Is my data secure in transit and at rest?

Yes. We use encryption in transit (TLS) and secure storage with access controls. We vet our processors and maintain audit trails to ensure accountability.

Is our data handled securely, and will you sell or share it beyond this enquiry?

Q: Do you run credit checks?

We do not run hard credit checks. If a finance provider needs to run a credit check, they will ask for your explicit consent and handle it directly.

Q: Do you share data outside the UK?

If international transfers are necessary, we use recognised safeguards such as Standard Contractual Clauses or the UK IDTA. We aim to keep data in the UK/EEA where feasible.

Q: Are you regulated by the FCA?

We are an independent introducer and do not provide regulated financial advice. We align our communications with the FCA’s ‘clear, fair and not misleading’ standards.

Short answer: yes, it’s secure — and no, we will never sell your data

Your data is handled securely, confidentially and in line with UK GDPR and the Data Protection Act 2018. We will never sell your personal or business information, and we only share the minimum necessary details with carefully selected lenders or brokers relevant to this specific enquiry. You stay in control at every stage and can ask us to stop sharing or to erase your data at any time.

What happens when you submit a Quick Quote?

We act as an independent introducer that uses AI-driven matching to identify suitable business finance providers for your circumstances. We review your details, limit access to authorised personnel, and only pass them to relevant providers who can genuinely assist with your enquiry. No credit checks happen without your explicit consent.

Why we process your data

We process your information to give you a fast, relevant shortlist of potential lenders or brokers and to support your eligibility checks and introductions. This helps you save time and avoid multiple cold approaches. We do not provide loans ourselves and we do not provide regulated financial advice.

Clear, fair and not misleading

We follow the spirit of the FCA’s “clear, fair and not misleading” standards and Google’s financial services policies. Our content and communications aim to help you make informed decisions, without pressure or unrealistic claims. Rates, fees and approvals always come from the provider you choose, and are subject to their checks and terms.

How Best Business Loans protects your data

We take a “security by design” approach across our platform, tools and processes. Your enquiry is encrypted in transit (TLS) and stored in secure environments with access controls. We follow the principle of data minimisation and do not request information we do not need.

Technical and organisational safeguards

We use secure hosting and reputable third-party processors to support our service (e.g., CRM, email, security monitoring), each bound by data processing agreements. Access to systems is role-based, logged and regularly reviewed. We maintain a documented incident response plan, including prompt notifications if required by law.

Data minimisation and purpose limitation

We only collect data relevant to assessing finance options and making introductions. When we share your data, we send the minimum necessary to enable providers to assess your eligibility or contact you about your enquiry. We do not repurpose your data for unrelated marketing without your consent.

International transfers

If any data is transferred outside the UK, we use appropriate safeguards such as Standard Contractual Clauses or UK IDTA where applicable. We aim to keep data hosted in the UK or EEA where feasible. We review vendors for security posture and compliance alignment.

Staff training and confidentiality

Team members with access to your information are trained on confidentiality, phishing awareness and data protection. We limit who can view your details and ensure accountability with audit trails. Where we work with third parties, we carry out proportionate due diligence.

What we collect, the lawful basis, and how we use it

We typically collect your business name, contact details, company size, trading history, loan purpose, and the amount you’re seeking. Where helpful, we may ask about revenue, assets, or existing finance to refine matching accuracy. We do not collect sensitive categories of personal data for this purpose.

Lawful bases for processing

Our primary lawful bases are legitimate interests (to respond to your enquiry and perform intelligent matching) and consent (for optional marketing communications). Where a provider needs additional checks (e.g., affordability or compliance), they will explain their basis and request any extra consents.

How our AI matching works

Our AI evaluates the details you supply against our network’s indicative criteria to identify potentially suitable providers. It does not make final lending decisions or recommendations. You decide who to engage with, and providers perform their own assessments.

No hard credit searches without consent

We do not carry out hard searches. If a provider needs to perform a credit check, they will ask you first and will handle that process directly. You can decline any check or introduction at any time.

Marketing and communications

We do not send marketing unless you opt in. If you give consent, you can unsubscribe instantly from any email. Service communications about your enquiry are permitted and help move your application forward.

When we share your details — and when we don’t

We share your information only to facilitate this enquiry, and only with relevant providers or professional intermediaries who may be able to help. We never sell your data to third parties. We do not share your details for unrelated marketing.

Who we may share with

We may introduce you to UK lenders, finance brokers or specialist funding partners suitable for your business profile and loan purpose. In some cases, we may use trusted verification services to check identity or eligibility more efficiently. Each partner must treat your data lawfully and transparently.

Sharing principles we apply

We apply strict purpose limitation: sharing only what’s needed to progress your enquiry. We apply data minimisation and ensure partners receive no more than necessary. We expect providers to protect your data and comply with applicable regulations.

Control and consent

You can ask us to pause or stop introductions at any time. If you withdraw consent for marketing, we will honour your choice immediately. If you request deletion, we will act in line with legal and contractual obligations to erase or anonymise.

No incentives to sell your data

Our business model is introducer-led and does not rely on selling data. Any fees we receive are typically from providers for successful introductions and do not change the security or privacy of your data. This supports an unbiased, people-first matching process.

Your rights, retention and how to contact us

Under UK GDPR, you have rights over your personal data. We aim to make exercising those rights simple and fast. You can contact us at any time to update your preferences or request actions.

Your data rights at a glance

Access: request a copy of the data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: ask us to delete your data where legally possible.
Restriction: limit how we process your data in certain cases.
Objection: object to processing based on legitimate interests or to direct marketing.
Portability: request your data in a usable format where applicable.

How long we keep your data

We retain enquiry records only for as long as needed to manage your introductions, comply with legal obligations, resolve disputes or maintain accurate records. When no longer required, we securely erase or anonymise your data. You can request earlier deletion where permitted by law.

Get in touch

Email: hello@bestbusinessloans.ai for any privacy request or question. We will respond promptly and aim to resolve most requests within 30 days. If you are not satisfied, you can contact the Information Commissioner’s Office (ICO) in the UK.

Fair, clear and not misleading

We are not a lender and do not offer financial advice. Any examples, eligibility indicators or timeframes are illustrative and depend on your business and the provider’s assessment. Approval, rates and terms are set solely by the chosen provider.

Secure next steps

It’s free to submit a Quick Quote, and there is no obligation to proceed. Your data will be handled securely and only used to support your enquiry. Start now to check eligibility and connect with relevant providers faster.

Industry-specific support

We often help UK professional services such as accounting and legal firms. If you’re exploring funding options for a law practice, see our resource on finance for solicitors to understand typical requirements and options.

FAQs: data security, sharing and consent

Will you sell my data to third parties?

No. We never sell your data. We use your details only to progress this enquiry and make suitable introductions.

Who will see my information?

Only trained Best Business Loans personnel and the specific lenders or brokers we introduce for your case. Each partner must protect your data and use it only for your enquiry.

Do you run credit checks?

We don’t run hard credit checks. If a provider needs to run a check, they will request your explicit consent and perform it directly.

Can I ask you to stop sharing my information?

Yes. You can pause or withdraw your enquiry at any time by contacting us, and we will cease further introductions. You can also request deletion where feasible.

Is my data safe in transit and at rest?

We use encryption in transit (TLS) and secure storage with access controls. We also vet our processors and keep audit trails to maintain accountability.

Will you send me marketing emails?

Only if you opt in. Service emails about your enquiry are separate and help move your application forward, but you can opt out of marketing at any time.

Do you share data outside the UK?

If transfers outside the UK are necessary, we use recognised safeguards like Standard Contractual Clauses or UK IDTA and choose reputable providers. We aim to keep data in the UK/EEA where feasible.

What if I operate in a sensitive industry?

We apply the same security, confidentiality and sharing principles across all eligible sectors. We only introduce your case to providers who can legitimately support your industry.

Are you regulated by the FCA?

We operate as an independent introducer and do not provide regulated financial advice. We align our communications to the FCA’s “clear, fair and not misleading” standards and follow applicable UK advertising rules.

How do I get started securely?

Complete a Quick Quote to receive an eligibility check and introductions matched to your needs. It’s fast, secure and without obligation to proceed.

What this means for your business — in short

Your data is handled securely, confidentially and in line with UK GDPR.
We never sell your data. We only share the minimum required details with relevant providers for this enquiry.
No hard credit checks occur without your explicit consent.
You control your data: access, correct, erase or object at any time.
Our communications are designed to be clear, fair and not misleading.

Ready to move forward? Submit your Quick Quote for a secure, no-obligation eligibility check and introductions to suitable UK finance providers. We’ll handle your information with care, and you stay in control at every step.

Updated: October 2025 • Best Business Loans — www.bestbusinessloans.ai