Privacy notice
Version 10, last updated 25 February 2026. The "This website" section was added on 6 October 2026.
Who we are
We are Nubian Services Ltd, and you can contact us using the following details:
- Telephone: 07377 328 203
- Address: 18a Woodhill Crescent, Harrow HA3 0LY
- Online: our enquiry form
- Data Protection Officer / contact: Sandy Persaud
- ICO registration number: ZC007112
Our legal grounds for holding your data
The UK's data protection laws allow us to use your personal data provided we have a lawful basis to do so. This includes sharing it in certain circumstances, as described below.
We consider we have the following reasons (legal bases) to use your personal data:
- Performance of contract with you: we need to use your personal data to be able to successfully legally contract with you.
- Compliance with our legal obligations: we need to use your personal data so as to comply with certain legislation such as financial crime legislation.
- Legitimate interests: these are our business and commercial reasons for using your data, which we have balanced against your interests. We have certain legitimate interests in using your data which are not outweighed by your interests, fundamental rights or freedoms. These legitimate interests are to help prevent and detect financial crime, fraud and money laundering, to promote responsible lending, and to support our tracing, collection and litigation procedures.
- Your consent: you can withdraw this consent at any time, in which case we will cease to use it, unless we have a right and a need to continue processing it for one of the other reasons set out above.
More information on how we use your personal data and for what purposes is set out below.
What data do we collect?
Data provided by you
- Funder application details: for example, but not limited to, your name, national insurance number, postal address, email address, telephone numbers, date of birth, bank account details, home ownership details, reason for borrowing, your assets and liabilities, details of your proof of identity documentation, proof of address documentation, evidence of additional equity available and evidence of any other business interests.
- When you talk to us: for example on the phone or in person, including call recordings and voice messages. We may monitor or record calls with you to check we have carried out your instructions, to resolve queries or disputes, to improve the quality of our service or for regulatory or fraud prevention purposes.
- In writing: for example letters, emails, texts and other electronic communications.
- In financial reviews, for renewals and in any surveys.
Data we collect when you use our services
- Transaction data: for example what sort of products you are selecting, the length of term, the types of asset you are looking at financing, business type and geographical location.
- Payment data: for example the amount, origin, frequency, history and method of your payments.
- Usage and profile data: for example how you use our website. We gather this data from the devices you use, using cookies and other software (see "This website" below).
- When you register online or use other communication methods for our services.
- When you voluntarily complete a customer survey or provide feedback.
Data provided to and by third parties
- Data from persons that introduce you to us: for example brokers, agents, finance providers or other third parties.
- Publicly available information: for example from Companies House, the electoral register, and other information available online or in the media, including social media.
- Data from your representatives where relevant: for example your legal advisers, such as lawyers.
Special category data
In the course of your interactions with Nubian Services Ltd you may share information that is classified as "special category data". This could include data about your race, ethnic origin, politics, religion, trade union membership, genetics, biometrics, health, sex life or sexual orientation.
Where you do share information relating to any of these categories, for example information about your health, Nubian Services Ltd will always seek your explicit consent to store and process it.
Why we collect personal data
Nubian Services Ltd collects personal data for a number of reasons. From time to time, we may contact you to ask for your consent to use your personal data for other purposes. Your personal data may also be used for other purposes where required or permitted by law.
When we and fraud prevention agencies process your personal data, we do so on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested. We, and fraud prevention agencies, may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime. Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
In order to process your application, we may supply your personal information to credit reference agencies (CRAs), in which case they will give us information about you, such as about your financial history. We do this to assess your creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity. When CRAs receive a search from us they may place a search footprint on your credit file that may be seen by other lenders and used to assess applications for finance from you and members of your household. We may also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organisations. Your data will also be linked to the data of your spouse, any joint applicants or other financial associates. We can provide you with the identities of the CRAs and the ways in which they use and share personal information on request.
How we use your data
We collect your data so that we can process your application and manage your request.
Lawful basis for processing data
- Consent: the individual has given valid consent for us to process their personal data for a specific purpose.
- Contract: the processing is necessary to perform a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Vital interests: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
- Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual's personal data which overrides those legitimate interests, in particular where they are a child.
When personal data is shared
Your personal data may be used by our partners, lenders, brokers, agents, sub-contractors and lawyers before, during and after your agreement facilitated by us. We may also use organisations to perform tasks on our behalf, including information technology service providers, repossession agents, banks and transportation companies, who we will then be sharing your personal data with and who may also process and retain your data before, during and after your agreement facilitated by us. Any of these third parties may contact you by post, email or telephone (or as required).
We may also share your personal data with CRAs, fraud prevention agencies, law enforcement agencies, regulators and other authorities, any agent that you have given us authority to communicate with and persons you ask us to share your data with, companies that we introduce you to, market researchers, tracing and debt recovery agencies and customer service agencies, for the purposes set out above. These agencies and firms may also share your personal data with others.
If, in the future, we sell, transfer or merge all or part of our business or assets, including the acquisition of other businesses, we may share your data with other parties. We will only do this if they agree to keep it safe and private and to only use it in the same ways as set out in this notice.
Your data protection rights and choices
Your personal data is protected by legal rights, which include:
- The right to be informed about the collection and use of your personal data.
- The right of access to your personal data: to access and receive a copy of it and other supplementary information.
- The right to rectification: to have inaccurate personal data rectified, or completed if incomplete.
- The right to erasure: to have your personal data erased.
- The right to restrict processing: to request the restriction or suppression of your personal data.
- The right to portability: to obtain and reuse your personal data for your own purposes across different services.
- The right to object to the processing of your personal data in certain circumstances, including the absolute right to stop your data being used for direct marketing.
- Rights in relation to automated decision making and profiling: to object to your data being used in an automated individual decision-making process (making a decision solely by automated means without any human involvement) and profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.
There may be reasons why we need to keep or use your data, but please tell us if you think we should not be processing your data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, or would like more information on how your information is used, how we maintain its security and your rights in relation to it, please contact us using the details in "How to contact us" below.
How long your data is kept
We will retain your personal data as long as you are a customer with us. We may retain your personal data beyond this date for the purposes mentioned above, and will in any case at all times retain your personal data for the minimum period required by law. We may also retain your data to deal with any disputes, to maintain records and to show we have dealt with you fairly.
We may also retain your data for research and statistical purposes, in which case we will ensure it is kept private and used only for these purposes.
Data about live and settled accounts is kept on credit files for six years from the date they're settled or closed. If the account is recorded as defaulted, the data is kept for six years from the date of the default.
Marketing
Nubian Services Ltd understands that with the introduction of the Consumer Duty, it is likely the level of communications issued by our business will increase. This will be necessary to help customers understand the products and services offered and to support customers throughout the lifecycle of the relationship.
We would like to send you information about products and services of ours that we think you might like, as well as those of our partner companies. You have the right at any time to stop Nubian Services Ltd from contacting you for marketing purposes.
This website
When you use nubianservices.com:
- Enquiry form: we collect your name, email address, phone number (if you give it), the type of finance you're interested in and your message, and use them to reply to your enquiry. Form messages are delivered to us by email through Google (Gmail and Google Workspace).
- WhatsApp: if you message us on WhatsApp, the message is handled by WhatsApp (Meta) under its own privacy policy.
- Spam protection: the form uses hCaptcha to check that messages come from a person, not a bot. hCaptcha processes information about your device and browser for this purpose, under its own privacy policy, and may store what it needs to protect the form.
- Website statistics: we use Google Analytics to understand how people find and use this site, such as which pages are visited, roughly where visitors are and what type of device they use. It sets cookies in your browser to do this. We only see overall figures, not who you are, and we don't use it for advertising. Google processes this information under its own privacy policy. You can block these cookies in your browser settings, or install Google's Analytics opt-out add-on; the site works the same either way.
- Google Search Console: shows us how the site appears in Google search results. It uses Google's own search data and doesn't add any tracking to this site.
- Fonts: the site loads its typefaces from Google Fonts, which means your browser connects to Google's servers.
- Hosting: our web host stores standard server logs (such as IP addresses) to keep the site running securely.
We don't use advertising cookies.
Changes to our privacy notice
We keep our privacy notice under regular review and place any updates on this web page.
How to contact us
If you have any questions about our privacy notice or the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us:
- Use our enquiry form
- Call us: 07377 328 203
- Or write to us at: 18a Woodhill Crescent, Harrow HA3 0LY
How to make a complaint
If you are unhappy about how your personal data has been used by us, please contact us and we will be happy to register a complaint.
You also have a right to complain to the Information Commissioner's Office, which regulates the processing of personal data. You can contact them at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, on 0303 123 1113, or online at ico.org.uk.