Data Protection Policy – General Section

We know how important privacy is for our customers and visitors to our website. Our data protection policy aims to clearly and transparently describe how we collect, use, display, transfer, and store your data and information, so you can be assured that your personal data is protected and processed correctly.

We carry out all personal data processing in accordance with applicable data protection legislation (UK GDPR).

Processing of Personal Data

GKS FINANCE, hereinafter "we", process your personal data to provide you with our services and allow you to use them. The processing of this data depends on the service you have chosen.

If you wish to consult the terms of use of our brokerage services, see the General Terms section. If you wish to consult the agreement on social benefits, refer to your contract.

By using the brokerage services, for example by visiting our website or applying for a loan or insurance, you confirm that you have read and understood the data protection policy of GKS FINANCE.

GKS FINANCE retains information about your use of our services, for example, the application channel used, the date of application, the dates of our communications with you, and the subject thereof.

If you apply for a loan, insurance, or compare your contracts through the services of GKS FINANCE, we will transmit your personal data to the lenders and insurance companies associated with our service and related to your application. These entities are responsible for the processing of personal data they carry out in the context of your application. We invite you to carefully consult their privacy policies.

When we provide a link to a website belonging to a third party, this reference is intended solely to provide a service to the user, and we decline all responsibility for that third-party website and the processing of personal data carried out by said third party.

Data Controller

The Data Controller for the services in the UK is:
GKS FINANCE
.

In this data protection policy, we explain how your personal data is processed for each service and within the framework of the common customer database.

Processing and Legal Basis

We collect information about you as a customer to, among other things, offer you our services and fulfill our commitments. The information collected varies depending on the service used.

The processing of personal data must be based on a legislative foundation, called a legal basis.

Legal basis

For the processing of your personal data to be lawful, it must be necessary:

(i) for the performance of our contract with you, or
(ii) for compliance with a legal obligation to which we are subject.

Processing may also be based on:

(iii) a balance of interests / legitimate interest, or
(iv) your consent for particular processing.

When the processing of your data is necessary for the purposes of the legitimate interests of GKS FINANCE or a third party, we may process your personal data taking into account the weighting of these interests. These interests include the commercial interest of maintaining a quality relationship with the customer, providing relevant information for your use of our services, improving and developing the latter, and promoting our services.

What personal data is collected?

Below you will find more detailed information on the categories of personal data we collect, the processing we carry out, its purposes, and its legal basis:

1. Personal and contact information

Certain information you provide to us when you use one of our services, such as your personal and contact details (name, address, phone number, and email address), as well as certain information we collect about you in the context of and/or after the submission of your application (e.g., updating your personal information or supplementary information via external registers).

Example: Name, National Insurance number/ID, address, phone number, and email.

Purpose: We need this information to provide you with our services. It also allows us to communicate with you, present offers, carry out direct marketing, develop and ensure the proper functioning of our services, guarantee information security, provide customer service, prevent misuse of our services, and comply with our legal obligations.

Base jurídica: Performance of our contract with you and compliance with legal obligations and/or our legitimate interests.

Information sharing: Your email address and phone number may be communicated to providers to promote our services.

2. Company information (if applicable)

If you act on behalf of a company, we also collect information about it.

Example: Registration number (CRN/VAT), name, address, your position.

Base jurídica: Performance of our contract and compliance with legal obligations.

3. IP address, cookies, and technical data

We also retain information about your use of our services, such as the application channel used, the date of application, and the dates and times of our communications with you.

Example: Your browsing, pages visited, device type, IP address.

Purpose: We use your IP address to identify you and recognise your settings in order to offer you a better user experience, for administrative purposes, and to prevent fraud.

Base jurídica: Legitimate interest and consent (for cookies).

4. Credit and debt information

We may also collect information about your creditworthiness and/or income. When applying for a loan, we will request a credit report on you from authorised agencies (e.g., Experian, Equifax, TransUnion).

Purpose: This information is processed so that we can transmit your application to the corresponding lender. Without this information, we unfortunately cannot offer you our brokerage services.

Base jurídica: Performance of our contract with you.

5. Application information

The information required for your application may include various details necessary for the provision of the specific service you have requested.

Example: Income, employer, bank account number, loan amount, loan purpose, PEP (Politically Exposed Person) status.

Purpose: This data allows us to prepare and send an application to our partners, as well as to combat money laundering and fraud. For any loan application, the law requires us to declare if you are a politically exposed person.

Base jurídica: Performance of our contract and legal obligations.

6. Third-party data

We may also obtain information from third parties, such as data brokers or publicly accessible sources, to ensure the quality of our data.

Base jurídica: Performance of our contract and/or legitimate interest.

Transfer of personal data to third parties

We will not share, sell, transfer, or otherwise disclose your personal information beyond what is stated in this privacy policy, unless the law or a court order requires us to do so, or if we have received your consent for such disclosure.

GKS FINANCE may disclose personal data to third parties, such as the police or other authorities, if it relates to an investigation into an alleged crime or if we are required to disclose this information by law.

We may use external providers to perform tasks on our behalf, for example, to provide IT or marketing services. These providers process your personal data on our behalf in accordance with written data processing agreements.

Where is my data processed?

Your personal data will be shared with our partners to provide you with our services. Be assured that we will never sell your personal data to third parties for marketing purposes without your consent.

Transfer to a third country: We strive to always process your personal data within the UK/EEA. If we use providers located outside the UK/EEA (for example, cloud services like Amazon Web Services or Google), we take appropriate protection measures (standard contractual clauses) to ensure the data is protected.

What is personal data used for?

Provision of our services: To confirm your identity (Anti-Money Laundering), prepare your application, and transmit it to our partners.
Communication with you: By post, phone, SMS, email, or chat to inform you about your file.
Direct marketing: To offer you similar services. You can opt out at any time.
Marketing via external platforms: We use advertising platforms (Google, Meta) to create custom audiences.
Developing our services: Analysing trends to improve our products.
Security: Preventing misuse of our services, fraud, and money laundering.
Legal obligations: Complying with accounting law and legislation regarding brokerage.
Call recording: For training purposes, quality assurance, and contractual proof.

Protection and Automated Decision Making

We prioritize security and protect your data in accordance with the General Data Protection Regulation (GDPR) using technical (encryption) and organisational solutions.

Automated decision-making

"Automated decision-making" is a decision made solely based on the automated processing of your data (algorithm).

Information regarding payment disputes automatically entails that your application is transmitted only to partner credit agencies that accept this profile. The information you provide is automatically compared with the requirements of each partner (income, age, employment).

If you are not satisfied or have objections regarding a decision made by an automated process, you can request a review of the decision by contacting our customer service.

Your rights as a data subject

As a data subject, you have several rights:

Right of access: Receive a copy of your data.
Right to rectification: Correct inaccurate data.
Right to object: Object to processing (especially for marketing).
Right to restriction: Request to restrict processing in certain cases.
Right to erasure ('Right to be forgotten'): Obtain the deletion of your data if they are no longer necessary, unless there is a legal obligation to retain them.
Right to data portability: Retrieve your provided data in a structured format.

Retention period

Personal data is not processed for a period longer than necessary or required by law.

Comparisons and offers: 12 months.
Contact information and logs: 12 months.
Documents relating to insurance brokerage: 10 years + 1 year.
Loan applications and anti-money laundering: 5 years (Money Laundering Regulations).
Marketing data: 36 months after the last activity.
Accounting records: 6 years (Companies Act).

Complaints and Contact DPO

If you have comments or believe we have processed your data incorrectly, you can contact our Data Protection Officer (DPO).

Contact details:

GKS FINANCE
Attn. Data Protection Officer

Email: info@gksfinance.com

In the UK, the supervisory authority is the ICO. For more information on data protection, see: https://ico.org.uk

I no longer want marketing, what should I do?

If you do not wish to be contacted for marketing purposes, you can request to be opted out by contacting us at the email address above.

Update

We reserve the right to modify this information at any time. The latest version is always available on our website.

Published on 28/07/2026

Privacy Policy