Privacy Policy

Promas Enterprises Limited trades as "Lease4Less". Our Company Registration Number is 05358394. The registered office of the company is: -

1 City Approach, Floor 9, Suite 1, Albert Street, Eccles, Manchester M30 0BL.

This privacy policy sets out how "Lease4Less" will use and protect any information that is given to us.

Privacy Policy

Lease4Less is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using our services, then you can be assured that it will only be used in accordance with this privacy statement.

Data Controller

Lease4Less is a data controller in respect of the personal information we collect and process in connection with our business and the services we provide.

As a data controller, we are responsible for determining why and how your personal information is processed and for ensuring that it is processed fairly, lawfully, securely and transparently and in accordance with applicable data protection legislation.

In certain circumstances, we may also process personal information on behalf of another organisation where we are acting as a data processor. Where this applies, the respective responsibilities of the organisations will be determined by the nature of the services being provided and the relevant contractual arrangements.

Where we use third-party service providers to process personal information on our behalf, we will take appropriate steps to ensure that they process your information only for authorised purposes and provide appropriate safeguards for your personal information.

For the purposes of this Privacy Policy, Promas Enterprises Limited trading as Lease4Less is responsible for the processing of your personal information unless otherwise stated.

This Privacy Policy has been produced in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended or replaced from time to time.

We are committed to processing personal information fairly, lawfully and transparently and to respecting the rights of individuals in relation to their personal information.

Legitimate Interests

As Lease4Less is a credit intermediary and broker, and supplier of certain vehicle-related products and services, we collect and process personal information to provide and administer our services. Depending on the purpose for which information is processed, we may rely on different lawful bases under applicable data protection legislation, including legitimate interests, contractual necessity, legal obligations and consent where consent is required.

We may process your personal information where this is necessary for the purposes of our legitimate interests, or those of a third party, provided that these interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

operating and managing our business effectively and securely;
providing and administering our services as a broker;
communicating with you in relation to your enquiry, application, agreement or services;
maintaining appropriate records of our interactions and transactions with you;
monitoring and improving the quality of our services;
monitoring and recording communications for quality assurance, staff training and development, compliance monitoring, fraud prevention, complaint handling and regulatory purposes;
identifying, preventing and investigating fraud, financial crime and other unlawful activity;
managing and protecting our business, systems and customers;
managing complaints, disputes and customer concerns;
conducting appropriate checks and assessments to protect our business and our customers; and
complying with applicable legal and regulatory requirements where a specific legal obligation does not otherwise provide the lawful basis for processing.

Disclosure and Sharing of Personal Data

We may share your personal information with third parties where this is necessary to provide our services, administer your application or agreement, comply with our legal and regulatory obligations, protect our legitimate interests or where you have otherwise provided your consent where consent is required.

Depending on the circumstances, the organisations we may share information with include:

finance companies, lenders and funders with whom we work to arrange finance;
credit reference agencies where appropriate;
fraud prevention agencies and associations;
insurers and providers of related vehicle products and services;
dealerships and other business partners where necessary to provide or administer the services requested;
service providers and contractors who support the operation of our business, including IT, software, hosting, communications, compliance and administrative service providers;
professional advisers, including legal, accounting and compliance advisers;
regulators and supervisory authorities, including the Financial Conduct Authority and the Financial Ombudsman Service where appropriate;
law enforcement agencies, government bodies and other authorities where we are legally required or permitted to provide information; and
other third parties where this is necessary to provide the services you have requested or where we have a lawful basis for doing so.

We will only share personal information where we consider that there is an appropriate lawful basis for doing so and, where appropriate, we will ensure that the information shared is relevant and limited to what is necessary for the relevant purpose.

We will not sell your personal information to third parties.

Where we use third-party service providers to process personal information on our behalf, we will take appropriate steps to ensure that suitable contractual, technical and organisational safeguards are in place.

Where personal information is transferred outside the UK, we will ensure that appropriate safeguards and legal requirements are met in accordance with applicable data protection legislation.

What We Collect

We collect information about you when you engage with us directly or through third parties. Some of this information doesn’t identify you personally but provides us with information on how you use our services and engage with us.

We may request and collect personal information about you such as:

Name, Address, Date of Birth
Previous addresses if applicable
Contact Information including an email address
Financial Information and payment details (bank account details including sort codes and account numbers)
Monthly Income and Expenditure
Employment Information
Lifestyle and home ownership information
If relevant, personal data of individuals (with their express authority) who may be party to your application
Information relevant to customer surveys and/or offers Information that you freely give, that you feel is applicable to your circumstances
Information about your personal circumstances, including information relevant to identifying and supporting customers who may require additional support
Recordings of telephone conversation
Preferences and Interests

Our "legitimate interests" as referred to in this document include our legitimate business purposes and commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements.

Special Category and Support Data

In some circumstances, we may collect and process information which identifies or relates to a customer's individual circumstances, including information that may indicate that a customer may require additional support.

This may include information relating to a customer's health, disability, mental health, financial circumstances or other personal circumstances where this information is relevant to providing our services, understanding a customer's needs, providing appropriate support or meeting our legal and regulatory obligations.

Where information constitutes special category personal data under applicable data protection legislation, we will only process that information where we have both a lawful basis for processing personal data and an applicable additional condition for processing special category data.

We will only collect and use such information where it is necessary and proportionate for the relevant purpose. This may include:

identifying and responding appropriately to customers who may require additional support;
making reasonable adjustments or adapting our communications or services where appropriate;
supporting the fair treatment of customers;
managing complaints or disputes;
meeting our legal and regulatory obligations;
monitoring and improving our treatment of customers; and
maintaining appropriate records where necessary.

We will treat information relating to support provisions and special category data with appropriate care and confidentiality and will only share it where there is an appropriate lawful basis to do so and where the sharing is necessary for the relevant purpose.

Where we do not need to retain information about a customer's personal circumstances, we will not retain it for longer than necessary in accordance with our data retention requirements.

What We Do With the Information We Gather

We only process information that we find necessary for the purpose it is collected. We require information to understand your needs and provide you with a better service, and in particular:

To assist us in processing your enquiries and obtaining the services which you require
To help us identify you and any accounts that you hold with us
To undertake credit reference checks, administration, research and analysis and preferences
Broker your finance agreement and any related services
For internal record keeping and monitoring
Billing and order fulfilment
Administering debt recoveries where money is owed under contract or otherwise necessary
Customising our website and its content to your particular preferences
To notify you of any changes to our website or to our services which may affect you
Security vetting and improving our Services
We may use the information to improve our products and services.
To provide direct marketing communications where we have an appropriate lawful basis and have complied with applicable legal and regulatory requirements.
To conduct market research and obtain feedback about our services, where we have an appropriate lawful basis to do so and in accordance with applicable legal and regulatory requirements
Used with third party service providers as necessary which supports the operation of our business, such as dealerships and funders
To assist fraud prevention agencies and associations where necessary or when detected as this is required for compliance within our legal obligations and legitimate interests.
To assist with regulators and law enforcement agencies including the police, the British Vehicle Rental and Leasing Association (BVRLA), Financial Conduct Authority (FCA), the Financial Ombudsman Service (FOS) and any other relevant authority

We will never make automated decisions when processing data nor will we use profiling techniques

Security and Storage

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard the information we collect.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

In order to protect the personal data collected from you by Lease4Less against accidental or deliberate manipulation, loss, destruction or the access of unauthorised persons, technical and organisational security measures are constantly improved as part of our technical development.

Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use procedures and security features to try to prevent unauthorised access.

Wherever possible, we have tried to create a secure and reliable website for our users. However, you recognise that your use of the Internet and our website is entirely at your own risk and we have no responsibility or liability for the security of personal information transmitted via the Internet.

Data is only retained where necessary and will not be kept longer than is strictly required. As part of our responsibilities with the Regulator, we must retain archive records for six years, unless there is further legal or regulatory requirement to do so. Other third parties may differ.

In the normal course of business Lease4Less will not process and transfer data outside of the European Economic Area (EEA) and these are stored on secured servers.

Links to Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to that website.

Marketing

We may use your personal information to provide you with information about products, services, promotions and offers that may be relevant to you.

We will only send direct marketing communications where we have an appropriate lawful basis to do so and where we have complied with the applicable requirements governing the relevant method of communication, including the Privacy and Electronic Communications Regulations (PECR).

Where you have provided consent to receive marketing communications, you may withdraw your consent at any time. You can also ask us to stop sending marketing communications by contacting us using the details provided in this Privacy Policy.

You may receive marketing communications by post, telephone, email or text message, subject to the applicable legal and regulatory requirements for each method of communication.

Where appropriate, we will provide you with choices about the types of marketing communications you wish to receive and will respect your marketing preferences.

You can opt out of receiving direct marketing communications at any time. If you no longer wish to receive marketing communications from us, you can contact us using the details provided in this Privacy Policy or use the unsubscribe or opt-out facility provided within the relevant communication.

Please note that opting out of marketing communications will not prevent us from contacting you where we need to do so for legitimate business, contractual, legal or regulatory purposes, including in relation to an existing service, agreement, enquiry, complaint or other matter involving you.

We will not sell your personal information to third parties for their own direct marketing purposes.

You can contact us here:

[email protected] or you can write to us at: -

1 City Approach, Floor 9, Suite 1, Albert Street, Eccles, Manchester M30 0BL.

Look After My Car

As part of the services and products available to our customers, we may work with third-party providers who offer additional vehicle-related products and services.

We currently work with Look After My Car, a trading name of Premia Solutions Limited, which provides membership and insurance-related products and services.

Where appropriate and in connection with the services provided to you, we may share relevant information with Premia Solutions Limited, such as your contact details and vehicle information, so that they can administer the relevant service, set up your membership or provide information about the products and services available to you.

We may also provide you with information about these products and services where we consider this to be relevant to your relationship with us and where we have an appropriate lawful basis to do so.

Premia Solutions Limited may process your personal information in accordance with its own privacy policy and may act as an independent data controller in respect of the personal information it receives. You should refer to the Premia Solutions Limited privacy policy for further information about how it processes your personal information.

You may contact us if you have any questions about the information we share with third-party product or service providers.

Monitoring

Call Recording and Monitoring
We may monitor and record telephone calls and other communications with you. Recordings may be used for quality assurance, staff training and development, compliance monitoring, fraud prevention and detection, complaint handling, dispute resolution, regulatory requirements and to maintain an accurate record of communications with you.

Where calls are recorded, we will inform you at the time of the call where reasonably practicable. Recordings will be retained only for as long as necessary for the purposes for which they were collected and in accordance with our data retention requirements.

Information about Other Individuals

If you give us information about others, you confirm that the other third party person has appointed you to act on their behalf.

This is also relevant where others are concerned if you indeed ask another person to act on your behalf as a third party.

Under the third party authorisation, the other person can:

Give consent on their behalf to the processing of his or her personal data for the purposes and reasons set out in this Policy
Receive on their behalf any data protection notices.

Such authorisation will remain in place until this has been revoked, either by verbal or written communication.

Your Rights

Under certain circumstances, by law you have:

The right to request access to your personal data which we process. This formal request is made under the DPA/ GDPR and is referred to as a Subject Access Request.

If you wish to exercise this right and make a SAR, you should put your request in writing; either by e-mail or letter shown at the bottom of this section.

This should include:

Proof of your identity and address (e.g. a copy of your driving licence or passport, and a recent utility or credit card bill within the last 3 months)
Specify the personal data you want access to, including any account or reference numbers where applicable.

The right to correct your personal data should you require us to correct any inaccuracies in your data. Please specify the information that is incorrect and what it should be replaced with during your working relationship with us. We will require sufficient information to identify you (e.g. account/order number, username, registration details)

The right to request erasure of your personal data where you find no good reason for us to continue to hold it. This is not absolute and only applies in certain circumstances, for example, if we have a legal obligation, which as a regulated firm, we do.

The right to object to processing your personal data where we are relying on a legitimate interest or those of a third party. You also have the right to object to processing your data for direct marketing purposes. If your objection is not to direct marketing in general, but to direct marketing by a particular method (e.g. email or telephone) please specify the method that you are objecting to. We will require sufficient information to identify you (e.g. account/order number, username, registration details). See ‘Marketing’ for further information.

The right to restrict processing of your personal data, for example, you want us to suspend the processing of personal information as you want to establish its accuracy or reason for processing it

The right to have the data we hold about you transferred to another organisation, in certain circumstances.

The right to complain – If you wish to make a complaint on how your personal data has been handled, or how your complaint has been handled, in the first instance please email us at: [email protected].

Please see our Complaints page for further information on this - Lease4Less Complaints Handling Procedure

For any complaints regarding your data, you also have the right to lodge a complaint directly with the UK supervisory authority which is the Information Commissioner’s Office and can be contacted via the details at www.ico.org.uk.

If you wish to exercise any these rights you should put your request in writing to us at:

Lease4Less 1 City Approach, Floor 9, Suite 1, Albert Street, Eccles, Manchester M30 0BL or

Email us at: [email protected]

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting and reporting requirements. Different categories of information may therefore be retained for different periods.

Where specific legal or regulatory requirements apply to the retention of records, including records relating to regulated credit agreements, customer files and communications, we will retain those records for the period required by the applicable legislation or regulatory requirements.

Our Contact Details

We welcome your feedback, queries and questions. If you wish to contact us, please send an email to:

[email protected] or you can write to us at: -

1 City Approach, Floor 9, Suite 1, Albert Street, Eccles, Manchester M30 0BL.

Alternatively you can call us on 0161 507 8100.

We reserve the right to update this privacy policy at any time and without prior notice to you to reflect changes in our practices or relevant laws. We may periodically change this Policy and you should therefore check that the most recent version is referred to when dealing with us, the most recent update can be seen below.

02/09/2026