Privacy Policy | We Finance Your Asset

1. Who We Are

This website is operated by WFYA Limited, trading as We Finance Your Asset and Carmoney South ("we", "us", "our").

Registered Office:
Wyvols Court, Basingstoke Road, Swallowfield, Reading, Berkshire, England, RG7 1WY

Company Registration Number: 13810779 (registered in England and Wales)

WFYA Limited (FRN 1023831) is an appointed representative of ITC Compliance Limited, which is authorised and regulated by the Financial Conduct Authority (FRN 313486). We act as a credit broker, not a lender.

We are registered as a data controller with the Information Commissioner's Office (ICO). Our ICO registration number is ZB814752. For any data-related enquiries, please contact us at: info@wefinanceyourasset.co.uk

2. What This Policy Covers

This Privacy Policy explains:

What personal data we collect about you
Why we collect it and the legal basis for doing so
Who we share it with
How long we keep it
Your rights as a data subject

This policy applies to all personal data collected through our website www.wefinanceyourasset.co.uk, by telephone, email, and any other means by which you engage with us.

Please read this policy carefully. By using our website or submitting an enquiry or application, you acknowledge that you have read and understood this policy.

3. Definitions

"Personal Data" means any information relating to an identified or identifiable living individual.
"Special Category Data" means sensitive personal data as defined under UK GDPR, including health information, criminal records, or biometric data.
"Data Controller" means the entity that determines the purposes and means of processing personal data — that is, WFYA Limited.
"Data Processor" means any third party that processes personal data on our behalf.
"UK GDPR" means the UK General Data Protection Regulation as retained in UK law by the Data Protection Act 2018.

4. Information We Collect

4.1 Information You Provide Directly

Full name, date of birth
Address history (current and previous)
Contact details: email address, phone number
Employment status and employer details
Income and financial information
Bank account details (where required for application processing)
Details of the vehicle you wish to finance
Any other information you provide in correspondence with us

4.2 Information We Collect Automatically

When you visit our website, we may automatically collect:

IP address and browser type
Pages visited and time spent on site
Clickstream data and referring URLs
Device type and operating system
Cookie identifiers (see our Cookie Policy)

4.3 Information We Receive From Third Parties

Credit reference agency data (e.g. Experian, Equifax, TransUnion)
Fraud prevention agency data
Information from lenders and finance partners during the application process
Information from introducers or dealer partners who refer you to us

5. Why We Collect Your Personal Data & Legal Basis

We process your personal data under the following lawful bases:

Purpose	Legal Basis
To assess and process your finance application	Performance of a contract / Pre-contractual steps
To introduce you to our panel of lenders	Legitimate interests / Contract performance
To conduct identity and fraud prevention checks	Legal obligation / Legitimate interests
To carry out credit reference checks	Legitimate interests / Contract performance
To communicate with you about your application	Contract performance
To comply with FCA regulatory obligations	Legal obligation
To send you marketing (with your consent)	Consent
To improve our website and services	Legitimate interests
To record calls for training and compliance	Legal obligation / Legitimate interests

Where we rely on legitimate interests, we have considered and balanced these against your rights. You may object to processing on this basis at any time.

Where we rely on consent, you may withdraw your consent at any time by contacting us at the details provided in Section 12.

6. Special Category Data

We do not routinely request special category data. However, if in the course of your application you provide us with such data (for example, health information relevant to your employment), we will only process it:

With your explicit consent; or
Where required to protect your vital interests; or
Where the law permits or requires us to do so.

You have the right at any time to ask us to stop processing any special category data we hold about you.

7. Automated Decision-Making

Some lenders on our panel use automated decisioning and credit scoring when assessing finance applications. This means a decision about your application may be made automatically based on information we provide about you to the lender. If you would prefer your application to be assessed manually rather than automatically, please contact us at info@wefinanceyourasset.co.uk and we will do our best to facilitate this with the relevant lender.

8. Who We Share Your Data With

8.1 Lenders and Finance Partners

When you submit a finance application, we will share your personal data with lenders on our panel to obtain quotes and process your application. Each lender has its own privacy policy.

8.2 Credit Reference Agencies (CRAs)

We and our lending partners may check information held about you by CRAs such as Experian, Equifax, and TransUnion. These checks may leave a footprint on your credit file.

8.3 Fraud Prevention Agencies

Your data may be shared with fraud prevention agencies to detect and prevent fraud, money laundering, and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment. Records of any fraud or money laundering risk will be retained by these agencies.

8.4 Service Providers and Data Processors

We use service providers who process personal data on our behalf, including: Supabase and Lovable (website hosting and database), Resend and Microsoft 365 (email), Ideal Postcodes, the DVLA and Vehicle Data Global (address and vehicle look-ups), Companies House (company look-ups), an AI service accessed through Lovable to read documents you upload, Google (Analytics and Tag Manager) and OpenAI (advert measurement). All such processors are subject to contractual obligations to protect your data in line with UK GDPR.

8.7 Website Analytics and Advertising Measurement

If you accept optional cookies, we use Google Analytics 4 (via Google Tag Manager) to understand how our website is used, and the ChatGPT Ads measurement pixel provided by OpenAI to measure which adverts lead to enquiries and applications. These tools use cookies and similar technologies and receive information such as pages viewed, device and browser data, and a random identifier for an application you submit. We do not send your name, email, phone number or form answers to these providers. Legal basis: your consent, which you can withdraw at any time via "Cookie settings" at the bottom of every page.

8.8 How You Found Us

When you submit an application or message us on WhatsApp, we record how you reached our website (for example the advert or website that referred you). We keep this in our internal records only, to understand which marketing works. Legal basis: our legitimate interests.

8.5 Regulatory and Legal Authorities

We may share your data with the FCA, HMRC, the Information Commissioner's Office, law enforcement, or other regulatory bodies where we are required to do so by law.

8.6 Business Transfers

If we sell or transfer any part of our business, your personal data may be transferred to the purchaser as part of that transaction.

We will never sell your personal data to third parties for their own marketing purposes without your explicit consent.

9. Where We Store Your Data

Some of our service providers are based in, or access data from, countries outside the United Kingdom, including the United States. Where this happens we rely on the UK-US data bridge (for certified providers) or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

All data transmitted via our website is encrypted using SSL/TLS technology. We operate strict access controls and security procedures to prevent unauthorised access to your data.

10. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, and in line with our legal and regulatory obligations as an FCA-regulated firm.

As a general guide:

If you obtain finance through us: 6 years from the end of the agreement
If you enquire or apply but do not proceed: 3 months from the date of your application, unless a longer retention period is required for regulatory purposes
Call recordings: retained in accordance with FCA requirements (typically 5 years for regulated activity)

After the applicable retention period, data will be securely deleted or anonymised.

11. Your Rights as a Data Subject

Under UK GDPR, you have the following rights:

Right of access – to request a copy of the personal data we hold about you (Subject Access Request)
Right to rectification – to request that inaccurate or incomplete data is corrected
Right to erasure – to request deletion of your data where we no longer have a lawful basis to hold it
Right to restrict processing – to request that we limit how we use your data
Right to data portability – to receive your data in a structured, machine-readable format
Right to object – to object to processing based on legitimate interests or for direct marketing
Right not to be subject to automated decisions – to request human review of automated decisions that significantly affect you

To exercise any of these rights, please contact us at:

Email: info@wefinanceyourasset.co.uk
Post: WFYA Limited, Wyvols Court, Basingstoke Road, Swallowfield, Reading, Berkshire, RG7 1WY

We will respond to all valid requests within one calendar month. There is no fee for most requests unless they are manifestly unfounded or excessive.

12. Cookies

We use cookies that are strictly necessary for the website to work. Optional cookies for analytics (Google Analytics) and advertising measurement (OpenAI) are only used if you accept them in our cookie banner. You can change or withdraw your choice at any time via "Cookie settings" at the bottom of every page. For full details of the cookies we use, please see our Cookie Policy.

13. Marketing Communications

We will only contact you for marketing purposes if you have given us your explicit consent to do so. You may opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any email we send you
Contacting us directly at info@wefinanceyourasset.co.uk

Opting out of marketing will not affect the processing of your personal data for the purposes of any active finance application or agreement.

14. How to Complain

If you are unhappy with how we have handled your personal data, please contact us in the first instance:

WFYA Limited
Wyvols Court, Basingstoke Road, Swallowfield, Reading, Berkshire, RG7 1WY
Email: info@wefinanceyourasset.co.uk

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

15. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to read their privacy policies before providing any personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations, or data processing activities. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.