Legal
Privacy Policy
This policy explains how Charter HCP Bridging collects, uses and protects personal information provided through this website and application forms.
Information we collect
We collect the information you provide in enquiry and application forms, including your name, contact details, company information and details of the proposed transaction and security. We also collect documents you choose to upload. For security, fraud prevention and audit purposes, we automatically record technical information when an application is submitted, including your IP address, browser type and user agent, browser language and the referring page, together with the date and time of submission.
Saved drafts and autosave
If you begin an application, your progress is saved to an encrypted, server-side draft so you can resume later. Your personal, financial and property details are not stored in ordinary browser storage; your device only keeps an opaque, expiring resume token. Drafts expire automatically after 30 days, and are deleted when you submit the application or choose to delete the draft. If you ask us to email you a resume link, that link is unique to you.
Document uploads
Documents you upload (for example planning, appraisal, cost, valuation and identity materials) are stored in secure object storage and are accessible only to authorised staff for the purpose of assessing your application.
How we use information
We use your information to assess enquiries and applications, to carry out due diligence, valuation and legal checks, to communicate with you about your application, and to meet our legal and regulatory obligations.
Lawful basis
We process personal data on the basis of steps taken at your request prior to entering a contract, our legitimate interests in assessing and administering finance, and compliance with legal obligations. Where we rely on legitimate interests, we balance those interests against your rights.
Who we share it with
Depending on the transaction, we may share information with an associated entity or an independent third-party funder, and with professional advisers instructed on the transaction such as valuers, monitoring surveyors and solicitors. We may also share information with identity, anti-money-laundering, sanctions, fraud-prevention and credit reference providers, and with our IT and email service providers acting on our behalf. We do not sell your personal data.
International transfers
Where any processor operates outside the UK, we take steps to ensure an appropriate level of protection through UK adequacy regulations or standard contractual clauses. Our secure storage and email processing are provided by service providers acting on our instructions.
Automated decision-making
We do not make decisions producing legal or similarly significant effects based solely on automated processing. Credit decisions involve human assessment.
Storage and security
Applications, drafts and uploaded documents are stored securely and are accessible only to authorised staff. Drafts are encrypted at rest. Data submitted through this site is never exposed in public URLs or client-side code.
Retention
We retain completed application data and related documents for up to 6 years after the end of our relationship or the last material interaction, in line with UK limitation periods and our legal, regulatory and audit obligations. Unsuccessful or withdrawn enquiries are retained for up to 12 months unless a longer period is required to handle a dispute or meet a legal obligation. Saved drafts expire after 30 days. After the applicable period the data is securely deleted.
Your rights
You may request access to, correction or deletion of your personal data, and may object to or restrict certain processing, and request data portability where applicable. To exercise your rights, contact us using the details below.
Complaints to the ICO
If you are unhappy with how we handle your personal data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would welcome the chance to address your concerns first.
Contact
The data controller is Charterhouse Bridging Limited, trading as Charter HCP Bridging. For any privacy query, contact us at loans@charterhcp.com or +44 (0)20 3603 3260.
Last updated: September 2026. Data controller: Charterhouse Bridging Limited (registered in England & Wales, company number 09463960), Belfry House, Bell Lane, Hertford, Hertfordshire, SG14 1BP, trading as Charter HCP Bridging.
Charter HCP Bridging is not authorised or regulated by the Financial Conduct Authority. We only consider business-purpose and other unregulated lending. We do not offer regulated residential mortgage contracts or consumer loans. All finance is subject to status, valuation, legal due diligence, credit approval and satisfactory documentation. Submission of an application does not constitute an offer or guarantee of finance.