Who we are
References to we, us and our mean CAD Brokers Limited, the company behind this website. We are registered in England and Wales under company number 05159287, and authorised and regulated by the Financial Conduct Authority under firm reference number 301364. Our registered office is Ground Floor, Egerton House, 68 Baker Street, Weybridge, Surrey, KT13 8AL.
We are the data controller for personal information processed through this site and in the course of our broking work. That means we decide how your information is used, and we answer for it. If you have any question about this policy, write to enquiries@cadbrokers.co.uk or ring 01276 682074.
What this policy covers
This policy explains what personal information we hold, the lawful reasons we hold it, how long we keep it and what you can ask us to do about it. It applies to this website and to the personal information we handle when you contact us or when we work for you.
It is written for the United Kingdom. We follow the UK General Data Protection Regulation and the Data Protection Act 2018, and the cookie rules in the Privacy and Electronic Communications Regulations. Where our work takes information overseas, the section on international transfers below explains how that is handled.
What we collect, and what we do not
The site itself is deliberately quiet. It runs no analytics, loads no third-party scripts and follows nobody around. There is no contact form to fill in, so the website does not collect your name, your email address or anything else on its own account.
When you write or ring, we hold what you choose to tell us: usually your name, the company you act for, your contact details and, as a conversation develops, the financial information a mandate needs, such as what you need, where, when, and what stands behind it. We ask you not to send more than is needed in a first email. If we ever need sensitive information, we will explain why and keep it to the minimum the work requires.
One thing the site does set is a session cookie, described in full in the next section. That is the entire inventory.
Cookies
A cookie is a small text file a website asks your browser to keep. Most sites carry a dozen or more. This site sets exactly one, and it exists to keep the site working.
- Name
- CADSIDSet by this site. Nothing third-party is ever set.
- Purpose
- Strictly necessaryKeeps the site working while you browse, and remembers the choice you make in the cookie notice.
- Duration
- Until you close your browserThe record of your choice on the server is kept for up to 24 hours, then it is gone.
- Contents
- A random session referenceNo name, no email, no browsing history, nothing that identifies you.
- Consent
- Not requiredPECR exempts strictly necessary cookies. We still ask, because it costs nothing to be straight about it.
Because this one cookie is strictly necessary, the law does not require us to ask before setting it. We show the notice in every new browsing session anyway, and the choice you record there is kept in the session itself, not in a long-lived cookie. If you reject, nothing is stored on your device beyond the session cookie that keeps the site working. If you would rather no cookie at all, you can block cookies in your browser settings; the site will keep working, and the notice will simply reappear on each visit.
Why we may process personal data
Data protection law lets us process personal information only where we have a lawful basis. For the work we do, those bases are the following, and nothing else.
- Contract
- Working your mandateNegotiating, structuring and arranging a facility you have asked us to work on.
- Legitimate interests
- Running the desk properlyReplying to enquiries, keeping honest client files, protecting both parties from fraud, and remembering a conversation you started.
- Legal obligation
- What a regulated firm must keepThe records the FCA expects of a credit broker, and anti-money-laundering checks when a transaction proceeds.
At present nothing we do depends on consent, because we run no marketing lists and no analytics. The cookie notice is a choice about a necessary cookie rather than a legal gate. If that ever changes, we will ask properly, record the answer, and make it as easy to withdraw as it was to give.
Sharing your information
Until an enquiry becomes a mandate, what you tell us stays with the desk. If it does become a mandate, sharing is the service: we put your case to the lenders best placed to fund it, and we pass on what those lenders need to assess it, and no more.
Beyond lenders, we rely on a small number of service providers, such as the firm that runs our email. We do not sell personal information. We do not add you to marketing lists, and we will not pass your details to anyone for their own marketing. Where the law requires sharing, for example under a court order or the money-laundering regulations, we do only what the law requires and nothing more.
International transfers
This is the one place our privacy story is genuinely international, because our work is. The lender panel spans well over a hundred countries, so a mandate can put your information in front of institutions in Europe, the Middle East, Africa, the Americas and Asia-Pacific.
Transfers are limited to what the transaction requires. Where a destination country is not covered by a UK adequacy decision, we consider what protection the transfer needs before anything moves and use the safeguards available, such as the UK's international data transfer agreement or addendum to the EU standard contractual clauses. Lenders who receive your information are controllers in their own right with their own legal duties; we will tell you which lenders we have approached if you ask.
How long we keep things
We keep personal information only while we can point to a reason for it. Enquiries that do not become mandates are kept for a short period, then deleted. Mandate files are kept for as long as the FCA's record-keeping rules and the life of the transaction require, because a facility repaid over a decade needs its paperwork for the decade.
The session that carries your cookie choice ends when you close your browser. The server keeps the record of that choice for up to 24 hours, after which it is deleted.
Your rights
You have real rights over your personal information, and exercising them costs nothing. Write to enquiries@cadbrokers.co.uk and we will respond within one month. If a request is unusually complex we will tell you, and the law allows a further two months.
- Access: a copy of the personal information we hold about you, and an explanation of how it is used.
- Correction: fixing anything inaccurate or incomplete.
- Erasure: deletion where there is no good reason for us to keep something, or where you withdraw consent and nothing overrides it.
- Restriction: pausing processing while a disagreement is sorted out.
- Portability: a structured, commonly used copy of information you gave us, where processing is by consent or contract and done electronically.
- Objection: including an absolute right to stop direct marketing, and the right to object to processing based on legitimate interests, which we will weigh against yours.
Where consent is the basis for anything, you can withdraw it at any time and it will be as easy to withdraw as it was to give. Withdrawing consent does not undo lawful processing already done.
Complaints
If you are unhappy with how we have handled your information, tell us first. We would rather fix a problem than defend one. Write to enquiries@cadbrokers.co.uk or ring 01276 682074 on Monday to Friday, 09:00 to 18:00.
If you are not satisfied with our answer, you can take the matter to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
Security
We keep little, so we can protect what there is. Access to client information is limited to the people working the mandate, devices are protected, and correspondence is kept in a single mailbox read by the people who run the desk. No system can be made perfect, and we will not pretend otherwise: if anything ever goes wrong with information that matters to you, we will tell you what happened and what we are doing about it, without delay.
Automated decisions
We do not make decisions about you by automated means, and we do not profile. Where credit is concerned, the decision belongs to the lender, and it is a decision about your business rather than a score built by us. You can ask any lender we have approached how they reached their decision.
Children
This is a business website, aimed at companies and their principals. We do not direct services at children and do not expect to hold a child's information. If that is ever wrong, tell us and we will delete it.
Changes to this policy
This policy is updated when the practice changes: a new service, a new regulator's rule, a new kind of processing. The date at the top of the page is the version marker, and material changes will be described here in plain terms rather than buried in the small print.
Contacting us
Any question, request or complaint about privacy goes to the same desk as everything else: CAD Brokers Limited, Ground Floor, Egerton House, 68 Baker Street, Weybridge, Surrey, KT13 8AL. Email enquiries@cadbrokers.co.uk or ring 01276 682074. A real person reads the mailbox.