Privacy Policy.

1. Who we are

Finstock Capital Limited ("Finstock", "we", "us") is a company registered in England & Wales (company number 10658703). Our registered office is Britannia House, 1–11 Glenthorne Road, London, W6 0LH. We are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at info@finstockcapital.com or by post at the address above.

2. Who this policy covers

This policy applies to visitors to finstockcapital.com, people who contact us by email, phone or through the enquiry form on this site, and the directors, shareholders, guarantors and staff of businesses that enquire about or take finance from us. We lend to companies rather than consumers, but in the course of that work we handle personal data about the individuals connected to those companies.

3. The data we collect

Enquiries. When you use the enquiry form or email us we receive the details you provide: typically your name, company, email address, phone number, the type of finance you are interested in and your message.

Applications and lending. If your business goes on to discuss a facility with us we will collect what we need to assess and document the loan. For the individuals involved this can include name, role, date of birth, address history, identity documents, contact details, shareholdings, and information about personal financial standing where a guarantee or security is proposed. We may also obtain information from credit reference agencies, Companies House and other public registers, and from identity-verification and anti-money-laundering (AML) screening providers.

Website use. Our hosting provider records standard server logs (IP address, browser type, pages requested and the time of the request) to run the site securely. This site does not use advertising or analytics cookies.

Correspondence. We keep records of our communications with you, including emails and notes of calls and meetings.

4. Why we use it and our lawful basis

• To respond to your enquiry and discuss whether we can help — our legitimate interest in running and developing our business, and, where you are acting for a prospective borrower, taking steps at your request before entering into a contract.
• To assess, document, fund and manage a loan — performance of a contract with the borrowing company, our legitimate interests as a lender in assessing credit risk and enforcing our rights, and compliance with our legal obligations.
• To verify identity and screen for financial crime — compliance with legal obligations under UK anti-money-laundering, sanctions and counter-terrorist-financing rules, and our legitimate interest in preventing fraud.
• To keep in touch about our services — our legitimate interest in maintaining relationships with professional contacts and past and prospective borrowers. You can ask us to stop at any time.
• To run and secure this website — our legitimate interest in keeping the site available and protected.
• To keep records and deal with disputes — our legitimate interests and, where relevant, the establishment, exercise or defence of legal claims.

We do not use automated decision-making that produces legal or similarly significant effects on individuals. Lending decisions are made personally by our principals.

5. Who we share it with

We share personal data only where necessary and with appropriate safeguards, with:

• Service providers that process data on our behalf: our website host (Netlify), the provider that delivers enquiry-form submissions to us (Formspree), our email and document platform, and identity-verification and AML screening providers.
• Professional advisers — solicitors, accountants, valuers and auditors — where needed to document, complete or manage a transaction.
• Credit reference agencies, Companies House and public registers when assessing an application. A search may leave a footprint on a personal credit file where a guarantee or personal security is proposed; we will tell you before that happens.
• Funding partners and co-lenders where a facility is funded with or introduced to a third party, under confidentiality obligations.
• Regulators, law-enforcement agencies and courts where we are required to by law.
• A buyer or successor if we sell or restructure our business, in which case the recipient is bound by this policy.

We do not sell personal data.

6. International transfers

Some of our service providers store or process data outside the UK, including in the United States. Where that happens we rely on the UK International Data Transfer Agreement or Addendum, an adequacy decision, or another safeguard recognised under UK data protection law, so that your data receives a level of protection equivalent to that in the UK.

7. How long we keep it

Enquiries that do not lead to a transaction are kept for up to two years so that we can respond to follow-up questions, then deleted. Records relating to a loan, including AML and identity records, are kept for the life of the facility and for six years after it is repaid, in line with our legal and regulatory obligations and limitation periods for claims. Server logs are retained by our hosting provider for a short period for security purposes. Where we no longer need data we delete or anonymise it.

8. Your rights

Under UK data protection law you have the right to ask us for access to the personal data we hold about you; to have inaccurate data corrected; to have data erased in certain circumstances; to restrict or object to processing, including objecting to direct marketing at any time; to receive data you gave us in a portable format; and, where we rely on consent, to withdraw it. To exercise any of these rights email info@finstockcapital.com. We will respond within one month and may ask you to confirm your identity first. Some rights are limited where we must keep data to meet a legal obligation.

9. Cookies

This site does not set advertising or analytics cookies and does not use tracking pixels. The site is served over HTTPS and our hosting provider may set strictly necessary technical cookies to deliver it securely. If we add analytics in future we will update this policy and, where required, ask for your consent first.

10. Security

We keep personal data on access-controlled systems, use encryption in transit, and limit access to the people who need it. Documents relating to a transaction are shared through secure channels. No system is perfectly secure, and if we become aware of a personal data breach that is likely to affect your rights we will notify you and the Information Commissioner's Office as the law requires.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by phone on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be highlighted on this page.