Privacy Policy

Who we are
Roscap Limited (company number 13536901) (“Roscap”, “we”, “us” or “our”).

Scope
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit www.roscap.co.uk, contact us, or engage with our services.

Our business
Roscap intermediates and advises on unregulated real estate financing transactions, globally and predominantly in the United Kingdom, including bridging finance, development finance, renovation finance, buy-to-let mortgages, and commercial mortgages.

Key principles

We only collect personal data that we need for defined purposes.
We use personal data lawfully, fairly, and transparently in line with the UK GDPR and the Data Protection Act 2018.
We apply appropriate security measures and limit access to authorised personnel and service providers.
We retain personal data only for as long as necessary for the purposes set out below and to meet legal, accounting, or compliance obligations.

Personal data we collect
Depending on how you interact with us, we may collect:

Identity and contact data – name, company name, job title, email address, telephone number, postal address.
Business and transaction data – information you provide about assets, projects, funding requirements, counterparties, and related documentation.
Due diligence data – where required for compliance: identification documents, proof of address, beneficial ownership information, source of funds/wealth information, and screening results (e.g. sanctions/PEP checks).
Technical and usage data – IP address, device and browser information, pages visited, and interactions with the website (subject to your cookie preferences).
Marketing preferences – whether you opt in or opt out of communications.

How we collect data

Directly from you (forms on our website, email, telephone, messaging platforms, meetings, or introductions).
From counterparties and professional advisers involved in a transaction (e.g. lenders, brokers, valuers, solicitors).
From public sources and databases for due diligence (e.g. Companies House) and screening providers.

Purposes and lawful bases
We process personal data for the purposes below, using one or more lawful bases under UK GDPR:

To respond to enquiries and provide our services (steps prior to entering a contract / performance of a contract).
To manage relationships with clients, lenders, and investors (legitimate interests).
To perform compliance checks, including AML/KYC and sanctions screening where applicable (legal obligation and/or legitimate interests).
To operate, secure, and improve our website (legitimate interests; and consent where cookies are not strictly necessary).
To send marketing communications (consent where required; otherwise legitimate interests where lawful).
To meet legal, regulatory, and record-keeping obligations (legal obligation).
To establish, exercise, or defend legal claims (legitimate interests / legal claims).

Sharing and disclosures
We may share personal data with:

Service providers acting on our instructions (e.g. website hosting, IT support, CRM, analytics, secure data rooms, e-signature, and screening providers).
Counterparties and professional advisers involved in a transaction (e.g. lenders, investors, brokers, solicitors, valuers), where necessary to progress a mandate and subject to appropriate safeguards.
Authorities and regulators where required by law (e.g. to comply with court orders or lawful requests).

International transfers
Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms.

Data retention
We retain personal data for as long as necessary for the purposes described in this Privacy Policy. Transaction and due diligence records may be retained for longer periods where required by legal, accounting, or compliance obligations, or to manage disputes. We periodically review and securely delete or anonymise data that is no longer required.

Your rights
Subject to applicable law, you may have the right to:

Request access to your personal data.
Request rectification of inaccurate or incomplete data.
Request erasure of your personal data (in certain circumstances).
Object to processing based on legitimate interests.
Request restriction of processing in certain circumstances.
Request portability of data you have provided to us (where applicable).
Withdraw consent at any time (where consent is the lawful basis).

How to exercise your rights and complaints
To exercise your rights, contact us at info@roscap.co.uk. We may need to verify your identity. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.

Security
We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. No method of transmission over the internet is completely secure; however, we work to protect your information in accordance with industry-appropriate standards.

Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on our website with a revised effective date.

‍