Who is responsible for your data
RULE8 Inc. (operating LendRight) is the data controller for the LendRight UK service. Contact: doit@trylendright.com. We process personal data under the UK GDPR and the Data Protection Act 2018.
What we collect, and why
- Agreement data — names, addresses, dates of birth, email addresses, and the loan terms you enter. Legal basis: performance of a contract (creating and sealing your agreement).
- Signing evidence — timestamps, verification method, IP-derived network information and coarse location at signing. Legal basis: legitimate interests (making the signature trustworthy and tamper-evident) and performance of a contract.
- Payment data — handled by Stripe; we never see full card numbers. Legal basis: performance of a contract; legal obligation (records).
- Account & support data — your email, sign-in codes, and correspondence. Legal basis: performance of a contract; legitimate interests.
We do not sell personal data, and we do not use your agreement contents for advertising.
Who we share with
We share personal data only with service providers (processors) who help us run LendRight — for example payment processing, hosting and storage, and email or text-message delivery — under contracts that meet UK GDPR requirements. The other party to your agreement receives the agreement and the information necessary to review and sign it; that sharing is necessary to perform the contract you have asked us to create. We may also disclose information where the law requires it. We do not sell your personal data.
Where your data goes
Our processors include Stripe (payments and identity verification), our email delivery provider, and Cloudflare (hosting and storage). Data may be processed in Canada, where RULE8 Inc. is based: transfers from the UK to Canada rely on the UK’s adequacy regulations covering data subject to Canada’s PIPEDA, supplemented by contractual safeguards with our processors elsewhere.
Communications and marketing
We use your email address, and any mobile number you provide, to send the service messages needed to run your agreement — sign-in links, verification codes, status updates, and copies of your signed documents and receipts (legal basis: performance of a contract). If you add a mobile number, you may also receive these updates by text message; standard message and data rates may apply. We may also send occasional product or marketing messages in line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR) — only with your consent or, for existing customers, under the “soft opt-in” for our own similar services — and every marketing message includes an unsubscribe link. You can opt out at any time using that link or by emailing doit@trylendright.com, without affecting essential service messages.
Cookies
LendRight uses two kinds of cookies. Essential cookies make the service work — they keep you signed in, remember your draft between steps, and record your cookie choice itself. These are exempt from consent under the Privacy and Electronic Communications Regulations (PECR) because the service can’t function without them.
Optional analytics cookies (Google Analytics) help us understand which pages are useful. In line with UK GDPR and PECR, these are off by default and are only set if you choose “Accept analytics” in the cookie banner. Choosing “Essential only” keeps them off, and the site works identically either way. You can change your mind at any time by clearing this site’s data in your browser — the banner will ask again on your next visit.
How long we keep it
Signed agreements, their certificates and the signing evidence are retained for as long as the agreement may need to be verified or enforced — the parties rely on us keeping the sealed record. Drafts you abandon are deleted on expiry. Support correspondence is kept as long as reasonably needed.
Your rights
You can ask for access to your data, correction, erasure (where it doesn’t defeat the integrity of a signed agreement the other party relies on), restriction, portability, and you can object to processing based on legitimate interests. Email doit@trylendright.com — we respond within one month. If you’re unhappy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk).