Privacy notice
This is a working notice for the product, not a claim that the platform has had a legal review. LenderRoute is aimed at UK brokers and will hold commercially sensitive client facts.
What is stored
Firm and user accounts, case facts the broker types, sourcing results, notes, and optional document names. Do not upload identity documents unless you need to. The fact-find does not require them. The interest form on this site stores the name, work email, firm and note you type.
Why
To provide the sourcing desk the firm has asked for, and to reply when the desk opens. The broker decides the lawful basis for their clients’ data. LenderRoute is the processor for a brokerage’s cases and the controller for its own user accounts and billing records. Lender analytics are aggregated and a band is hidden below five cases. Whether that is enough under UK GDPR is a point to check. It is not decided on this page.
Isolation
Cases are separated by brokerage. One firm cannot read another firm’s cases. Lender criteria are shared reference data.
Retention and deletion
A firm owner can ask for access or deletion by emailing the platform owner. Requests are queued. They are not yet fulfilled by an automated erasure job.
Security
Passwords are hashed on the desk. Session tokens are hashed. This marketing site stores interest-form rows outside the public folder. Transport encryption is required on lenderroute.co.uk.