At a glance

• We are an introducer that connects businesses with lenders and brokers — we do not lend.
• We collect minimal information (business name, contact, loan amount, sector) necessary to match you.
• Form submissions are encrypted in transit (HTTPS/TLS) and stored securely with encryption at rest.
• We share enquiries only with vetted partners under contract and with data use limits.
• You have GDPR rights — access, correct, erase or object — and a clear route to exercise them.
• Free Eligibility Check — quick, no-obligation, and does not affect your credit score.

Who we are and what role we play

UK Business Loans is a specialist introducer that helps UK companies find suitable business finance solutions. We don’t provide credit ourselves — we pass enquiries to lenders and brokers who may contact you with quotes and next steps. Because we act as the initial controller of your enquiry data, we explain clearly how we collect, use and share it so you can decide whether to proceed.

If you’re exploring options such as business loans, our matching process makes it fast to see likely solutions without filling dozens of separate forms — learn more on our business loans page.

The legal basis for processing your data

Under UK data protection law we rely on one or more lawful bases to process your information:

• Contractual / legitimate interest: To match your enquiry to lenders and brokers and to take steps you request (legitimate interest in delivering the matching service).
• Consent: Where we ask to send marketing or share data for promotional purposes we will request clear, opt-in consent which you can withdraw at any time.

We explain the legal basis on the enquiry form and in our Privacy Policy so you know why each field is requested and who may receive it.

What data we collect and why

We follow the data minimisation principle: only the information necessary to make an appropriate match is requested.

• Required: Business name, company registration (if applicable), contact name, email, phone, loan amount required, sector, location.
• Optional / where helpful: Annual turnover, years trading, existing finance details, and uploaded documents you choose to provide (e.g., management accounts).

We do not require bank login credentials and we advise against sharing unnecessary sensitive details until you have a secure, direct agreement with a chosen lender or broker.

How we secure your data — technical and organisational measures

Transmission & storage security

All form submissions are sent over TLS/HTTPS (TLS 1.2+). Data at rest is protected using industry-standard encryption (for example AES‑256 where supported). Backups are encrypted and stored securely.

Access control & staff safeguards

Access to enquiry data is strictly limited: role-based permissions, least-privilege principles and multi-factor authentication protect staff and partner access. Staff complete background checks and regular data protection training.

Infrastructure & monitoring

We use secure hosting with firewalls, intrusion detection, regular patching, vulnerability scanning and scheduled penetration tests. Audit logs and access trails help us investigate and respond to incidents.

Third-party processors

CRMs, email providers and analytics tools are assessed before use. We sign Data Processing Agreements (DPAs) that require processors to meet security standards and to process data only on our instructions.

Operational minimisation

Where possible we pseudonymise or redact personal data in internal systems, and we avoid storing sensitive documents unless necessary for a prospective lender to assess an application.

Example trust signal you’ll see near the form: padlock icon + short note “Secure form — data encrypted in transit and at rest.”

Who we share your data with — partners, purpose and safeguards

We share your enquiry only with a small number of lenders and brokers who best match your needs. Safeguards include:

• Pre-approval checks and contractual limitations on data use.
• Data Processing Agreements that restrict purpose and require security measures.
• Minimal fields shared — only what the partner needs to assess suitability.

We do not sell enquiry lists to unrelated third parties. The enquiry form includes clear microcopy that explains who may contact you.

Your rights under GDPR — what you can do and how we help

You have statutory rights. Here’s how they work and how to exercise them:

• Right of access: Request a copy of personal data we hold.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion where there is no overriding legal reason to retain data.
• Restriction & objection: Request restricted processing or object to processing based on legitimate interests.
• Data portability: Request your data in a structured, machine-readable format.

To make any request contact: privacy@ukbusinessloans.co. We aim to respond within one month and will notify you if any lawful extension is needed. If you remain unsatisfied you can complain to the Information Commissioner’s Office (ICO).

If you want us to remove your data now, email privacy@ukbusinessloans.co — or if you prefer to proceed to get matched, start a Free Eligibility Check.

Retention policy — how long we keep your enquiry

Typical retention timelines:

• Enquiries that do not proceed: retained up to 12 months to allow matching and fraud prevention, then deleted or anonymised.
• Enquiries that progress to an application or where contractual records are needed: retained up to 6 years for business records, audits and potential disputes.
• Legal holds: retained for longer if required by law.

Deletion is performed securely; where deletion is impractical we anonymise the records.

Data breaches & what we’ll do

We maintain a breach response plan. If a notifiable personal data breach occurs we will:

1. Contain and assess the breach.
2. Notify the ICO within 72 hours if required by law.
3. Inform affected individuals when the breach is likely to result in a high risk to their rights and freedoms, explaining steps taken and mitigation measures.

Notifications will be via email and/or phone, with advice on what affected parties should do (for example, change passwords or monitor communications).

International transfers

Most processing happens within the UK. If data is transferred outside the UK/EU we ensure adequate protection via adequacy decisions or Standard Contractual Clauses (SCCs) and technical safeguards such as encryption.

Cookies, tracking and marketing

We use essential cookies for site functionality, analytics cookies to improve the service and marketing cookies only with consent. Cookie preferences are managed via a banner and granular settings. Marketing opt-in is a separate tickbox and is never pre-ticked — you decide if you want offers by email or phone.

How to submit safely — tips for users

• Complete only the minimum fields on the quick enquiry.
• Avoid uploading sensitive documents until you have agreed secure transfer with a lender or broker.
• Check for the HTTPS padlock when uploading documents or entering personal data.
• Questions? Email privacy@ukbusinessloans.co or call the number on our Contact page.

How we approve & audit our lender and broker partners

Before sharing data we run due diligence checks (reputation checks, security questionnaires and reference checks). Partners must sign agreements covering permitted uses, security standards and breach notification. We periodically review partner performance and can remove partners who fail to meet our expectations.

Sample privacy notice & consent text for the enquiry form (copy-ready)

Privacy snippet (under form): UK Business Loans will use this information to match you with suitable lenders and brokers. We share details only with approved partners under contract. See our full Privacy Policy.

Consent checkbox (required): “I confirm I am authorised to provide this business information and agree that UK Business Loans may share my details with selected lenders and brokers to obtain quotes. I understand my data will be processed in line with the Privacy Policy.”

Marketing checkbox (optional): “I would like to receive marketing and offers by email/phone (optional).” (Do not pre-tick.)

FAQs

Will submitting an enquiry affect my credit score?

No — filling our enquiry is not a credit application. Lenders or brokers may run credit checks later with your permission.

Who will contact me after I submit?

A small selection of lenders or brokers that match your needs will contact you by phone or email to discuss options and provide quotes.

Can I stop a lender from contacting me?

Yes. Reply to the contacting organisation to ask them to stop, or email privacy@ukbusinessloans.co and we will remove your details from further matching.

Are your partners vetted?

Yes. Partners go through due diligence and must meet contractual security and conduct commitments. We periodically review partner compliance.

How do I withdraw consent or request deletion?

Email privacy@ukbusinessloans.co with the subject “Data deletion request” and we will process this in line with legal requirements, usually within one month.

Get Started — Free Eligibility Check

Ready to check eligibility?

Our short enquiry takes around two minutes and helps us match your business with lenders and brokers who can provide quotes for loans of £10,000 and above. It’s free and no obligation. Get Quote Now — we’ll match you to the best providers and they’ll contact you directly with options.

If you have a privacy question first, email privacy@ukbusinessloans.co.