Who is responsible for your data
RULE8 Inc. (operating LendRight) is the data controller for the LendRight UK service. Contact: doit@trylendright.com. We process personal data under the UK GDPR and the Data Protection Act 2018.
What we collect, and why
- Agreement data — names, addresses, dates of birth, email addresses, and the loan terms you enter. Legal basis: performance of a contract (creating and sealing your agreement).
- Signing evidence — timestamps, verification method, IP-derived network information and coarse location at signing. Legal basis: legitimate interests (making the signature trustworthy and tamper-evident) and performance of a contract.
- Payment data — handled by Stripe; we never see full card numbers. Legal basis: performance of a contract; legal obligation (records).
- Account & support data — your email, sign-in codes, and correspondence. Legal basis: performance of a contract; legitimate interests.
We do not sell personal data, and we do not use your agreement contents for advertising.
Where your data goes
Our processors include Stripe (payments and identity verification), our email delivery provider, and Cloudflare (hosting and storage). Data may be processed in Canada, where RULE8 Inc. is based: transfers from the UK to Canada rely on the UK’s adequacy regulations covering data subject to Canada’s PIPEDA, supplemented by contractual safeguards with our processors elsewhere.
Cookies
LendRight uses two kinds of cookies. Essential cookies make the service work — they keep you signed in, remember your draft between steps, and record your cookie choice itself. These are exempt from consent under the Privacy and Electronic Communications Regulations (PECR) because the service can’t function without them.
Optional analytics cookies (Google Analytics) help us understand which pages are useful. In line with UK GDPR and PECR, these are off by default and are only set if you choose “Accept analytics” in the cookie banner. Choosing “Essential only” keeps them off, and the site works identically either way. You can change your mind at any time by clearing this site’s data in your browser — the banner will ask again on your next visit.
How long we keep it
Signed agreements, their certificates and the signing evidence are retained for as long as the agreement may need to be verified or enforced — the parties rely on us keeping the sealed record. Drafts you abandon are deleted on expiry. Support correspondence is kept as long as reasonably needed.
Your rights
You can ask for access to your data, correction, erasure (where it doesn’t defeat the integrity of a signed agreement the other party relies on), restriction, portability, and you can object to processing based on legitimate interests. Email doit@trylendright.com — we respond within one month. If you’re unhappy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk).