top of page

Privacy Notice

1.Who we are

Quantum Development Finance (referred to in this notice as “QDF”, “we”, “us” or “our”) is a specialist property lender that offers flexible finance solutions to SME housebuilders and property investors across England & Wales. We act as a data controller for the Personal Data we collect and use about you.

 

QDF is registered with the Information Commissioner’s Office (“ICO”), our registration number is ZB557125.

 

To contact the Data Protection Officer (DPO):

 

  • Registered office: 13 Dirty Lane, London, SE1 9PA

  • Company number: 14936274

  • Email: hello@quantumdf.com

  • Phone: 020 7100 0120

 

2.What is personal data?

Personal data is considered to be any information that either alone, or in combination with other information, would identify you as a living individual. For example, your name and date of birth.

 

3.The Personal Data we collect

We may collect and process the following types of Personal Data:

 

Identification details

  • Name

  • Date of birth

  • Nationality

  • Passport

  • Driving licence

Contact information

  • Home address

  • Residential history

  • Business / personal email

  • Telephone number(s)

Financial information

  • Bank account details

  • Tax identifiers,

  • Credit history

  • Proof of income

Loan application information

  • Facility details

  • Business plans

  • Security offered

AML/KYC checks information

  • Source of funds

  • Beneficial ownership

  • PEP & Sanction status

Criminal conviction/offence data

Where required for AML, fraud prevention, creditworthiness, or regulatory purposes

  • Insolvency information

  • CCJ information

Special category data

We will only record this data if it is relevant to the management of your account and we will not record this information without your explicit consent. You are able to withdraw this consent at any time.

  • Your political opinions

  • Racial or ethnic origin

  • Religious or philosophical beliefs

  • Health status

  • Sexual orientation

 

 

4.Why we process your Personal Data (purposes and lawful bases)

We process your Personal Data for the following purposes and rely on the lawful bases shown:

Managing our relationship with you, including communications and servicing the loan

  • Performance of a contract

Considering and administering your application for a loan facility

  • Performance of a contract

Conducting due diligence, AML, KYC and fraud prevention checks

  • Legal obligation

  • Public interest in preventing crime

Internal risk management, audit and record-keeping

  • Legal obligation

  • Legitimate interests

Meeting regulatory requirements (e.g. FCA rules, HMRC reporting)

  • Legal obligation

Sharing with credit reference agencies to assess creditworthiness and monitor repayment behaviour

  • Legitimate interests

Debt collection, enforcement, and defending legal claims

  • Legitimate interests

Marketing, including profiling, segmentation and targeting of customers and prospective customers

  • Legitimate interests

  • Consent

Assessing and managing applications from prospective employees or candidates

  • Legitimate interests

  • Consent

  • Legal obligation

 

 

5.Additional lawful bases for special category and criminal conviction data

Special category data: Where we process special category data (e.g. political opinions revealed through PEP status), we rely on the following conditions:

 

  • Substantial public interest in connection with our obligations to prevent money laundering and financial crime.

  • Preventing or detecting unlawful acts.

  • Establishment, exercise, or defence of legal claims.

 

Criminal conviction and offence data: We process this data under:

 

  • Preventing or detecting unlawful acts, regulatory requirements, protecting the public, or legal proceedings

  • This may include screening against fraud databases, sanctions lists and PEP registers.

 

We apply appropriate policy documents and safeguards as required under the Data Protection Act 2018 when processing such data.

 

6.Sources of Personal Data

Personal Data may be provided to us by;

  • You.

  • Joint borrowers.

  • Guarantors.

  • Third parties, including:

    • Credit reference agencies.

    • Fraud prevention agencies.

    • Public registers (e.g. Companies House, Land Registry, sanctions lists).

    • Professional advisers (e.g. solicitors) and introducers (e.g. brokers).

    • Recruitment agencies.

 

And may be provided;

  • Electronically.

  • By telephone.

  • Within paper correspondence.

When you provide any information about others (e.g. information about a guarantor) you must ensure that you have their consent or are otherwise entitled to provide the information to us.

If you are an introducer of business, the information provided in this notice also explains how we manage your Personal Data, as well as any business you provide.

 

7.Who we share your Personal Data with

We may share your Personal Data with:

  • Credit reference and fraud prevention agencies.

  • Identification checking agencies.

  • Professional advisers (e.g. solicitors, auditors, valuers, surveyors).

  • Regulators and law enforcement bodies (e.g. FCA, HMRC, NCA).

  • Third parties involved in any restructuring, refinancing, or enforcement action.

  • Service providers who support our IT, HR, Finance, Marketing, Operations and Compliance functions.

 

We require all recipients to protect your Personal Data and use it only for the purpose agreed.

 

8.International transfers

If we transfer your Personal Data outside the UK, we will ensure appropriate safeguards are in place (such as adequacy regulations, the UK International Data Transfer Agreement, or other approved mechanisms).

 

 

9.How long we keep your Personal Data

We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected and to meet legal and regulatory requirements. After you stop being a client, we will keep your data for up to 12 years for one of these reasons;

 

  • To respond to any questions or complaints.

  • To show that we treated you fairly.

  • To maintain records according to our regulatory and statutory obligations.

 

You or a third-party may send information to us as a prospective client. If we do not have any products that are suitable for you, or you/we decide not to proceed with your application for any reason, we will store the personal information provided to us for no longer than 2 years.

If you send information to us as a prospective employee and we do not have any suitable vacancies available or you/we decide not to proceed with your application for any reason, we will store the personal data provided to us for no longer than 6 months, without your consent.

 

10.Your rights

You have the following rights under UK GDPR:

  • Access to copies of your Personal Data.

  • Rectification of inaccurate or incomplete data.

  • Erasure (“right to be forgotten”) in certain circumstances.

  • Restriction of processing in certain circumstances.

  • Data portability to another organisation where processing is based on consent or contract.

  • To object to processing based on legitimate interests.

  • Not to be subject to automated decision-making that produces legal or significant effects on you.

 

To exercise your rights, please contact us at hello@quantumdf.com and we will do our best to respond to any questions and address any concerns. We will need to check your identity prior to processing a request.

 

11.Your right to complain

If you are unhappy with how we handle your Personal Data, please contact us in the first instance.

 

We will acknowledge receipt of the complaint within 30 calendar days of receiving it. The acknowledgement will include:

 

  • A summary of your complaint (so we can check we’ve understood it correctly)

  • What you can expect from our process, including likely timescales.

  • Who is dealing with your complaint and how to contact them.

 

We will:

 

  • Investigate your complaint promptly and fairly.

  • Gather relevant information, records and documents.

  • Speak to the staff involved, if needed.

  • Keep you informed of progress if the investigation is complex or delayed.

 

When our investigation is complete, we will provide you with a written outcome, which will include:

 

  • Our findings in relation to your complaint.

  • Whether we consider we have complied with the law or not.

  • What steps we will take if we identify that we have not complied (remedy, changes to internal process).

  • If you are dissatisfied, how you can escalate.

 

We aim to provide a substantive response without undue delay once we have all necessary information.

 

If you are not satisfied with our response, or if we fail to respond within the required timescales, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

 

12.Updates to this notice

We may update this Privacy Notice from time to time. Any changes will be published on our website and, where appropriate, notified directly to you.

 

Policy last updated: 05/09/2025

bottom of page