Cookie Policy (UK)

1. Who we are

Oak Leasing Ltd ("Oak Leasing", "we", "us") is a bespoke pan-European funding facilitator for equipment finance across the UK and Europe, established in 1992. We arrange finance through a panel of funders; we are not a lender ourselves.

Oak Leasing Ltd is the controller of personal data you give us through this website or when you ask us to arrange finance. We are registered in England and Wales, and our registered office is Lynx House, Ferndown, Northwood Hills, Middlesex HA6 1PQ.

Company number: 02737411 · ICO registration number: Z5638866 (registered as Oak Leasing Limited).

We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for cookies and marketing, the Privacy and Electronic Communications Regulations (PECR).

2. What we collect

We only collect what we need to arrange the finance you ask for and to run our website.

Contact details: your name, job title, business name, address, email address and telephone number.
Finance enquiry details: the equipment, supplier, value and term you are looking for, and information about your business that funders need to assess an application. Where a funder requires it, this may include details of directors, partners or guarantors.
Correspondence: emails, messages and notes of calls with you.
Website data: your IP address and information about how you use our website, collected through cookies where you have agreed (see section 9).

We do not ask for special category data, such as health information or political opinions, and we ask you not to send it to us.

3. How and why we use it

UK data protection law requires us to have a lawful basis for each use of your data.

Purpose	Lawful basis
Responding to your enquiry and arranging the finance you request, including presenting your application to funders	Taking steps at your request before entering a contract, and our legitimate interest in running our business
Managing an agreement once it has been arranged	Performance of a contract and our legitimate interests
Anti-money laundering, fraud prevention and other legal or regulatory checks	Legal obligation and our legitimate interest in preventing fraud
Running, securing and improving our website	Our legitimate interests; consent for non-essential cookies
Sending you updates about our services	Our legitimate interests for business contacts, or your consent where the law requires it. You can opt out at any time.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

4. Who we share it with

Funders: when you ask us to arrange finance, we pass your application to funders on our panel in the UK and Europe. Each funder makes its own credit decision, which may involve searches with credit reference and fraud prevention agencies. Funders act as separate controllers and will give you their own privacy information.
Service providers: companies that host and maintain our website and IT systems, and provide website security and analytics. They process data only on our instructions.
Professional advisers and authorities: our accountants, lawyers or insurers where needed, and regulators, law enforcement or courts where the law requires it or to help prevent fraud.

We do not share your data with anyone else unless you ask us to or the law allows it.

5. International transfers

Because we arrange finance across Europe, your data may be shared with funders in the European Economic Area, and some of our IT services store data on servers in the European Union. The UK recognises the EEA as providing adequate protection for personal data.

If we ever transfer your data to a country without that recognition, we will use a lawful safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

Finance arranged: we keep your data for the term of the agreement until it concludes, and afterwards only for as long as the law requires.
Enquiries that do not proceed: if an application is declined or you decide not to go ahead, we delete your application data within 6 months.
Website data: cookie data is kept for the periods shown in our Cookie Policy.

7. Keeping it secure

We use appropriate technical and organisational measures to protect your data, including access controls, encrypted connections to our website and regular backups of our systems. No internet transmission is ever completely secure, but we work to keep the risk as low as possible.

8. Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct data that is wrong or incomplete;
ask us to delete your data, where we no longer need it;
ask us to restrict how we use your data;
object to our use of your data based on legitimate interests, and to any direct marketing;
receive data you gave us in a portable format, where applicable;
withdraw your consent at any time, where we rely on it.

There is normally no charge. We will respond within one month, and tell you if we need longer for a complex request.

9. Cookies

Our website uses strictly necessary cookies to work, and, with your consent, cookies for preferences, statistics and marketing. Full details, including a current list of every cookie and how to change your choices, are in our Cookie Policy (UK).

10. Contact and complaints

To exercise your rights or ask anything about this policy, please contact us or write to:

Data Protection, Oak Leasing Ltd
Lynx House, Ferndown, Northwood Hills, Middlesex HA6 1PQ

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.