PRIVACY POLICY

Last Updated: 22nd December 2025

CRITERAI LTD ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (www.criterai.co.uk) (the "Site") or use our criteria search platform (the "Service") and tells you about your privacy rights and how the law protects you.

1. IMPORTANT INFORMATION AND WHO WE ARE

Controller CriterAI Ltd is the controller and responsible for your personal data.

• Company Number: 16482593
• Registered Office: Welton Pumping Station, Watford Road, Welton, Daventry, Northamptonshire, NN11 2NE
• Email Address: [email protected]

The Nature of Our Service Our Service is a B2B tool for mortgage intermediaries and lenders. We do not knowingly collect data relating to mortgage applicants (end-borrowers). Brokers are explicitly instructed not to input Personal Data regarding their clients (such as names, dates of birth, or specific addresses) into the search fields of our Platform.

2. THE DATA WE COLLECT ABOUT YOU

We may collect, use, store, and transfer different kinds of personal data about you (the User), which we have grouped together as follows:

• Identity Data: First name, last name, username, and job title (e.g., "Broker" or "Lender Administrator").
• Contact Data: Billing address, email address, and telephone numbers.
• Financial Data: Payment card details or bank account information. Note: We do not store full credit card numbers; these are processed directly by our third-party payment processor (Stripe).
• Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting, and operating system.
• Usage Data: Information about how you use our website, specifically which criteria searches you run and which Lender profiles you view.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

3. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

A. Performance of Contract