Raporto Privacy Notice
Last updated: 17 October 2026
1. Who we are
Raporto Limited ("Raporto", "we", "us") is the controller of the personal information described in this notice. We are authorised and regulated by the Financial Conduct Authority (Firm Reference Number 966252) for personal credit information services and credit broking. We are a credit broker, not a lender.
- Registered in England and Wales, company number 13717313.
- Registered office: This Workspace, 18 Albert Road, Bournemouth, BH1 1BZ.
- Contact for privacy matters: help@raporto.co.uk.
Raporto and Choose Wisely, the credit broker you used when you were looking for credit, are under common ownership. They are not part of the same group of companies. You can read more about how we came to hold your information in section 3.
2. What this notice covers
This notice explains what personal information we hold about you, where we got it, why and how we use it, who we share it with, how long we keep it, and the rights you have. It applies to the service we provide when we continue to work on your credit search after you were referred to us.
3. Where your information comes from
We did not collect your information directly from a form on our website. We received it from Choose Wisely at the moment you were looking for credit and were not matched with a lender. Choose Wisely is a credit broker under common ownership with Raporto, and you had asked Choose Wisely to help you find credit and to act on your behalf. When Choose Wisely could not find you a match, your details were passed to Raporto so that we could keep trying.
We also collect limited technical information automatically when you use our pages (see section 4).
4. What we hold, why we use it, and our lawful bases
The information we hold about you can include: your name; contact details (email, phone); date of birth; address; employment and income details; details of the credit you were looking for (such as the amount and purpose); bank or account details where these were provided; and a record of your choices (including the exact wording you agreed to, the date and time, and the IP address and device information at that moment). We also collect basic technical data, such as your IP address and device or browser type, when you use our pages. Some of this is essential to provide and secure the service and to record the choices you make, and we do not need your consent for that. We also use analytics cookies to understand how our pages are used, but only if you accept them. See our Cookie Policy for the cookies we use and how to control them.
We use this information for the following purposes, on the following lawful bases under the UK GDPR:
| What we do | Why | Lawful basis |
|---|---|---|
| Continue to work on your credit search: keep looking for a suitable credit option, and pass your details to lenders, credit brokers or other credit providers to try to find a match | To provide the service you asked us to continue, and to help you avoid the harm of repeated applications | Legitimate interests (Article 6(1)(f)). Our and your interest in finding you a suitable match and reducing avoidable damage to your credit file. Some of these steps are also taken at your request. |
| Contact you about your search and what we find (service messages), by email, text message, WhatsApp, push notification or phone | To keep you informed about the service you asked for | Legitimate interests (Article 6(1)(f)) |
| Send you electronic messages that promote credit products or invite you to apply (marketing), by the same routes | To tell you about options that may help you | Consent (Article 6(1)(a)), which also satisfies the Privacy and Electronic Communications Regulations for electronic marketing. You can withdraw this at any time without affecting your search. |
| Use analytics cookies to understand how our pages are used so we can improve them | To measure and improve the service | Consent (Article 6(1)(a)), which also satisfies the Privacy and Electronic Communications Regulations for non-essential cookies. You can withdraw this at any time. |
| Keep records, prevent fraud, and meet our regulatory obligations as an FCA-authorised firm | We are legally required to | Legal obligation (Article 6(1)(c)) and legitimate interests |
The financial information we hold (such as income and bank details) is personal data but is not "special category" data under the UK GDPR, so no additional condition under Article 9 is required. We do not use your information to make decisions about you by solely automated means that produce legal or similarly significant effects. We do not decide whether you are given credit (lenders do that).
Our legitimate interests, in short: you came to us having just been declined and at risk of harming your credit file by re-applying. Our interest in continuing to work your search, and your interest in a better outcome, are aligned, and the processing is what a reasonable person in your position would expect having asked to be helped. We have weighed this against your interests and rights and consider it proportionate; you can object at any time (section 8).
5. Marketing messages
We will only send you marketing (electronic messages that promote credit products or invite you to apply) where you have agreed to receive them. We may send them by email, text message, WhatsApp, push notification or phone. We only use WhatsApp if you agreed to it when you asked us to keep looking. You can withdraw your agreement at any time, and we will stop the marketing messages while continuing to work on your credit search if you still want us to. Every marketing message will tell you how to opt out, and will identify us as the sender.
6. Who we share your information with
We may share your information with:
- Lenders, credit brokers and other credit providers, in order to try to find you a suitable credit match. We will tell you the identity of a lender where this is known to us at the relevant time. Any credit searches we or those providers carry out while looking for a suitable option for you are soft searches (sometimes called quotation searches). A soft search does not affect your credit score and is not visible to other lenders. A hard credit search, which can affect your score, only happens if you decide to apply for a specific product.
- Choose Wisely, the credit broker under common ownership with us that referred you, so that we can act consistently on your behalf (for example, recognising if you have asked us to stop).
- Our service providers who help us run the service. Our hosting and database are provided by Supabase and Vercel and are located in the United Kingdom and the European Economic Area (Republic of Ireland). Our emails are delivered by Resend, and our text and WhatsApp messages by Twilio. These act on our instructions under contract and only for the purposes we set.
- Meta (WhatsApp), only if you agreed to hear from us on WhatsApp. WhatsApp is run by Meta Platforms Ireland Limited, so Meta sees your mobile number, the messages between us, and whether they were delivered and read. Meta's own terms and privacy notice apply to your use of WhatsApp. If you would rather not hear from us that way, use the stop option in the message and we will not use WhatsApp again.
- Regulators, law enforcement and other authorities where we are required or permitted to do so by law (for example, the Financial Conduct Authority or the Financial Ombudsman Service).
- Analytics providers (Google Analytics and Hotjar), and only if you accept analytics cookies. They process limited, pseudonymous information about how our pages are used, on our behalf, to help us improve the service; see our Cookie Policy. This can involve a transfer outside the UK and EEA, made under an appropriate safeguard (see section 7).
We do not sell your personal information.
7. Where your information is stored and transfers
Your information is stored on servers located in the European Economic Area (Republic of Ireland). Some of the providers above, including Meta where you have chosen WhatsApp, may process information outside the UK and the EEA, including in the United States. Where a transfer outside the UK or EEA is necessary, we make sure an appropriate safeguard recognised under UK data protection law is in place.
8. How long we keep it
We keep your information for seven years from the date we first receive it, after which it is moved to secure archive storage rather than deleted. We hold it for this period to meet the record-keeping and investigation obligations that apply to us as an FCA-authorised firm, and to support any future redress process. If you ask us to stop (section 9), we honour that immediately; we keep a record of your request itself so that we can continue to honour it.
9. Your choices and your rights
You can stop our service at any time using the stop option in any message we send you. When you stop, we will not contact you again and will do no further work on your search. You can also turn off just our marketing messages and keep your search running.
Under UK data protection law you also have the right to:
- ask for a copy of the information we hold about you (a "subject access request");
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, or restrict how we use it, in certain circumstances;
- object to our use of your information where we rely on legitimate interests;
- withdraw your consent to marketing at any time; and
- ask us to transfer certain information to you or another provider.
To exercise any of these rights, contact us at help@raporto.co.uk. We will respond within the time limits set by law (normally one month). These rights can be subject to limits (for example, we may need to keep certain records to meet our regulatory obligations).
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would ask you to contact us first so we can try to put things right.
10. How we protect your information
We protect your information using encryption while it is stored and while it is sent over the internet, strict access controls so that only authorised people and systems can reach it, and the principle of least privilege. We keep your information out of web addresses and system logs, and access to individual records is logged.
11. Changes to this notice
We may update this notice from time to time. The "last updated" date at the top shows when it last changed. Where changes are significant, we will take reasonable steps to bring them to your attention.
12. Contact
Questions about this notice or your information: help@raporto.co.uk, or write to us at This Workspace, 18 Albert Road, Bournemouth, BH1 1BZ. Raporto Limited is authorised and regulated by the Financial Conduct Authority (FRN 966252).