Cookie policy
1. About this policy
This Cookie Policy explains how Tutu uses cookies and similar technologies when you visit or use our website. It applies to everyone who visits the website, including people who are simply browsing, considering applying for a loan, considering becoming a guarantor, or using the website as an existing borrower or guarantor.
Tutu is a trading name of GAIN Credit LLC. GAIN Credit LLC is the data controller responsible for the personal data described in this Cookie Policy.
If you later apply for a loan or apply to become a guarantor, you should also read the Privacy Policy relevant to that relationship:
- Borrower Privacy Policy — Privacy policy
- Guarantor Privacy Policy — Guarantor privacy policy
2. What are cookies and similar technologies?
Cookies are small text files placed on your computer, phone or other device when you visit a website. They help websites operate, remember choices and understand how people use them.
We may also use similar technologies, such as pixels, tags or browser storage. In this policy, references to cookies include these technologies where they store information on your device or access information stored on it.
3. How we use cookies
We use cookies for the purposes described below. Some cookies are strictly necessary for the website to operate or to provide a service you have asked for. Other cookies are optional, and we will only use them if you consent.
| Category | What it does | Consent required? |
|---|---|---|
| Strictly necessary | Enable core website functions, keep the website secure, prevent fraud, support log-in and remember your cookie choices. | No. These cannot be switched off through our cookie controls. |
| Functional | Provide optional website features or remember choices that are not essential to the service you asked for. | Yes |
| Performance and analytics | Help us understand, in general terms, how individuals use the website and identify where it can be improved. | Yes |
| Marketing | Measure advertising and help us and our advertising partners show advertising that may be more relevant to you. | Yes |
4. The cookies we use
The table below explains the cookies and similar technologies we use, who provides them, what they do, their category and how long they remain active. Some durations may vary depending on your browser or device settings.
| Cookie / technology | Provider | Purpose | Category (consent type) | Duration |
|---|---|---|---|---|
| __Host-tutu_session | Tutu | Keeps you signed in and remembers where you are while using your account or completing an application. This is needed for the login and account areas to work. | Strictly Necessary | 2 hours; expires after 30 minutes of inactivity |
| cookie_consent | Tutu | Remembers your cookie choices so we can apply your preferences and do not need to ask you each time you visit. | Strictly Necessary | 1 year |
| tutu_journey | Tutu | Remembers where you reached in a loan application so you can return and continue later if you close your browser or your session ends. | Strictly Necessary | 30 days |
| lsrc | Tutu | Remembers how you arrived at our website, for example through a search engine, campaign, affiliate or by visiting us directly. This helps us understand where an application came from and process it correctly. | Strictly Necessary | 30 days |
| lsrc_detail | Tutu | Stores additional information about how you arrived at our website so we can correctly identify the source of your application. | Strictly Necessary | 30 days |
| lsrc_current | Tutu | Remembers how you arrived at our website during your current visit. | Strictly Necessary | 30 days |
| lsrc_history | Tutu | Keeps a record of the different ways you have arrived at our website over time. This helps us understand the source of an application and keep an accurate record of it. | Strictly Necessary | 1 year |
| persistent_sessionid | Tutu | Tracks user sessions and helps us monitor application and conversion performance. | Strictly Necessary | 6 months |
| New Relic | newrelic.com | Helps us check that our website is working properly by identifying errors, slow pages and other technical problems. | Strictly Necessary | Varies depending on the technology used. See the provider's cookie information for current details. |
| Google Analytics 4 (GA4) | analytics.google.com | Helps us understand how people use our website, such as which pages they visit and whether they complete important steps. We use this information to measure and improve the website and application journey. | Performance | Varies depending on the technology used. See the provider's cookie information for current details. |
| Microsoft Clarity | clarity.microsoft.com | Helps us understand how people use our website, for example where they click, scroll or experience difficulties. This may include recordings of how a visitor interacts with a page and helps us improve the website. | Performance | Varies depending on the technology used. See the provider's cookie information for current details. |
| Meta | business.facebook.com | Helps us understand whether visits and applications came from advertising on Facebook or Instagram and measure how those advertisements perform. | Marketing | Varies depending on the technology used. See the provider's cookie information linked above for current details. |
| Trustpilot | uk.legal.trustpilot.com/legal/cookie-list | Allows us to display Trustpilot customer reviews on our website. Trustpilot may also use cookies or similar technologies when this content is displayed. | Strictly Necessary | Varies depending on the technology used. See the provider's cookie information linked above for current details. |
| business.facebook.com | Helps us understand whether visits and applications came from Facebook advertising and measure how those advertisements perform. | Marketing | Varies depending on the technology used. See the provider's cookie information linked above for current details. | |
| Vimeo | Vimeo | Allows us to show informational videos on our website. We use Vimeo's Do Not Track setting so the video player does not collect session data or analytics. Vimeo may still use essential security cookies to protect the video player and manage traffic. | Strictly Necessary | Varies depending on the technology used. See the provider's cookie information linked above for current details. |
| TikTok | TikTok | Helps us understand whether visits and applications came from advertising on TikTok and measure how those advertisements perform. | Marketing | Varies depending on the technology used. See the provider's cookie information linked above for current details. |
5. Your cookie choices
When you first visit our website, we will ask you to choose whether to allow optional cookies. You can:
- accept all optional cookies;
- reject all optional cookies; or
- choose which categories to allow.
Optional cookies will remain switched off unless you choose to allow them. Refusing optional cookies will not prevent you from applying for a loan, acting as a guarantor or using the core parts of our website.
You can change your choices at any time by selecting "Manage Cookies" at the foot of every page. It is free to change or withdraw your consent. Once your updated choice is recorded, we will stop using the optional cookies you have switched off. This will not affect anything lawfully done before you changed your choice.
Your cookie choices are separate from your choices about receiving marketing by email, text message or other electronic communication. Refusing marketing cookies will not unsubscribe you from those communications. You can opt out of direct marketing at any time using the unsubscribe option in the message or by contacting us.
6. Information collected through cookies
Depending on the cookie or technology used, information may include your IP address, device or browser information, cookie or device identifiers, the pages you visit, how you use the website, where you arrived from and how you interact with our advertising.
If you apply for a loan, some advertising partners may receive information to measure whether an advertisement led to you taking out a loan, or to manage the audiences to whom advertising is shown. This may include information converted into a hashed form, as explained in our Borrower Privacy Policy.
Cookie identifiers and similar online identifiers may be personal data even where they do not directly include your name. We handle that personal data as explained in this Cookie Policy. If you enter a borrower or guarantor journey, the relevant Privacy Policy will also apply to the additional personal data used in that relationship.
7. How and why we use personal data
Where strictly necessary cookies involve personal data, we rely on our legitimate interests in operating a secure and functioning website, preventing fraud and remembering your cookie choices. Where optional cookies or similar technologies involve personal data, we rely on your consent.
8. Third parties and international transfers
Some cookies and similar technologies are provided by other organisations. The relevant providers and the purposes for which their technologies are used are identified in section 4. Some providers may process personal data outside the UK. Further information about how we share personal data, international transfers and the safeguards we use is available in our Privacy Policies.
9. Your data protection rights and how to contact us
Data protection law gives you a number of rights. The rights that apply depend on how and why we use your personal data. These may include rights to access, correct or delete your personal data, restrict or object to how it is used, and receive certain personal data in a portable format.
To exercise your rights, ask a question or make a complaint about how we use your personal data, contact our Data Protection Officer at dpo@gaincredit.com. We will acknowledge a data protection complaint within 30 days and respond without undue delay.
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. The ICO recommends giving us an opportunity to address your complaint first, but you can contact it at any time.
10. Changes to this policy
We may update this Cookie Policy if the cookies and similar technologies we use, their purposes or the organisations we work with change. The date at the top shows when the policy was last updated. Where a change is not covered by your existing cookie choices, we will ask you to choose again.