Privacy Policy

This notice explains how Surf Marketing Ltd, trading as Tally (we, us or our), uses personal information. It is information, not a request for you to accept data processing. Where we need consent, we ask for it separately and you may withdraw it at any time.

1. Who is responsible for your information?

Surf Marketing Ltd is the controller of personal information collected through Tally up to the point at which it is passed to a broker, lender or other provider. That recipient will normally be a separate controller and its own privacy notice will apply.

• Legal name: Surf Marketing Ltd (trading as Tally)
• Company number: 14952633, registered in England and Wales
• ICO registration: ZC046410
• Registered office: C/O The Accountancy Partnership, Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, United Kingdom, E14 9NN
• Privacy contact: info@tallyfinance.co.uk

2. Information we collect

Depending on the journey you use, we may collect:

• Your name, business role, email address, telephone number and postal address;
• Business identity, legal form, company number, officers and Companies House information;
• Finance requirements and financial circumstances, including turnover, trading history, funding purpose, requested amount, credit-profile answers, existing borrowing, property or asset values and homeowner status;
• Answers about sector, vehicles, invoices, card takings or development projects;
• Identity and contact-verification records, including one-time-password status;
• Technical and campaign information such as IP address, browser, device, pages visited, referring URL, timestamps, UTM parameters and advertising click IDs, where permitted; and
• Communications, complaints, consent records and suppression preferences.

We receive information directly from you, from Companies House and similar public registers, from the organisation on whose behalf you enquire, and from referral or advertising partners where they lawfully direct you to us.

3. Why we use information and our lawful bases

Providing information is not a statutory requirement, but we cannot assess or refer an enquiry without the fields marked as required. We do not use consent as the basis for processing that is necessary to answer the enquiry merely because a form has an “I accept” box.

4. Who receives information?

We may disclose only the information reasonably needed to:

• Brokers, lenders and commercial service providers selected for the enquiry;
• Suppliers that host, secure or operate the service;
• Companies House and identity, fraud-prevention or credit-reference services used for verification;
• Professional advisers, regulators, courts, law enforcement or a buyer of our business where lawful.

We may receive a commission if we make an introduction. A broker, lender or provider that receives your enquiry is responsible for how it uses its copy of your information under its own privacy notice. Contact that firm about its use of your information, or contact us about how Tally handled it.

5. Credit and fraud checks

Tally does not itself make lending decisions or run credit searches. A receiving provider may use credit reference and fraud-prevention agencies. It should tell you which agencies it uses, whether a search is soft or hard, and obtain any authority required before searching. A hard search can appear on a credit file and may affect later applications. Fraud-prevention records can be retained and shared to prevent fraud.

6. Marketing

Contact needed to answer an enquiry is a service communication. Optional marketing is separate. For email and text marketing to an individual subscriber, including a sole trader or some partnerships, we use consent or the PECR soft opt-in only where every condition is met, including an opt-out when details are collected and in every message. We do not use the soft opt-in to market another organisation's products.

You may object or unsubscribe at any time by using the link in a message, replying STOP where offered, or emailing info@tallyfinance.co.uk. Opting out of marketing does not stop necessary messages about an active enquiry.

7. Cookies and similar technologies

We use limited browser storage where it is needed to secure the site, save or restore an enquiry and maintain an active assessment. These functions are necessary to provide the service you request.

We also use technologies provided by PostHog, Vercel and Meta to understand visits and assessment journeys, test improvements, monitor performance and measure advertising campaigns and conversions. These technologies load automatically when you visit Tally. The providers may receive information such as pages viewed, actions taken, timestamps, browser and device details, IP address, referring or campaign information and online identifiers.

You can block or delete cookies and similar storage through your browser settings. Blocking them may prevent us from measuring your journey but should not prevent you from completing the assessment. These providers may process information outside the UK under their own privacy notices and the safeguards described below.

8. International transfers

Some suppliers may process information outside the UK. Where a restricted transfer is made, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement or the UK Addendum to EU standard contractual clauses, and carry out the assessments required by law. Contact us for information about the relevant safeguard.

9. How long we keep information

Enquiry and introduction records are normally kept for up to six years after the last meaningful interaction so that we can evidence what was requested, resolve complaints and establish or defend legal claims. Incomplete draft enquiries are kept for a shorter operational period where practicable. Verification codes are short-lived. We retain a minimal suppression record after an opt-out so that we do not contact you again. We delete or anonymise information sooner when it is no longer required, unless law or an active dispute requires retention.

10. Matching and automated decisions

Form answers may be scored and used automatically to select a route or suitable recipient. This is an indicative matching step, not a lending decision. Tally does not make a decision that produces a legal or similarly significant effect; the receiving provider performs its own assessment. You may ask us to explain or review the route used for your enquiry.

11. Your rights

Subject to legal limits, you may ask for access, correction, deletion, restriction or portability of your information; object to processing based on legitimate interests or for direct marketing; and withdraw consent at any time. Withdrawal does not make earlier processing unlawful. We normally respond within one month and may ask for information needed to verify identity.

Email info@tallyfinance.co.uk to exercise a right. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the opportunity to address a privacy concern first; email us at the address above.

12. Security and changes

We use proportionate access controls, encryption in transit, restricted administrative access and supplier controls. No internet service can promise absolute security. We will update this notice when our processing or the law materially changes and will draw significant changes to your attention where appropriate.