Privacy policy
1. Introduction
Gulf Bridging Group Ltd (“Gulf Bridging”, “GBG”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, make an enquiry, submit a finance application, use our broker portal, or otherwise interact with us. It also explains your rights under applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
2. Who we are
Gulf Bridging Group Ltd provides property finance and related lending services. For the purposes of applicable UK data protection legislation, Gulf Bridging Group Ltd will generally act as a data controller in respect of personal information collected and processed for its own purposes.
Registered Office: 6–9 The Square, Heathrow, Hayes, Uxbridge, UB11 1FWCompany Number: 17361372
ICO Registration Number: ZC261003
3. Information we may collect
Depending on your relationship with us and the services requested, we may collect and process information including your name, date of birth and contact details; residential and correspondence addresses; identification and verification information; employment, income and financial information; property, asset and liability details; bank and transaction information where relevant; company, director, shareholder and beneficial ownership information; information supplied by brokers and professional advisers; AML, fraud prevention and identity verification information; credit information where permitted; finance application and supporting-document information; correspondence and communications; and technical website or portal information such as IP address, browser information and cookies. Where necessary and lawful, we may also process certain special-category or other sensitive information.
4. How we obtain your information
We may obtain personal information directly from you; through our website or broker portal; from a broker, introducer or professional adviser acting on your behalf; from directors, shareholders, guarantors or other connected parties; from credit reference agencies; fraud prevention and identity verification providers; Companies House, HM Land Registry and other public registers; solicitors, valuers, accountants and other professional advisers; lenders, funders and financial institutions; publicly available sources; and other third parties where we are legally entitled to obtain the information.
5. How we use your information
We may process personal information to assess finance enquiries and applications; make lending and credit decisions; verify identity and conduct AML and fraud prevention checks; carry out creditworthiness and affordability assessments where applicable; obtain relevant searches where legally permitted; conduct property and security due diligence; prepare finance documentation; complete and administer loans; manage payments, redemptions, arrears and recoveries; communicate with borrowers, brokers, guarantors and advisers; comply with legal and regulatory obligations; prevent financial crime; establish, exercise or defend legal claims; maintain and improve our website, portal and services; manage internal records; and send marketing communications where legally permitted.
6. Our lawful bases for processing
Depending on the circumstances, we may process personal information because it is necessary to take steps at your request before entering into a contract; necessary to perform a contract; required to comply with a legal obligation; necessary for our legitimate interests or those of a third party where those interests are not overridden by your rights; based on consent where consent is required; or supported by another lawful basis under applicable data protection legislation.
7. Credit reference and fraud prevention checks
Where appropriate and legally permitted, Gulf Bridging may obtain information from credit reference agencies, identity verification services and fraud prevention agencies when considering or administering an application. Searches may involve applicants, directors, shareholders, beneficial owners and guarantors. The type of search and any effect on an individual’s credit file will depend on the search performed and the circumstances of the application. Appropriate notices and consents will be provided or obtained where required.
8. Sharing your information
Where necessary and lawful, information may be shared with our employees and authorised representatives; lenders, institutional funders and funding partners; brokers and introducers; solicitors and legal advisers; valuers and surveyors; accountants and tax advisers; credit reference agencies; identity verification, AML and fraud prevention providers; technology, CRM, hosting and software providers; payment and banking providers; insurers; receivers, enforcement agents and debt recovery professionals where applicable; HM Land Registry, Companies House and relevant government bodies; regulators, law enforcement agencies and courts where required; and prospective or actual purchasers, investors or funders in connection with the funding, assignment, transfer or sale of a loan or loan portfolio.
9. Loan funding and transfers
Gulf Bridging may fund loans using its own resources or through third-party funding arrangements. Where applicable, a loan or an interest in a loan may be funded, participated, assigned, transferred or sold to another lender, institutional funder, investor or financing vehicle. Personal information connected with the loan may therefore be disclosed to prospective or actual funding partners and their professional advisers where necessary and legally permitted.
10. Automated decision-making
We may use technology and third-party systems to assist with identity verification, credit assessment, fraud prevention and underwriting. Where a decision producing legal or similarly significant effects is made solely through automated processing, we will comply with applicable data protection requirements and provide relevant information and rights where required.
11. Data security
We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction. Access to personal information is restricted to persons who require it for legitimate business purposes.
12. International transfers
Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection legislation and that appropriate safeguards are used where required.
13. How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, regulatory, accounting, fraud prevention and reporting requirements and dealing with potential legal claims. Different categories of information may therefore be retained for different periods.
14. Your data protection rights
Depending on the circumstances, you may have rights to request access to your personal information; request correction of inaccurate information; request deletion; request restriction of processing; object to certain processing; request transfer of certain information; withdraw consent where processing is based on consent; and raise concerns about automated decision-making where applicable. These rights are subject to legal requirements and exemptions.
15. Marketing
We may contact business customers, brokers, introducers and other persons regarding our products and services where permitted by law. You may ask us to stop sending marketing communications at any time by using an unsubscribe facility contained within the communication or by contacting us directly.
16. Cookies
Our website may use cookies and similar technologies to operate the website, understand how it is used and improve the user experience. Further information should be provided in our separate Cookie Policy.
17. Third-party websites
Our website may contain links to third-party websites. Gulf Bridging is not responsible for the privacy practices of third-party websites, and you should review their privacy policies before providing personal information.
18. Complaints
If you have concerns about how we process your personal information, please contact Gulf Bridging so that we can investigate the matter. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, technology, legal obligations or the way we process personal information. The latest version will be published on our website.
Gulf Bridging Group LtdTrading as Gulf Bridging
Company No. 17361372
ICO Registration No. ZC261003
Registered Office: 6–9 The Square, Heathrow, Hayes, Uxbridge, UB11 1FW
Email: info@gulfbridging.com
Website publication version · 30 September 2026