Privacy Policy

1. INTRODUCTION

We are Whoosh Finance Limited, trading as WHOOSH! Car Finance, a company registered in England and Wales with company number 15772578 and whose registered office is at Unit 2, 30 Broughton Street, Cheetham Hill, Manchester, M8 8NN, United Kingdom ('we', 'us' or 'our'). We take the privacy of our customers very seriously. We ask that you read this Privacy Policy ('the Policy') carefully as it contains important information about how we will use your personal data.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 ('DPA'), we are the 'Data Controller' (i.e. the company who is responsible for, and controls the processing of, your personal data). As we are a credit intermediary, we undertake a number of financial tasks that relate to consumer credit.

Our firm's lawful basis for processing your personal data is done so under the following provisions set out in Article 6 of the UK GDPR:

• Consent: You have given clear consent for us to process your personal data for a specific purpose. You have the right to withdraw your consent at any time.
• Contract: The processing is necessary for a contract you have with us, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: The processing is necessary for us to comply with the law.
• Legitimate Interest: The processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

2. PERSONAL DATA WE MAY COLLECT

We will obtain personal data about you when you complete an online or paper form, make a telephone enquiry with us, or use our services. If you submit an online enquiry, you will be required to agree to the terms of this Policy which include permitting us to contact you for the purposes of your finance-related enquiry via the contact means you provide us.

The personal data we may collect includes, but is not limited to:

• Your first and last name
• Address and contact information
• Date of birth
• Employment and income information
• Marital status
• Vehicle information and preferences
• Bank details and financial information
• Credit history and payment details
• Marketing preferences
• IP address and cookie information

Sensitive and Special Category Data: We will never request sensitive information that we do not require. However, if you provide us with data that is classed as a special category of data such as health information, criminal records, or allegations of criminal offences, we will only process this with your permission (unless we feel the processing is necessary to protect your vital interests or if the law allows us to do so).

3. HOW WE USE PERSONAL DATA

We will use the personal data you disclose to us for the following purposes:

• To assist us in processing your enquiries and obtaining the services which you require
• To help us identify you and any accounts that you hold with us
• Undertaking credit checks and affordability assessments
• Administration and customer service
• Research, statistical analysis and behavioural analysis
• Customer profiling and analysing your preferences
• Marketing (providing you have opted-in)
• Fraud prevention and detection
• Billing and order fulfilment
• Customising our website and its content to your particular preferences
• To notify you of any changes to our website or services which may affect you
• Security vetting and improving our services

4. WHO WE SHARE YOUR INFORMATION WITH

In order to make certain services available to you, we may need to share your personal information with third parties. We will only share personal data if we are satisfied that our partners or suppliers have appropriate measures in place to protect your information in the same way that we do.

We may disclose your information to:

• Our panel of lenders that will provide you with finance services in connection with your application
• Credit Reference Agencies (CRAs) to help assess your application and verify your identity
• Fraud prevention agencies to help prevent and detect fraud
• Open banking solutions where required by lenders for affordability assessments
• Other credit brokers or lenders where you have consented and your application has been declined by our available lenders
• Marketing partners for products or services relating to vehicle finance that we believe may be of interest to you
• Protection partners to offer you additional products such as warranty and GAP insurance
• Dealerships to help find you a suitable vehicle as part of your application
• Technology providers including CRM systems, call recording suppliers, and cloud hosting platforms
• Regulators including the Financial Conduct Authority, Financial Ombudsman Service, and Information Commissioner's Office
• Professional advisors including auditors, legal advisors, and compliance consultants
• Law enforcement agencies where required by law or in connection with crime prevention

5. MARKETING AND COMMUNICATIONS

If you have opted-in to receive our marketing material, we or our business partners may contact you by mail, telephone, text message, email, or WhatsApp. Each contact method requires its own consent via an opt-in selection. The nature of these marketing communications relates to information on products, services, promotions and special offers which we believe may be of interest to you.

We may also rely on soft opt-in when marketing under certain circumstances. You can opt out of marketing communications at any time. If you opt out of marketing, you may continue to receive service messages about your products, which are not marketing communications.

6. KEEPING DATA SECURE

We currently safeguard personal data by storing it on secure CRM systems protected by passwords and encryption. We use appropriate technical and organisational measures to safeguard personal data disclosed to us. We regularly review our security systems to ensure they remain effective.

Whilst we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the absolute security or integrity of any personal data which are transferred from you or to you via the internet.

7. DATA RETENTION

We will store your personal information for up to six years from the end of our relationship with you. This six-year period satisfies the requirement of our regulator, The Financial Conduct Authority, and is also in line with other financial industry retention periods.

If you do not object to receiving marketing communications from us, we will store your personal information for marketing purposes until you unsubscribe from receiving marketing communications from us.

Some of your information may be included in information used for accounting purposes. Where this is the case, this information is kept for 7 years as per our legal requirements. Once these time periods have ended, your information will be confidentially destroyed and removed from all systems and records.

8. YOUR RIGHTS

Under UK data protection law, you have the following rights:

• Right to access: You have the right to request copies of the personal information we hold about you
• Right to rectification: You have the right to request that we correct any inaccurate personal information we hold about you
• Right to erasure: You have the right to request that we delete your personal information from our records (subject to legal requirements)
• Right to restrict processing: You have the right to request that we restrict how we use your personal information
• Right to object: You have the right to object to the collection and use of your personal information
• Right to data portability: You have the right to obtain a copy of your personal information in a legible and compatible format
• Right to withdraw consent: Where we rely on consent, you have the right to withdraw your consent at any time
• Rights in relation to automated decision making: If a decision has been made electronically, you have the right to contest this decision

To exercise any of these rights, please contact us using the details provided in the 'Contact Us' section below. We will respond to your request within one month.

9. INTERNATIONAL TRANSFERS

In the normal course of business, there may be a need to transfer personal data outside of the UK where those countries do not typically have the same protections and safeguards in place for the protection of personal data.

We deal with a number of large, international corporations where data is likely to be transferred in this way. Assurances and processes will always be put in place and considered before any international transfer is undertaken to ensure the protection and security of personal data through appropriate safeguards such as adequacy decisions or standard contractual clauses.

10. MONITORING

We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of quality assurance, training, fraud prevention, or compliance purposes. You will be notified when calls are being recorded.

11. COOKIES

Our website uses cookies and similar technologies to distinguish you from other users and provide you with a better experience. By using cookies, we are able to improve our site by better understanding how you use it.

You will be asked if you agree to cookies when using our site. You have the right to refuse these cookies, however certain features of our site may not function fully or as intended. You can control cookies through your browser settings.

12. COMPLAINTS

Under UK GDPR, you have the right to lodge a complaint with the supervisory authority, the Information Commissioner's Office (ICO), who are the national authority responsible for the protection of personal data.

A complaint can be made to the ICO via their website: ico.org.uk or through their helpline: 0303 123 1113.

You can also contact us directly if you have any concerns about how we handle your personal data using the contact details below.

13. CONTACT US

We welcome your feedback and questions. If you wish to contact us regarding this privacy policy or to exercise any of your rights, please contact us using the following details:

14. UPDATES TO THIS POLICY

We may change this Privacy Policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version which will apply each time you deal with us.

This policy will be reviewed on at least an annual basis. Any updates will be published on our website as soon as practically possible. This policy was last updated on 06/12/2025.