Legal

Privacy Policy

Effective Date: 01 May 2026
Last Updated: 01 May 2026
ICO Registration: ZB942719
This privacy policy explains how Centryx Automations Ltd (trading as Centryx Finance) collects, uses, and protects personal data. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Centryx Finance is a trading name of Centryx Automations Ltd, a company registered in England and Wales (Company No. 15979252) with its registered office at 43 Cardigan Grove, Stoke-On-Trent, ST4 8XY.

We are registered with the Information Commissioner's Office (ICO) under registration number ZB942719.

For any questions about this policy or your personal data, contact beinn.yule@centryx.ai.

2. What data we collect

When you submit our enquiry form, we collect:

  • Your name (first and last)
  • Your business email address
  • Your phone number
  • Your company name
  • The funding amount you're seeking
  • The purpose of the funding
  • Your annual turnover band

We may also collect additional information you provide voluntarily during follow-up conversations or as part of a finance application (e.g. bank statements, filed accounts, identification documents).

3. How we use your data

We use your personal data to:

  • Respond to your enquiry and provide finance brokerage services
  • Match you with suitable lenders from our panel
  • Communicate with you about your application and our services
  • Comply with legal and regulatory obligations (anti-money laundering, KYC)
  • Maintain our internal records and improve our services

4. Lawful basis for processing

We process your data under the following lawful bases:

  • Consent: When you submit your details through our enquiry form, you consent to us processing your data to respond.
  • Legitimate interests: To deliver our brokerage service, including sharing your information with lenders to obtain quotes on your behalf.
  • Contract: Where processing is necessary to fulfil a service agreement with you.
  • Legal obligation: Where required for compliance with anti-money laundering, KYC, and tax record-keeping regulations.

5. Who we share your data with

To provide our service, we share your information with:

  • Lenders on our panel: We share relevant information with carefully selected lenders so they can provide you with quotes. We only share data with lenders we believe are a good fit for your situation.
  • Service providers: Including our email infrastructure (Google Workspace), hosting (Vercel, OVH), form handling (FormSubmit.co), and form-handling tools used in the course of our business. All providers are required to handle data in accordance with UK GDPR.
  • Regulators and authorities: Where required by law, court order, or regulatory request.

We do not sell your personal data to any third party.

6. How long we keep your data

  • Prospect data (no engagement): Retained while the prospecting activity is active and deleted on request.
  • Client data: Retained for the duration of our engagement and for 6 years after, in line with HMRC and commercial record-keeping requirements.
  • Communications: Email correspondence is retained for the duration of any active matter and securely deleted afterwards in line with our retention schedule.

7. How we protect your data

We take the security of your data seriously. Measures include:

  • Encryption of data in transit (TLS) and at rest
  • Two-factor authentication on all critical systems
  • Access on a least-privilege basis
  • Reputable cloud and infrastructure providers (Google Workspace, Vercel, OVH)
  • Encrypted password manager for credential storage

For full detail, see our Information Security Policy (available on request).

8. Your rights

Under UK GDPR, you have the following rights:

  • Right of access — to obtain a copy of your personal data
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure — to have your data deleted (subject to legal exceptions)
  • Right to restrict processing — to limit how we use your data
  • Right to data portability — to receive your data in a machine-readable format
  • Right to object — to processing based on legitimate interests
  • Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, email beinn.yule@centryx.ai. We respond to all requests within one calendar month.

9. Cookies and tracking

This website does not currently use cookies or third-party analytics tracking. If we add cookies in future, we will update this policy and provide a cookie consent mechanism.

10. International transfers

Your data is primarily stored and processed within the UK and the European Economic Area (EEA). Where our service providers operate outside the UK or EEA, we ensure appropriate safeguards are in place — including UK-EU adequacy decisions, Standard Contractual Clauses, or equivalent measures.

11. Complaints

If you have a concern about how we handle your data, please contact us first at beinn.yule@centryx.ai. You also have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
ico.org.uk · 0303 123 1113

12. Changes to this policy

We review this policy at least annually. Material changes will be communicated via the website. The effective date at the top of this page reflects the latest version.