Privacy Policy

Who we are

Lead Social Ltd is registered in England and Wales (company number 12056721), with its registered office at 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom. We are authorised and regulated by the Financial Conduct Authority for claims management activities (FRN: 951156). PandaPCP is a trading style of Lead Social Ltd.

What personal data we collect

• Identity and contact details — name, email address, phone number, postal address.
• Car finance details you provide — lender, agreement type and dates, vehicle details.
• Information needed to assess and progress a potential claim, including correspondence with you.
• Technical data — IP address, browser type, device information and pages visited, collected via cookies and similar technologies.

How we collect it

• Directly from you when you complete a form or contact us.
• Automatically through cookies when you use the website (see our Cookie Policy).
• From lead generators and partners, where you have consented to your details being shared.

Why we use your data and our lawful basis

• To provide our service — checking and progressing a potential car finance claim. Lawful basis: performance of a contract, or steps taken at your request before entering a contract.
• To contact you about your enquiry or claim. Lawful basis: contract and legitimate interests.
• Marketing, where you have agreed to receive it. Lawful basis: consent (which you can withdraw at any time).
• Legal and regulatory compliance, including FCA requirements. Lawful basis: legal obligation.

Who we share it with

We may share your personal data with partner solicitors and claims firms who assess or pursue your claim, with our service providers (for example IT, hosting and communications providers acting on our instructions), and with regulators or authorities where required by law. We will receive a referral fee from third parties for any successful claims we refer to them; this is paid directly to us at no cost to you. We do not sell your personal data.

International transfers

Where any personal data is transferred outside the UK, we ensure appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) are in place to protect it.

How long we keep it

We keep personal data only for as long as necessary for the purposes set out above and to meet our legal and regulatory obligations, in line with our Data Protection Policy and Record Keeping Policy. When no longer required, data is securely deleted or destroyed.

Your rights

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Request deletion of your data (the right to be forgotten).
• Object to or restrict processing, including direct marketing.
• Withdraw consent at any time where we rely on it.
• Request data portability where applicable.

How to contact us

To exercise any of your rights, or for any privacy question, contact us at [email protected] or [email protected], by phone on +44 020 3584 4004, or by post at the registered office above.

Complaints to the ICO

You have the right to complain to the Information Commissioner's Office if you are unhappy with how we handle your data — 0303 123 1113 or www.ico.org.uk. We would, however, appreciate the chance to address your concerns first.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.