Privacy Notice

Privacy Notice

Veritas Property Finance Limited

1. Who we are

1.1 Veritas Property Finance Limited ("we", "us", "our") is a commercial finance intermediary. We arrange business finance, including development finance, commercial mortgages, bridging finance, mezzanine finance and business buy-to-let lending, for companies, partnerships and business borrowers.

1.2 We are registered in Scotland under company number SC593725. Our registered office is 11 Guardwell Crescent, Edinburgh, EH17 7JA and our trading address is 15 Queen Street, Edinburgh, EH2 1JE. We are registered with the Information Commissioner's Office under registration number ZA344197 and we are the controller of the personal data described in this notice.

1.3 If you have any questions about this notice or how we use your information, contact Scott Cowan, Director, at scott@veritaspf.com or on 0131 644 3132.

2. The information we collect

2.1 We collect and process the following categories of personal data:

• identity and contact information, such as your name, address, date of birth, email address and telephone numbers;
• information about your business, assets, liabilities, income, expenditure and borrowing requirements;
• financial information, including bank statements, management accounts, tax records and details of existing borrowing;
• identification and verification documents, such as passports, driving licences and proof of address, collected to meet anti-money laundering obligations;
• information about directors, shareholders, members, partners, guarantors and beneficial owners of a borrowing entity;
• records of our communications with you and information about how you found us.

2.2 We collect this information directly from you, from publicly available sources such as Companies House and the Land Register, from credit reference and identity verification agencies where applicable, and from professional advisers or introducers acting for you.

3. Why we use your information and our lawful bases

3.1 We use your personal data to: assess your finance requirements and identify potentially suitable lenders and products; prepare and submit applications to lenders on your behalf; liaise with lenders, valuers, solicitors and other parties to progress a transaction; comply with our legal and regulatory obligations, including anti-money laundering law; manage our relationship with you, including dealing with enquiries and complaints; and keep appropriate business records.

3.2 Our lawful bases for this processing are: performance of a contract with you, or steps taken at your request before entering into a contract; compliance with our legal obligations; and our legitimate interests in operating, developing and protecting our business, where those interests are not overridden by your rights. Where we rely on consent, for example for certain marketing, you may withdraw it at any time.

3.3 We will only send you marketing about our services where the law allows, and you can opt out at any time by contacting us or using the unsubscribe option in any message.

4. Who we share your information with

4.1 We share personal data only where necessary, with: lenders and funders considering or providing finance to you; valuers, surveyors, solicitors and other professionals involved in your transaction; identity verification and credit reference agencies, where checks are required; our IT, software and professional services providers, who act on our instructions; our professional advisers, including accountants, lawyers and insurers; and regulators, law enforcement agencies or other bodies where we are required to do so by law.

4.2 We do not sell your personal data.

4.3 Lenders to whom we introduce you are controllers of the personal data they receive and will process it under their own privacy notices, which we encourage you to read.

5. International transfers

5.1 We store and process personal data in the UK. If any of our service providers process data outside the UK, we ensure an adequacy decision, appropriate safeguards such as the UK International Data Transfer Agreement, or another lawful transfer mechanism is in place.

6. How long we keep your information

6.1 We keep client files and transaction records for six years from completion of your transaction or our last contact with you, whichever is later, unless a longer period is required by law or justified by actual or contemplated legal proceedings. Records collected for anti-money laundering purposes are kept for at least five years from the end of our business relationship. Data we no longer need is securely deleted or destroyed.

7. Your rights

• 7.1 Subject to conditions and exemptions in data protection law, you have the right to: access a copy of your personal data; have inaccurate data corrected; have your data erased; restrict our processing; object to processing based on legitimate interests and to direct marketing; receive certain data in a portable format; and withdraw any consent you have given. You have the right in relation to automated decision making and profiling – this allows individuals to object to their data being used in an automated individual decision-making process (making a decision solely by automated means without any human involvement) and profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.

7.2 To exercise any of these rights, contact us using the details in section 1. We will respond within one month. We may need to verify your identity before acting on a request.

8. Security

8.1 We apply appropriate technical and organisational measures to protect your personal data, including restricted access, secure systems and careful handling of documents in transit. No transmission over the internet is entirely secure, but we take reasonable steps to protect information you send to us.

9. Complaints

9.1 If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter. You also have a right to complain to the Information Commissioner’s Office which regulates the processing of personal data. You can contact them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, on 0303 123 1113 or by email to casework@ico.org.uk. See also https://ico.org.uk/global/contact-us/.

10. Changes to this notice

10.1 We keep this notice under review and will publish any updated version on our website, www.veritaspf.com. This version was issued in June 2026.