Data Protection

---

(Last Updated: 18/04/2026)

1. Who We Are

Finance for Forces is a trading style of North Star Commercial Finance Limited which is a commercial finance brokerage (“we”, “us”, “our”) is a financial brokerage service. We are the data controller responsible for your personal data.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Notice or how we use your data, you can contact us at:

Email: compliance@forces.finance

Address: 274 Breedon Street, Long Eaton, Nottingham NG10 4FD

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection matters.

2. The Data We Collect

We may collect, use, store, and transfer the following types of personal data:

• Identity Data: name, date of birth

• Contact Data: email address, telephone number, postal address

• Financial Data: income, expenditure, assets, liabilities

• Credit and Affordability Data

• Communication Data: emails, correspondence, call recordings

• Technical Data: limited website usage data where applicable

We only collect data that is necessary to provide our services.

3. How We Use Your Data

We use your personal data to:

• assess your financial circumstances

• provide brokerage services and suitable recommendations

• communicate with you regarding your enquiry or application

• submit applications to lenders or financial providers

• meet our legal and regulatory obligations

• improve our services and internal processes

4. Lawful Basis for Processing

We process your personal data under the following legal bases:

• Contract – where processing is necessary to provide services you request

• Legitimate Interests – to operate, manage, and improve our business

• Legal Obligation – to comply with regulatory and legal requirements

• Consent – where required for specific activities

5. Call Recording

We may record telephone calls for the following purposes:

• training and quality assurance

• compliance with regulatory requirements

• maintaining accurate records of communications

Call recordings are handled securely and in accordance with this Privacy Notice and applicable data protection laws.

6. Data Sharing

We may share your personal data with:

• lenders and financial service providers

• professional advisers

• technology providers, including secure data storage systems and CRM platforms

• carefully selected service providers that support our internal processes (which may include AI-enabled tools)

• regulators or authorities where required

We only share the minimum data necessary for the relevant purpose.

7. International Transfers

Where your personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as:

• adequacy regulations

• standard contractual clauses

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy legal, regulatory, tax, or reporting requirements.

In financial services, this is typically up to 6 years after our relationship with you ends, unless a longer period is required or permitted.

9. Your Legal Rights

Under data protection law, you have rights including:

• the right to access your personal data

• the right to correct inaccurate data

• the right to request erasure (in certain circumstances)

• the right to restrict processing

• the right to object to processing

• the right to data portability

To exercise any of these rights, please contact us using the details above.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Use of Artificial Intelligence (AI)

We use carefully selected technology tools, including artificial intelligence (AI), to support the efficiency and quality of our services.

AI may be used to assist with:

• drafting communications

• summarising information or documents

• supporting internal administrative processes

• improving marketing and service delivery

Important:

• AI is not used to make fully automated decisions about you

• All outputs are reviewed by qualified individuals before being relied upon

• Final decisions and advice are always made by humans

We take steps to:

• limit the data used to what is necessary

• protect confidentiality

• use trusted systems and providers

While AI can improve efficiency, it may have limitations. Human oversight ensures outputs are appropriate and accurate.

12. Our Commitment to Responsible Data and AI Use

We are committed to using personal data and technology responsibly.

This means:

• being clear about how and why we use your data

• maintaining human oversight in all decision-making

• using technology to support, not replace, professional judgement

• handling your information with care, integrity, and respect

13. Complaints

If you have any concerns about how we handle your personal data, please contact us in the first instance.

You also have the right to complain to:

Information Commissioner’s Office (ICO)

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Website: www.ico.org.uk

14. Changes to This Privacy Notice

We may update this Privacy Notice from time to time.

The latest version will always be available on our website.