How do I request deletion of my personal data?

Question

Accepted Answer

Under UK GDPR, you have the right to request that we delete personal information we hold about you. This is sometimes called the "right to erasure" or the "right to be forgotten". We take this right seriously and will act on valid requests promptly.

How to submit an erasure request

Email our privacy team at support@credicorp.co.uk with the subject line "Data erasure request". Please include:

Your full name as it appears on your account
Your email address linked to the account
Your company name and company number (for business accounts)
A brief description of what you want deleted

We will acknowledge your request within five working days and complete the erasure (or explain why an exemption applies) within 30 calendar days.

What we will delete

For accounts with no outstanding loan balance and no ongoing regulatory obligation, we will delete:

Your contact details and identification information
Application form data not required for legal retention
Marketing preferences and communication history
Any open-banking data we hold

What we must retain and why

Some information cannot be deleted because we are required to keep it by law. We must retain:

Loan agreement records for six years from the date the agreement ends, under the Limitation Act 1980 (limitation period for contract claims).
AML and KYC records for five years from the end of the business relationship, under the Money Laundering Regulations 2017.
Accounting and financial records for six years under the Companies Act 2006.
Credit bureau data — we cannot delete information already reported to Experian, Equifax or TransUnion; those agencies have their own retention policies.

We will tell you specifically what we have retained and why when we respond to your request.

If you have an outstanding loan balance

We cannot erase your account while a loan is active or a balance remains outstanding. Once the loan is fully repaid and all obligations are settled, you may submit an erasure request and we will process it subject to our legal retention obligations.

How to complain if we refuse

If you believe we have refused your request without good reason, you have the right to complain to the Information Commissioner's Office (ICO). Our ICO registration number is ZC157682.