Privacy Policy
1. About Us
Percayso Data Exchange Limited (“PDX”, “we”, “us”, “our”) is a company registered in England and Wales (Company No. 16865950) with its registered office at Hine House, 25 Regent Street, Nottingham, NG1 5BS. Our ICO registration number is ZA462608.
PDX operates as a neutral data exchange, supporting lenders and Credit Reference Agencies (CRAs) with efficient, consistent data sharing across the lending market. This privacy policy explains how we collect, use, and protect personal data in connection with our website and services.
2. Our Role
In the context of our data exchange services, PDX primarily acts as a data processor on behalf of our lender clients. Lenders submit credit data through our platform for validation, standardisation, and distribution to CRAs. PDX does not determine the purposes of processing this credit data. The lenders who submit data remain the data controllers.
PDX acts as a data controller for personal data collected through this website (such as contact form submissions, enquiries, and website analytics) and for the personal data of our business contacts and clients.
3. What Data We Collect
Website visitors
- Technical data: IP address, browser type and version, operating system, time zone setting, pages visited, and page interaction information
- Contact data: name, email address, company name, job title, and telephone number when you submit an enquiry or request information
Client and business contacts
- Identity data: name, job title, employer
- Contact data: business email address, business telephone number, business address
- Correspondence: records of communications between us
Data exchange services (processed on behalf of lender clients)
- Credit data submitted by lenders for distribution to CRAs, which may include personal identifiers such as name, address, date of birth, and financial account information
- PDX processes this data strictly in accordance with our data processing agreements with lender clients and does not use it for any other purpose
4. How We Use Your Data
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Operating and improving this website | Technical data | Legitimate interests (website performance and security) |
| Responding to enquiries and requests | Contact data, correspondence | Legitimate interests (responding to business enquiries) |
| Managing client relationships | Identity data, contact data, correspondence | Performance of a contract / legitimate interests |
| Sending relevant service updates to clients | Contact data | Legitimate interests (keeping clients informed) |
| Processing credit data on behalf of lenders | Credit data as submitted by lender clients | Performance of a contract (data processing agreement with the lender) |
| Complying with legal and regulatory obligations | As required | Legal obligation |
5. Who We Share Data With
We may share personal data with the following categories of recipients:
- Credit Reference Agencies: credit data submitted by lenders is distributed to CRAs as part of our core service, in accordance with our data processing agreements
- Group companies: PDX is part of the Percayso group of companies. We may share business contact data with group companies for administrative purposes
- Technology providers: we use third-party service providers for hosting, cloud infrastructure, and website analytics, all of whom process data on our behalf under appropriate contracts
- Professional advisers: including lawyers, auditors, and insurers where necessary
- Regulators and authorities: where we are required to do so by law
We do not sell personal data to any third party.
6. Data Security
PDX maintains security standards aligned with ISO 27001. All data is processed within secure cloud-based infrastructure with built-in auditability and traceability. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
7. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected. Specific retention periods depend on the nature of the data and the purpose of processing:
- Website analytics data: retained for up to 26 months
- Business contact data: retained for the duration of the business relationship and for a reasonable period afterwards
- Credit data processed on behalf of lenders: retained in accordance with our data processing agreements with lender clients
- Enquiry and correspondence data: retained for up to 3 years after the last interaction
8. International Transfers
We primarily process data within the United Kingdom and European Economic Area. Where data is transferred outside of these territories, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office.
9. Your Rights
Under UK data protection law, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your personal data in certain circumstances
- Right to restrict processing: to request that we limit how we use your data
- Right to data portability: to request a copy of your data in a structured, commonly used format
- Right to object: to object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at privacy@pdx-hub.com. We will respond within one month of receiving your request.
10. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at privacy@pdx-hub.com.
11. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Contact
For any questions about this privacy policy or our data practices, please contact us at:
Data Protection Contact
Percayso Data Exchange Limited
Hine House, 25 Regent Street, Nottingham, NG1 5BS
Email: privacy@pdx-hub.com
Last updated: June 2026