How is my data handled—will my information be shared and is it secure?
The short answer
Your information is kept secure, used only to assess and match your enquiry, and is never sold. We may share your details with carefully selected, relevant lenders or brokers—but only to progress your request and only with your knowledge or consent. We apply strong security controls, follow UK GDPR and the Data Protection Act 2018, and design all communications to be clear, fair and not misleading.
Best Business Loans is an independent introducer, not a lender, and we use your data to connect you with suitable finance providers for your business. We minimise what we collect, restrict who can access it, and retain it only for as long as necessary to support your enquiry and our legal obligations. You stay in control: you can access, correct, or request deletion of your data at any time, and you can opt out of marketing.
In short, your data is handled with care, shared only when it helps your finance journey, and protected using industry-standard safeguards. If you’re ready to explore your options, you can get your free Quick Quote—fast, secure, and with no obligation.
What we collect and why we collect it
The essentials we ask for
We collect the minimum information needed to understand your funding needs and match you to potential providers. Typical details include your name, contact information, business name and trading history, sector, loan purpose, estimated amount, and preferred term. We may ask for high-level financial information to support suitability checks and to reduce the number of back-and-forth questions later.
Lawful bases for processing
We process your data under UK GDPR on the lawful bases of “contract” (to take steps at your request prior to entering a contract) and “legitimate interests” (to operate and improve our matching service). For marketing emails or SMS, we rely on your explicit consent, and we’ll only send them if you opt in. You can withdraw consent at any time with a single click.
How we use your information
- To identify relevant funding types and match you with suitable lenders or brokers.
- To introduce you to a finance professional who can progress your application efficiently.
- To provide support and updates on your enquiry and gather feedback to improve our service.
What we do not do
We don’t make lending decisions, perform hard credit checks, or provide regulated financial advice. We don’t sell your personal data. We also don’t request unnecessary information—if we don’t need it to progress your enquiry, we won’t ask for it.
Where enhanced financial details are required, these are typically requested directly by the lender or broker, who will explain what’s needed and why. That ensures you share sensitive documentation only with the provider that’s most likely to help.
When we share your information—and when we don’t
Sharing with lenders and brokers
We may share your information with finance providers that are relevant to your business profile, your sector, and your funding needs. This sharing happens to progress your enquiry, reduce duplication, and avoid you contacting multiple firms individually. We aim to introduce you to reputable providers, and many will be authorised and regulated by the Financial Conduct Authority (FCA) where applicable.
Sharing with service providers
We use trusted service providers to operate our platform—such as secure hosting, CRM, analytics, and communication tools. These providers act under data processing agreements and only process data on our instructions. They are not allowed to use your information for their own purposes.
No data selling—full stop
We never sell your data to third parties. Any sharing is strictly purpose-limited to moving your finance enquiry forward, or to support our platform’s security, performance, and compliance. We also don’t post your details publicly or share them with unrelated advertisers.
Examples of relevant sharing
- If you enquire about asset finance for machinery, we may introduce you to a specialist broker who actively supports your industry.
- If you operate in agriculture, we may connect you with providers experienced in seasonal cash flow and equipment needs—see our page on farming loans for sector-specific guidance.
- If you ask us to pause or stop, we will not continue sharing your details with new providers.
Credit checks are typically performed by lenders or brokers and only with your permission. Where possible, providers may start with “soft” checks that do not affect your credit score, and they should explain any “hard” checks in advance.
Security measures that protect your data
Encryption, access control, and monitoring
We use modern encryption to protect your information in transit (TLS 1.2+ for web connections) and at rest. Access to your data is restricted on a role-based, “least privilege” basis, supported by multi-factor authentication where appropriate. We log and monitor access for audit and security purposes to help detect unusual activity and respond quickly.
Secure development and resilience
We regularly review our security controls, apply updates and patches promptly, and follow secure development practices. Our hosting providers maintain robust data centre security, redundancy, and backup routines to help us restore availability in the event of an incident. Backups are encrypted and retained for limited periods consistent with our retention policy.
Vendor due diligence and data minimisation
Where we use third-party processors, we perform due diligence and include data protection clauses in our contracts. We minimise the data we collect and store; we only retain what is necessary for the stated purpose. If a document is no longer required, we securely dispose of it in line with our policy.
Incident response and accountability
We maintain an incident response process to investigate and mitigate risks swiftly. If a data breach that risks your rights and freedoms were to occur, we would notify you and the relevant supervisory authority as required by law. We regularly review our policies and staff training to support a culture of privacy and security by design.
Your privacy rights and how to use them
UK GDPR rights—simple and practical
You have the right to access, rectify, erase, restrict or object to processing, and to data portability. You can also withdraw consent for marketing at any time—unsubscribe links are included in every message. To exercise any right, email hello@bestbusinessloans.ai; we’ll respond promptly and within statutory timeframes.
Retention, location, and international transfers
We keep your data only as long as needed to manage your enquiry, meet compliance requirements, and maintain accurate records—typically measured in months, not years. Where we store or process data outside the UK/EEA, we use recognised safeguards such as the UK International Data Transfer Addendum and EU Standard Contractual Clauses. We aim to keep most processing within the UK or EEA wherever practical.
Cookies, analytics, and marketing choices
We use cookies and analytics to understand site performance and improve the user experience. Non-essential cookies are optional and controlled through your preferences. We send marketing only if you opt in; you can change your choices at any time without affecting your ability to use our service.
Important compliance notes
We design our communications to be clear, fair and not misleading and align with FCA, ASA, and Google policies. We do not provide regulated financial advice, and we are not a lender; eligibility, rates, and terms are set by the provider and subject to status and credit checks. There is no obligation to proceed—submitting an enquiry is free, and decisions remain yours.
Summary: key takeaways
- Purpose-limited: We use your data to match and introduce you to suitable finance providers—nothing else.
- Controlled sharing: Shared only with relevant lenders/brokers or service providers to progress your enquiry.
- No selling: We never sell personal data—full stop.
- Secure by design: Encryption in transit and at rest, access controls, monitoring, and incident response.
- Your rights: Access, correction, deletion, portability, and easy marketing opt-outs.
Ready to see your options? Start your enquiry in minutes and get matched the smart way. Get your free Quick Quote now.
Frequently asked questions
Will you run a credit check on me?
No. We don’t run credit checks. If needed, a lender or broker may run a soft or hard check, and they should explain this and obtain your permission first.
Do you sell or rent my data?
No. We never sell or rent your data. We only share it with relevant providers or processors to deliver our service.
Can I ask you to delete my information?
Yes. Email hello@bestbusinessloans.ai and we’ll erase your data unless we need to retain limited records for legal or regulatory reasons. We will confirm the outcome in writing.
How long do you keep my information?
We retain data only as long as necessary to manage your enquiry and comply with our obligations. Typical retention is limited and reviewed periodically to support data minimisation.
Do you transfer data outside the UK?
Where transfers outside the UK/EEA are necessary, we use recognised safeguards such as the UK IDTA and EU Standard Contractual Clauses. We aim to keep most processing within the UK or EEA.
Are your partners regulated?
Many lenders and brokers we introduce are authorised and regulated by the FCA where applicable. We recommend verifying any firm’s status on the FCA Register before proceeding.
Can I opt out of marketing?
Yes. We only send marketing if you opt in, and every message includes an unsubscribe link. Opting out does not affect your enquiry.
What security measures do you use?
We use encryption in transit and at rest, role-based access, multi-factor authentication where appropriate, monitoring, secure backups, and vendor due diligence. We also maintain an incident response process.
Will my details be posted publicly?
No. We do not publish your details. Sharing is controlled, purpose-limited, and restricted to relevant providers and service partners.
Do you provide financial advice?
No. We are an introducer. We help you find options and connect you with providers; decisions and advice rest with the lender or broker.
Updated: October 2025