Last updated: August 2026

​

LeaseMisSelling respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains what information we collect through leasemisselling.co.uk, why we collect it, how it may be used and the rights you have in relation to your personal information.

​

LeaseMisSelling is a public-interest evidence platform investigating reported patterns of business lease and finance mis-selling affecting UK businesses.

​

1. Who we are

LeaseMisSelling is an investigation by Priavo Intelligence. For the purposes of UK data protection law, the data controller responsible for personal information collected through this Website is:

​

[FULL LEGAL ENTITY NAME]
[REGISTERED ADDRESS]

Company number: [COMPANY NUMBER]
Email: [PRIVACY EMAIL ADDRESS]

ICO registration number: [ICO NUMBER, IF APPLICABLE]

​

If you have any questions about this Privacy Policy or how your information is handled, please contact us using the details above.

​

2. What information we collect

The information we collect depends on how you use the Website. When you register your case, we may collect:

• your first and last name;

• email address;

• telephone number, where provided;

• company name and company number;

• information about the finance company involved;

• information about a supplier or introducer;

• details of the equipment or service involved;

• lease value or monthly payment information;

• agreement or reference numbers;

• lease start date or year;

• the current status of your agreement or dispute;

• information about complaints made to finance companies, regulators, ombudsman services or other organisations; and

• your description of what you were told, what you understood the arrangement to be and what subsequently happened.

​

Documents you provide

You may also choose to provide supporting documentation, such as:

• lease or finance agreements;

• supplier correspondence;

• emails and other communications;

• complaint correspondence;

• payment or rebate information;

• collection or enforcement notices; and

• other evidence you believe is relevant to your experience.

 

These documents may contain personal information about you or other individuals.

​

Please only provide information that is relevant to the investigation and that you are lawfully entitled to share.

 

When you contact us

If you contact LeaseMisSelling directly, we may collect your name, contact details, organisation and any information contained within your correspondence.

​

Technical information

When you use the Website, certain technical information may be collected automatically, such as your IP address, browser type, device information, pages visited and information about how you interact with the Website.

Further information about cookies and similar technologies is available in our Cookie Notice.

​

3. Why we collect your information

We may use personal information to:

• receive and manage case registrations;

• assess whether a reported experience may be relevant to the investigation;

• review supporting documents and correspondence;

• identify recurring characteristics across reported cases;

• understand the suppliers, introducers, finance companies and types of arrangements appearing within submissions;

• contact you for further information or clarification where appropriate and permitted;

• maintain an evidence base relating to the investigation;

• respond to enquiries;

• maintain the security and operation of the Website; and

• comply with applicable legal and regulatory obligations.

​

Where you have provided the appropriate permission, information may also be analysed on an anonymised or aggregated basis to support regulatory submissions, parliamentary briefings, research or other public-interest outputs relating to the investigation.

​

We will not publish your identity or individual case information simply because you have registered your experience.

 

4. Our lawful basis for processing

UK data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may process information because:

​

You have given your consent
For example, where you specifically agree to be contacted or consent to particular uses of your submitted information.

​

We have a legitimate interest
We may process information where it is reasonably necessary to conduct and administer the investigation, identify patterns within reported experiences, respond to enquiries, protect the Website and maintain appropriate records, provided those interests are not overridden by your rights and interests.

​

We have a legal obligation
We may process or retain information where necessary to comply with applicable law or a lawful request.

The appropriate lawful basis may differ depending on the information concerned and the purpose for which it is being processed.

​

5. Special category and sensitive information

We do not ask you to provide special category personal information unless it is genuinely relevant to your submission.

​

However, documents or descriptions submitted as part of a case may occasionally contain sensitive or special category information.

​

Please avoid providing sensitive personal information that is not relevant to the investigation.

​

Where special category information is received, it will only be processed where an appropriate lawful basis and additional condition for processing applies.

​

6. Information about other people

Documents or correspondence you provide may contain information about other individuals.

​

Please only submit third-party personal information where it is relevant to your experience and you have a lawful basis for sharing it.

​

Where possible, unnecessary personal information about other individuals should be removed or redacted before documents are submitted.

​

7. How we use information within the investigation

An important purpose of LeaseMisSelling is to establish whether characteristics reported by individual businesses form part of a wider pattern.

​

Information from different submissions may therefore be categorised, compared and analysed.

​

For example, we may analyse:

• finance companies involved;

• suppliers or introducers involved;

• types and values of agreements;

• representations or promises reportedly made;

• what happened after agreements were entered into; and

• subsequent complaints, disputes, collection or enforcement activity.

 

Where information is used to describe wider trends or patterns publicly, we will seek to use aggregated or anonymised information unless there is an appropriate lawful basis and permission to identify an individual or business.

​

8. Sharing your information

We do not sell your personal information. Personal information may be shared with trusted service providers where necessary to operate the Website, securely store submissions, manage communications or provide technical services.

​

Those providers should only process information in accordance with our instructions and appropriate contractual and security requirements.

​

Information may also be disclosed where:

• you have given us permission to do so;

• disclosure is required by law;

• we are responding to a valid legal or regulatory request; or

• it is necessary to establish, exercise or defend legal rights.

​

Where information is intended for use in a regulatory or parliamentary submission, the nature of the information shared will depend upon the permissions obtained, the purpose of the submission and applicable data protection requirements.

​

9. Regulatory and parliamentary submissions

Part of the purpose of LeaseMisSelling is to build an evidence base capable of informing regulatory and parliamentary scrutiny.

​

Where appropriate, findings from the investigation may therefore be shared with bodies such as regulators, ombudsman services, MPs or parliamentary teams.

​

Where possible and appropriate, information will be aggregated or anonymised.

​

Where identifiable information is proposed for disclosure, we will ensure there is an appropriate lawful basis for doing so and consider whether additional permission from you is required.

​

10. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

​

These measures may include secure transmission, access controls, secure storage and restricting access to submissions to authorised individuals who require it for the purposes of the investigation.

​

No online system can be guaranteed to be completely secure. However, we will take appropriate steps proportionate to the nature of the information being processed.

​

11. How long we keep your information

We will only retain personal information for as long as reasonably necessary for the purposes for which it was collected, including the investigation and any applicable legal, regulatory, evidential or reporting requirements.

Different categories of information may need to be retained for different periods.

​

Case registrations and supporting evidence: [INSERT RETENTION PERIOD / CRITERIA]

General enquiries: [INSERT RETENTION PERIOD]

Website and security records: [INSERT RETENTION PERIOD]

​

Information that has been fully anonymised so that it can no longer be linked to an identifiable individual may be retained for research, statistical or evidential purposes.

​

Our retention arrangements will be reviewed periodically.

​

12. International transfers

Some technology or service providers used to operate the Website may process information outside the United Kingdom.

​

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law and that appropriate safeguards are in place where required.

​

13. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to personal information we hold about you;

• ask us to correct inaccurate or incomplete information;

• request deletion of your personal information in certain circumstances;

• request restriction of processing;

• object to certain processing based on legitimate interests;

• withdraw consent where processing relies upon consent; and

• request the transfer of certain information where the right to data portability applies.

​

These rights are not absolute and may depend upon the circumstances and our lawful basis for processing the information.

​

To exercise your rights, contact: [PRIVACY EMAIL ADDRESS]

​

We may need to verify your identity before responding to a request.

​

14. Withdrawing consent

Where we rely upon your consent, you can withdraw that consent at any time by contacting us.

​

Withdrawing consent will not affect processing that was lawful before your consent was withdrawn.

​

There may also be circumstances in which we are permitted or required to retain certain information despite withdrawal of consent. Where applicable, we will explain this to you.

​

15. Cookies and analytics

The Website may use cookies and similar technologies for essential functionality, security and, where permitted, analytics.

​

Where consent is required for non-essential cookies, these will not be placed until you have made the appropriate choice.

​

Please see our Cookie Notice for further information.

​

16. Links to other websites

LeaseMisSelling may link to regulators, public bodies, evidence sources and other third-party websites. We are not responsible for the privacy practices of external websites. You should review their privacy information when visiting them.

​

17. Children

LeaseMisSelling is intended for businesses and individuals acting in a professional or business capacity. It is not intended for children, and we do not knowingly seek to collect personal information from children through the case registration process.

​

18. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we can investigate.

​

Email: [PRIVACY EMAIL ADDRESS]

​

You also have the right to make a complaint to the Information Commissioner's Office, the UK's independent data protection regulator.

​

19. Changes to this Privacy Policy

We may update this Privacy Policy as the investigation, Website or applicable legal requirements develop. The current version will always be available on this Website, and the date of the latest update will be shown at the top of this page.

​

20. Contact us

For questions about this Privacy Policy or the use of your personal information, contact:

 

LeaseMisSelling
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
[PRIVACY EMAIL ADDRESS]

​

LeaseMisSelling is a public-interest evidence platform. It is not a law firm and does not provide legal advice.

An investigation by Priavo Intelligence.