BridgingDesk Terms of Use

# BridgingDesk Terms of Use **Version:** 1.0 **Effective from:** 10 September 2026 **Provided by:** Rocco Stone Ltd, registered in England & Wales, company no. 05869112, trading as BridgingDesk ("**BridgingDesk**", "we", "us") **ICO registration:** ZC241746 --- ## 1. What this is By accepting these terms, a company agrees to them so that its users can use BridgingDesk. Acceptance is recorded once per company, by whoever accepts it on that company's behalf, and applies to every user in that company from that point on. ## 2. Service status BridgingDesk is in active development and pilot use. It may have defects, may change without notice, and may be unavailable at times. Data is nonetheless handled to the standard set out at clause 5 regardless of pilot status. ## 3. What BridgingDesk is not 1. **We are a software supplier.** We do not carry on any regulated activity, are not authorised by the Financial Conduct Authority, and do not need to be. Each company remains responsible for its own permissions, conduct and regulatory compliance. 2. **We do not introduce, match, rank, score or recommend lenders.** A company's lender panel is its own, and it configures it. 3. **There is no borrower-facing part of the platform.** No borrower logs in, and nothing reaches a borrower from us. Anything sent to a borrower is sent by the company using the platform. 4. **We take no part in any company's credit or lending decisions.** Figures, checks and classifications the platform produces are inputs for a person to review, never decisions. 5. **We do not pool, syndicate or match funders to loans.** ## 4. Your data 1. Each company is the controller of the case, borrower, guarantor and contact data it puts into its own tenant. BridgingDesk is the processor. 2. Processing is governed by our Article 28 data processing terms, which apply automatically alongside these terms and are available on request. Where a company has its own signed data processing agreement with us, that agreement governs in place of the standard terms. 3. **We will not use a company's data to train, fine-tune or evaluate any model, to benchmark it against other companies, or for any purpose beyond running the service for it.** 4. Each tenant's data is isolated from every other tenant's data by row-level security enforced at the database layer, backed by an append-only audit log of who accessed or changed what and when. ## 5. Security We maintain appropriate technical and organisational measures, including encryption in transit and at rest, tenant isolation enforced at the database layer, role-based access control, an append-only audit log, and hosting in the United Kingdom. ## 6. Accuracy and responsibility 1. We take accuracy seriously. Calculation logic is covered by automated tests. 2. **Each company remains responsible for checking any figure before it leaves that company.** A redemption or completion statement issued to a borrower, solicitor or lender is that company's document, whatever produced it. 3. If a figure looks wrong, tell us straight away and we will investigate as a priority. ## 7. Liability 1. Nothing in these terms excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded. 2. Subject to clause 7.1, neither party is liable to the other for loss of profit, loss of business, loss of anticipated savings, or indirect or consequential loss. 3. Subject to clause 7.1, our total liability to any one company under these terms is limited to £25,000 in any 12-month period, except for liability arising from a breach of data protection law, which is not capped by this clause. ## 8. Intellectual property We own BridgingDesk and everything in it. Each company owns its own data. Feedback or suggestions may be used freely by us without obligation or payment, but that gives us no right in a company's data. ## 9. Term and exit 1. This continues for as long as a company uses BridgingDesk. 2. Either party may end a company's use of the platform at any time, on 14 days' written notice. 3. On termination we will, at the company's direction, return its data in a structured, machine-readable format and then delete it, confirming deletion in writing within 30 days. ## 10. General 1. **No exclusivity.** Neither party is restricted from working with anyone else. 2. **Variation.** We may update these terms; continued use after notice of an update constitutes acceptance of the update. Material changes will be flagged for re-acceptance through the same gate. 3. **Law and jurisdiction.** England & Wales, exclusive jurisdiction of the English courts.