Privacy Notice
1.Who we are
Quantum Development Finance (referred to in this notice as “QDF”, “we”, “us” or “our”) is a specialist property lender that offers flexible finance solutions to SME housebuilders and property investors across England & Wales. We act as a data controller for the Personal Data we collect and use about you.
QDF is registered with the Information Commissioner’s Office (“ICO”), our registration number is ZB557125.
To contact the Data Protection Officer (DPO):
-
Registered office: 13 Dirty Lane, London, SE1 9PA
-
Company number: 14936274
-
Email: hello@quantumdf.com
-
Phone: 020 7100 0120
2.What is personal data?
Personal data is considered to be any information that either alone, or in combination with other information, would identify you as a living individual. For example, your name and date of birth.
3.The Personal Data we collect
We may collect and process the following types of Personal Data:
Identification details
-
Name
-
Date of birth
-
Nationality
-
Passport
-
Driving licence
Contact information
-
Home address
-
Residential history
-
Business / personal email
-
Telephone number(s)
Financial information
-
Bank account details
-
Tax identifiers,
-
Credit history
-
Proof of income
Loan application information
-
Facility details
-
Business plans
-
Security offered
AML/KYC checks information
-
Source of funds
-
Beneficial ownership
-
PEP & Sanction status
Criminal conviction/offence data
Where required for AML, fraud prevention, creditworthiness, or regulatory purposes
-
Insolvency information
-
CCJ information
Special category data
We will only record this data if it is relevant to the management of your account and we will not record this information without your explicit consent. You are able to withdraw this consent at any time.
-
Your political opinions
-
Racial or ethnic origin
-
Religious or philosophical beliefs
-
Health status
-
Sexual orientation
4.Why we process your Personal Data (purposes and lawful bases)
We process your Personal Data for the following purposes and rely on the lawful bases shown:
Managing our relationship with you, including communications and servicing the loan
-
Performance of a contract
Considering and administering your application for a loan facility
-
Performance of a contract
Conducting due diligence, AML, KYC and fraud prevention checks
-
Legal obligation
-
Public interest in preventing crime
Internal risk management, audit and record-keeping
-
Legal obligation
-
Legitimate interests
Meeting regulatory requirements (e.g. FCA rules, HMRC reporting)
-
Legal obligation
Sharing with credit reference agencies to assess creditworthiness and monitor repayment behaviour
-
Legitimate interests
Debt collection, enforcement, and defending legal claims
-
Legitimate interests
Marketing, including profiling, segmentation and targeting of customers and prospective customers
-
Legitimate interests
-
Consent
Assessing and managing applications from prospective employees or candidates
-
Legitimate interests
-
Consent
-
Legal obligation
5.Additional lawful bases for special category and criminal conviction data
Special category data: Where we process special category data (e.g. political opinions revealed through PEP status), we rely on the following conditions:
-
Substantial public interest in connection with our obligations to prevent money laundering and financial crime.
-
Preventing or detecting unlawful acts.
-
Establishment, exercise, or defence of legal claims.
Criminal conviction and offence data: We process this data under:
-
Preventing or detecting unlawful acts, regulatory requirements, protecting the public, or legal proceedings
-
This may include screening against fraud databases, sanctions lists and PEP registers.
We apply appropriate policy documents and safeguards as required under the Data Protection Act 2018 when processing such data.
6.Sources of Personal Data
Personal Data may be provided to us by;
-
You.
-
Joint borrowers.
-
Guarantors.
-
Third parties, including:
-
Credit reference agencies.
-
Fraud prevention agencies.
-
Public registers (e.g. Companies House, Land Registry, sanctions lists).
-
Professional advisers (e.g. solicitors) and introducers (e.g. brokers).
-
Recruitment agencies.
-
And may be provided;
-
Electronically.
-
By telephone.
-
Within paper correspondence.
When you provide any information about others (e.g. information about a guarantor) you must ensure that you have their consent or are otherwise entitled to provide the information to us.
If you are an introducer of business, the information provided in this notice also explains how we manage your Personal Data, as well as any business you provide.
7.Who we share your Personal Data with
We may share your Personal Data with:
-
Credit reference and fraud prevention agencies.
-
Identification checking agencies.
-
Professional advisers (e.g. solicitors, auditors, valuers, surveyors).
-
Regulators and law enforcement bodies (e.g. FCA, HMRC, NCA).
-
Third parties involved in any restructuring, refinancing, or enforcement action.
-
Service providers who support our IT, HR, Finance, Marketing, Operations and Compliance functions.
We require all recipients to protect your Personal Data and use it only for the purpose agreed.
8.International transfers
If we transfer your Personal Data outside the UK, we will ensure appropriate safeguards are in place (such as adequacy regulations, the UK International Data Transfer Agreement, or other approved mechanisms).
9.How long we keep your Personal Data
We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected and to meet legal and regulatory requirements. After you stop being a client, we will keep your data for up to 12 years for one of these reasons;
-
To respond to any questions or complaints.
-
To show that we treated you fairly.
-
To maintain records according to our regulatory and statutory obligations.
You or a third-party may send information to us as a prospective client. If we do not have any products that are suitable for you, or you/we decide not to proceed with your application for any reason, we will store the personal information provided to us for no longer than 2 years.
If you send information to us as a prospective employee and we do not have any suitable vacancies available or you/we decide not to proceed with your application for any reason, we will store the personal data provided to us for no longer than 6 months, without your consent.
10.Your rights
You have the following rights under UK GDPR:
-
Access to copies of your Personal Data.
-
Rectification of inaccurate or incomplete data.
-
Erasure (“right to be forgotten”) in certain circumstances.
-
Restriction of processing in certain circumstances.
-
Data portability to another organisation where processing is based on consent or contract.
-
To object to processing based on legitimate interests.
-
Not to be subject to automated decision-making that produces legal or significant effects on you.
To exercise your rights, please contact us at hello@quantumdf.com and we will do our best to respond to any questions and address any concerns. We will need to check your identity prior to processing a request.
11.Your right to complain
If you are unhappy with how we handle your Personal Data, please contact us in the first instance.
We will acknowledge receipt of the complaint within 30 calendar days of receiving it. The acknowledgement will include:
-
A summary of your complaint (so we can check we’ve understood it correctly)
-
What you can expect from our process, including likely timescales.
-
Who is dealing with your complaint and how to contact them.
We will:
-
Investigate your complaint promptly and fairly.
-
Gather relevant information, records and documents.
-
Speak to the staff involved, if needed.
-
Keep you informed of progress if the investigation is complex or delayed.
When our investigation is complete, we will provide you with a written outcome, which will include:
-
Our findings in relation to your complaint.
-
Whether we consider we have complied with the law or not.
-
What steps we will take if we identify that we have not complied (remedy, changes to internal process).
-
If you are dissatisfied, how you can escalate.
We aim to provide a substantive response without undue delay once we have all necessary information.
If you are not satisfied with our response, or if we fail to respond within the required timescales, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.
12.Updates to this notice
We may update this Privacy Notice from time to time. Any changes will be published on our website and, where appropriate, notified directly to you.
Policy last updated: 05/09/2025