Privacy Policy

Last updated: 21 July 2026

1. Who we are

AF Credit is a trading style of Chammosair Limited, a company registered in England and Wales (Company No. 15786496). Registered office: 4 Capricorn Centre, Cranes Farm Road, Basildon, Essex, SS14 3JJ. Chammosair Limited is the data controller for personal data processed through this website and in connection with our lending activities, and is registered with the Information Commissioner's Office (ICO) under registration reference ZB729589.

You can contact us about anything in this policy at [email protected] or on 01451 514 563.

2. The data we collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, telephone number, and correspondence when you enquire by phone, email or WhatsApp.
• Loan enquiry and application data — details of the property offered as security, the loan amount and purpose, your proposed exit strategy, and information about your financial circumstances relevant to underwriting.
• Identity and verification data — documents and information required for anti-money-laundering (AML) and know-your-customer (KYC) checks, including identity documents and proof of address.
• Credit and property data — information from credit reference agencies, HM Land Registry, valuation providers (including AVM and desktop valuation services), and fraud prevention agencies.
• Website usage data — technical data such as IP address, browser type and pages visited, collected through cookies and similar technologies (see our Cookie Policy).

3. Why we process your data

We process personal data where:

• It is necessary to take steps at your request before entering a loan agreement, or to perform that agreement — assessing your enquiry, issuing indicative terms, underwriting, completing and administering a loan.
• We have a legal obligation — AML/KYC checks, fraud prevention, and record-keeping required of lenders.
• We have a legitimate interest — verifying the value and title of security property, assessing credit risk, protecting our business against fraud, improving our website and services, and communicating with introducers and intermediaries about cases they submit.
• You have given consent — for example for optional marketing communications, which you can withdraw at any time.

4. Who we share data with

We share personal data only where necessary to progress an enquiry or loan, and never sell it. Recipients may include: credit reference and fraud prevention agencies; valuation providers and RICS surveyors; our solicitors and the borrower's solicitors; HM Land Registry; our funding partners and professional advisers; and IT service providers who host our systems. Where a regulated product may be required, and with your permission, we may pass your details to an FCA-authorised intermediary.

As part of any application, credit checks and property searches will be conducted and may be recorded on your credit file.

5. How long we keep data

We keep enquiry data that does not proceed for up to 2 years. Where a loan completes, we retain the loan file for at least 6 years after redemption, in line with legal, regulatory and limitation-period requirements. AML records are retained for at least 5 years after the end of the business relationship.

6. International transfers

Our data is primarily stored and processed in the UK and the European Economic Area. Where a service provider processes data outside the UK/EEA (for example, some website analytics providers), we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses.

7. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; request erasure; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, contact [email protected]. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the opportunity to address your concerns first.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) across this website, access controls, and staff confidentiality obligations. No system is perfectly secure, and transmission of data over the internet is at your own risk.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.