How is my data kept secure and who will see it?
Short answer
Your data is protected using industry-standard technical and organisational measures, and we only share it with carefully selected lenders, brokers and service providers who need it to respond to your enquiry.
We never sell your personal data and we minimise what we collect, only keeping information necessary to match you with suitable business finance options and to comply with legal obligations.
What data we collect and why
Types of information we collect
We collect basic contact and business details you enter on our Quick Quote form, including company name, trading history, turnover bands, funding purpose and contact details.
We may also collect limited financial signals such as whether you have existing facilities, the approximate value of assets, and invoice or turnover figures when relevant.
Technical data such as IP address, browser type and device information is logged to protect the platform, prevent fraud and improve service reliability.
Why we collect this data
We use your data to match your business profile with lenders and brokers that are likely to be able to help you, saving time and improving relevance.
Some data is needed to perform automated eligibility checks and to present appropriate product types such as asset finance or invoice finance.
We also retain anonymised, aggregated data for product development, improving AI matching and for lawful compliance or security purposes.
How we keep your data secure
Technical safeguards
All data submitted to Best Business Loans is encrypted in transit using TLS (HTTPS) and sensitive information is encrypted at rest on secure servers.
We host our systems with reputable cloud providers that maintain strong physical and network security controls and deploy firewalls, intrusion detection and monitoring.
Access to production systems is restricted by role-based access controls and multi-factor authentication so only authorised personnel can view customer data when required.
Operational and procedural measures
We apply the principle of least privilege and conduct regular security reviews, vulnerability scanning and penetration testing to find and fix weaknesses.
Our staff receive mandatory security and data protection training, and we maintain incident response plans and regular backups to protect data integrity.
We perform supplier due diligence and only work with processors who meet our security standards and sign appropriate data processing agreements.
AI handling and automated processing
When our AI analyses your Quick Quote, it uses the minimum data fields necessary to match you to likely lenders and brokers.
Automated decisions are supervised and reviewed by our team, and any request that requires human review or further documentation is flagged accordingly.
We log model decisions to allow audits and to continuously improve matching accuracy while respecting data minimisation principles.
Who will see your data?
Internal access and support teams
Only authorised Best Business Loans staff, including our matching and customer support teams, may access your enquiry details to process and manage your request.
Access is granted on a need-to-know basis and is audited so we can trace who viewed or edited records if required.
Lenders, brokers and third-party partners
We introduce your enquiry to a vetted network of lenders and brokers who may contact you to discuss funding options.
We limit shared fields to the information they need to assess interest, such as business type, funding amount and trading history, unless you provide explicit consent to share further documents.
We do not sell your data, and introductions are made only to providers chosen because they are relevant to your enquiry.
When and why we share data
We share your information when you submit a Quick Quote and explicitly ask us to progress introductions, or when you provide consent for a Decision in Principle or eligibility check.
We may also disclose information when required by law, to prevent fraud, or to protect the legal rights of our business and users.
For example, if you request options for a specific product such as commercial finance, we may introduce you to partners listed on our commercial finance page at https://bestbusinessloans.ai/loan/commercial-finance/ so they can assess suitability for your case.
Your rights and choices
Control over your information
You can choose what information you provide on the Quick Quote form and you may decline to proceed if you do not wish to share details beyond initial matching fields.
If you want to stop introductions or withdraw consent for marketing, you can do so at any time using the contact details below or through the links included in our communications.
Withdrawing consent stops future sharing, but it may not undo sharing already authorised in the past where a lender has accepted your introduction.
Data subject rights
Under UK data protection law you have rights to request access to your personal data, ask for corrections, request deletion, object to processing in some circumstances and request portability of your data.
We respond to verified requests promptly and will explain any legal reasons why we might need to retain certain records, for example to comply with anti-money laundering or tax reporting obligations.
To exercise your rights, email hello@bestbusinessloans.ai or use our support contact form and state the nature of your request and relevant verification information.
Retention and deletion
We keep personal data only as long as necessary for the purposes set out in our privacy policy, for the duration of any active introductions, and to meet legal or regulatory requirements.
After the retention period expires we either securely delete or irreversibly anonymise records unless you request earlier deletion and there is no legal reason to retain them.
Requests for account closure and data deletion are actioned in line with our documented retention schedule and we confirm completion by email.
Compliance, trust signals and next steps
Regulation, standards and transparency
Best Business Loans acts as an independent introducer and is not a lender, so we do not offer regulated credit products directly.
Although we are not an FCA-authorised lender, we follow FCA, ASA and Google advertising best-practice by making clear, fair and not misleading statements about the services we help facilitate.
We publish a clear privacy policy, a cookie policy and maintain contractual safeguards with our third-party processors to meet UK data protection standards.
Fraud prevention and verification
To protect businesses and lenders we use verification tools that may check identities and validate company information before we make introductions.
These fraud and identity checks are performed to reduce the risk of unauthorised applications and to protect both applicants and partner lenders.
Any checks are carried out lawfully and the limited information used is disclosed to you on request.
How to proceed with confidence
If you’re ready to get matched, submit a Quick Quote and we will use the secure data you provide only to find suitable finance partners.
We encourage businesses to ask any lender or broker they are introduced to about their own data handling policies and to request evidence of authorisation where necessary.
For help or to exercise any data rights contact hello@bestbusinessloans.ai and one of our team will respond promptly.
Key takeaways
We use encryption, strict access controls and secure hosting to protect your data.
We only share your data with vetted lenders and brokers when you authorise introductions, and we never sell personal data.
You have clear rights to access, correct and request deletion of your information at any time.
Ready to get a Quick Quote?
Complete our Quick Quote to start the matching process securely and see which lenders or brokers may be able to help your business.