Privacy Policy

We know you are trusting us with personal information, and we take that responsibility seriously. This Privacy Policy explains what information we collect, why we collect it, how we use it, with whom we share it, and how we keep it secure.

We aim to be clear and transparent at every step. If anything in this policy is unclear, please contact us and we would love to help.

1. What is LoanTube?

LoanTube is a trading name of Tiger Lion Financial Limited. Tiger Lion Financial Limited is a company registered in England and Wales. We operate as a UK-based credit broker, helping customers explore and compare loans and other credit products from third-party lenders. Any product offered is provided by the lender, who is responsible for assessing applications and making all lending decisions.

Our key details are:

Registered office address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

Authorised and regulated by the Financial Conduct Authority (FCA), Firm Reference Number 753151.

Registered with the Information Commissioner’s Office, Registration Number ZA185613.
Company Number 10189367.

This policy should be read in conjunction with our Terms and Conditions and Cookies Policy.

2. Our Services

LoanTube is a credit broking and comparison platform. We help you explore and compare loans and other credit products by showing APRs and monthly repayments from multiple lenders and providers.

We use a proprietary matching engine to connect you with lenders and providers that are more likely to be suitable for your circumstances, based on the information you provide, and the eligibility criteria used by our partners.

For more information about our products and services, please refer to our Terms & Conditions.

3. Contact Us

If you have any questions about this Privacy Policy or how we use your personal data, you can contact us:

Email: info@loantube.com
Telephone: 0208 088 1313

Post: Tiger Lion Financial Limited, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

4. What is a Privacy Policy?

This Privacy Policy explains how and why we collect, use, store, share, and protect your personal information when you use our website and services.

When you provide us with personal information, you do so in reliance on our commitment to handle it responsibly, lawfully and transparently. We take that responsibility seriously and aim to explain our data practices in clear and accessible language.

The collection and processing of personal data in the UK is governed by the UK General Data Protection Regulation 2018 (“UK GDPR”) and the Data Protection Act 2018. These laws require organisations to be transparent about how personal data is handled, including how it is collected, used, stored and shared. This Privacy Policy is intended to help you understand what we do with your personal information and what rights you have.

5. How is your Personal Information Collected?

Personal information refers to any information that can be used, either on its own or together with other data, to identify an individual.

We collect personal information from a variety of sources to provide our services effectively and in compliance with legal and regulatory requirements. This information may be collected directly from you, automatically through your use of our website, or from third parties, as described below.

Information You Provide Directly

We may collect personal information directly from you when you:

Complete an application form or enquiry on our website or a partner website.
Communicate with us by email, telephone, post, or other available contact methods.
Provide information in connection with a loan enquiry, eligibility check, or related service.

Information Collected from Third Parties

We may receive personal information about you from third parties where permitted by law, including:

Our partner lenders, brokers, introducers, and affiliates.
Credit reference agencies and fraud-prevention agencies.
Banks, financial institutions, and third-party data providers.
Advertising networks and analytics providers.

Information Collected Automatically

When you visit or interact with our website, we may automatically collect certain technical and usage information using cookies and similar technologies. This may include information about:

Your device, browser type, operating system, and IP address.
Identifiers such as cookie IDs, device identifiers, and security signals.
How you navigate and interact with our website.
Security and performance-related data.

Further details on the use of cookies and similar technologies are set out in our Cookies Policy.

Information About Other Individuals

If you provide us with personal information relating to another individual, you confirm that:

You have informed that individual about this Privacy Policy, and
You have their consent, or another lawful basis, to share the personal information with us.

Lawful Bases for Processing

We only collect and process personal information where we have a lawful basis under the UK GDPR and the Data Protection Act 2018. These lawful bases include:

Consent (Article 6(1)(a))

Where you have given clear consent, for example, for marketing communications, non-essential cookies, analytics, advertising, or similar activities. You may withdraw your consent at any time.

Contract (Article 6(1)(b))

Where processing is necessary to provide our services to you, including eligibility checks, loan matching, and forwarding your application to the lender you choose.

Legal Obligation (Article 6(1)(c))

Where processing is required to comply with legal or regulatory obligations, including FCA requirements, data protection regulations, and anti-money-laundering obligations.

Legitimate Interests (Article 6(1)(f))

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include fraud prevention, security monitoring, system integrity, internal analytics, and service improvement.

6. Information LoanTube Collects

We ask that you provide accurate and up-to-date information, as the personal data we hold must be correct and complete to offer services appropriate to your circumstances. You may contact us at any time to update your information or to notify us if you believe it is inaccurate or incomplete.

The following is a list of the information collected by us regarding you, your financial associates, your business and other people and businesses linked to you in any way:

Communication or Contact Related

The first and most basic requirement is a point of contact. This includes your and your business’s address, email, and contact number. Details of an address include house number, country, city, and postcode.

Identity Related

This information includes your first and last name, date of birth, age, gender, marital status and number of dependents. For business customers, we may collect information about your business and relevant individuals connected to it (for example, directors or beneficial owners), where needed to support your enquiry and compliance checks.

Eligibility and Credit Search Related

This information helps us assess your circumstances and present suitable loan options on LoanTube. It includes details such as your monthly or annual income and expenditure, the loan amount required, the purpose of the loan, and the intended borrowing term. We may also receive information about you and your business’s financial history, current financial position, existing financial commitments, and credit score from the credit reference agencies we work with.

Employment Related

We may collect information about your employment to help us assess eligibility and present appropriate loan options. This may include your employment status, employer name, job title, and income details. If you are self-employed, this may include an estimate of your monthly or annual income.

Marketing Related

This includes your preferences regarding how you receive marketing information, newsletters, promotional emails, or similar communications about our services.

Tech Related

Like most websites today, we automatically collect a few technical details when you browse our site or fill out our forms. This helps us keep the site secure and ensure it works properly across different devices and browsers. This may include your device type, operating system, browser version, language settings, IP address, the page that referred you to us, and the pages you view on our website. Your browser shares some standard information, such as your device platform, system setup, estimated device memory, the number of CPU cores, and similar details that help us display our pages correctly on your screen.

We also run a few quick checks in the background that help us understand how your device displays images, graphics, fonts and audio. This may include things like how your device renders graphics, audio signals, available fonts, pixel ratio and similar information. These checks help us ensure that a real person is using our forms and that bots or automated tools don’t target our website.

Behavioural and Security Indicators

We look at how you interact with our website, including basic information like clicks, scrolling, mouse movements, typing patterns, and how you move through a page. These signals help us understand whether everything is working normally and allow us to spot unusual activity. We also receive a few security-related indicators from your browser, such as whether developer tools are active or whether your browser is behaving differently than expected. These checks help us keep our forms secure and protect both you and our partners from fraud and misuse. We use these signals for security, fraud prevention and service integrity. They may be used to help detect and block suspicious or automated activity. They are not used to make lending decisions.

Consent and Audit Log Information

Whenever you use our forms, we keep a secure record of key actions to evidence your consent and maintain complete transparency. This may include information such as which buttons you clicked, the time and date of those actions, the page you were on, your session ID and any security checks performed at that moment. In some cases, we create secure “audit hashes” to prove that these records have not been altered. These logs help us quickly resolve issues and meet our compliance obligations. The records are retained in line with our data retention policy and applicable regulatory requirements.

Location and Network Information

We collect general location information from your IP address, such as your country, region, city, postcode, time zone and geolocation. This helps us load the best version of our website for you and check whether any activity looks unusual.

Along with this, we collect basic network information, such as your Internet Service Provider (ISP), whether you’re on Wi-Fi or mobile data, and simple connection details, such as approximate speed and whether your device is online or offline. These checks help ensure our forms load correctly and allow us to spot suspicious patterns.

Device Information and Capability

Your device shares some simple capability information with us, such as whether it has a camera or microphone, which media inputs are available, and basic battery details. We may also collect information about how your device displays the website, for example, whether it supports touch input, how many touch points it has, your device’s orientation, and the type of pointer or input method you are using.

In addition, we collect settings such as your browser language, preferred language, local date and time, and the technical features your browser supports (such as graphics, audio, media, and security). This helps us ensure that our pages display correctly and identify any potentially fraudulent activity.

Performance Diagnostics

To keep our service running smoothly, we collect basic website performance information, such as how long pages take to load, how quickly different resources are fetched, and other similar diagnostics. We may also check whether your browser supports certain features (such as cookies or local storage) to ensure the website works smoothly on your device.

Why We Collect This Information

All this information helps us keep our website secure, protect against fraud, ensure our forms display correctly across different devices, and improve the speed and performance of our service. These activities are based on our legitimate interest in keeping our platform safe, reliable and user-friendly for everyone who uses it.

7. Usage of Collected Information

We collect personal information only where it is reasonably necessary for, or directly related to, the provision and operation of our services, and we process it only where we have a lawful basis to do so.

The primary purposes for which we use your personal information include assessing your enquiry, helping you compare suitable credit products, establishing and verifying your identity, contacting you in relation to your enquiry, managing risk, preventing fraud, and meeting our legal and regulatory obligations. In addition, we may use your information for the following purposes:

Provision of services and eligibility assessment

To provide our services, we and our partners may use your personal information to:

Carry out soft credit searches.
Assess your eligibility for loan products and related services.
Provide information about your enquiry, quotes, or application status.
Present you with relevant loan products or other financial services.

Marketing and customer communications

We and our partners may use your personal information to contact and update you regarding the requested products and services. We may also reach out to manage our relationship with you, and where permitted, send marketing communications. When our partners send you marketing communication, they will do so under their own privacy policies and the preferences you set with them.

Legal, regulatory, and compliance purposes

We may process your personal information where required to comply with legal or regulatory obligations, including FCA requirements, anti-money-laundering obligations, fraud-prevention measures, and lawful requests from authorities. This may include sharing information with credit reference agencies and fraud-prevention organisations.

Legitimate business operations

We may use personal information for our legitimate interests, including internal auditing, risk management, data analysis, research, service improvement, system testing, security monitoring, reporting, and business continuity, provided these interests do not override your rights and freedoms.

Operational and service-related communications

From time to time, we and our partners may use your personal information to send essential service communications, such as updates about your enquiry, changes to our terms, policies, or processes, feedback requests, and important notices. As these communications are necessary to provide our services, you may not be able to opt out of receiving them.

Use of automated tools and AI systems

We use secure automated tools, including AI-assisted systems, to support parts of the customer journey. This includes assessing your eligibility against lender criteria and matching you with potential lenders based on the information you provide. These tools support decision-making but do not make final lending decisions. All credit decisions are made by the lender.

Customer support and enquiries

Your personal information may be used to respond to your questions, requests, or complaints, and to provide customer support.

All processing activities described above are carried out in accordance with applicable data protection laws and the lawful bases outlined in this Privacy Policy.

8. Information Retention

We retain personal information collected in accordance with this Privacy Policy for no longer than six (6) years from the date you last used any of our websites or services, unless a longer retention period is required or permitted by law.

After this period, personal data is securely deleted or anonymised, provided it is no longer necessary for the purposes for which it was collected, including compliance with legal, regulatory, accounting, or reporting obligations.

If you request the deletion of your personal information before the end of our standard retention period, we will assess the request in line with our legal and regulatory obligations. In some cases, limited information may be retained in secure backup systems or archives solely where required for legal, regulatory, or audit purposes.

A list of our websites is provided at the end of this Privacy Policy.

9. Third-party Data Disclosure Policy

When you use our service(s), your information will be shared with the following third parties:

Our Partners, who help us provide our services to you, comprise a select panel of lenders, credit reference agencies, banks, brokers, our group websites, introducers, affiliates, fraud-prevention agencies, and other data providers. Our group websites, under different trading names, are listed at the end of the page.
Other Companies that help us deliver our services, for example, IT service providers (who supply technology platforms, software tools and secure data-storage solutions) and communication providers (who support email, SMS and other customer-contact and verification services).
Advertising Networks and Social Media companies such as Meta, Google, Instagram, LinkedIn, TikTok and YouTube, to help us display relevant advertisements and measure the effectiveness of our marketing campaigns, in accordance with your cookie and marketing preferences.
AI and Analytics Platforms, including OpenAI, Anthropic, Google and Microsoft, that help us analyse how people use our website, keep our systems secure, improve performance, and support the technology behind our loan-application assistant and other internal tools.
Professional Advisers such as lawyers, auditors, insurers and banking partners, where this is necessary for them to provide us with legal, financial, insurance or consultancy support.

To facilitate our services, we may need to allow these third parties to process your personal information. We will ensure they keep the information secure, in accordance with our instructions and the UK GDPR, the UK Data Protection Act 2018, and other relevant privacy legislation.

Some of the third-party analytics, security and advertising tools we use (for example, Google, Meta, TikTok and others) act as independent controllers of the data collected through their tags and cookies. This means they may use the data for their own purposes in line with their privacy policies. We ensure that any such partners only receive data lawfully and with your consent where required. Where a third party acts as a controller, they are responsible for their own processing. Where they act as our processor, they must process personal data only on our instructions.

We may also share your personal information where we are obliged to do so for legal or regulatory reasons, for example, to prevent or detect crime, monitor compliance, or enforce and apply our Terms and Conditions and other such agreements.

We may also share your personal information with any third parties to whom we may sell, transfer, or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them. If there is a change to our business, the new owners may use your personal information in the same way as set out in this Privacy Policy.

You can check the list of our partners and third-party websites here: Our Partners.

10. International Data Transfers

We do not routinely transfer or store personal information outside the United Kingdom. However, some of our partners, service providers, or their data processors may be located outside the UK or process data from locations outside the UK.

Where personal information is transferred outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK data protection law. This includes relying on UK adequacy regulations where applicable, or implementing approved contractual protections such as standard contractual clauses, together with additional technical and organisational security measures where required.

We take reasonable steps to ensure that any third-party processing of personal information outside the UK provides a level of protection that is equivalent to that required under the UK GDPR and the Data Protection Act 2018, and that your information is used only for the purposes set out in this Privacy Policy.

11. Cookie Policy

An HTTP cookie is simply a small file stored on your device. It contains a short string of text that holds information about your visit, for example, your browser settings or choices you’ve made on the website. Cookies store small pieces of information that your browser sends back to us to remember preferences and help the site work as expected.

We use cookies to identify your browser, tailor your browsing experience, and track how you use our website to improve our services. Additionally, we require cookies to remember your preferences, maintain authentication and security, enhance service features and performance, support research and analytics, and enable advertising. Where required by law, non-essential cookies are only used with your consent, which you can manage at any time through your cookie settings.

For full details, including how to manage your preferences, please see our Cookie Policy.

12. Information Security

While your privacy is of utmost concern to us, data security is equally important. We take appropriate technical and organisational security measures to prevent your personal information from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way.

We will keep your personal data secure in accordance with our legal responsibilities. Reasonable steps will also be taken to safeguard your personal data against unlawful or malicious access by a third party.

We recommend that you take reasonable steps to safeguard your information when transferring information to us, such as not sending confidential information over unprotected email, ensuring email attachments are password-protected or encrypted, and using secure methods of postage when sending original documentation.

Where appropriate, our sites use HTTPS to help keep your information secure. Certain information may also be encrypted to minimise the risk of interception during transit. We also ensure a high level of built-in security checks when transferring or processing your personal information across our group websites mentioned at the end of the page, as well as to our partners, other companies, and advertising networks. Please note that while we take steps to protect personal data in transit, no internet transmission is completely safe. We retain personal data in line with the retention periods set out in Section 8.

13. Your Legal Rights

(a) Right to be informed

You have the right to receive clear information about how and why we collect and use your personal data, how long we retain it, and with whom it is shared. This Privacy Policy provides that information.

(b) Right to Access

You have the right to ask whether we process your personal data and to request a copy of the data we hold about you. This includes information about the purposes of processing, the categories of data involved, who receives your data, how long we store it, your available data rights, and, if not supplied by you, where the data originated. This right does not include personal data relating to other individuals (for example, information about suspected fraud) or to your credit report or credit score, which must be obtained directly from the relevant credit reference agency.

(c) Right to Object

You may object at any time to the processing of your personal data where we rely on legitimate interests as the lawful basis for processing. We will stop processing unless we can demonstrate compelling grounds that override your rights, or the processing is necessary for legal claims. You may also object at any time to the use of your personal data for direct marketing, after which we will stop using it for that purpose.

(d) Right to Rectification

You have the right to request the correction of any inaccurate personal data we hold about you. If your data is incomplete, you may also ask us to update it or add additional information so that it is complete and accurate for the purposes for which it is processed.

(e) Right to Erasure

You may request the deletion of your personal data where it is no longer needed, where you withdraw consent (and consent was the only basis for processing), where you have objected and there are no overriding grounds for us to continue, where the processing was unlawful, or where we are required to erase the data to comply with legal obligations. We will assess each request in line with our regulatory and legal duties and may not be able to delete data where ongoing retention is required.

(f) Right to Data Portability

You have the right to request a copy of the personal data you provided to us in a structured, commonly used and machine-readable format. You may also request that we transfer this data directly to another organisation, where technically feasible. This applies only to data processed with your consent or for the performance of a contract and carried out by automated means.

(g) Right to Restriction of Information Processing

You have the right to obtain from us the restriction of processing your information. You may request that we limit the use of your personal data where its accuracy is contested, where processing is unlawful but you prefer restriction over deletion, where the data is no longer needed for our purposes but required for legal claims, or where you have objected, and we are verifying whether our grounds for processing outweigh your rights.

(h) Right to Withdraw Consent

If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before your withdrawal, but it may mean we can no longer provide certain services to you. If that happens, we will explain this at the time.

(i) Right to Complain to the Information Commissioner’s Office (ICO)

We will try to resolve any complaint you may have regarding data protection issues. If you are not happy with our response or if you have any concerns or complaints as to how we have handled your Personal Data, you may lodge a complaint with the UK’s data protection regulator, the ICO, who can be contacted through their website at https://ico.org.uk/global/contact-us/ or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

14. Details of Data Protection Officer for Complaints & Concerns

If you have any questions about how we collect, use, or protect your personal data, or if you wish to exercise your data protection rights, you may contact our Data Protection Officer (DPO) at any time.

Correspondence Address: The Data Protection Officer, Tiger Lion Financial Limited, 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ.

If you wish to contact our DPO by email, you can send an email to info@loantube.com.

15. Revision of the Policy

We reserve the right to amend or update this Privacy Policy at any time. Any changes will be published on this page. If we make material changes to this policy, we may also notify you by other means, such as email, where appropriate. Where required by law, we will obtain your consent before the change takes effect.

Important Information:

This Privacy Policy has been prepared in accordance with applicable data protection laws, including the UK GDPR and the UK Data Protection Act 2018.
This policy applies only to personal data collected in connection with our services. Our website may contain links to third-party websites, including those operated by lenders, brokers, credit reference agencies, advertisers, affiliates, and other partners. We are not responsible for the privacy practices of those third parties, and you should review their privacy policies before submitting any personal data.
This Privacy Policy should be read alongside our Terms and Conditions and Cookies Policy.

List of our websites owned and operated by Tiger Lion Financial Limited:

You can also check us on the FCA register by clicking on Tiger Lion Financial Limited.

__________________________________

Last Reviewed: December 2025