®
Data & privacy
Help articles on data & privacy — tap any question to expand the answer, or open the full article for a direct link.
Are your phone calls recorded?
Calls to and from Credit Corp Group Limited are recorded. We do this for staff training, to monitor and improve service quality, and to keep an accurate record of what was discussed and agreed.
Keeping a recording protects you as well as us: if there is ever a question about what was said — for example, an arrangement we agreed or instructions you gave — the recording is an impartial record we can both rely on.
Our Audio Recording page explains the practice in full, and our Privacy Policy sets out how recordings are stored, who can access them and how long they are kept. Recording also supports the checks we run when we verify it is really you on the phone.
How do I request deletion of my personal data?
Under UK GDPR, you have the right to request that we delete personal information we hold about you. This is sometimes called the "right to erasure" or the "right to be forgotten". We take this right seriously and will act on valid requests promptly.
How to submit an erasure request
Email our privacy team at support@credicorp.co.uk with the subject line "Data erasure request". Please include:
- Your full name as it appears on your account
- Your email address linked to the account
- Your company name and company number (for business accounts)
- A brief description of what you want deleted
We will acknowledge your request within five working days and complete the erasure (or explain why an exemption applies) within 30 calendar days.
What we will delete
For accounts with no outstanding loan balance and no ongoing regulatory obligation, we will delete:
- Your contact details and identification information
- Application form data not required for legal retention
- Marketing preferences and communication history
- Any open-banking data we hold
What we must retain and why
Some information cannot be deleted because we are required to keep it by law. We must retain:
- Loan agreement records for six years from the date the agreement ends, under the Limitation Act 1980 (limitation period for contract claims).
- AML and KYC records for five years from the end of the business relationship, under the Money Laundering Regulations 2017.
- Accounting and financial records for six years under the Companies Act 2006.
- Credit bureau data — information already reported to Experian, Equifax or TransUnion cannot be deleted by us, because those agencies apply their own retention policies.
We will tell you specifically what we have retained and why when we respond to your request.
If you have an outstanding loan balance
We cannot erase your account while a loan is active or a balance remains outstanding. Once the loan is fully repaid and all obligations are settled, you may submit an erasure request and we will process it subject to our legal retention obligations.
How to complain if we refuse
If you believe we have refused your request without good reason, you have the right to complain to the Information Commissioner's Office (ICO). Our ICO registration number is ZC189608.
Will applying for a business loan affect my personal credit file in the UK?
This is lending to your company, not to you personally, so it is the company's credit position we look at — not the director's personal consumer credit file. Here is exactly how that works.
Checks when you apply
When the company applies, we carry out two things: a business credit check on the company (using business credit reference agencies) and an identity check on the director to confirm who we are dealing with and to meet our anti-money-laundering obligations. The identity check is a verification step; it is not a personal lending search and is not recorded as one.
We do not record this loan, or the application for it, against the director's personal consumer credit file with Experian, Equifax or TransUnion. Borrowing with us will not show up when you next apply for a personal mortgage, card or loan.
The company's business credit file
The loan and how it is run can be reported to business credit reference agencies — Experian Business, Creditsafe and Equifax Business. That means:
- payments made on time build the company's record of good account management;
- missed payments or arrears may also be reported against the company;
- after the account is settled and closed it stays on the company's business file for a period so other business lenders can see the full picture.
How to see the file
A company can check its own business credit file with any of the business agencies above. A director can separately check their personal file with Experian, Equifax or TransUnion at any time — each must give free access under data-protection law, and looking at your own file never affects it.
If something looks wrong
If you think we have reported something incorrectly about the company, please raise it — the General Support Enquiry form on our Forms & Requests page is the right place to start. We will investigate and, if a correction is needed, ask the relevant agency to update the record. Our Privacy Policy sets out in full how we use credit reference data and your rights over it.
How do I make a DSAR (data subject access request) to a UK lender?
You have the right to ask for a copy of the personal information we hold about you — known as a subject access request.
To make one, contact our privacy team or use the General Support form, telling us it is a data request. We will verify your identity and respond within the statutory time limit. The 'Your rights' section of our Privacy Policy explains the process and the other rights you have over your data.