are stored and processed.

  • Credit history

  • Email address

  • Identity documents

  • Income

  • Postal address

  • Telephone number

Unusual processing purposes

Organisations must provide information about what they do with data. This section highlights less common uses of data.

This privacy notice does not appear to mention any unusual processing purposes.

Third parties

Organisations must give details about other parties that personal data is shared with.

List of third parties

  • Credit reference agencies

  • Agents and subcontractors to operate the Funding Xchange service

  • Organisations providing centralised application matching service for anti-fraud

  • Regulatory and taxation authorities

  • Other third parties with user consent or upon request

  • Law enforcement or related bodies if under a duty to disclose

  • Companies involved in mergers and acquisitions

  • Marketing analytics companies

How specific is this information?

Third parties are listed as groups

Retention rules

Organisations must give details about how long data is kept.


Funding Xchange note that (unless required by law) they will only hold personal information for as long as is necessary to fulfil the purposes outlined in the policy or until the data subject requests deletion.

How specific is this information?

  • Retention rules are given without mentioning specific categories of data

  • Unspecific times for how long data is kept

Lawful bases

Organisations must justify collection and use of data under six lawful bases and provide information about their decisions

  • Consent

    in some circumstances, we may ask for your consent to process your information in a particular way. To the extent that we are processing your information based on your consent, you will have the right to withdraw your consent at any time. You can do this by contacting us at at any time.

  • Contract

    in order to perform obligations that we undertake in providing the Service, or in order to take steps at your request to enter into a contract with us, it will be necessary for us to process your personal data;

  • Legal obligation

    we are subject to certain legal requirements which may require us to process your information. We may also be obliged by law to disclose your information to a regulatory body or law enforcement agency;

  • Legitimate interests

    either we, or a third party, will need to process your information for the purposes of our (or a third party's) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your information protected. Our legitimate interests include ensuring that our operations are conducted in an appropriate and efficient manner, responding to requests and enquiries from you or a third party, optimising our website and customer experience and informing you about our products and services;


The policy clearly lays out the four main legal bases which Funding Xchange relies on for the processing of data.

Security standards

Organisations must ensure that data is stored and processed securely.

This privacy notice does not appear to have this information.

Data processing addendum

Some organisations offer a data processing addendum that gives data adequate protections when it leaves the EEA.

This privacy notice does not appear to have this information.

Automated decision making

Organisations must give details about how data is used to make decisions without human involvement.


This organisation uses automated decision making


"Funding Xchange use elements of automated decisioning for the purpose of facilitating Indicative Offers via our online platform."

How specific is this information?

The organisation mentions use of automated decision making for specific purposes

Complaint information

Organisations must give details about how to make a complaint with a data protection authority.


This privacy notice contains information about to make a complaint to a data protection regulator


The organisation offers a specific complaints email address at, which data subjects are directed to in the first instance.

For further complaints, customers are directed to complain to the ICO. A link to the ICO website is provided.

How specific is this information?

This privacy notice contains specific contact details for a data protection regulator

Design recommendations

Organisations are required to provide privacy information in a transparent way. The Article 29 Working Party has provided recommendations on how to do this.


This privacy notice:

  • Has language that is easy to understand

  • Is designed in a way that makes it easy to find information

  • Can be easily found on the organisation's website

Last updated 2018-06-29 at 08:06:12 • Download as JSONAPI documentationView on GitHubView on OpenCorporates