Kensington Bridging Finance

Privacy Policy

Last updated: 1 January 2026

1. Introduction

Kensington Bridging Finance ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website at https://kensingtonbridgingfinance.co.uk, contact us by phone, email, or through our online forms, or otherwise interact with our services.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). We act as the data controller for the personal data described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Contact information: Your name, email address, phone number, and postal address.
  • Enquiry details: Information about your property transaction, including the loan amount required, property type, property location, exit strategy, and any additional details you provide in the message field of our contact forms.
  • Financial information: Details about your financial circumstances that you share with us during the course of arranging bridging finance, such as income, existing borrowing, and property portfolio details.
  • Identification documents: Copies of identification documents provided as part of anti-money laundering (AML) and Know Your Customer (KYC) checks, where applicable.

3.2 Information Collected Automatically

  • Technical data: Your IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
  • Usage data: Pages visited, time spent on pages, links clicked, referral source, and browsing patterns on our website.
  • Cookie data: Information collected through cookies and similar tracking technologies (see Section 8 below).

3.3 Information from Third Parties

  • Information from lenders, solicitors, and valuers involved in your bridging finance transaction.
  • Publicly available information from property databases, Land Registry, and Companies House.

4. How We Use Your Personal Data

We use your personal data for the following purposes, each with a lawful basis under the UK GDPR:

4.1 To Provide Our Services (Contractual Necessity)

  • Processing your bridging finance enquiry and arranging suitable lending options.
  • Communicating with you about your enquiry, application, and transaction progress.
  • Sharing your details with lenders on our panel to obtain terms and offers on your behalf.
  • Coordinating with solicitors, valuers, and other professionals involved in your transaction.

4.2 To Comply with Legal Obligations (Legal Obligation)

  • Conducting anti-money laundering (AML) and Know Your Customer (KYC) checks.
  • Maintaining records as required by financial services regulation.
  • Responding to requests from regulatory bodies and law enforcement agencies.

4.3 For Legitimate Business Interests (Legitimate Interest)

  • Improving our website, services, and customer experience.
  • Analysing website usage to understand how visitors interact with our content.
  • Sending you information about our services that may be relevant to your property investment activities, where you have not opted out.
  • Protecting our business against fraud and ensuring the security of our website and systems.

4.4 With Your Consent (Consent)

  • Placing non-essential cookies on your device (see Section 8).
  • Sending you marketing communications where consent is required under PECR.

5. Who We Share Your Data With

We may share your personal data with the following categories of recipients:

  • Bridging lenders: Lenders on our panel to whom we submit your application or enquiry. Each lender is an independent data controller and processes your data under their own privacy policy.
  • Professional advisers: Solicitors, valuers, surveyors, and accountants involved in your transaction.
  • Technology providers: Hosting providers, email service providers, CRM systems, and analytics services that process data on our behalf as data processors.
  • Regulatory and legal: The Financial Conduct Authority (FCA), HM Revenue & Customs (HMRC), law enforcement agencies, and courts where we are legally required to do so.

We do not sell your personal data to third parties. We do not share your personal data with third parties for their direct marketing purposes without your explicit consent.

6. Data Storage and Security

Your personal data is stored securely within the United Kingdom and the European Economic Area (EEA). Where we use third-party service providers who process data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or the service provider's participation in an approved certification mechanism.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls, regular security assessments, and staff training on data protection.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Enquiry data: Retained for 3 years from the date of your last interaction with us, unless a transaction proceeds.
  • Transaction data: Retained for 6 years after the completion or termination of the bridging facility, in accordance with financial services record-keeping requirements.
  • AML/KYC records: Retained for 5 years after the end of the business relationship, as required by the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017.
  • Website analytics data: Retained for 26 months from the date of collection.
  • Marketing consent records: Retained for as long as your consent remains active, plus 1 year after withdrawal for audit purposes.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.

8. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us provide and improve our services.

8.1 Essential Cookies

These cookies are necessary for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting your privacy preferences, logging in, or filling in forms. These cookies do not store any personally identifiable information.

8.2 Analytics Cookies

With your consent, we use analytics cookies (such as Google Analytics) to understand how visitors use our website. These cookies collect information about pages visited, time spent, and interactions, helping us improve the website experience. All analytics data is aggregated and anonymised where possible.

8.3 Marketing Cookies

With your consent, marketing cookies may be set by our advertising partners to build a profile of your interests and show you relevant advertisements on other websites. If you do not allow these cookies, you will experience less targeted advertising.

8.4 Managing Cookies

You can manage your cookie preferences through our cookie consent banner, which is displayed when you first visit our website. You can also control cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

9. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions.
  • Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interest as the lawful basis.
  • Right to withdraw consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
  • Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

To exercise any of these rights, please contact us using the details provided in Section 11 below. We will respond to your request within one month. There is no fee for making a request, though we may charge a reasonable fee for requests that are manifestly unfounded or excessive.

10. Complaints

If you are not satisfied with how we handle your personal data or respond to your rights request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how we handle your personal data, please contact us:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your personal data.