Privacy Notice and Data Protection Policy

Company Name: Brit Business Funding Ltd. Company Number: 12752630.
Registered Office Address: 7 Bell Yard, London, WC2A 2JR
Email: info@britishbusinessfunding.co.uk
Website: www.britishbusinessfunding.co.uk
ICO Registration Number: ZB555867

  1. Purpose of This Privacy Notice

This Privacy Notice explains how Brit Business Funding Ltd (“the Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal data. It also explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and related privacy laws.

We are committed to maintaining the confidentiality, integrity, and security of your personal data, and to being transparent about how we use it.

  1. Who We Are

Brit Business Funding Ltd is a UK-based commercial finance broker and business funding specialist. We assist businesses in obtaining finance solutions from a range of lenders and financial institutions.

We act as a data controller for the personal data we collect, meaning we determine how and why your data is processed. In some cases, we may act as a joint controller or data processor where we work alongside other organisations such as lenders, brokers, or service providers.

  1. Our Legal Grounds for Processing Your Data

Under UK data protection laws, we must have a lawful basis to collect and use your personal information. Brit Business Funding Ltd relies on the following lawful bases:

  1. Performance of a Contract

    • To provide you with finance services, process applications, and manage agreements.

  2. Compliance with Legal Obligations

    • To comply with regulatory and statutory obligations such as anti-money laundering (AML), fraud prevention, and financial conduct regulations.

  3. Legitimate Interests

    • To manage our business efficiently and provide quality services, including fraud prevention, business development, internal management, and limited marketing communications that are proportionate and relevant.

  4. Consent

    • Where we rely on your explicit opt-in consent, for example, to send you marketing communications or share data beyond contractual or legal necessity.

    • You can withdraw your consent at any time.

  1. The Data We Collect

We collect and process a range of personal data, depending on your relationship with us and the nature of the services provided. This may include:

Personal Identification and Contact Information

  • Full name, business name, job title, address, email address, telephone number, and other contact details.

Financial and Transactional Information

  • Finance application details, income, turnover, banking details, credit history, and financial documentation provided during funding assessments.

Business Information

  • Company registration details, VAT number, ownership structure, trading history, and related business documentation.

Communication Data

  • Records of correspondence with you via email, phone, or other communication channels.

Technical and Website Usage Data

  • IP address, browser type, device information, and cookies (see Section 12 below).

We Do Not Collect:

  • Special category data (e.g., health, ethnicity, religion, political beliefs).

  • Criminal conviction data (unless required by law or regulatory checks).

  1. How We Use Your Data

We may use your personal data for the following purposes:

  • To process and assess finance applications.

  • To provide brokerage and funding services tailored to your needs.

  • To manage client relationships and communication.

  • To meet legal and regulatory obligations, including AML and fraud checks.

  • To send marketing communications (where permitted).

  • To improve our services, website functionality, and customer experience.

  • To maintain records for auditing, compliance, and internal business reporting.

  1. Data Sharing and Third Parties

We may share your data with trusted third parties where necessary to deliver our services or meet legal obligations. These include:

Third Parties We May Share Data With

  • Lenders and financial institutions – for the purpose of funding assessments and finance provision.

  • Partner brokers and intermediaries – where collaboration is required to meet your request.

  • IT and system providers – for hosting, CRM management, data storage, and communication.

  • Regulatory bodies – including the Financial Conduct Authority (FCA), Information Commissioner’s Office (ICO), and HMRC.

  • Fraud prevention and credit reference agencies – where legally required.

  • Professional advisers – such as auditors, legal representatives, and compliance consultants.

All third parties are required to process your data securely, in accordance with UK GDPR and our instructions.

  1. Data Storage and International Transfers

Your data is primarily stored within the United Kingdom (UK) and European Union (EU).
Our CRM system, HubSpot, hosts data within EU-based data centres (Frankfurt, Germany and/or Dublin, Ireland) operated by Amazon Web Services (AWS).

In limited cases where data is transferred outside the UK or EU (for example, due to global cloud service providers), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the UK and EU.

  • UK International Data Transfer Addendums.

  • Providers certified under the EU–US Data Privacy Framework.

These measures ensure your data remains protected wherever it is processed.

  1. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

  • While you are a client of Brit Business Funding Ltd.

  • For up to six (6) years after your relationship with us ends, to meet legal, tax, and insurance requirements.

  • After this period, data may be securely deleted or anonymised for statistical and analytical use.

  1. Data Security

We implement comprehensive technical and organisational measures to protect your personal data, including:

  • Encrypted data storage (in transit and at rest).

  • Access controls and role-based permissions.

  • Regular security audits and staff training.

  • Multi-factor authentication for internal systems.

  • Secure data disposal procedures.

If a data breach occurs, we will promptly assess the risk and, where legally required, notify affected individuals and the Information Commissioner’s Office (ICO).

  1. Marketing Communications

We may contact you with information about products, services, and funding opportunities that may be relevant to your business.
This may occur under:

  • Legitimate interest (for existing clients or enquiries), or

  • Consent (for individuals who have opted in).

You may opt out at any time by:

  • Clicking the “unsubscribe” link in our emails, or

  • Contacting us directly at info@britishbusinessfunding.co.uk.

We will always respect your preferences and remove you from marketing lists upon request.

  1. Cookies and Website Analytics

Our website uses cookies and similar technologies to improve functionality, track engagement, and provide relevant content.
Types of cookies used include:

  • Essential cookies – required for website functionality.

  • Analytical cookies – to monitor performance and visitor behaviour.

  • Marketing cookies – to personalise advertising and promotions.

Where required by the Privacy and Electronic Communications Regulations (PECR), we seek your consent for non-essential cookies.

For more information about cookies, visit www.allaboutcookies.org.

  1. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right

Description

Right to be informed

To be told how we collect and use your data (this notice).

Right of access

To request a copy of the data we hold about you.

Right to rectification

To request correction of inaccurate or incomplete data.

Right to erasure

To request deletion of your data in certain circumstances.

Right to restrict processing

To request we limit how we use your data.

Right to data portability

To request transfer of your data to another organisation.

Right to object

To object to processing, including marketing.

Rights related to automated decision-making

To object to decisions made solely by automated means.

Right to complain

To raise a complaint with the ICO if you believe your rights are infringed.

You may exercise these rights by contacting us using the details below.

  1. How to Contact Us

If you have any questions, concerns, or requests about your personal data, please contact:

Data Protection Contact:
Josh O’Neill, Marketing Director
Email: josh@britishbusinessfunding.co.uk
Telephone: 0204 571 8480
Post: 7 Bell Yard, London, WC2A 2JR

  1. Contacting the Information Commissioner’s Office (ICO)

If you are dissatisfied with our handling of your personal data, you have the right to lodge a complaint with:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: https://ico.org.uk/global/contact-us/

  1. Policy Updates

We may update this Privacy Notice periodically to reflect changes in law, regulation, or company practices. The latest version will always be available on our website.
Last updated: 01.01.2025