2 min read
The main categories
The data we hold falls into a few clear categories: company information (registered details, structure, trading history); director and authorised-user information needed to verify identity and authority; financial information (accounts, bank data used to assess affordability, the facility itself); and account activity (statements, payments, contact history). We hold what we need to lend responsibly and service your account — not more.
Where it comes from
Some data you give us directly when you apply and use the account. Some comes from trusted sources with a lawful basis: Companies House, credit reference agencies, and — with your permission — open banking. We explain how those sources are used in how your data is used in lending decisions.
The lawful reasons we process it
We process data to enter into and perform your credit agreement, to meet our legal and regulatory obligations, and for legitimate interests such as preventing fraud and improving our service — balanced against your rights. Because we lend to your company, much of this is business data, though director and authorised-user details are personal data with the usual protections.
Your rights over it
You can ask for a copy of the personal data we hold, correct anything wrong, object to or restrict certain processing, and in defined circumstances ask us to erase it. See making a data request, correcting an error, and objecting to processing.
Frequently asked questions
Why do you hold data about me as a director?
To verify your identity and authority to act for the company, and to meet legal obligations. Director details are personal data and carry the usual data-protection rights.
Do you keep more data than you need?
No. We hold data for stated purposes — lending responsibly and running your account — and retain it only as long as we have a lawful reason to.
Is my company's data 'personal data'?
Company data largely isn't, but information about you as a director or authorised user is personal data. Both are protected, and your rights apply to the personal data.
Related reading

Making a data subject access request
You have the right to a copy of the personal data we hold about you — a data subject access request, or DSAR…
Read →
How your data is used in lending decisions
A lending decision uses your company figures, credit reference data and, with your permission, open banking…
Read →
Objecting to or restricting how your data is used
You can object to some uses of your data — marketing is an absolute right to opt out — and ask us to restrict…
Read →
How Credit Corp protects your business data
Your data is protected by layered measures: encryption in transit and at rest, strict access control, and…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.