Privacy Policy

1. Who We Are

Finstock Capital Limited is registered in England and Wales (Company No. 10658703). Our registered office is at Britannia House, 1–11 Glenthorne Road, London, W6 0LH.

We are the data controller for personal data collected through this website and in the course of our lending activities. For data protection queries, please contact us at: [email protected]

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: name, job title, company name
• Contact data: email address, telephone number, postal address
• Financial data: information about your business finances where relevant to a loan enquiry or application
• Transaction data: details of any loan or financial arrangement we have entered into with you
• Technical data: IP address, browser type and version, time zone, operating system (collected automatically when you visit our website)
• Usage data: information about how you use our website
• Communications data: your preferences in receiving communications from us, and your communication history with us

We do not collect any special category data (such as health, racial or ethnic origin, religious beliefs, or biometric data) in the ordinary course of our business.

3. How We Collect Your Data

We collect personal data through the following means:

• Direct interactions: when you submit an enquiry via our contact form, email us, or call us
• Automated technologies: when you visit our website, we may automatically collect technical and usage data (see section 7 on cookies)
• Third parties: we may receive data from credit reference agencies, Companies House, or professional advisers in connection with a loan application

4. How We Use Your Data

We use your personal data on the following legal bases:

Purpose	Legal Basis (UK GDPR)
To respond to your loan enquiry or application	Legitimate interests / Pre-contractual steps
To carry out credit and due diligence assessments	Legitimate interests / Legal obligation
To administer a loan if one is agreed	Performance of a contract
To comply with legal and regulatory obligations (e.g. AML, KYC)	Legal obligation
To send you information about our services where you have indicated interest	Legitimate interests (you may opt out at any time)
To improve our website and understand how visitors use it	Legitimate interests
To prevent fraud and ensure the security of our business	Legitimate interests / Legal obligation

We will not use your personal data for any purpose incompatible with the purposes listed above without first obtaining your consent.

5. Who We Share Your Data With

We do not sell or rent your personal data to third parties. We may share your data with:

• Professional advisers (solicitors, accountants, surveyors) engaged in connection with a specific transaction
• Credit reference and fraud prevention agencies in connection with a loan application or due diligence process
• IT and software service providers who host or process data on our behalf (including our website host and email service provider), who are contractually bound to process data only on our instructions
• Regulatory and law enforcement bodies where we are legally required to do so
• A successor entity in the event of a business sale, merger, or restructuring

All third parties with whom we share data are required to take appropriate security measures and to respect the confidentiality of your personal data.

6. International Transfers

We primarily store and process your data within the United Kingdom. Where any of our service providers are based outside the UK, we ensure appropriate safeguards are in place, such as the UK Government’s International Data Transfer Agreement or equivalent adequacy decision, before transferring any personal data.

7. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small files placed on your device when you visit our website.

We use the following types of cookies:

• Strictly necessary cookies: required for the website to function. These cannot be switched off.
• Analytics cookies: help us understand how visitors interact with our website (e.g. pages visited, time on site). We use this data only in aggregated, anonymised form.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the website. By continuing to use our website, you consent to our use of strictly necessary cookies.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Enquiries that do not result in a transaction: up to 2 years from last contact
• Loan and transaction records: 6 years from the end of the financial year in which the transaction completed (in line with the Limitation Act 1980)
• AML / KYC records: 5 years from the end of the business relationship (as required by the Money Laundering Regulations 2017)
• Website usage data: up to 26 months

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restriction: to request that we restrict processing of your data in certain circumstances
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests, including direct marketing
• Rights in relation to automated decision-making: we do not make solely automated decisions that have a legal or significant effect on you

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Access to personal data within our business is restricted to those who have a genuine need to process it.

However, no transmission of data over the internet is completely secure. Any data you transmit to us is at your own risk, and we cannot guarantee the security of data transmitted to our website.

11. Third-Party Links

Our website may contain links to third-party websites (including LinkedIn). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page, with the date of the most recent update shown at the top. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• Post: Finstock Capital Limited, Britannia House, 1–11 Glenthorne Road, London, W6 0LH
• Phone: 0208 748 9898