Last Updated on 28 October 2025
Introduction
Welcome to Debit Score, a registered trademark and product by Cheddar Payments Limited.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you join the Debit Score waitlist. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are:
Trading Name: Debit Score
Legal Entity: Cheddar Payments Limited
Company Registration Number: 12895809
Registered Address: 7th Floor, 2 Television Centre, 101 Wood Lane, London, W12 7FR
FCA Authorisation: We are authorised and regulated by the Financial Conduct Authority as an Account Information Service Provider and Payment Initiation Service Provider (Firm Reference Number: 940075)
ICO Registration Number: ZB556534
Data Protection Officer: Luke Ladyman (luke@debitscore.co.uk)
What Information We Collect
When you join the Debit Score waitlist, we collect the following personal information:
Full Name - To personalise our communications with you
Email Address - To contact you about Debit Score and send you updates
We may also automatically collect certain technical information when you visit our waitlist page:
Usage Data - How you interact with our website (via Google Analytics)
Cookie Data - Information stored on your device to improve your experience
Device Information - Browser type, IP address, and operating system
Marketing Data - Information about your interaction with our marketing materials (via Meta/Facebook Pixel, if deployed)
How We Use Your Information
We process your personal data for the following purposes:
3.1 Primary Purposes
Launch Notification - To notify you when Debit Score launches
Product Updates - To keep you informed about Debit Score features and developments
Marketing Communications - To send you information about Debit Score and related financial services
Service Improvement - To understand how people engage with our waitlist and website
3.2 Frequency of Communications
We will email you no more than once per week during the waitlist period, and only when we have meaningful updates to share.
3.3 Legal Basis for Processing
We process your personal data based on the following legal grounds under UK GDPR:
Consent (Article 6(1)(a)) - You have given us explicit permission to contact you about Debit Score by joining our waitlist
Legitimate Interests (Article 6(1)(f)) - We have a legitimate business interest in communicating with prospective customers about our product launch and features, which does not override your data protection rights
Who We Share Your Information With
We respect your privacy and will never sell your personal data to third parties.
4.1 Service Providers
We share your information with trusted service providers who help us operate our waitlist:
Typeform - Our waitlist form provider (EU-based servers)
Customer.io and/or Mailchimp - Our email service providers
Google Analytics - For website analytics
Meta/Facebook - For marketing analytics (if Meta Pixel is deployed)
All service providers are required to protect your data in accordance with UK GDPR and have signed Data Processing Agreements with us.
4.2 Legal and Business Transfers
We may share your information:
With Cheddar Payments Limited - Our parent company for operational purposes
With Potential Investors - If requested during due diligence processes, with appropriate confidentiality protections
For Legal Compliance - If required by law, court order, or regulatory authority
In Business Transfers - If Debit Score or Cheddar Payments Limited is acquired, merged, or restructured (you will be notified of any such change)
4.3 Advertising and Remarketing
We reserve the right to use your information for targeted advertising and remarketing purposes on platforms such as Google, Meta/Facebook, and other digital advertising networks. You can opt out of this by emailing us at hello@debitscore.co.uk.
International Data Transfers
Your data is primarily stored within the European Union (via Typeform's EU-based servers). However, some of our service providers (such as Mailchimp or Customer.io) may store or process data outside the UK/EU.
Where data is transferred outside the UK/EU, we ensure appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
Adequacy decisions recognising equivalent data protection standards
Other legally approved transfer mechanisms
How Long We Keep Your Information
We will retain your personal data until:
You unsubscribe from the waitlist, or
You request deletion of your data, or
It is no longer necessary for the purposes for which it was collected
After you unsubscribe or request deletion, we will delete your personal data within 30 days, unless we are required to retain it for legal or regulatory reasons.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
7.1 Right of Access
You can request a copy of the personal data we hold about you.
7.2 Right to Rectification
You can ask us to correct any inaccurate or incomplete personal data.
7.3 Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain circumstances.
7.4 Right to Restrict Processing
You can ask us to temporarily stop processing your data in certain situations.
7.5 Right to Data Portability
You can request your data in a commonly used, machine-readable format.
7.6 Right to Object
You can object to our processing of your data based on legitimate interests.
7.7 Right to Withdraw Consent
You can withdraw your consent at any time by clicking "unsubscribe" in any email or by contacting us directly.
7.8 How to Exercise Your Rights
To exercise any of these rights, please email: hello@debitscore.co.uk
We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it, including:
Encryption - All data transmitted to and from our website is encrypted using SSL/TLS
Secure Storage - Data is stored on secure servers with access controls
Service Provider Security - We only work with service providers (such as Typeform) that maintain robust security standards
Access Controls - Only authorised personnel have access to personal data
Regular Reviews - We regularly review and update our security measures
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Cookies and Tracking Technologies
Our waitlist page uses cookies and similar tracking technologies to improve your experience and understand how you interact with our website.
9.1 Types of Cookies We Use
Essential Cookies - Required for the website to function properly Analytics Cookies - Help us understand how visitors use our website (Google Analytics) Marketing Cookies - Used to track visitors across websites for advertising purposes (Meta/Facebook Pixel, if deployed)
9.2 Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.
For more information about cookies and how to manage them, visit: www.allaboutcookies.org
Age Restrictions
The Debit Score waitlist is open to individuals aged 16 years and older. If you are under 16, please do not submit your information to our waitlist.
If we become aware that we have collected personal data from someone under 16 without appropriate parental consent, we will delete that information promptly.
Geographic Scope
Debit Score is primarily intended for UK residents. We may accept waitlist signups from individuals who are planning to move to the UK in the near future.
By joining our waitlist, you confirm that you are either:
Currently resident in the UK, or
Planning to move to the UK in the near future
Please note that when Debit Score launches, you will need a UK bank account to use the service.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons.
When we make changes, we will:
Update the "Last Updated" date at the top of this policy
Notify you via email if the changes are significant
Post the updated policy on our website
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Email: hello@debitscore.co.uk
Data Protection Officer: Luke Ladyman (luke@debitscore.co.uk)
Postal Address: Debit Score (Cheddar Payments Limited) 7th Floor, 2 Television Centre 101 Wood Lane London, W12 7FR United Kingdom
Complaints
You have the right to lodge a complaint with the UK's data protection supervisory authority if you believe we have not handled your personal data properly.
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first at hello@debitscore.co.uk.
Relationship to Future Services
Please note that this Privacy Policy applies only to the Debit Score waitlist. When Debit Score launches and you create an account, a separate Privacy Policy will govern the use of the Debit Score app and services.
You will be required to review and accept the full Debit Score Privacy Policy before using the app. Joining the waitlist does not automatically create a Debit Score account – you will need to register separately when the service launches.
Contact Us
If you have any questions or concerns about our Privacy Policy or the handling of your personal information, please contact us at hello@appit.com