No. We never sell your data. We only share your information with carefully selected lenders or brokers for the purpose of matching you with relevant finance options, and only with your permission.

Will you run a credit check on my business?

We do not run credit searches ourselves. A lender or broker may carry out a soft or hard search after explaining this to you and obtaining your consent.

What is your lawful basis for processing my data?

We rely on legitimate interests and steps prior to entering a contract to assess your eligibility and provide introductions. For marketing, we rely on your consent, which you can withdraw at any time.

How long do you keep my information?

If you do not proceed, we typically retain your data for up to 24 months to support questions and auditing, then securely delete or anonymise it. Some records may be kept for up to six years to meet legal or accounting requirements.

Where is my data stored?

We use secure, reputable service providers. Where data is accessed from or stored outside the UK/EEA, we use approved safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How can I exercise my UK GDPR rights?

You can request access, correction, deletion, restriction, portability, or object to processing by emailing hello@bestbusinessloans.ai. We will respond within statutory timeframes.

Is this financial advice?

No. Best Business Loans is an introducer and does not provide financial advice or lend directly. We help you discover suitable finance providers; decisions are always yours.

How is my business data handled and who will see it?

Short answer: We collect only the details needed to assess eligibility and match your business with suitable finance providers, store them securely, and never sell your data. We share your information only with carefully selected lenders or brokers relevant to your enquiry, and only with your permission. You stay in control at every step, and you can ask to access, correct, or delete your data at any time.

1) What we collect, why we collect it, and how our AI uses it

Data we collect to assess eligibility and match you with providers

When you complete a Quick Quote, we ask for information about your company, sector, funding purpose, and contact details. Depending on the finance type and amount, we may request additional information, such as trading history, turnover bands, assets, or existing finance commitments. We do not carry out credit checks ourselves; any credit search is done by a provider only after your consent.

Lawful basis under UK GDPR

We process your data under “legitimate interests” and “steps prior to entering a contract” so we can introduce you to suitable finance providers. If you opt in to marketing, we rely on your consent and you can withdraw it at any time. We may also process limited data to meet legal obligations, such as record keeping and fraud prevention.

How our AI-driven matching works

Our system analyses your business profile against lender or broker appetite, eligibility criteria, and product fit. The aim is to reduce wasted applications and connect you with providers who are actively lending in your sector. We combine technology with human review where needed, so automated outputs do not make legally binding decisions about you.

Data minimisation and relevance

We ask only for information that helps determine suitability and speed. If a lender or broker requires further documentation later, they will explain what is needed and why. You decide whether to proceed with any additional checks.

Examples of typical information requested

Basic company details (name, trading status, sector, and contact information). Funding requirements (amount, purpose, timeframe, and preferred products). Trading context (years in business, revenue range, asset types, or seasonality).

Special category data

We do not need or ask for special category data (such as health or religious information) for finance matching. Please avoid submitting sensitive data unless a provider specifically requests it and explains why.

2) Who will see your data, when we share it, and how we keep sharing fair and proportionate

Who can access your data within Best Business Loans

Access is restricted to trained staff who need the data to support your enquiry. Our role-based access control ensures only relevant team members can view your details. We monitor access and use multi-factor authentication where appropriate.

Who we share your data with outside Best Business Loans

Finance providers: selected lenders or brokers that match your profile and funding goals.
Technology partners: secure hosting, CRM, analytics, and support tools to run our platform.
Compliance partners: anti-fraud or ID verification partners if required for your application.

We will only share your details with a short list of relevant providers and only for the purpose of finance matching. We never sell your data.

When sharing happens and what you control

We share your information after you submit a Quick Quote and we identify suitable options. You’ll be told who may contact you and for which product types, and you can tell us not to share with any specific provider. You can also ask us for a list of providers your details have been shared with.

Credit searches and your consent

We do not conduct credit searches and we do not authorise providers to do so without your permission. Some providers may perform a soft search first, which does not affect your credit score. If a hard search is needed, they will explain it to you and request explicit consent.

Sector-specific sharing example

If you run a hospitality venue, we may match you with lenders experienced in seasonal cash flow, card-acquirer data, or refurbishment finance. For a sector guide, see our page on restaurant business loans and finance options.

Third-country transfers

Where a trusted processor stores or accesses data outside the UK/EEA, we use recognised safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses. We require equivalent protections and security from those providers.

3) Security controls: how we protect your information end-to-end

Encryption and transit security

We use HTTPS/TLS to protect data in transit between your browser and our systems. Sensitive information held within our core tools is encrypted at rest. We periodically review cipher configurations and security patches.

Access controls and staff training

We operate role-based access, strong passwords, and multi-factor authentication where practical. Staff receive training on confidentiality, phishing awareness, and data protection principles. Access is removed promptly when it is no longer required.

Secure vendors and contracts

We vet technology suppliers for security standards and data-handling practices. Data processing agreements bind each provider to UK GDPR obligations. Vendors are required to notify us of any relevant incidents promptly.

Data segregation and logging

Customer records are logically separated within our systems to minimise cross-access. We maintain activity logs for key data events to support auditing and incident response. Logs are retained for an appropriate period and reviewed when necessary.

Incident response and breach notification

If a data incident ever occurs, we follow a documented incident response plan. Where legally required, we will notify the ICO and affected individuals without undue delay. We will also explain what happened, what we have done, and how to reduce any risk.

Practical steps you can take

Submit information through our secure forms rather than via open email. Share only the documentation requested for your case. Let us know immediately if you suspect unauthorised access to your email or files.

4) Retention, your rights, cookies, and marketing preferences

How long we keep your data

We keep enquiry details for as long as necessary to progress your request and for a reasonable period afterwards to support questions and audits. If you do not proceed, we typically retain your data for up to 24 months, then securely delete or anonymise it. Where regulations or accounting rules apply, we may retain certain records for up to six years.

Your rights under UK GDPR

Access: request a copy of the data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: request deletion where we have no compelling reason to keep it.
Restriction: ask us to limit certain processing.
Portability: receive your data in a portable format where applicable.
Objection: object to processing based on legitimate interests or direct marketing.

To exercise your rights, email hello@bestbusinessloans.ai. We respond in line with statutory deadlines.

Marketing and communications

We only send marketing if you have opted in, and you can opt out at any time using the unsubscribe link or by contacting us. Service emails relating to your active enquiry may still be sent as they are necessary. We keep a record of marketing consent choices.

Cookies and analytics

We use cookies to run our website and, where you consent, to analyse performance. You can manage your preferences via our cookie banner and your browser settings. Analytics data helps improve user experience and does not include your finance application documents.

Automated decision-making and profiling

Our AI matching suggests suitable routes based on the information you provide. These suggestions do not have legal or similarly significant effects; you always choose whether to proceed. You can request human review at any stage.

Complaints and supervisory authority

If you are unhappy with how we handle your data, contact us first at hello@bestbusinessloans.ai so we can help. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We will cooperate fully with the ICO.

5) Fair, clear, and transparent: our promise on compliance and your next steps

Clear, fair, and not misleading

Although Best Business Loans is an independent introducer and not itself FCA-regulated for lending, we aim to follow the FCA’s “clear, fair, and not misleading” standard. We also align our communications with ASA and Google Ads policies for financial services. We present balanced information so you can make informed choices.

Important disclosures

We are not a lender; we introduce you to selected lenders or brokers who may be able to help.
We cannot guarantee acceptance, offers, or the lowest rates; eligibility and pricing depend on provider assessment.
Any credit searches are performed by a provider with your consent.
There is no obligation to proceed at any stage.

We review our content regularly to keep it accurate and up to date. If anything is unclear, let us know and we will explain it plainly.

How to get started securely

Complete the Quick Quote form with accurate, relevant details about your business and funding goal. Our system will review your profile and identify a shortlist of suitable providers. You will stay informed about who may contact you, and you can decline any introductions you do not want.

Key takeaways

Your data is collected for finance matching, kept secure, and never sold.
We only share with relevant lenders or brokers, and only with your permission.
You control marketing preferences and can exercise UK GDPR rights at any time.
We follow industry best practices to keep communications fair, clear, and not misleading.

Start your finance journey with confidence. Submit your Quick Quote now for a fast, secure, no-obligation eligibility check.

About Best Business Loans

BestBusinessLoans.ai helps established UK companies find suitable business finance options through AI-powered matching and a trusted network of providers. We work across sectors including construction, manufacturing, logistics, retail, hospitality, healthcare, and more. For help before submitting your form, email hello@bestbusinessloans.ai.

Updated: October 2025