Privacy and Cookie Policy
This Privacy and Cookie Policy explains clearly how Versus Finance Limited collects, uses, stores and shares personal data and how website visitors can control cookies. It is based on the Data Protection (Jersey) Law 2018.
Who is responsible for your personal data?
Versus Finance Limited is the data controller for the personal data covered by this notice.
Address: De Carteret House, 7 Castle Street, St Helier, Jersey JE2 3BT
Company number: 123690
Jersey Office of the Information Commissioner registration number: 58024
Privacy enquiries can be submitted through our Contact page or made by calling 01534 769669.
What personal data may Versus Finance collect?
Depending on the enquiry or service, we may collect:
- Identity and contact information, including name, date of birth, nationality, address, email and telephone numbers;
- Employment, income, expenditure, banking, credit, debt and repayment information;
- Information about a business, property, mortgage, asset or proposed transaction;
- For business finance, information about relevant directors, shareholders, beneficial owners, controllers, guarantors and other individuals connected with the business;
- Application documents, financial statements, business plans and tax-related information;
- Communications, preferences, complaints and records of contact with us;
- Referral or introducer information;
- Technical information such as IP address, browser, device and website activity; and
- Information from public registers, credit-reference agencies and fraud-prevention or compliance sources.
Where does personal data come from?
We receive information directly from clients and prospective clients, including through website forms, applications, telephone calls, emails, meetings and documents.
We may also receive information from authorised representatives, dealerships, retailers, employers, business introducers, lenders, banks, mortgage providers, credit-reference agencies, fraud-prevention services, public registers and other parties involved in a proposed transaction.
Why is personal data used and what lawful bases apply?
We process personal data only for clear purposes and where a lawful basis applies under the Data Protection (Jersey) Law 2018.
To meet legal and regulatory obligations and help prevent financial crime, we may carry out identity, source-of-funds, source-of-wealth, sanctions, fraud-prevention and anti-money-laundering checks where relevant. For business finance, these checks may extend to directors, beneficial owners, controllers, guarantors and people acting for the business.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries, assessing requirements and arranging finance applications | Steps before a contract and performance of a contract |
| Sharing relevant information with lenders and professional advisers | Steps before a contract, contract and legitimate interests |
| Identity checks, anti-money-laundering, fraud prevention and regulatory records | Legal obligation and legitimate interests |
| Client communication, administration, complaints and legal claims | Contract, legal obligation and legitimate interests |
| Supporting vulnerable clients or processing health information | Explicit consent where required, or another condition permitted by law |
| Website security, Google reCAPTCHA and necessary cookies | Legitimate interests and legal obligations |
| Marketing, analytics, advertising and other optional cookies | Consent |
How is health, vulnerability or other special-category information handled?
A client may choose to tell us about health, disability, vulnerability or personal circumstances so that we can make reasonable adjustments and provide appropriate support.
Where explicit consent is the appropriate legal basis, we will obtain and record that consent before sharing relevant special-category information with a lender or another party. We will share only what is necessary for the stated purpose. Consent can be withdrawn, although doing so may limit the support or service that can be provided.
How are credit searches and credit-reference information used?
Versus Finance Limited, a lender or another finance provider may carry out credit searches to assess eligibility, affordability, identity, fraud risk or an application. A search may be recorded on the client’s credit file and may be visible to other organisations.
Credit-reference agencies may include Experian, Equifax, TransUnion and Channel Islands Data Systems. Each agency and lender processes information under its own privacy notice. Before an application proceeds, clients should review the relevant provider’s information about the type of search being carried out.
Who may receive personal data?
Where necessary for the enquiry, application, transaction or our legal obligations, we may share personal data with:
- Lenders, banks, mortgage providers, asset-finance providers and insurers;
- Credit-reference, identity-verification, fraud-prevention and anti-money-laundering services;
- Solicitors, valuers, accountants, surveyors and other professional advisers;
- Authorised representatives, dealerships, retailers or introducers;
- Website, email, cloud, document-management and other technology suppliers acting under appropriate safeguards; and
- Courts, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law.
Lenders, banks and professional advisers may retain personal data under their own privacy policies and legal obligations.
We do not sell personal data.
Does Versus Finance make automated decisions?
Versus Finance Limited does not ordinarily make a decision with legal or similarly significant effects using solely automated processing. Lenders and providers may use automated credit or underwriting systems under their own privacy notices and decision-making processes.
What if a client provides information about another person?
If you provide information about a spouse, partner, director, guarantor, employee, business associate or another person, you must be authorised to provide it and should ensure that person is given access to this Privacy and Cookie Policy where appropriate.
How long is personal data retained?
We retain personal data only for as long as it is reasonably required for the purpose for which it was collected, to meet legal and compliance obligations, and to establish or defend claims.
Depending on the record and the service, information may be retained for up to ten years after the relevant relationship or transaction ends, or longer where required by law, a regulator, an unresolved complaint or legal proceedings. Records that are no longer required are securely deleted or anonymised.
Is personal data transferred outside Jersey or the EEA?
Some service providers or recipients may process information outside Jersey, the United Kingdom or the European Economic Area. Where this happens, we use an available lawful transfer mechanism and appropriate contractual, technical or organisational safeguards as required by the Data Protection (Jersey) Law 2018.
What data-protection rights do individuals have?
Subject to the conditions and exemptions in the Data Protection (Jersey) Law 2018, individuals may have the right to be informed, access their data, correct inaccurate data, request erasure, restrict processing, receive portable data, object to certain processing and challenge certain automated decisions.
Requests can be submitted through our Contact page. We may need to confirm identity before responding and will respond within the applicable statutory period.
How is personal data protected?
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or misuse. Access is limited to people and service providers who need the information for an authorised purpose.
No internet or electronic-storage system can be guaranteed to be completely secure, so clients should use agreed secure channels when sending particularly sensitive documents.
What happens if information about a child is received?
If we become aware that personal data has been submitted by or about a child without an appropriate legal basis, we will review and delete or restrict it as required.
How can someone complain about the use of their data?
Please contact us first through our Contact page or on 01534 769669 so that we can investigate the concern.
You may also raise a concern with the Jersey Office of the Information Commissioner: Jersey Data Protection Authority, 5 Castle Street, St Helier, Jersey JE2 3BT; telephone +44 (0)1534 716530; email enquiries@jerseyoic.org.
What cookies and similar technologies are used?
We use cookies and similar technologies, including local storage, to operate and secure the website, remember choices, understand website use and measure advertising. Necessary technologies may operate without consent where required for security or a service requested by the visitor. Analytics, advertising and optional media technologies are used with consent through CookieYes.
| Service | Purpose | Lawful basis |
|---|---|---|
| CookieYes | Records cookie choices and controls optional technologies | Legitimate interests and legal obligations |
| Google reCAPTCHA | Protects forms against spam, fraud and misuse | Legitimate interests |
| Google Analytics 4 | Measures website visits, interactions and performance | Consent |
| Google Ads and DoubleClick | Measures advertising, campaigns and conversions and may support remarketing | Consent |
| YouTube | Displays videos and may record viewing or device information | Consent |
| Google Tag Manager | Loads and manages website tags according to cookie choices | The basis applying to each service loaded |
| Campaign attribution | Retains referral and campaign information for up to 90 days | Consent |
Cookie names and durations may change when providers update their services. To choose again, clear this website’s cookies in your browser and revisit the website.
How can cookie choices be controlled?
CookieYes is used to collect and record cookie preferences when the consent banner is displayed. To choose again, clear this website’s cookies in your browser and reload the page.
Cookies can also be blocked or deleted through browser settings, although doing so may affect website features. Third-party services process cookie data under their own privacy notices.
How will this Privacy and Cookie Policy be updated?
We review this notice periodically and update it when our processing, suppliers, legal obligations or website technologies change. The current version and its update date will be displayed on this page.

