Privacy notice
How we use personal data, and your rights under the GDPR.
Who we are
Welcome Fintech Solutions Limited (trading as Welcome Finance), Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, company number 824107, is the data controller for the personal data described in this notice. Contact us about privacy at support@welcomefinance.ie.
Lenders on our panel that receive your company’s application are separate controllers of the data they receive from us. They will give you their own privacy notice, which explains their credit checks and decisions.
What we collect
- Company details, accounts, bank statements and tax information
- Personal data of directors, shareholders, beneficial owners and guarantors: name, contact details, date of birth, address and ID documents
- Notes of calls, and copies of emails and messages with us. We do not record phone calls.
- Website usage data, only if you accept analytics or marketing cookies
- Your name, email and company name if you download one of our free templates or sign up for our monthly email
Where we get it
- From you, through our website forms, app.welcomefinance.ie, calls and emails
- From an accountant, adviser or other business that introduces you to us, with your agreement
- From public registers, such as the Companies Registration Office (CRO) and the Register of Beneficial Ownership
- From lenders, about the progress and outcome of applications we arrange
Why we use it and our lawful basis
- To handle your enquiry and arrange finance at your company's request (steps before entering a contract, and our legitimate interests)
- To send your company’s application to lenders on our panel whose criteria it appears to meet, as you authorise when you apply (carrying out the service your company asked for, and our legitimate interests). We do not rely on consent for this
- To keep records of our introductions, prevent fraud and defend legal claims (legal obligation and legitimate interests)
- To send the free templates you ask for and, if you ask us to follow up, to contact you about them (steps you ask us to take, and our legitimate interests)
- To send our monthly email of business finance news and key dates, only if you tick the box to receive it (consent; unsubscribe at any time)
- To send marketing about business finance, where you have consented or the law otherwise allows, with an opt-out in every message
Our legitimate interests
Where we rely on legitimate interests, these are: running and improving our broking service, matching companies with suitable lenders, keeping accurate records, preventing fraud, and keeping in touch with business clients. You can object at any time and can always stop marketing. Giving us your details is voluntary, but without them we cannot match your company with lenders.
Who we share it with
- Lenders on our panel that we send your company’s application to (our current panel is listed on our Our lenders page)
- We do not share data with the Central Credit Register. Lenders who receive your application search it and other fraud databases themselves, as their privacy notices explain.
- Our IT, hosting, CRM, email and telephony providers, under written contracts
- Analytics and advertising providers (Google, Microsoft, Meta and LinkedIn), only if you accept those cookies
- Professional advisers, and authorities where the law requires it
International transfers
We currently store client and enquiry data on servers in the United Kingdom. The European Commission has decided that the UK gives personal data an adequate level of protection; this decision was renewed in December 2025 and runs until 27 December 2031. Transfers to the UK therefore need no extra safeguards, and our providers act under written data processing agreements.
Some of our service providers and staff may access data from India. India does not have an EU adequacy decision, so we use the European Commission's Standard Contractual Clauses (2021), assess each transfer and apply extra safeguards where needed.
If you accept analytics or marketing cookies, Google, Microsoft, Meta and LinkedIn may process data in the United States. Each takes part in the EU-US Data Privacy Framework, which the European Commission recognises as giving adequate protection; where it does not apply, Standard Contractual Clauses are used. Contact us for a copy of the safeguards for any transfer.
How long we keep it
- Enquiries that do not go ahead: 12 months after our last contact
- Client files and records of introductions: 6 years after our last dealing with your company, the usual time limit for legal claims (longer only while a claim or complaint is open)
- Marketing preferences: until you opt out; we then keep a short suppression record so we do not contact you again
- Cookie choices: up to 6 months
- Questions you post on our website: your IP address and approximate location are deleted after 90 days, questions we do not publish are deleted after 90 days, and your name and email are removed 12 months after we reply (the published question and answer then show as “Visitor”)
- Copies in our website backups: kept for 30 days, so details we delete also leave our backups within 30 days
Automated decisions
We do not make decisions about you based only on automated processing. Our online eligibility check gives an indication only. Lenders make their own credit decisions and may use automated scoring, which their privacy notices explain.
Your rights
- Access, correct or delete your data
- Restrict or object to processing, including direct marketing at any time
- Data portability
- Withdraw consent at any time, without affecting earlier processing
- Complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, www.dataprotection.ie
How to use your rights
Email support@welcomefinance.ie. You can also tell us at any time to stop sending your application to further lenders, or not to approach a particular lender. We reply within one month, and may ask you to confirm your identity first. Using your rights is free. We keep a short record of each request and what we did, showing your email address only in part.
Privacy notice: FAQs
Who controls my personal data?
Welcome Fintech Solutions Limited, trading as Welcome Finance, company number 824107, Venture Hub, 136 Capel Street, Dublin 1, is the data controller for the data in this notice. Lenders that receive your company’s application become separate controllers of the data they receive, and give you their own privacy notices.
Is my data shared with anyone?
Only as this notice explains: with lenders on our panel that we send your company’s application to, who search the Central Credit Register and other fraud databases themselves, as their privacy notices explain (we do not share data with the Central Credit Register); with our IT, hosting, CRM, email and phone providers under written contracts; with analytics and advertising providers only if you accept those cookies; and with authorities where the law requires it.
Where is my data stored?
On servers in the United Kingdom, which the European Commission recognises as giving an adequate level of protection; that decision runs until 27 December 2031. Some providers and staff may access data from India, which has no adequacy decision, so we use the Commission’s Standard Contractual Clauses and extra safeguards where needed.
How long do you keep my data?
Enquiries that do not go ahead: 12 months after our last contact. Client files: 6 years after our last dealing with your company, longer only if a claim or complaint is open. We do not record phone calls. If you opt out of marketing, we keep a suppression record so we do not contact you again. Cookie choices: up to 6 months.
How do I get a copy of the data you hold about me?
Email support@welcomefinance.ie with a subject access request. It is free. We reply within one month, and may ask you to confirm your identity first. Under the GDPR, that can be extended by up to two further months for complex or repeated requests, and we would tell you why within the first month.
Can I stop marketing?
Yes, at any time. Use the opt-out in any email or message, or contact us at support@welcomefinance.ie. Objecting to direct marketing is an absolute right under the GDPR. We then keep a short suppression record, so we do not contact you again.
How do I complain about how my data is used?
Contact us first at support@welcomefinance.ie and we will try to put things right. You can also complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, or through www.dataprotection.ie. You do not have to contact us before going to the Commission.
How we work