Arval UK

Other United Kingdom Website Reviewed Sept. 22, 2026

UK vehicle leasing and fleet management provider, part of BNP Paribas, offering business and personal contract hire, salary sacrifice and fleet services.

Compliance Frameworks

GDPR 2016/679
Partial
Data Protection Team contact ([email protected]); DPO not named individually. ICO registration Z753977X is held by Arval UK Group Limited, not Arval UK Limited. No public DPA.

Regulatory status and an attribution trap

**FCA-regulated:** Arval UK Limited is authorised and regulated by the Financial Conduct Authority, **FRN 312798** (company 01073098), taken from Arval’s own site footer rather than the FCA Register, which is JavaScript-rendered.

**No certification evidence found** — no ISO 9001, 14001, 27001, Cyber Essentials, PCI DSS or SOC 2 claim anywhere on arval.co.uk.

⚠️ **Arval Italy publishes an integrated-certification page. That is a different legal entity and must not be attributed to Arval UK Limited.**

No Arval UK security contact, disclosure page or security.txt found. BNP Paribas group runs a HackerOne programme, but its scope was not verified to include Arval UK — do not attribute it.

Assess Arval UK in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.