Privacy Policy
ABOUT OUR PRIVACY POLICY
Who we are
Norwich Finance Technology Limited (NFTL) will be what’s known as the ‘Controller’ of the personal data you provide us. Norwich Finance Technology is authorised and regulated by the Financial Conduct Authority (“FCA”) for the activity of Account information services (Firm Reference Number: 1036008) and for the activity of Providing Credit References (Firm Reference Number: 1045233). Norwich Finance Technology LTD (“we” or “us”) is a company registered in England and Wales whose registered office is at Floor 4 25-27 Surrey Street, Norwich, Norfolk, England, NR1 3NX, and whose registered number is 14398653.
You can contact us by email: customerservices@norwichfinancetechnology.com Or by post to: Customer Services, Norwich Finance Technology Limited, Fourth Floor, 25-27 Surrey Street, Norwich NR1 3NX.
What we do
Norwich Finance Technology Limited is an Account Information Services Provider (AISP). We provide a financial technology solution to enhance the efficiency of serving consumers in the underserved market, whose financial data would ordinarily be challenging or time consuming to process. Machine learnings aggregate and organise open banking transactions to instantly present a dashboard of affordability insights. With your explicit consent we will:
· use your identifying information to request access to your Transaction Data;
· process and store your Transaction Data;
· categorise your data into a consolidated dashboard of financial insights, which we make available to your Approved Recipient together with the Transaction Data;
· we will also use your Transaction Data to improve our services as set out below.
· We will use your data to build affordability and credit worthiness scoring and models.
Our commitment
Norwich Finance Technology Limited is committed to protecting your privacy. This policy sets out how we will use the information you provide us with and how we will protect that information. We will, when delivering our services, collect and use personal information only which is relevant to the work we are undertaking, and which will be controlled, stored and processed in accordance with the Data Protection Legislation however it is collected, recorded or used.
How do we use your personal information?
We are required to have a lawful basis in which to process your personal data, we may process your personal information for our legitimate business interests. It is in the legitimate interest of an Approved Recipient (lender) of the data subject (you) to obtain an assessment of the data subject’s transaction data in order to assess creditworthiness and affordability to progress the data subject’s application for credit. It is our legitimate business interest to provide this service to Approved Recipients which are also our clients. In addition, it is out legitimate interest to use data analytics, to improve our services.
These may include some or all of the following:
– To verify your identity;
– To identify and prevent fraud;
– To enhance the security of our network and information systems;
– To better understand how people interact with our systems;
– To better understand how people interact with our websites;
– Where processing enables us to enhance, modify, personalise or to otherwise improve our service / communications for the benefit of our customers;
Whenever we process data for these purposes we will ensure that we always keep your Personal Data Rights in high regard and take account of these rights. You have the right to object to this processing if you wish.
Please contact us using the details provided above.
Please understand that if you object this may affect our ability to carry out tasks above for your benefit.
What we need
We only collect basic personal data about you. This may include all or some of the following:
– Name, Address, Postcode;
– Gender;
– Date of birth;
– Account information;
– Account Balance;
– Account transactions;
– Information on loans;
– Insurance data;
– Investment data;
– Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
– Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from this Website (including date and time), page response times, download errors, and length of visits to certain pages;
– any other information that we require to process your request.
How long we keep it
We will only keep your personal data for as long as necessary to fulfil the purpose it was collected for.
For example, we usually keep data related to your use of our services while you are using those services, and up to 6 years after you cancel them.
In some cases, we may need to keep your data for a longer time. How long we keep it depends on things like, legal requirements, ongoing legal disputes with you, ongoing legal disputes with third parties, the type of information we have, valid requests from you or a regulatory authority to keep your data for a specific reason.
If you want more details about how long we keep your data, please contact us.
Why we need your data
The personal information we obtain, process and store is necessary to enable us to:
· use your identifying information to request access to your Transaction Data;
· process your Transaction Data;
· categorise your transaction data into a consolidated dashboard of financial insights;
· make available to your Approved Recipient information on your affordability & creditworthiness;
· make available to your Approved Recipient the Transaction Data;
· to improve our services;
WHO WE SHARE YOUR DATA WITH
Open Banking
The service will have access to your personal data that you submit and personal data held by Account Servicing Payment Service Providers (i.e. any payment service provider, such as a bank or a credit card issuer that maintains an online payment account on your behalf) (“ASPSPs”) (“Personal Data”) through open banking for the duration of the transmission.
Open Banking Providers that we use
The companies we may use to provide this information are:
Plaid - https://plaid.com/en-gb/
Account Score - https://accountscore.net/
Such Personal Data may include your date of birth, gender, account information, account balance, transactions, information on loans, insurance data and investments data. We will use this information to:
· Provide insights in your affordability and whether you can afford to take the product;
· Highlight information that may indicate potential financial vulnerability;
Approved Recipients
"Approved recipients" are organisations (like lenders) that you have authorised (given consent) to receive your transaction information and the analysis we conduct on it. These “Approved Recipients” will handle your personal data as independent entities, following their own privacy policies. It's important to read their privacy policies so you know how they use your personal data and what rights you have regarding that use.
Sharing your information with Third Parties
If we are, or our assets are, acquired by or are in the process of being acquired by a third party, information we hold about you will be transferred as part of our assets.
Where we have been legitimately asked to provide information for legal and regulatory purposes or as part of legal proceedings or prospective legal proceedings.
We may disclose information to companies or individuals to perform functions on our behalf for example, to verify your identity, sending postal mail and email, removing repetitive information from customer lists, analysing data, and providing customer service.
Those companies are bound by strict contractual provisions with us and only have access to the information needed to perform their functions and may not use it for any other purposes. Furthermore, they must process such information in accordance with this policy and as permitted under the GDPR.
Information on behalf of a Third Party
If you give us information on behalf of a third-party, you confirm that you have provided them with information in this Policy and they have not objected to such use of their information.
WHAT ARE YOUR RIGHTS?
Accuracy of your data
If at any point you believe the information we process on you is incorrect, you can request to see this information, and have it corrected or deleted. Please contact us via email or by writing.
Raising a complaint
If you wish to raise a complaint on how we have handled your personal data, you can contact us at complaints@norwichfinancetechnology.com and we will investigate the matter.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).
Security of your data
Norwich Finance Technology Limited is committed to protecting your privacy by ensuring that your personal information is held securely.
All personal data we collect is processed by our employees in the UK however for the purposes of IT hosting and maintenance of this, information is located on servers within the EU. No 3rd parties have access to your personal data unless the law allows them to do so. We have a Data Protection regime in place to oversee the effective and secure processing of your personal data.
If you contact us by telephone our staff will ask you a series of security questions before your personal details are discussed.
We may record telephone calls for security and training purposes.
Automated decision
You can ask us to ensure that, when we are assessing your request, we do not base any decisions solely on an automated process.
If you make such a request, you will have the right to be notified where a decision is or will be based on an automated process. If we tell you that we have taken a decision in this way, you can ask us to review the decision other than by the automatic means in writing within 21 days of being advised.
Access to information
You have the right to access information held about you. If you would like access to the information that we hold about you, you can contact us via email or by writing. We will respond to your request within one month of receipt of such request.
Erasure of information
You may request the deletion or removal of personal data where there is no reason for its continued processing in specific circumstances. If you have any concerns, please email us at customerservices@norwichfinancetechnology.com or write to us at DPA, Norwich Finance Technology Limited, Fourth Floor, 25-27 Surrey Street, Norwich NR1 3NX.
Cookies
When we provide services, we want to make them easy, useful and reliable. In order to improve the Website, we may place small amounts of information on your computer. These are called ‘cookies’. A cookie is a small amount of data which often includes a unique identifier that is sent to your computer, tablet or mobile phone (referred to in this policy as a ‘device’) from the Website and is stored on your device’s hard drive.
Further information on Cookies
A cookie records on your device information relating to your internet activity (such as whether you have visited the Website before). The cookies we use on the Website won’t collect personally identifiable information about you and we won’t disclose information stored in cookies that we place on your device to third parties.
If you don’t want us to use cookies when you use the Website, you can adjust your internet browser settings not to accept cookies. Your web browser’s help function should tell you how to do this. Alternatively, to find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit the website: https://www.allaboutcookies.org. This website will also explain how you can delete cookies which are already stored on your device. In addition, visit https://www.digitaltrends.com/computing/how-to-delete-cookies/ for information about blocking and/or removing cookies on different browsers.
The cookies used on the Website have been categorised based on the categories found in the ICC UK Cookie guide, as follows:
Category 1: Strictly necessary cookies
These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided.
Category 2: Performance cookies
These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.
Category 3: Functionality cookies
These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features.
Category 4: Targeting cookies or advertising cookies
These cookies are used to deliver adverts more relevant to you and your interests.
THIRD PARTY COOKIES
Google Analytics
We use Remarketing with Google Analytics to advertise online and display content specific advertisements to you when you visit websites that have the Google Display Network implemented.
You may opt-out of Google’s use of cookies by visiting Google’s Ad settings at http://www.google.com/settings/ads or opt-out of third-party vendor’s use of cookies by visiting http://www.networkadvertising.org/choices/.
Links
Our website may include third party advertising and links to other websites. We do not provide any personally identifiable customer information to these advertisers or third-party websites.
Further Information: Norwich Finance Technology Limited may change this policy from time to time and will do so by updating this page. You should regularly check this page to ensure you are aware of any changes that have been made, while you are a customer of Match the Cash. You can ask us for a copy of this policy and of any amended policy via writing or by emailing us using the contact details provided.
This policy was last updated on 06/03/2025.