Evolution Money Ltd, Progressive Money Ltd and Evolution Lending Ltd are all wholly owned subsidiaries of Evolution Money Group (‘the Group’, ‘us’, ‘we’).
Evolution Money is authorised and regulated by the Financial Conduct Authority (708324) as a credit broker and service provider for Evolution Lending Limited, who are authorised and regulated by the Financial Conduct Authority (709488) ‘the Lender’. Progressive Money Ltd is authorised and regulated by the FCA (690699) as a direct lender and licensed credit broker.
This Fair Processing Notice explains how we collect, use, share and protect personal data when customers enquire about, apply for, hold or manage a second charge mortgage. It is intended to support clear, fair and transparent communication, helping customers understand how their information is used and what rights they have.
We aim to communicate in a way that is clear, understandable and accessible. We will only ask for information that we reasonably need, explain why it is required, and use it in ways that support fair customer outcomes. Where a customer tells us they need additional support or has circumstances that may affect how they engage with us, we will consider reasonable adjustments and appropriate support options.
For the purposes of European Union and United Kingdom (“UK”) data protection laws, and depending on how you interact with our services, the responsible entity (i.e., controller) of your personal data will be one of the following entities:
- Evolution Money Group
- Evolution Lending Limited
- Evolution Money
- Progressive Money
How we protect your data
We take appropriate steps to protect your personal data and keep it secure. This includes using secure systems, access controls, staff confidentiality requirements, data segregation, system monitoring, back-ups and internal policies and procedures designed to reduce the risk of unauthorised access, loss, misuse, alteration or disclosure. Where we use third-party service providers, we take steps to make sure they are subject to appropriate data protection and security requirements.
We process and store personal data within the UK, including data held on local systems and in cloud-based services.
We collect most of the personal data we process directly from you (for example, when you complete an application or contact us). We may collect some personal data from third parties, including credit reference agencies, and fraud prevention agencies as part of our services.
a) Information you give us directly
- When you enquire, apply for, or take out a loan with us.
- When you contact us by telephone, email, post, online form, website, or app.
- When you provide documents or information to support your enquiry, application or agreement.
b) Information from brokers or third parties
- From brokers, intermediaries, or other third parties who refer your enquiry or application to us.
- From people or organisations involved in your enquiry, application, or agreement, such as solicitors, valuers, lenders, employers, accountants, insurers, debt advisers, claims management companies, or authorised representatives.
- From regulators, law enforcement agencies, or independent arbitration services (such as the Financial Ombudsman Service).
If your enquiry or application has been referred to us by a third party, such as a broker or introducer, and your loan completes, we may pay them a fee for the referral. Where applicable, the amount of this fee will be confirmed in your agreement documents.
c) Information from checks and public sources
- From credit reference agencies, fraud prevention agencies, identity verification providers ,public records such as the electoral register, Land Registry, court records or insolvency records, and any other relevant public source
- From checks we carry out to verify your identity, assess affordability and creditworthiness, prevent fraud or financial crime, meet anti-money laundering requirements, investigate complaints, and comply with legal or regulatory obligations.
d) Information from using our services
- From your use of our website, app, online forms, cookies, call recordings and digital communications.
- From our relationship with you, including how your application progresses, how your agreement is managed, payments, arrears, complaints, customer support needs and other interactions with us.
We may use and retain the data categories below where needed to meet legal and regulatory obligations, including responsible lending, fraud prevention, AML checks, Consumer Duty monitoring, complaints, audits, record keeping and regulator or law enforcement requests.
| Type of data | Examples |
|---|---|
|
Identity data |
Examples
Name, date of birth, marital status, residential status, nationality, identification documents and signatures. Where you are asked to complete identity verification as part of your application, we may collect a live photograph (selfie) to verify that your identity document belongs to you. This is special category data under data protection law and is processed only for the purpose of preventing fraud and verifying your identity. We may also request video verification as part of this process. We may use a 3rd party to deliver identification services for us. |
|
Contact data |
Examples
Home address, email address, telephone numbers and communication preferences. This also includes any other contact details you may provide when interacting with our website, or when you contact us via email, social media, telephone or letter. |
|
Financial data |
Examples
Income, expenditure, bank statements, credit commitments, mortgage details, assets, liabilities, credit history including details of Couty Court Judgements (CCJs), Bankruptcy, Individual Voluntary Arrangements, Debt Management Plans etc., and affordability information. |
|
Property data |
Examples
Property address, estimated value, mortgage balance, ownership details, Land Registry information and valuation information. |
|
Transaction & account data |
Examples
Application history, payments, arrears information, account management activity and customer interactions. |
|
Technical & usage data |
Examples
Website, portal, device, IP address, cookies, call recordings and digital interaction data. |
|
Marketing & communications data |
Examples
When you communicate with us, including via email, social media, telephone, letter or when completing customer feedback or complaints, we collect the personal data you provide to us, this will include your name, contact information (such as email, address, telephone number) and the content of the communications and your marketing preferences. |
|
Call recordings |
Examples
Calls and their contents with us may be recorded. |
We use your personal data for a variety of purposes described below. We process your personal data for these purposes in reliance on our legitimate business interests, in order to perform our contractual obligations to you or third parties with whom we have a contractual relationship (e.g. lenders or credit reference agencies), with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.
When we may monitor and review your data
Before lending – this may include reviewing information you provide to us, information received from brokers or other third parties, credit reference agency information, affordability and creditworthiness data, website or application activity, call recordings, and information used to assess whether our product is suitable, affordable and sustainable for you.
After lending – this may include monitoring and reviewing your loan performance, repayment conduct, contact with us, changes in circumstances, vulnerability or support needs, fraud and financial crime indicators, complaints, arrears or forbearance activity, and information shared with or received from credit reference agencies, regulators, law enforcement, debt solution providers or debt recovery firms where applicable.
| Type of data | How we use your personal data | |
|---|---|---|
|
Identity data |
How we use your personal data
To identify you, verify your details, assess your enquiry or application, make lending or broking decisions, manage your agreement and maintain accurate records. |
|
|
Contact data |
How we use your personal data
To contact you about your enquiry, application or agreement, provide service updates, respond to queries, verify information, manage customer support needs and send marketing where you have agreed to receive it. |
|
|
Financial data |
How we use your personal data
To assess affordability, creditworthiness, suitability and sustainability, source or provide products, make lending or broking decisions, manage payments, arrears or debt recovery. |
|
|
Property data |
How we use your personal data
To assess the property connected to your application or agreement, support valuation and security checks, confirm ownership and mortgage details, assess loan-to-value and manage the loan. |
|
|
Transaction & account data |
How we use your personal data
To progress and manage your application or agreement, administer your account, collect payments, handle arrears, complaints and enquiries, evidence decisions and support audits or reviews. |
|
|
Technical & usage data |
How we use your personal data
To operate and secure our website, portal, app and communication channels, record calls for quality, training and advice checks, improve customer journeys, analyse service performance and prevent fraud or misuse. |
|
|
Marketing & communications data |
How we use your personal data
To manage your communication preferences, send service communications, provide marketing where permitted, carry out customer feedback or satisfaction surveys, improve products and services, and maintain evidence of the choices you have made. |
|
|
Call recordings |
How we use your personal data
Regulatory and Legal and Regulatory requirements |
|
We may use sensitive (special category) data about you for the purpose of processing the application and for the duration of the mortgage to run our relationship with you. We may ask you first if we are going to do this, for example when you apply for a mortgage, but at other times we may use sensitive data about you without confirming your consent, including where we need to do so to protect your interests or to comply with legal requirements.
Special Category data may include information relating to your health, religion, and details of offences or court proceedings. For example, if you ask us not to telephone you on particular religious holidays, we would need to record this on your file. We may also keep a record of any health issues you tell us about, as we are required by the Financial Conduct Authority (FCA) to identify vulnerable customers to ensure we treat them fairly.
We will only ask for personal data where we have a clear reason to do so. If you do not provide information that we reasonably need, or if the information provided is incomplete or inaccurate, we may not be able to assess your enquiry or application, verify your identity, complete affordability and creditworthiness checks, provide a quote, offer a product, progress a loan, manage an existing agreement, respond to a request, or meet our legal and regulatory obligations.
Where the information is optional, such as certain marketing preferences or additional support information, choosing not to provide it will not prevent us from considering your application or providing service communications. However, it may affect the way we tailor communications, provide support, or tell you about products or services that may be relevant to you.
We do not keep personal data for longer than we need to. The table below explains how long we usually keep different types of information and why. In some cases, we may need to keep information for longer where required by law, regulation, fraud prevention, complaints, legal claims, audit or debt recovery.
| Type of information | How long we keep it | Why we keep it |
|---|---|---|
|
Applications that do not go ahead |
How long we keep it
Up to 3 years, unless we need to keep it longer by law or regulation. |
Why we keep it
To keep a record of your enquiry or application, show how we assessed it, answer any questions or complaints, and meet our regulatory duties. |
|
Loans that complete |
How long we keep it
6 years from the date the loan is settled. |
Why we keep it
To manage and evidence your loan, respond to complaints or legal claims, meet regulatory requirements, support audits, prevent fraud and recover debts where needed. |
|
Credit reference information |
How long we keep it
Usually for the same period as your application or loan. Some credit score information used for marketing may be kept for up to 6 years, unless you withdraw consent sooner. |
Why we keep it
To check your identity, assess affordability and creditworthiness, make lending decisions, manage your account and prevent fraud. |
|
Special category information |
How long we keep it
Up to 3 years for applications that do not go ahead, or 6 years from settlement for completed loans, unless consent is withdrawn or we need to keep it longer. |
Why we keep it
To understand any support needs, vulnerability, health-related circumstances or changes in circumstances and provide appropriate support. |
|
Marketing preferences |
How long we keep it
Up to 6 years, unless you opt out sooner. |
Why we keep it
To manage opt-ins and opt-outs and make sure we do not send marketing where you have asked us not to. |
|
Website analytics and insight data |
How long we keep it
Up to 6 years. Where possible, data used for analytics, reporting and insight purposes will be anonymised after this period. |
Why we keep it
To understand how customers interact with our website and services, improve customer journeys and outcomes, monitor service performance, support business reporting, and help develop and improve our products and services |
|
Call recordings |
How long we keep it
up to 3 years for applications that do not go ahead, or 6 years from settlement for completed loans, unless we need to keep them longer. |
Why we keep it
To check service quality, support training, deal with complaints, meet regulatory requirements and evidence what was discussed. |
In order to process your loan application, we will perform credit and identity checks on you with one or more Credit Reference Agencies (“CRAs”). To do this, we will supply your personal information to CRAs and they will give us information about you. This will include information from your credit application and about your financial situation and financial history. CRAs will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.
When you request a quote, we conduct a soft credit search, which does not affect your credit score and is not visible to other lenders or organisations on your credit file. If you proceed with a full application, a hard credit search will be conducted which will be recorded on your credit file and may be seen by other organisations, irrespective of the outcome of your application and/or if you subsequently withdraw your full application.
If you are making a joint application we will link your records together, so you should make sure you discuss this with the other party, and share this information with them, before lodging the application. CRAs will also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
Information we provide to Credit Reference Agencies
We will continue to exchange information about you with CRAs while you have a relationship with us, including whether or not you make your loan repayments on time, if you default on your mortgage, if we take possession of your property or enter into any repayment arrangements. If you have a loan and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs. This reporting may make obtaining future credit more difficult.
How to contact a Credit Reference Agency
The CRAs have created a “Credit Reference Agency Information Notice” or “CRAIN” which includes more details about how the CRAs use and share your personal data, as well as their role as fraud prevention agencies. The CRAINs for each of the three main CRAs are available on their websites, which we have linked below:
• Experian: https://www.experian.co.uk/legal/crain/
• Equifax: https://www.equifax.co.uk/crain/
• Transunion: https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
You can also find more information about how the CRAs use personal data, and your data protection rights with the CRAs, here: https://ico.org.uk/for-the-public/credit/
We may use automated tools, scoring models or data analytics to help assess applications, affordability, credit risk, fraud risk, product suitability, customer support needs or account management activity.
Where a decision has a legal or similarly significant effect and is made solely by automated means, customers have the right to ask for human review, express their point of view and challenge the decision. i.e. product sourcing is not solely reliant on the automated decisions.
This processing is performed in line with UK GDPR Article 22(2)(a).
You have certain rights over your personal data. These include rights to access a copy of your personal data, to ask us to erase your personal data and ask us to correct inaccurate personal data. You can ask to exercise these rights by contacting us at [email protected].
The rights you have, and what each of these means, are explained below. If you ask to exercise one of these rights, we may ask you to verify your identity before we process your request. This is to avoid confidentiality breaches and make sure we do not disclose personal data to the wrong person.
a) The right to access personal data
You can ask us for a copy of the personal data we hold about you. We will respond within one month, or up to three months if the request is complex. We may withhold information in limited circumstances, such as to protect another person’s privacy or support a criminal investigation.
b) The right to correct inaccurate personal data
You can ask us to correct, clarify or update personal data that is inaccurate, incomplete or out of date.
c) The right of erasure
You can ask us to delete your personal data in certain circumstances, such as where it is no longer needed or was collected unlawfully. We may need to retain some information for legal or regulatory reasons and will explain this where applicable.
d) Right to restrict use of your personal data
You can ask us to limit how we use your personal data in certain circumstances, for example while we check whether disputed information is accurate.
e) Right to data portability
Where your data is processed by consent or under a contract, you can ask us to move, copy or transfer it to another provider.
f) Right to object
You can object to us using your personal data where we rely on legitimate interests. We may continue if we have a compelling legitimate reason to do so.
g) Right to opt out of direct marketing
You can ask us to stop sending direct marketing at any time and update your preferences using the details in the ‘Contact us’ section.
h) Right to withdraw consent
Where we rely on your consent, you can withdraw it at any time. This will not affect any processing already carried out, but it may affect our ability to provide certain products or services.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, if your request is clearly unfounded, repetitive or excessive we could refuse to comply with your request.
If you ask a third party to exercise your rights on your behalf, we may require you to confirm this to us in writing.
When you might not be able to exercise these rights
There are some circumstances in which we do not need to comply with all or part of your request. For example, we may need to keep certain personal data where it is necessary to meet legal or regulatory obligations, evidence and manage a funded loan or agreement, respond to complaints or legal claims, prevent or detect fraud, financial crime or money laundering, maintain accurate business and audit records, or protect the rights and freedoms of other individuals.
If you ask us to delete your personal data, this does not always mean we must delete all information we hold about you straight away.
Where we are required or permitted to keep personal data after a deletion request, we will only keep the information that is necessary for that purpose and for as long as it is needed. We may also keep a limited record of your request and our response so that we can demonstrate how we handled it. If we cannot delete some or all of your personal data, we will explain the reason to you unless we are legally prevented from doing so.
If you have concerns about how we collect, use, share, store or otherwise handle your personal data, you can make a data protection complaint to us. This includes concerns about how we have used your information, the accuracy of the personal data we hold, how long we keep it, how we have responded to a request you have made, whether your information has been shared appropriately, or any other issue relating to the way we process your personal data.
You can submit a data protection complaint by email to [email protected] (please use a subject line such as Data Complaint), by telephone on 0161 814 9165, or in writing to Evolution Money, 9 Portland Street, Manchester, M1 3BE. We will acknowledge receipt of your complaint within 30 days of receiving it.
We will then take appropriate steps to investigate your concerns without undue delay, which may include making enquiries and asking you for further information where needed. We will keep you informed as appropriate and will tell you the outcome of your complaint without undue delay.
When contacting us, please provide enough information for us to understand your concern and identify the relevant records, including your name, contact details, account or agreement number (if applicable), and details of the issue you would like us to investigate. We may need to verify your identity before we can respond in full.
If you are dissatisfied with the outcome of your data protection complaint, you have the right to raise your concerns with the Information Commissioner’s Office (ICO). You can contact the ICO by telephone on 0303 123 1113, in writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or online. Further information about how to make a complaint is available on the ICO Website.
If your complaint relates both to our products or services and to the way we handle your personal data, we may manage the matter under both processes at the same time so that all aspects of your complaint are considered appropriately.
Where you have agreed to receive marketing, we may contact you by email, SMS, post or telephone about products or services that may be relevant to you. We will make it clear when a communication is marketing, and you can change your preferences or opt out at any time.
Marketing communications may come from us or from other companies within Evolution Money Group. We will only share your personal data with third parties for their own marketing purposes where you have given us your express consent to do so.
Choosing whether to receive marketing will not affect your application, your agreement with us, or the service communications we need to send you.
You can change your marketing preferences at any time using the contact details in the ‘Contact us’ section.
We may keep your marketing information for up to 6 years from the date of your enquiry or application, unless you opt out sooner or we are required to keep limited information to record and respect your marketing preferences.
We use Hotjar, a website analytics and behavioural insights tool, to help us understand how visitors use our website and to improve the customer experience.
Hotjar may record and analyse certain interactions with our website, including:
- Pages visited;
- Time spent on pages;
- Navigation patterns;
- Clicks, scrolling behaviour and user interactions;
- Device and browser information.
Hotjar uses cookies and similar technologies to collect and process this information. Information collected is stored in a pseudonymised format and is used to help us understand website performance and user experience. Neither we nor Hotjar use this information to identify individual visitors.
Further information about how Hotjar processes information can be found in Hotjar’s Privacy Policy: Hotjar Privacy Policy.
You can opt out of Hotjar tracking by visiting: Hotjar Opt-Out.
If our Fair Processing Notice changes in any way, we will place an updated version on our website Regularly reviewing this page ensures that you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties. This notice was last updated in August 2026.
If you wish to make changes to your ‘Opt in’ marketing preferences:
If you wish to discuss any other aspects of your data discussed in this policy, please contact us:
Data Protection, Evolution Money Group
9 Portland Street, Manchester, M1 3BE
Data Protection, Evolution Money Limited
9 Portland Street, Manchester, M1 3BE
Data Protection, Evolution Lending Limited
9 Portland Street, Manchester, M1 3BE
Data Protection, Progressive Money Limited
9 Portland Street, Manchester, M1 3BE
Representative 21.82% APRC (Variable)
For a typical loan of £18,900 over 180 months with a variable interest rate of 18.72% per annum, your monthly repayments would be £335.99 for 179 months and then a final payment of £335.79. This includes a Product Fee of £1890.00 (10% of the loan amount) and a Lending Fee* of £763.00, bringing the total repayable amount to £60,478.00. Annual Interest Rates range between 8.6% to 27.87% (variable). Maximum 50.00% APRC. *Lending Fee varies by country: England & Wales £763, Scotland £1,051, Northern Ireland: £1,736.
Think carefully before securing debts against your home. Your home may be repossessed if you do not keep up repayments on your mortgage or any other loan secured against it. If you are thinking of consolidating existing borrowing, you should be aware that you may be extending the terms of the debt and increasing the total amount you repay.
