Privacy Notice and Data Protection Policy

Company Name: Brit Business Funding Ltd
Company Number: 12752630
Registered Office: 7 Bell Yard, London, WC2A 2JR
Email: info@britishbusinessfunding.co.uk
Website: www.britishbusinessfunding.co.uk
ICO Registration Number: ZB555867

Purpose of This Privacy Notice

This Privacy Notice explains how Brit Business Funding Ltd (“the Company”, “we”, “us” or “our”) collects, uses, stores, shares and protects your personal data.

It also explains your rights under the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”) and other applicable privacy laws.

We are committed to maintaining the confidentiality, integrity and security of your personal data and to being transparent about how and why we use it.

Who We Are

Brit Business Funding Ltd is a UK-based commercial finance broker and business funding specialist. We help businesses identify and obtain suitable finance solutions from a range of lenders, financial institutions and funding providers.

We act as a data controller for most of the personal data we collect. This means that we determine how and why your personal data is processed.

In some circumstances, we may act as a joint controller or data processor when working with lenders, brokers, financial institutions, technology providers or other service providers.

How We Collect Your Personal Data

We may collect personal data directly from you when you:

Complete a form on our website.
Complete a form on an advertising platform, social media platform or third-party website.
Apply or enquire about business funding or another service.
Contact us by telephone, email, SMS, website form or another communication method.
Respond to one of our advertisements or marketing communications.
Provide documents or information during an application or funding assessment.
Communicate with one of our employees, representatives or partners.

We may also receive personal data from:

Lenders, financial institutions and funding providers.
Partner brokers, introducers and professional advisers.
Publicly available business sources, including Companies House.
Credit reference, identity verification and fraud prevention agencies.
Advertising platforms and service providers where you have submitted an enquiry or requested information.
Other organisations where they are legally permitted to share the information with us.

When you submit a form, we will use the contact details you provide to respond to your enquiry and communicate with you about the products or services you have requested.

Where the wording displayed beside a form checkbox specifically states that you agree to receive communications by telephone, SMS and email, ticking that checkbox records your agreement to being contacted through those methods, subject to your right to withdraw your consent or object to marketing at any time.

Our Legal Grounds for Processing Your Data

Under UK data protection laws, we must have a lawful basis for collecting and using your personal data. The lawful basis we rely upon will depend on why the information is being processed.

Performance of a Contract

We may process your personal data where it is necessary to:

Provide the finance brokerage or related services you have requested.
Process or manage an application.
Take steps at your request before entering into an agreement.
Manage an existing client or commercial relationship.

Compliance With Legal Obligations

We may process your personal data where necessary to comply with legal, regulatory or statutory obligations, including:

Anti-money laundering requirements.
Fraud prevention requirements.
Identity verification requirements.
Tax, accounting and record-keeping obligations.
Requests from courts, regulators or law enforcement agencies.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms.

These interests may include:

Responding to business funding enquiries.
Managing client and prospective client relationships.
Following up on an application or enquiry.
Providing information about services that are relevant to an existing business relationship or previous enquiry.
Preventing fraud and protecting our systems.
Improving our services, website and customer experience.
Managing our business, reporting and internal administration.
Conducting proportionate and relevant business-to-business marketing.
Maintaining records of contact preferences and objections.

Where we rely on legitimate interests for direct marketing, you have the right to object at any time.

Consent

We may rely on your consent where you have actively agreed to a particular use of your information.

This may include agreeing to receive marketing communications from us by one or more of the following methods:

Telephone calls.
SMS or text messages.
Email.

Where consent is required, the form or consent statement will identify the communication methods covered by your consent.

You may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the consent was withdrawn.

We will not treat silence, inactivity or a pre-ticked box as consent.

The Data We Collect

The personal data we collect depends on your relationship with us and the services you request.

Personal Identification and Contact Information

This may include:

Full name.
Business name.
Job title.
Residential or business address.
Email address.
Telephone or mobile number.
Date of birth.
Other information needed to identify or contact you.

Financial and Transactional Information

This may include:

Finance application information.
Requested funding amount and purpose.
Business turnover, income and expenditure.
Banking information.
Existing borrowing and credit commitments.
Credit history.
Financial statements, management accounts and bank statements.
Information contained in documents provided during a funding assessment.

Business Information

This may include:

Company name and registration number.
VAT number.
Registered and trading addresses.
Company ownership and director information.
Business structure.
Trading history.
Industry and business activities.
Employee numbers.
Financial and commercial documentation.

Communication Data

This may include:

Records of emails, telephone calls, SMS messages and other correspondence.
The date, time and subject of communications.
Notes made by our employees or representatives.
Enquiry and application history.
Your communication and marketing preferences.
Records of consent, objections, withdrawals and unsubscribe requests.
Where permitted, recordings of telephone calls for training, monitoring, quality assurance, compliance or dispute-resolution purposes.

Marketing and Form Submission Data

This may include:

The form, webpage or advertisement through which you submitted an enquiry.
The date and time of your submission.
The wording and privacy information displayed when the form was submitted.
Whether a consent or acknowledgement box was selected.
The communication methods to which you agreed.
Advertising campaign, referral and source information.
UTM parameters and similar attribution information.
Records showing when and how marketing consent was obtained or withdrawn.

Technical and Website Usage Data

This may include:

IP address.
Browser type and version.
Device information.
Operating system.
Website usage and interaction information.
Referral source.
Cookie identifiers and similar technologies.

Further information about cookies is provided below.

Information We Do Not Intentionally Collect

We do not normally request or intentionally collect:

Special category data, such as information about health, ethnicity, religion, political beliefs, trade union membership or sexual orientation.
Criminal conviction or offence data, unless it is required by law or as part of an appropriate regulatory, fraud prevention or due diligence check.

Please do not provide this type of information unless we specifically request it and have explained why it is required.

How We Use Your Data

We may use your personal data to:

Respond to your enquiries.
Contact you about a form, application or request you have submitted.
Contact you by telephone, SMS or email using the contact details you have provided.
Process and assess finance applications.
Provide commercial finance brokerage and funding services.
Identify lenders, products or funding providers that may be suitable for your business.
Introduce you to lenders, financial institutions, brokers or other service providers.
Obtain further information needed to assess or progress an application.
Keep you updated about the progress or outcome of an enquiry or application.
Manage our relationship with you.
Carry out identity verification, credit, fraud prevention and due diligence checks.
Meet our legal, regulatory and contractual obligations.
Send relevant marketing communications where permitted.
Record and manage your consent and communication preferences.
Maintain suppression lists so that we do not contact people who have opted out or objected.
Improve our website, services and application processes.
Measure the effectiveness of our advertising and marketing.
Maintain records for auditing, compliance, complaints handling and internal reporting.
Establish, exercise or defend legal claims.

Service Communications and Marketing Communications

Communications relating directly to an enquiry, application or service you have requested are considered service communications. These may include:

A telephone call to discuss your enquiry.
An SMS confirming that we have received your information.
An email requesting information needed to progress an application.
Updates about an application or funding request.
Appointment confirmations or reminders.
Important information about an existing service or relationship.

We may send these communications using the telephone number or email address you provided because they are necessary to respond to your request or provide the service.

Marketing communications are communications that promote products, services or funding opportunities. We will only send marketing communications where we have an appropriate lawful basis and where the communication is permitted under applicable data protection and electronic marketing laws.

Data Sharing and Third Parties

We may share your personal data with trusted third parties where necessary to provide our services, progress your application, operate our business or comply with legal obligations.

Third Parties We May Share Data With

These may include:

Lenders and financial institutions: To assess finance applications and provide funding.
Partner brokers and intermediaries: Where collaboration is required to identify or provide an appropriate finance solution.
Credit reference and fraud prevention agencies: To conduct identity, credit, affordability or fraud prevention checks where appropriate.
Identity verification providers: To verify the identity of applicants, directors, shareholders or beneficial owners.
IT, CRM and communication providers: For hosting, customer relationship management, email delivery, telephone services, SMS delivery, data storage and system administration.
Advertising and analytics providers: To manage advertising campaigns, understand enquiry sources and measure campaign performance.
Professional advisers: Including auditors, accountants, legal representatives, insurers and compliance consultants.
Regulators, government bodies and law enforcement agencies: Including the Information Commissioner’s Office, HM Revenue & Customs, courts and other authorised bodies where legally required.
Potential purchasers or investors: Where necessary in connection with a proposed sale, merger, acquisition or restructuring of our business.

We require third parties that process personal data on our behalf to process it securely and in accordance with applicable data protection law and our contractual instructions.

Where we introduce you to an independent lender, broker or service provider, that organisation may become a separate data controller and will process your data under its own privacy notice.

We do not sell personal data or purchase lists of personal contact information for indiscriminate marketing.

Data Storage and International Transfers

Your personal data is primarily stored within the United Kingdom and European Economic Area.

Our customer relationship management system, HubSpot, may host data within European data centres, including Frankfurt, Germany and Dublin, Ireland, using infrastructure provided by Amazon Web Services.

Some of our technology, communication, analytics or cloud service providers may process personal data outside the United Kingdom or European Economic Area.

Where personal data is transferred internationally, we take steps to ensure that an appropriate transfer mechanism and safeguards are in place. These may include:

UK International Data Transfer Agreements or Addendums.
European Commission Standard Contractual Clauses.
UK adequacy regulations.
Transfers to providers covered by an applicable recognised data protection framework.
Additional contractual, organisational and technical protections.

These measures are intended to ensure that your personal data remains appropriately protected wherever it is processed.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

This may include retaining information:

While you are a client or prospective client of Brit Business Funding Ltd.
While an enquiry or application is being considered or processed.
For up to six years after our relationship with you ends, where required for legal, tax, accounting, insurance, complaints or contractual purposes.
For longer where required by law, a regulator, a court order or the establishment, exercise or defence of legal claims.

Marketing consent records, objection records and suppression list information may be retained for as long as reasonably necessary to demonstrate compliance and ensure that we continue to respect your preferences.

When information is no longer required, it will be securely deleted, destroyed or anonymised.

Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures may include:

Encryption of data in transit and, where appropriate, at rest.
Access controls and role-based permissions.
Multi-factor authentication.
Secure cloud hosting and data storage.
Staff data protection and security training.
System monitoring and security reviews.
Secure data disposal procedures.
Policies for managing personal data breaches.

Where a personal data breach occurs, we will assess the likely risk to affected individuals. Where required by law, we will notify the Information Commissioner’s Office and affected individuals.

Marketing Communications

We may contact you with information about business funding products, finance services and related opportunities that we reasonably believe may be relevant to your business.

Depending on the circumstances and applicable law, we may contact you on the basis of:

Your consent.
Our legitimate interests.
An existing client or prospective client relationship.
A previous enquiry or request for information.
The business-to-business marketing rules applicable to corporate subscribers.
The limited “soft opt-in” provisions under PECR, where all relevant conditions are satisfied.

Marketing communications may be sent through:

Live telephone calls.
SMS or text messages.
Email.

Where you submit an online form and actively select a checkbox stating that you agree to receive telephone, SMS and email communications, we will record:

The date and time of your consent.
The form or source through which it was provided.
The wording displayed when consent was given.
The communication methods covered by your consent.
Relevant technical or submission information needed to demonstrate how consent was obtained.

Agreeing to receive marketing communications is not a condition of receiving our core services unless the communication is necessary to respond to or administer the service you have requested.

You may ask us to stop marketing communications at any time by:

Clicking the unsubscribe link in a marketing email.
Following the opt-out instructions in an SMS.
Replying “STOP” to an SMS where that facility is provided.
Telling our representative during a telephone call.
Emailing info@britishbusinessfunding.co.uk.
Emailing josh@britishbusinessfunding.co.uk.
Calling 0204 571 8480.
Submitting a request through our website.

You may opt out of one communication method without necessarily opting out of all methods. For example, you may ask us to stop sending SMS messages while continuing to receive emails.

When you withdraw consent or object to marketing, we will stop the affected marketing communications as soon as reasonably possible. We may retain limited information on a suppression list to ensure that your preference continues to be respected.

Opting out of marketing will not prevent us from sending essential service communications about an active enquiry, application or service you have requested.

Telephone Marketing

We may make live telephone calls to discuss:

An enquiry or form you submitted.
A finance application.
Products or services that may be relevant to your business.
A previous request for information.
An existing or prospective client relationship.

Where a call is made for direct marketing purposes, we will comply with applicable PECR requirements, including checking relevant Telephone Preference Service and Corporate Telephone Preference Service requirements where necessary.

We will not make automated recorded marketing calls without the consent required by law.

You may object to telephone marketing at any time by informing the caller or contacting us using the details in this notice.

SMS and Email Marketing

We may send SMS and email marketing where:

You have specifically agreed to receive that type of communication.
The communication is permitted under applicable business-to-business marketing rules.
The PECR soft opt-in applies.
Another appropriate legal basis and permission applies.

Where consent is required, consent to email marketing and consent to SMS marketing will be made sufficiently clear in the form wording.

Our marketing emails and SMS messages will identify Brit Business Funding Ltd or the relevant trading brand and provide a clear method of opting out.

Cookies and Website Analytics

Our website uses cookies and similar technologies to operate the website, understand how it is used, measure advertising performance and provide relevant content.

The types of cookies we may use include:

Essential cookies: Required for security, website operation and core functionality.
Preference cookies: Used to remember selections and settings.
Analytical cookies: Used to understand website traffic, performance and visitor behaviour.
Marketing cookies: Used to measure advertising, track conversions and personalise advertising.

Where required by PECR, we obtain consent before placing or accessing non-essential cookies on your device.

You can manage your cookie preferences through our website’s cookie controls or through your browser settings.

General information about cookies is available from www.allaboutcookies.org.

Your Data Protection Rights

Under UK data protection law, you may have the following rights:

Right	Description
Right to be informed	To be told how and why we collect and use your personal data.
Right of access	To request a copy of the personal data we hold about you.
Right to rectification	To request correction of inaccurate or incomplete personal data.
Right to erasure	To request deletion of your personal data in certain circumstances.
Right to restrict processing	To ask us to limit how we use your personal data in certain circumstances.
Right to data portability	To request that certain personal data is transferred to you or another organisation.
Right to object	To object to processing based on legitimate interests or carried out for direct marketing.
Right to withdraw consent	To withdraw consent at any time where processing is based on consent.
Rights relating to automated decision-making	To request safeguards relating to decisions made solely through automated processing where those decisions have legal or similarly significant effects.
Right to complain	To complain to the Information Commissioner’s Office about how your personal data has been handled.

The right to object to direct marketing is absolute. Where you object to the use of your personal data for direct marketing, we will stop using it for that purpose.

Some rights are subject to legal limitations and may not apply in every situation.

You can exercise your rights by contacting us using the details below. We may need to request information to confirm your identity before responding.

We will normally respond to a valid request within one month, although the response period may be extended where permitted by law.

How to Contact Us

Questions, concerns and requests relating to this Privacy Notice or your personal data should be directed to:

Data Protection Contact:
Josh O’Neill
Marketing Director
Brit Business Funding Ltd

Email: josh@britishbusinessfunding.co.uk
General Email: info@britishbusinessfunding.co.uk
Telephone: 0204 571 8480
Post: 7 Bell Yard, London, WC2A 2JR

Contacting the Information Commissioner’s Office

You have the right to complain to the Information Commissioner’s Office if you are dissatisfied with how we have processed your personal data.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/global/contact-us/

We would appreciate the opportunity to address your concerns before you contact the ICO, but you are not required to contact us first.

Policy Updates

We may update this Privacy Notice periodically to reflect changes in the law, regulatory guidance, technology, our services or our business practices.

The latest version will be published on our website. Where changes are significant, we may take additional steps to bring them to your attention.

Last updated: 21 July 2026