Contact Details

We are Otto Finance Limited (“we”, “our”, “us”) and operate under the name of Otto Finance. We’re committed to protecting and respecting your privacy. If you have any questions about your personal information, please email us at help@ottofinance.io.

We are registered with the Information Commissioner’s Office under registration number ZB134924.

What Information We Collect, Use, and Why

We collect or use the following information to provide and improve products and services for customers:

• Personal details: Names, contact details, photos, addresses, gender.

• Records of meetings and decisions.

• Transaction data: Details about payments to and from you, and products and services purchased.

• Usage data: Information about how you interact with and use our website, products, and services.

If you are using our platform as a client of one of our customers (an end-user client), we also collect or use the following information:

• Personal information: Date of birth, marital status, third-party information (e.g., family members, dependents), financial data (income, expenditures, property ownership, savings, investments, loans, mortgages).

• Employment details: Occupation, salary, and benefits.

• Audio recordings from meetings conducted on our platform.

• Uploaded files and documents.

• Messages exchanged through the platform's messaging system.

• Insurance details (health insurance, life insurance).

We collect or use the following personal information for the operation of customer and end-user client accounts:

• Account information: Registration details, security-related information, marketing preferences, technical data (browser and operating systems).

We collect or use the following personal information for information updates or marketing purposes:

• Personal details: Names, contact details, addresses, profile information, marketing preferences, website and app user journey information, IP addresses.

We collect or use the following personal information to comply with legal requirements:

• Legal obligations: Name, contact information, and any other personal information necessary to comply with legal obligations.

We collect or use the following personal information for dealing with queries, complaints, or claims:

• Personal details: Names, contact details, account information, purchase or service history, and correspondence.

Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of lawful bases in the UK GDPR, and you can find out more about these on the ICO’s website.

Your Rights

You have the following rights under data protection law:

1. Right to access: Request confirmation that we hold personal information about you and access a copy of it.

2. Right to rectification: Request correction of any inaccurate information we hold about you.

3. Right to erasure: Request deletion of your personal information under certain conditions.

4. Right to restriction: Request a restriction on the processing of your data under specific circumstances.

5. Right to portability: Request your personal information in a structured, machine-readable format or transfer to another organisation.

6. Right to object: Object to the processing of your personal data in certain situations, including for direct marketing.

7. Right not to be subject to automated decisions: You have the right not to be subject to decisions based solely on automated processing.

8. Right to withdraw consent: Where we rely on consent, you may withdraw it at any time.

9. Right to make a complaint: If you are unhappy with how we process your personal information, you can contact us or the ICO.

You can make a data protection rights request by contacting us using the details above.

Our Lawful Bases for the Collection and Use of Your Data

• Contract: We collect and use information necessary to enter into or carry out a contract with you. Your data protection rights may apply except for the right to object.

• Legitimate interests: We may use personal information for business or commercial purposes, provided this is not overridden by your rights and interests. Your data protection rights may apply except for the right to portability.

• Legal obligations: We may use personal information to comply with legal requirements.

Where We Get Personal Information From

• Directly from you.

• From your financial advisor (if you are an end-user client).

How Long We Keep Information

We will retain your personal information for as long as we provide services to you and as required by law. For instance, we must keep basic customer information for six years after ceasing to be a customer. When no longer necessary, we will securely destroy or anonymize your personal information in line with applicable laws.

Who We Share Information With

We may share your information with service providers, including:

• Hosting services, cloud services, AI models (specifically Gemini), email communication software, payment processors, and analytics services.

• Professional or legal advisors such as lawyers and accountants.

• Public authorities to comply with legal obligations.

• Potential corporate buyers in the case of a business transfer or restructuring (usually anonymized information, but not always).

Sharing Information Outside the UK

We may transfer personal information outside the UK, ensuring compliance with UK GDPR and appropriate safeguards. Please contact us for more details.

How to Complain

If you have concerns about our use of your personal data, please contact us. If you are unsatisfied with our response, you can make a complaint to the Information Commissioner’s Office (ICO).

ICO Contact Details:

• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

• Helpline number: 0303 123 1113

• Website: www.ico.org.uk/make-a-complaint