Privacy.
The entries taken, the reason for taking them, the parties who see them, and the route to having them struck out.
Last updated 21 September 2026.
What is collected
From the application: the legal name of the business, its EIN, entity type, industry, trading start date, addresses, monthly revenue band, the amount requested and what it is for, and whether anything is currently being repaid. About the person applying: name, date of birth, home address, ownership percentage, telephone number, email address, an approximate credit range and a Social Security Number where one is required to verify identity.
From the statements you upload: the contents of the business bank statements you choose to send.
Automatically: the IP address the application was submitted from, timestamps for each step, and basic technical information about the browser used. This is kept to evidence when a file was completed and to detect abuse.
Why it is held
Four purposes: assessing the entry, laying it before funders, drawing whatever agreement follows, and holding the records that funding and anti-fraud obligations oblige us to hold. Telephoning you about your own file follows from those. None of it feeds an advertising profile.
Who it is shared with
- Funding partners. The file, including the statements, is shared with the partners we approach on your behalf. That is the point of submitting it.
- Service providers. Hosting, storage, email delivery, electronic signature and identity or fraud checks, each acting on our instructions and each limited to what the task requires.
- Where the law requires it. To respond to a lawful request, to comply with a legal obligation, or to establish or defend a legal claim.
Entries are not for sale, and they do not travel to unconnected companies wanting to advertise at you.
How long it is kept
An application that does not proceed is kept while it might still be revived and then deleted. A funded file is kept for as long as the funding relationship and the applicable record-keeping rules require, which is usually several years after the last payment. Bank statements are deleted once the file they belong to is closed and the retention period has run.
How it is protected
Data is encrypted in transit and at rest. Statement files are stored in access-controlled storage and reached through short-lived links rather than public URLs. Only those working an entry may open it. No arrangement is beyond breaching, and this page will not pretend one is.
Your choices
You can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted where we are not required to keep it, and ask to stop receiving messages about a file. Write to the address on the contact page. We will ask you to confirm your identity before acting, because the alternative is handing someone else's financial records to whoever asks for them.
Children
This is a service for businesses. It is not directed at anyone under 18 and we do not knowingly collect information from them.
Changes
If this notice changes, the date at the top changes with it. Material changes will be flagged on this page rather than made quietly.