Legal
Privacy Policy
Last updated: 31 October 2026
1. Who we are
AfterMy is a trading name of Payment Plan Limited, a company registered in England and Wales (company number 07286426), registered office Unit 6, Twelve O'Clock Court, 21 Attercliffe Road, Sheffield S4 7WW.
Payment Plan Limited is authorised and regulated by the Financial Conduct Authority (FRN 661940). AfterMy is a credit broker, not a lender. We introduce people who have completed a debt arrangement to lenders and partners (credit-builder apps, credit cards, car finance, loans and mortgage brokers), and we are paid commission for those introductions. We do not lend, provide credit, or sell a credit-building product of our own.
Payment Plan Limited is the data controller for the personal information described in this policy, and is registered with the Information Commissioner's Office (registration number Z2582954).
2. How to contact us about your information
Our Data Protection Officer is the contact point for any privacy question or to use your rights:
- Email: dpo@aftermy.co.uk
- Post: Data Protection Officer, Payment Plan Limited, Unit 6, Twelve O'Clock Court, 21 Attercliffe Road, Sheffield S4 7WW
3. The information we hold, and where it comes from
We hold personal information from three sources, which we keep clearly separate.
Information you give us: your Credit Comeback Plan
When you use AfterMy you can complete a Credit Comeback Plan. This is an openly declared profile. It is not a credit application and never becomes one. You may give us: the type of debt arrangement you completed and its key dates; whether you own your home; your employment status and income band; your goals (for example a card, a car, a mortgage, or simply normal credit again); when any current car finance is due to renew; your contact details; and your marketing and data-sharing preferences.
Information from the public insolvency registers: our letter channel
We may write to you to let you know your debt arrangement now shows as completed on the public record, and what that means for you. Where we do this, we did not get your details from you. We obtained them from a public source: the Individual Insolvency Register for England & Wales, or the Register of Insolvencies for Scotland (for Trust Deeds). From those registers we take your name, address, the type of insolvency, its status, and the relevant dates. We process this under our legitimate interests (see section 4), we have weighed those interests against yours, and you can object at any time (section 8), at which point we add you to our suppression list and won't contact you again. We screen every mailing against bereavement and "gone-away" records, we only use recently registered completions, and we don't store register data to contact you cold later.
Information from your use of our website
When you visit aftermy.co.uk we collect limited technical information to keep the site working and secure. We explain this, and how to control cookies, in our Cookie Policy.
4. Why we use your information, and our lawful basis
| What we do | Our lawful basis | How long we keep it |
|---|---|---|
| Provide your Comeback Plan: work out your Clear Date and show your options and next steps | To provide a service you asked us for | While you have an active relationship with us, then 6 years |
| Send you service messages about your plan, account, security and any complaint | To provide that service / our legitimate interests | As above |
| Introduce you to a lender or partner you choose, and record what we told you about our commission | To provide the introduction you asked for | 6 years |
| Send you marketing by email, text or phone | Your consent: separately for each channel | While your consent is current, then up to 2 years |
| Write to you about your completed arrangement (our letter channel) | Our legitimate interests | Briefly (around 6 months) if you don't become a customer, then deleted or anonymised |
| Keep a suppression list so we always honour your opt-outs | Our legal obligation / legitimate interests | Kept indefinitely |
| Support customers in difficult circumstances and meet our regulatory duties | Our legitimate interests. Where this involves health information: your explicit consent (UK GDPR Article 9(2)(a)), or, where consent can't reasonably be obtained, safeguarding the economic well-being of certain individuals (UK GDPR Article 9(2)(g) and Data Protection Act 2018, Schedule 1, paragraph 19) | With your plan record |
| Keep the records, audit logs and complaint files we're required to keep | Our legal obligation / legitimate interests | At least 6 years |
We will always tell you, at the point we introduce you to a lender or partner, that we may be paid a commission. We never use eligibility results from a lender or panel to market to you. Any marketing is based only on the information you have given us, under the consents you have given.
5. Profiling and automated decisions
Your Comeback Plan uses the information you give us to suggest options ("next best actions") and to identify lenders or partners whose published criteria you're likely to meet. This is profiling. It does not make a solely automated decision that has a legal or similarly significant effect on you: the suggestions are options you choose whether to act on, and any decision to offer you credit is made by the lender, not by us. You can ask us about this profiling, and object to it, at any time.
6. Who we share your information with
We share your information only as needed:
- Lenders and partners you ask us to introduce you to: credit-builder apps, card issuers, car finance providers and loan providers. We share what's relevant to the introduction; the lender then makes its own decision under its own privacy terms.
- Eligibility and panel providers: services we use to check which lenders and partners on our panel you may be eligible for. To do this they may run a search with a credit reference agency, under their own privacy terms.
- A regulated mortgage broker: if you want help with a mortgage or secured loan, we only introduce you to a regulated broker. We don't pass on your mortgage details; you give those to the broker directly.
- Our service providers: a small number of trusted suppliers who help us run AfterMy, such as our website hosting and database, our email and text messaging, electronic signatures, and our print and mailing. They act only on our instructions.
- Regulators and authorities: for example the FCA, the Information Commissioner's Office and the Financial Ombudsman Service, where we are legally required.
We do not sell your information, and we don't share it for anyone else's marketing.
7. Sending information outside the UK
Some of the service providers we use may process your information outside the UK. Where they do, we make sure it's protected by appropriate safeguards: for example, the UK's data-protection "adequacy" rules or an International Data Transfer Agreement. You can ask our Data Protection Officer for details.
8. Your rights
You have the right to: see the information we hold about you; ask us to correct it; ask us to delete it; restrict or object to how we use it (including objecting to our letter channel and to any marketing); withdraw your consent at any time (for example, to stop marketing); and ask for your information in a portable format. To use any of these, contact our Data Protection Officer (section 2). We'll respond within one month. Using your rights is free, and withdrawing consent is as easy as giving it.
9. Complaining
If you're unhappy with how we've handled your information, please tell our Data Protection Officer first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk; 0303 123 1113). For complaints about our service more generally, see our Complaints page.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows when. Where changes are significant, we'll bring them to your attention.