Privacy Policy

EVOGO Asset Finance Privacy Policy 

This privacy notice explains how we, EVOGO Ltd (trading as Evogo Asset Finance), handle your information.

When we say ‘information’, we mean any data we process that relates to you. This includes your personal data (like your name and contact details, and where applicable, sensitive information such as special category data and data relating to criminal convictions), company data (related to your business), and financial data (like your income and credit history).

By ‘process’, we mean any action we take with your information, including collecting, using, sharing, storing, and deleting it.

We may update this privacy notice periodically to reflect changes in our data processing practices or legal requirements. We encourage you to review this page regularly to stay informed about how we manage your data.

Who We Are EVOGO Asset Finance is a trading style of EVOGO Ltd. We are an asset finance brokerage providing services to individuals, Limited Companies, Limited Liability Companies, Sole Traders, and Partnerships.

Our Contact Details:

• Head Office Address: 201 Upwell Street, Sheffield, S4 8AL
• Telephone Number: 0114 321 4565
• Email: [email protected]
• Data Protection Email: [email protected] (for all data protection queries)
• ICO Registration Number: Z8096631 (You can verify our registration on the ICO website.)
• Company Number: 4609642
• FCA Number: 669005

Our Roles in Processing Your Data

Data Controller EVOGO Ltd acts as the data controller for the personal data we collect directly from you for our own purposes. This includes:

• Processing your application to intermediate finance for asset purchases.
• Communicating with you about our services, including new products, safety and service maintenance alerts, and special offers (where you’ve consented).

Data Processor We also act as a data processor when we handle your personal data on behalf of other organisations that determine the purposes and means of processing. This primarily includes:

• Asset Finance Providers (Lenders): We collect your data to facilitate their assessment and approval of your finance application. They will then act as data controllers for their own processing of your data.
• WhatsApp (Meta Platforms Ireland Limited): We use WhatsApp for live chat communication. During these chats, our agents may collect your name, contact details (address, phone number, email), details of the asset you’re interested in, and relevant financial information, with your consent. WhatsApp acts as our data processor for the communication content and associated metadata generated during these chat sessions, to provide the chat service.
• Signable Ltd: We use Signable to securely send and receive documents, including proofs of identity and contracts for electronic signature, to facilitate finance intermediation. Signable processes this data on our behalf to provide this secure document transfer service.
• MailChimp (The Rocket Science Group LLC): We use MailChimp to send you information regarding new products, services, safety and service maintenance alerts, and special offers, where you’ve provided your consent. MailChimp processes your email address and marketing preferences on our behalf to deliver these communications.

The data processed by these providers on our behalf may be in various formats, including audio (live calls, recordings), text (emails, live chat), and electronic or paper images (identity documents, financial statements). Where we use third party Data Processors, we ensure that they are contractually obliged to protect your data to the same standards as we do and that they do not engage sub processors without our prior written consent or a general authorisation.

Data That We Collect We need your personal and business data to provide you with the asset finance intermediation services you’re requesting. If you don’t provide this information, we may be unable to offer these services. We adhere to the principle of data minimisation, ensuring we only collect personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed. We’ll only collect information that’s necessary for the provision and oversight of these services.

Data We Collect Directly From You

• Personal Details: Name, address, telephone number, email address, date of birth.
• Employment Details: Information about your current employment.
• Proof of Identity Documentation: Copies of your passport, driving license, or other identification documents.
• Financial Information: Bank account details, income, expenditure, creditworthiness information you provide.
• Call Recordings: Recordings of phone conversations for training, quality control, fraud prevention, and to ensure we meet regulatory obligations.
• Marketing Preferences: Information about your preferences for receiving marketing communications, where these rely on your consent.
• Details of Fellow Directors: Information about other company directors if required as part of your finance application.
• CCTV Footage: Images of you captured by our CCTV system if you visit our premises.

Data We May Collect From Third Parties

• Credit History: Information from credit reference agencies about your creditworthiness.
• Entitlement to Drive: Information from the DVLA confirming your driving license status and any endorsements or disqualifications.
• Limited Company Information: Details about your company from sources like Companies House and Creditsafe.
• Claims History: Information related to insurance claims, if relevant to your finance application (e.g., for certain asset types), obtained from insurance providers or claims databases.
• Lifestyle Information: Information relevant to assessing your application, such as broad spending patterns or declared hobbies that might influence suitability for certain products.

Special Category Data and Data Relating to Criminal Convictions:

• Driving convictions and disqualifications: Specifically, details of motoring offences that impact your ability to drive the asset you’re financing.
• Other conviction information: Limited to financial crime or fraud related convictions relevant to assessing credit risk.
• County Court Judgments (CCJs): While not special category data, this financial judgment information is collected as part of your credit profile.

Third Parties We Collect Your Data From

• WhatsApp (Meta Platforms Ireland Limited): During live chat interactions, WhatsApp may collect your name, contact details (address, phone number, email), details of the asset you’re interested in, and relevant financial information, which is then shared with us with your consent.
• DVLA (Driver and Vehicle Licensing Agency): We obtain information about your identity, driving convictions, and disqualifications where relevant to your application (e.g., for vehicle finance).
• Creditsafe Business Solutions Ltd: We obtain comprehensive information about limited companies for business finance applications.
• Experian Limited (Credit Reference Agency / CRA): We obtain comprehensive credit profile information. A “soft search” or “quote search” will be registered against you. This is not detrimental to your credit profile and cannot be seen by other lending institutions, but you will be able to see it.
• Companies House (www.gov.uk/government/organisations/companies-house): We obtain official information about limited companies.
• Fraud Prevention Agencies: If we suspect fraud, we may receive information from fraud prevention agencies.

Our Legal Basis for Processing Your Information We will only collect and process information about you when we have a lawful basis for doing so under data protection law. These bases include:

• Necessity for a Contract: We process your personal data when it’s necessary to enter into a contract with you to provide our asset finance intermediation services and to fulfil our obligations under that contract. This includes carrying out identity and suitability checks before providing the services you’ve requested.
• Consent: We rely on your explicit consent to process your personal data for specific purposes, such as sending you marketing communications about our new products, services, safety and service maintenance alerts, and special offers. You have the right to withdraw your consent at any time by contacting us using the details provided in this policy, or by using any unsubscribe options in our communications.
• Legitimate Interests: We may process your personal data when it’s in our legitimate business interests to do so, provided that your rights and freedoms don’t override these interests. Our legitimate interests include:
  • Conducting checks to prevent fraud and money laundering.
  • Determining appropriate retention periods for records to protect our commercial interests, such as defending against legal claims or investigating suspected fraud. We conduct a balancing test to ensure our interests don’t unduly impact your rights by considering factors like the nature of the data, the impact on you, and the safeguards we have in place.
  • Monitoring and recording calls, emails, SMS, and WhatsApp messages for quality control, training, ensuring effective operation of systems, meeting regulatory obligations, and preventing or detecting crime.
  • Conducting after transaction surveys to improve our products and services.
  • Handling enquiries and complaints to ensure a high standard of customer service and prevent future issues.
  • Transferring your information in the event of a business restructure, sale, or takeover of EVOGO Ltd or its trading styles.
• Legal Obligation: We may need to process your personal data to comply with legal obligations, such as providing information to regulatory authorities like the Financial Conduct Authority (FCA) or law enforcement agencies.
• Processing of Special Category Data and Data Relating to Criminal Convictions: We will only process this type of sensitive data when we have a specific lawful basis under Articles 9 and 10 of the GDPR. This may include:
  • Explicit Consent: Where we have obtained your explicit consent for specific purposes, such as processing certain health details if they are directly relevant to a finance product you are seeking (e.g., for specific insurance components).
  • Legal Obligations: Where processing is necessary to comply with legal obligations, such as for anti money laundering (AML) checks or fraud prevention.
  • Substantial Public Interest: Where processing is necessary for reasons of substantial public interest, such as preventing or detecting unlawful acts (including financial crime) under Article 9(2)(g) of GDPR combined with Schedule 1, Part 2, para 10 of the Data Protection Act 2018, or for regulatory purposes related to lending, subject to appropriate safeguards.
  • We will ensure that the processing of this data is always necessary and proportionate for the specific purpose.

Where we use your data for secondary purposes, such as developing new and improved products and services, we will either obtain your consent or anonymise the data so that it can no longer identify you.

What We Will Do With Your Information All the personal data we hold about you will be processed by our staff and systems within the United Kingdom. Your information may be shared with third parties, where necessary, to provide the goods/services you’ve applied for or where there’s a legal obligation to do so.

We will use your data to process your application for our services, which may include:

• Finance Intermediation: Facilitating your request for asset finance.
• Establishing Your Identity: We collect proof of identity, payment card details, and driving license information to verify your identity as part of our services and for anti money laundering checks.
• Facilitating Your Request for Finance Quotations: Sharing your information with potential finance providers (lenders) to obtain quotes.
• Automated Decision Making:
  • With your permission, we will share your information directly with funders who may use automated decision making processes as part of their funding assessment.
  • This may involve automatically requesting information from credit reference agencies (CRAs) and using this data, along with the information you provide, to assess your suitability for the requested goods/services.
  • Your Right to Human Review: You have the right to request a manual review of an automated decision by contacting the relevant funder directly. We can assist you in contacting the funder if you encounter difficulties. Please be aware that the funder’s privacy policy will govern their use of your data in automated decision making. It is crucial that you review their individual privacy policies for full details on how they process your data, particularly regarding automated decision making, as their policies will govern their use of your data.
• Customer Services and Administration of Our Services:
  • Call recording and monitoring: We may monitor or record calls, emails, SMS, and WhatsApp messages for the purposes outlined under “Legitimate Interests” (e.g., quality control, training, meeting regulatory obligations, and preventing crime).
  • After transaction processing: We may conduct after transaction surveys through independent third party companies to improve our products and services. Some of your data may be shared with these providers for this purpose.
  • Marketing communications: We use MailChimp to send you marketing communications if you have consented to receive them. Your email address and marketing preferences may be shared with MailChimp for this purpose.
  • Handling enquiries and complaints: We will use your information to investigate and resolve any enquiries or complaints you may have.
  • Business transfers: We may transfer or share your information with any organisation your account has been or may be transferred to following a restructure, sale, or takeover of EVOGO Ltd or any of our trading styles.

Who Your Data Will Be Shared With We may need to share your personal information with other organisations to provide our services effectively. These include:

• Other parts of our business: Internal departments within EVOGO Ltd that require access to your data to deliver our services (e.g., compliance, customer service, finance).
• Finance Providers (Lenders): To obtain finance quotations and facilitate the funding process. This is a crucial part of our service. Below is a list of some of the lenders we may share your data with. Please note that this list is not exhaustive, and we may work with other reputable lenders as required by your specific application.

Trading Name	Legal Name	Link to Funders Privacy Policy
Haydock Finance	Haydock Finance Ltd	https://haydockfinance.co.uk/privacy-policy
Allica Bank	Allica Financial Services Ltd	https://www.allica.bank/privacy-policy
Close Brothers Broker Solutions	Close Brothers Ltd	https://www.closeassetfinance.co.uk/s/privacy-policy/
Liberty Leasing	Liberty Leasing Ltd	https://libertyleasing.co.uk/privacy/
Aldermore	Aldermore Bank PPC	https://www.aldermore.co.uk/legal/privacy-policy/
Cambridge & Counties Bank	Cambridge & Counties Bank Ltd	https://ccbank.co.uk/about-us/our-commitments/your-privacy/
Renaissance Asset Finance	Renaissance Asset Finance Limited	https://renaissanceaf.com/wp-content/uploads/2025/03/Privacy-Notice-RAF-240225.pdf
PEAC Solutions	PEAC Business Finance Ltd	https://peacsolutions.co.uk/privacy-notice-peac-business-finance/
Novuna	Mitsubishi HC Capital UK PLC	https://www.novuna.co.uk/privacy-policy/
Lombard	Lombard North Central plc	https://www.lombard.co.uk/privacy-cookies-policy.html

 

• Credit Reference Agencies (CRAs): Such as Experian Limited, to conduct credit checks as part of your application.
• Identity Verification Services: To verify your identity as required by law.
• Payment Processors: Such as GoCardless, if we process any direct payments related to your finance agreement.
• Third party service providers: Such as those providing IT support, data analytics, marketing services (where you’ve consented), survey services (e.g., SurveyMonkey), and document signing services (Signable). We ensure these providers have appropriate data protection measures in place through contractual agreements.
• Regulatory Authorities: Such as the Financial Conduct Authority (FCA) or the Information Commissioner’s Office (ICO), where we are legally obliged to do so.
• Law Enforcement Agencies: Such as the police or National Crime Agency, to prevent, detect, investigate, and prosecute fraud, money laundering, and other crimes, and to confirm your identity.

We will not pass your data to other third parties outside of those mentioned in this Privacy Notice without a lawful basis for doing so.

Website Links Our website may contain links to other websites operated by organisations we do not control. This privacy policy does not apply to those websites and apps. We provide these links for your information and convenience only and do not endorse or make any promises about their accuracy, content, or completeness. Please be aware that we have no control over the data privacy practices or content of these third party websites. If you follow a link to any of these websites, their own privacy policies will apply to the collection and use of your personal data, and we do not accept any responsibility or liability for these policies. Your disclosure of personal information to these third party websites is at your own risk.

Whether the Data Will Be Sent Overseas EVOGO Ltd will never send your personal data outside the European Economic Area (EEA) for our own processing. All processing of your data by us occurs within the EEA.

However, some of our service providers, such as MailChimp (The Rocket Science Group LLC, based in the US) and WhatsApp (Meta Platforms Ireland Limited, a Meta company with global operations), may transfer data outside the EEA to countries that do not have equivalent data protection laws. Where this occurs, we ensure appropriate safeguards are in place, typically through the use of Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data.

Data Retention When we collect your personal information, the length of time we retain it is determined by the purpose for which we use that information and our legal and regulatory obligations.

Once we no longer require the information for the specified purposes, we will either anonymise it (so it can no longer identify you) or securely delete it. We will not keep personal information in an identifiable format for longer than necessary.

Other factors that influence how long we retain your personal information include:

• The need to use your personal information to establish, bring, or defend legal claims.
• Legal requirements obligating us to keep your personal information for a longer period or to delete it sooner.
• Your decision to exercise your right to have the information erased (where this right applies).

General Retention Periods (examples):

• Successful finance applications and associated data are typically retained for 7 years after the finance agreement has ended to comply with regulatory obligations (e.g., anti money laundering) and for potential legal claims.
• Information from unsuccessful applications or initial enquiries will generally be held for 12 months for fraud prevention, to address any potential queries, and to comply with regulatory record keeping requirements.
• Marketing consent records are retained as long as your consent is active and for a short period thereafter (e.g., 6 months) in case of disputes or for auditing purposes.
• Call recordings are typically retained for 3 to 6 years for training, quality, and regulatory compliance.

Even if you decide not to proceed with our asset finance intermediation services or your application is declined, we may still retain your information for a limited period for the purposes outlined above, such as defending against potential claims or complying with legal obligations. Our internal data retention schedule provides more specific timeframes for different categories of data, aligned with our legal and regulatory obligations.

We take reasonable steps to ensure that the personal data we hold about you is accurate and kept up to date.

Your Rights As a customer of Evogo Ltd and our trading style Evogo Asset Finance, you have the following rights regarding your personal data and how we process it:

• The right to be informed: You have the right to receive clear and comprehensive information about how we process your personal data, which is the purpose of this privacy notice.
• The right to access: You have the right to request a copy of the personal information we hold about you, free of charge.
• The right to rectification: You have the right to ask us to correct any inaccurate or incomplete personal information we hold about you.
• The right to erasure (the ‘right to be forgotten’): You have the right to request that we delete your personal data from our records in certain circumstances.
• The right to restrict processing: You have the right to ask us to limit how we use your personal information in specific situations.
• The right to data portability: You have the right to receive your personal information in a structured, commonly used, and machine readable format and to transmit that data to another controller.
• The right to object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes and processing based on our legitimate interests (unless we have compelling legitimate grounds for the processing that override your interests, rights, and freedoms).
• Rights related to automated decision making including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right is subject to certain exceptions, such as when the decision is necessary for entering into or performing a contract, is authorised by law, or is based on your explicit consent. You have the right to request human intervention, express your point of view, and contest the decision.

If you wish to make a Subject Access Request or exercise any of your other data rights, please visit our dedicated Subject Access request page www.evogoassetfinance.com/sar/

How to Make a Complaint If you have any concerns or wish to make a complaint about how we have handled your personal data, please contact us using the following methods:

• By Letter: EVOGO Limited, 201 Upwell Street, Sheffield, S4 8AL
• By Email: [email protected]
• By Telephone: 0114 3214565

We will handle your validated request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. Details of how to contact the ICO are available at this website: ico.org.uk/global/contact us

Keeping Your Data Safe We are committed to ensuring the security of your information. To prevent unauthorised access or disclosure, we have implemented appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect. Our security measures are continuously reviewed and improved in line with technological advancements, including encryption, access controls, and regular security audits.

How We Use Cookies A cookie is a small file that asks permission to be placed on your computer’s hard drive. For detailed information on how cookies work and how to manage their use when you visit our websites, please refer to our Cookie Policy www.evogoassetfinance.com/cookie-policy.

We may update this Privacy Notice from time to time to reflect changes in our business practices or legal requirements. Therefore, we recommend that you review it each time you provide us with any personal information. Any significant changes to this Privacy Notice will be prominently displayed on our website, and where appropriate, notified to you directly via email or other suitable means.

Updates to This Privacy Notice This Privacy Notice was last updated on 22/07/2025 – V1