PRIVACY POLICY

Last Updated 14 August 2026

BACKGROUND

The Yes Catalogue Ltd understands that your privacy is important to you and that you care about how your personal data is used.

We respect and value the privacy of everyone who visits www.yescatalogue.co.uk (“Our Site”) and will only collect, use and share personal data as described in this Privacy Policy and in accordance with our obligations under applicable data protection and electronic marketing laws.

The Yes Catalogue Ltd operates a number of consumer-facing brands across consumer credit and consumer claims services. These currently include:

YesCatalogue.co.uk
MoneyAmbulance.com
TenantClaims.co.uk
TenantAid.co.uk
InjuryClaimToday.co.uk

In this Privacy Policy, these may collectively be referred to as “Our Group Brands”.

Please read this Privacy Policy carefully and ensure that you understand it. You will be required to read and accept this Privacy Policy when signing up for an Account.

Where you separately choose to opt in to marketing communications, we may also use your contact details to send you marketing communications concerning YesCatalogue.co.uk and Our Group Brands, as explained in section 6 below.

Your consent to receive marketing communications is separate from your acceptance of this Privacy Policy and from your registration for an Account. You can register for and use your Account without consenting to optional direct marketing, subject to any communications that we are required to send to administer your account or provide services to you.

1. Definitions and Interpretation

In this Privacy Policy, unless the context otherwise requires, the following expressions have the following meanings:

“Account” means an account required to access and/or use certain areas and features of Our Site.

“Cookie” means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 13.

“Cookie Law” means the applicable provisions of the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended or replaced from time to time.

“Our Group Brands” means the brands operated by or on behalf of The Yes Catalogue Ltd, currently including YesCatalogue.co.uk, MoneyAmbulance.com, TenantClaims.co.uk, TenantAid.co.uk and InjuryClaimToday.co.uk.

“Personal Data” means any information relating to an identified or identifiable living individual and shall have the meaning given to it under applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

“We”, “Us” or “Our” means The Yes Catalogue Ltd, a company registered in England and Wales under company number 10366168, whose registered address is Retford Enterprise, Randall Way, Retford, DN22 7GR.

2. Information About Us

2.1

Our Site is owned and operated by The Yes Catalogue Ltd, a company registered in England and Wales under company number 10366168, whose registered address is Retford Enterprise, Randall Way, Retford, DN22 7GR.

2.2

Our Data Protection Officer can be contacted by email at dpo@yescatalogue.co.uk, or by post at the address above.

2.3

We are registered with the Information Commissioner's Office. Our ICO registration number is ZA561187.

3. What Does This Policy Cover?

3.1

This Privacy Policy applies to personal data collected through Our Site and to personal data processed in connection with your YesCatalogue.co.uk Account.

It also explains how, where you have separately consented, We may use your contact details to send you marketing communications relating to YesCatalogue.co.uk and Our Group Brands.

3.2

Our Site may contain links to other websites, including websites operated under Our Group Brands. Those websites may have their own privacy policies relating to the particular products or services offered through them.

You should therefore review the privacy policy applicable to any other website you visit.

4. Your Rights

4.1 As a data subject, you have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:

• 4.1.1 The right to be informed about Our collection and use of personal data;

• 4.1.2 The right of access to the personal data We hold about you (see section 12);

• 4.1.3 The right to rectification if any personal data We hold about you is inaccurate or incomplete (please contact Us using the details in section 14);

• 4.1.4 The right to be forgotten – i.e. the right to ask Us to delete any personal data We hold about you (We only hold your personal data for a limited time, as explained in section 6 but if you would like Us to delete it sooner, please contact Us using the details in section 14);

• 4.1.5 The right to restrict (i.e. prevent) the processing of your personal data;

• 4.1.6 The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);

• 4.1.7 The right to object to Us using your personal data for particular purposes; and

• 4.1.8 Rights with respect to automated decision making and profiling (Automated decision-making systems are a key part of our business operations. We use this data to make regulated and unregulated credit agreement decisions)

4.2 If you have any cause for complaint about Our use of your personal data, please contact Us using the details provided in section 14 and We will do Our best to solve the problem for you. If We are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

Information Commissioner's Office
Wycliffe House,
Water Lane,
Wilmslow,
SK9 5AF
Telephone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.

4.3 For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

5. What Data Do We Collect?

Personal Data will primarily be collected directly from you.

Where lawful, some Personal Data may also be collected from third parties, including credit reference agencies, identity verification services, marketing organisations or publicly available sources.

We will only use third-party information where We have a lawful basis for doing so.

Depending upon your use of Our Site and services, We may collect information including your title; name; date of birth; email address; telephone number; income; number of dependants; monthly rent or mortgage costs; sources of income; delivery and billing addresses; bank account information required for Direct Debit arrangements; payment card information; business or company information where applicable; job title; IP address; browser and device information; operating system; referring website information; and information about your activity on Our Site.

We may also record information relating to your communication and marketing preferences, including:

the date and time you gave or withdrew consent;

the method by which consent was obtained;

whether you consented to email marketing, SMS marketing, or both;

the wording of the consent statement presented to you at the time;

the brands and categories of marketing covered by that consent; and

records of unsubscribe or opt-out requests.

We retain these records so that We can respect your preferences and demonstrate how and when marketing permission was obtained.

6. How Do We Use Your Data?

6.1 General purposes

Personal Data about Our customers is an important part of Our business. We will only process Personal Data where We have an appropriate lawful basis and will not retain it for longer than necessary.

We may use your Personal Data to identify you when you contact Us; establish and administer your Account; process orders; provide credit products and services; assess affordability and creditworthiness; prevent fraud and financial crime; process payments; deliver products; respond to enquiries; operate and improve Our Site; comply with legal and regulatory obligations; and otherwise provide the products and services you request from Us.

We may also use information to help identify products or services which may be relevant to you, subject to applicable direct marketing rules and your marketing preferences.

6.2 Marketing from YesCatalogue.co.uk and Our Group Brands

Where you have separately and expressly opted in, We may use your name, email address and/or mobile telephone number to send you direct marketing communications.

Your marketing consent may cover communications concerning YesCatalogue.co.uk and the following Group Brands: MoneyAmbulance.com, TenantClaims.co.uk, TenantAid.co.uk and InjuryClaimToday.co.uk.

This means that, depending on the marketing channels you have specifically agreed to, you may receive emails and/or SMS messages containing information, news, promotions, offers, reminders or information about products and services available through those brands.

The types of services currently offered under Our Group Brands include:

YesCatalogue.co.uk — catalogue shopping, retail and consumer credit-related products and services.

MoneyAmbulance.com — consumer claims services, including financial services and financial mis-selling-related claims.

TenantClaims.co.uk — housing disrepair-related claims services.

TenantAid.co.uk — housing disrepair-related claims services.

InjuryClaimToday.co.uk — personal injury-related claims services.

Marketing permission will only apply to the brands and communication methods identified to you when you provide your consent.

6.3 How We obtain marketing consent

Where We rely on consent for email or SMS direct marketing, We will ask you to take a clear affirmative action to indicate your agreement.

Marketing consent will not be obtained through a pre-ticked box, inactivity, silence, or merely because you have created an Account or accepted this Privacy Policy.

Where marketing consent is requested during registration, it will be presented separately from the terms required to create and administer your Account.

We will maintain appropriate records showing when and how your marketing consent was obtained.

6.4 Email and SMS communications

If you have consented to email marketing, We may send marketing to the email address you provided.

If you have consented to SMS marketing, We may send marketing to the mobile telephone number you provided.

Your preference for one marketing channel does not automatically mean that you have consented to another marketing channel.

6.5 Withdrawing your marketing consent

You may withdraw your marketing consent at any time.

You can unsubscribe from marketing emails by using the unsubscribe link included in marketing emails.

You can opt out of SMS marketing using the opt-out method identified in the relevant SMS message, where available, or by contacting Us.

You can also contact Us at dpo@yescatalogue.co.uk to update your marketing preferences.

When you unsubscribe or opt out, We may retain sufficient information to record and respect your suppression preference and ensure that further marketing is not sent to you through the channel from which you have opted out.

Withdrawing marketing consent will not prevent Us from sending service messages that are necessary to operate your Account, fulfil an order, manage a credit agreement, communicate about an existing relationship, respond to an enquiry or comply with legal or regulatory obligations.

6.6 Marketing service providers

We may use third-party technology suppliers and marketing platforms to deliver and manage marketing communications on Our behalf.

This may include email and communications platforms such as Mailchimp.

Such providers act on Our instructions and may process contact information, marketing preferences, campaign activity and related technical data for the purposes of delivering communications, managing subscriptions and unsubscribes, measuring campaign performance and maintaining marketing records.

Where a provider processes Personal Data outside the United Kingdom, We will take appropriate steps in accordance with applicable data protection law concerning international transfers.

6.7 Other uses of Personal Data

We may also use Personal Data for providing and managing your Account; managing access to Our Site or customer portal; personalising your experience; providing products and services; responding to communications; carrying out market research; analysing use of Our Site; gathering customer feedback; preventing fraud; and improving Our products, services and customer experience.

6.8 Retention

We will not retain Personal Data for longer than is necessary for the purposes for which it was collected, taking into account contractual, regulatory, legal and operational requirements.

Certain account, transaction and regulatory records may need to be retained for up to six years or for such other period as applicable law or regulation requires.

Marketing consent and suppression records may be retained for as long as reasonably necessary to demonstrate consent and ensure that an opt-out continues to be respected.

7. How and Where Do We Store Your Data?

7.1

We only keep Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable legal or regulatory obligations.

7.2

Some of the organisations that provide services to Us, including technology, cloud-hosting, communications and marketing providers, may process information outside the United Kingdom.

Where Personal Data is transferred internationally, We will use appropriate safeguards as required by applicable UK data protection legislation.

7.3

Data security is very important to Us. We use appropriate technical and organisational measures intended to safeguard Personal Data against unauthorised access, loss, alteration or disclosure.

8. Do We Share Your Data?

8.1

We do not sell your Personal Data.

We may disclose Personal Data where necessary to operate Our business, provide services to you, comply with legal and regulatory obligations or carry out marketing for which you have provided the necessary permission.

8.2

We may engage third parties to provide services on Our behalf, including payment processing, fulfilment and delivery, IT and hosting, credit reference services, fraud prevention, identity verification, customer communications, analytics, advertising and marketing technology.

Such organisations will only receive Personal Data that is reasonably necessary for the relevant purpose and will be required to process it appropriately.

For example, information provided to delivery providers may include your name, delivery address and contact number.

8.3 Group Brand marketing

Where you have expressly consented to receive marketing concerning Our Group Brands, your contact information and marketing preferences may be used within systems operated by or on behalf of The Yes Catalogue Ltd to select and send relevant communications relating to those brands.

Marketing may therefore be presented under the identity of YesCatalogue.co.uk, MoneyAmbulance.com, TenantClaims.co.uk, TenantAid.co.uk or InjuryClaimToday.co.uk, where those brands were identified as part of the consent you provided.

The fact that a communication is branded with one of Our Group Brands does not change your right to withdraw your marketing consent at any time.

8.4 Marketing platforms

Where you have opted in to relevant marketing, We may provide necessary contact and consent information to marketing technology providers acting on Our behalf, including providers such as Mailchimp, so that they can distribute communications and administer subscription preferences.

We remain responsible for ensuring that appropriate permission exists before instructing such providers to send marketing on Our behalf.

8.5 Anonymous information

We may compile aggregated or anonymised statistics about use of Our Site, including traffic, usage, customer numbers and sales information.

Where information has been genuinely anonymised so that an individual can no longer be identified, it is not Personal Data.

8.6 Legal disclosures

We may be legally required to disclose Personal Data where necessary to comply with applicable laws, regulations, court orders, law-enforcement requests or regulatory obligations.

8.7 Credit Reference Agencies

In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal requirements, a court order, or a governmental authority.
In order to process your application, we will perform credit and identity checks on you with one or more Credit Reference Agencies (CRAs). We may also carry out further periodic searches at CRA’s to allow us to manage your account with us.
To do this, we will supply your personal information to CRAs. This will include your name, date of birth and residential address. It may also include additional information such as your salary, previous residential addresses and other information you provide as part of your credit application.
The CRAs will match this information to the records they hold about you, and provide in return, both public information (including the electoral register) and shared credit information in relation to your financial situation and financial history.
CRA’s will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.
We will use this information to:

• Assess your creditworthiness and whether you can afford to take the product;

• Verify the accuracy of the data you have provided to us;

• Prevent criminal activity, e.g fraud and money laundering;

• Manage your account(s);

• Trace and recover any debts; and

• Ensure any offers provided to you are appropriate to your circumstances.

We will continue to exchange information about you with CRA’s while you have a relationship with us. We will also inform the CRA’s about your settled accounts. If you borrow and do not repay in full or on time, CRA’s will record the outstanding debt. This information may be supplied to other organisations by CRA’s
When CRA’s receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
If you are making a joint application, or tell us that you have a spouse of a financial associate, we will link your records together, so you should make sure you discuss this with them, and share with them this information, before lodging the application. CRA’s will also link your records together and these links will remain on your and their files until such time as your partner successfully files for a disassociation with the CRA’s to break the link.
The identities of the CRA’s, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRA’s are explained in more detail at www.equifax.co.uk/crain

9. What Happens If Our Business Changes Hands?

We may expand, restructure, sell or transfer all or part of Our business.

Where Personal Data relates to a part of the business that is sold or transferred, that information may be transferred to the new owner or controlling organisation where lawful and appropriate.

Any new owner or controller will be required to process Personal Data in accordance with applicable data protection law.

Where required by law, you will be informed of a relevant change.

10. How Can You Control Your Data and Marketing Preferences?

You have control over whether you receive optional direct marketing from Us.

You are not required to consent to optional email or SMS marketing in order to create a YesCatalogue.co.uk Account or purchase products or services from Us.

Where you choose to opt in, you may subsequently change your preferences or withdraw consent at any time.

You can unsubscribe from marketing emails using the unsubscribe link contained in the relevant email.

You can opt out of SMS marketing using the opt-out instructions provided in the message where available.

You may also contact dpo@yescatalogue.co.uk to request changes to your marketing preferences.

If you withdraw consent for a particular channel, We will stop sending consent-based marketing through that channel as soon as reasonably practicable.

We may retain your email address or telephone number on a suppression list so that We can ensure your opt-out continues to be respected.

11. Your Right to Withhold Information

You may access certain areas of Our Site without providing Personal Data.

However, certain information is required where you wish to establish an Account, make a purchase, apply for credit or use particular Site features.

You are not required to provide optional marketing consent in order to register for an Account.

You may also restrict Our use of Cookies as explained in section 13.

12. How Can You Access Your Data?

You have the right to request access to Personal Data We hold about you, subject to applicable legal provisions.

In most circumstances no fee is payable for exercising this right.

You may contact Us at dpo@yescatalogue.co.uk or using the details in section 14.

13. Our Use of Cookies

13.1 Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our products and services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

13.2 All Cookies used by and on Our Site are used in accordance with current Cookie Law.

13.3 Before Cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling Us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of Our Site may not function fully or as intended.

13.4 Certain features of Our Site depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. These Cookies are shown below in section 13.6. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings as detailed below in section 13.10, but please be aware that Our Site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.

13.5 The following first party Cookies may be placed on your computer or device:

13.6 Our Site uses analytics services provided by Google. Website analytics refers to a set of tools used to collect and analyse anonymous usage information, enabling Us to better understand how Our Site is used. This, in turn, enables Us to improve Our Site and the products and services offered through it. You do not have to allow Us to use these Cookies, however whilst Our use of them does not pose any risk to your privacy or your safe use of Our Site, it does enable Us to continually improve Our Site, making it a better and more useful experience for you.

13.7 The analytics service(s) used by Our Site use(s) Cookies to gather the required information.

13.8 The analytics service(s) used by Our Site use(s) the following Cookies:

13.9 In addition to the controls that We provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third party Cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

13.10 You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access Our Site more quickly and efficiently including, but not limited to, login and personalisation settings.

13.11 It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

14. Contacting Us

If you have questions about Our Site, this Privacy Policy, Our use of your Personal Data or your marketing preferences, please contact Us:

Email: dpo@yescatalogue.co.uk

Post:
The Yes Catalogue Ltd
Retford Enterprise
Randall Way
Retford
DN22 7GR

Please make your request as clear as possible, particularly if you are exercising one of your data protection rights.

15. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time, including where Our business, services, Group Brands, technology or legal and regulatory obligations change.

The latest version will be published on Our Site together with the date on which it was updated.

Where a change would materially affect the basis on which We rely upon an existing marketing consent, We will consider whether fresh consent is required rather than assuming that an earlier consent automatically applies to materially different marketing.

Changes to this Privacy Policy do not, by themselves, create or extend your consent to receive direct marketing.