What we collect, why, and how to get it deleted

The controller is the company named at the foot of every page, with its registration number and registered office. Write to the address there, or use the contact form, and the same team answers either way. We have not appointed a data protection officer; the law does not require one of a company this size doing this kind of processing, and no request is refused for the want of one.

The answers you give the match form, and an email address — a phone number only if you offer one. We ask for these so we can send you the shortlist your answers produce. The legal basis is your consent, given by submitting the form, and you can withdraw it without affecting anything we did before you did.

Separately, and only if you tick the box for it, we use the same address to send you occasional updates. That box is never pre-ticked and never bundled with anything else, the shortlist arrives whether you tick it or not, and every message we send carries a one-click unsubscribe.

Our servers keep short technical logs — IP address, browser, the page requested — to keep the site up and to stop abuse. The basis is our legitimate interest in running a working site, and nothing in those logs is used to build a profile of you or to advertise to you.

We never run a credit check, hard or soft. Anything this site asks about your credit standing is self-reported by you and is not verified against any register.

We do not pass your details to lenders, banks or brokers, and we do not sell or share personal data for anyone else's advertising. The match form returns a filtered comparison, not an application. A provider only learns anything about you if you click through and apply on their own site, and from that point their privacy notice governs what happens next, not ours.

Two suppliers, both under contract to act only on our instructions: Cloudflare hosts the site and the database, and Brevo sends the email. Where either processes data outside your own region, it does so under the transfer terms in its data processing agreement with us. Neither may use your data for its own purposes.

We set no advertising or analytics cookies today. What we do store is the language and market you chose, so the site stays in the right country; a record of your cookie answer, kept for twelve months so we do not ask again on every page; and a session cookie on the staff area, which you will never see.

You are asked before anything optional is stored, rejecting is one click in the first layer of that banner, and nothing non-essential is stored while the question is unanswered. You can change or withdraw the answer at any time from the link in the footer, which is the same single step as giving it. If your browser sends a Global Privacy Control signal we treat that as a decision and do not ask.

Match answers and contact details are kept until you ask us to delete them, or until they are no longer needed for what you gave them for. We do not set a fixed period, because a shortlist you are still working through and one you abandoned a year ago are not the same thing — and one message through the contact form removes them whenever you decide. Records of what you consented to outlive the address itself, because we have to be able to show what you agreed to.

Technical logs are held by our hosting provider under its own retention period, measured in days, and are never joined to anything you submitted.

You can ask for a copy of what we hold, have it corrected, have it deleted, have its use restricted, object to it, or receive it in a portable form. Ask through the contact form and we answer within a month. There is no charge and you do not need to give a reason.

If we get it wrong, you can complain to the data protection authority for your country, named below, and you can do so whether or not you have complained to us first. We would rather hear from you, but that is your choice and not a condition.

The authority for this market is Federal Trade Commission (FTC)

Bankmatch is a comparison site, not a lender, a bank, a broker or an adviser. What you see here is information, not advice and not a promise that anyone will approve you; the provider sets every rate, fee and decision. Outbound apply links go through our affiliate tracker, and the provider pays us a fee that in most cases falls due only if you go on to take up the product — which cannot move a product up the list, because the order is computed from the published rate before any commercial term is read. Nothing here limits the rights consumer law gives you in your own country.