Privacy policy

This policy is issued by The Bridging Platform Ltd ("we", "us", "our"), registered in England and Wales, company number 16606679, registered office 5 Haslemere Avenue, Hale Barns, Altrincham, England, WA15 0AU ("we", "us"). It explains how we collect and use personal data when you visit this website (thebridgingplatform.co.uk and its subdomains), request a demo, sign up for a sandbox, or use the platform.

We are the data controller for the personal data described in this policy, except where section 3 below says otherwise. If you have any question about this policy or how we handle your data, see section 12 for how to contact us.

• This website itself sets no cookies and runs no analytics or advertising trackers.
• The platform (the app., sandbox. and individual business subdomains) uses a small number of strictly functional cookies to keep you signed in — see section 7.
• A contact form submission on this site goes straight to our own email inbox via your device's mail client — nothing is stored on a server we run for this website.
• A sandbox account is created with sample data for evaluation only. Don't put real customer, applicant or loan data into it.
• If your organisation has a licensed account, we act as a data processor for the personal data your team puts into the platform — your organisation is the controller. See section 3.

This platform is used in two distinct ways, and different rules apply to each:

As a visitor or prospective customer. When you browse this website, fill in the contact form, or create a sandbox account for your own evaluation, we are the data controller of the personal data involved (see sections 4–6).

As a user of a licensed account. If you use the platform because your employer or another organisation has licensed an account, that organisation is the data controller of the personal data processed through it (your account details, and any borrower, applicant or account data your organisation puts into the platform). We act as a data processor on that organisation's instructions, under a separate agreement with them (a Data Processing Agreement forming part of their licence terms). Questions about how your data is used inside a live account should go to that organisation in the first instance, not to us directly.

We collect personal data in the following ways:

• Contact form. Name, work email address and whatever you write in the message field. Submitting the form opens your own email client with this pre-filled — we only receive it if you then send that email.
• Sandbox sign-up. The details you give us to create a sandbox account (such as your name, email address and organisation), plus whatever you choose to enter into the sandbox itself once created.
• Direct correspondence. Anything you send us by email or otherwise when getting in touch.
• Technical data. Standard web server and hosting logs (such as IP address, browser type, and pages requested), generated automatically by our hosting and network providers for security and operational purposes, and not used to build an advertising profile of you.

• To respond to an enquiry or request you've made — necessary to take steps at your request before entering into a contract, or our legitimate interest in answering you.
• To set up and administer a sandbox or live account — necessary to perform the contract with you or your organisation.
• To send you product or service updates you've asked for — with your consent, which you can withdraw at any time.
• To keep this website and the platform secure and working properly — our legitimate interest in operating a reliable service.
• To comply with a legal obligation we're subject to, where applicable.

Some platform features (such as AI-assisted analysis of cold lead notes) send text you or your organisation enters into the platform to a third-party AI provider in order to generate a suggested response. These features are switched off by default and only run once a business has configured its own connection to an AI provider. Where enabled, that provider processes the data under its own data protection terms; we don't use your data, or permit our AI provider to use it, to train models for other customers. Don't enter data into an AI-assisted feature that you're not comfortable being processed by that provider.

This marketing website (the pages you're reading right now) does not set cookies and does not run analytics, advertising or tracking technologies of any kind.

Once you sign in or use a sandbox or live account on the platform itself, a small number of strictly necessary cookies are used to keep you signed in and remember which workspace you're in — for example a session token, a refresh token, and which app or account you last used. These are functional cookies required for the service to work; they are not used for advertising, and there is no non-essential cookie to ask your consent for.

We don't sell personal data. We share it only with:

• Infrastructure and hosting providers who run the servers, storage and email delivery the website and platform depend on, bound by contract to protect it and use it only to provide that service to us.
• An AI provider, only where an AI-assisted feature has been switched on for a business (see section 6).
• Professional advisers (such as our accountants or solicitors), where necessary and subject to confidentiality obligations.
• A regulator, law enforcement or other third party, where we're required to by law.

Where any of the providers in section 8 are located outside the UK, we rely on an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum) to make sure your data stays protected to UK standards wherever it's processed.

We keep website enquiry and sandbox sign-up data for as long as reasonably needed to respond to you and, where relevant, to follow up about becoming a customer — and delete or anonymise it once it's no longer needed for that purpose. Sandbox accounts themselves may be reset or removed at any time (see the Terms of service), since they hold sample data only, not data we're retaining on your behalf. Data held on behalf of a licensed account is retained in line with that organisation's own agreement with us.

Under UK data protection law, you have the right to:

• ask us what personal data we hold about you, and get a copy of it;
• ask us to correct inaccurate data, or complete incomplete data;
• ask us to delete your data, in certain circumstances;
• ask us to restrict, or object to, certain processing;
• ask for your data in a portable format, where technically feasible; and
• withdraw any consent you've given us, at any time.

If your data is processed by us as a data processor on behalf of a licensed account (see section 3), please direct your request to that organisation first — we'll assist them in responding to it.

To exercise any of these rights, contact us using the details in section 12. If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ico.org.uk).

For any privacy question or to exercise your rights, email hello@thebridgingplatform.co.uk or write to us at 5 Haslemere Avenue, Hale Barns, Altrincham, England, WA15 0AU.

We may update this policy from time to time, for example as the website or platform changes. The version on this page is always the current one; where a change is significant, we'll take reasonable steps to make that clear.