Privacy policy

FundBiz collects business and applicant data so we can match you with lenders and pass your application forward when you choose to apply. This page explains what we collect, why, and what your rights are under UK GDPR.

Who we are

FundBiz is published by Best Business Loans Ltd, registered in England and Wales (company number 16833937), registered office Cust Hall, Toppesfield, Halstead, Essex CO9 4EB. For the purposes of UK GDPR, Best Business Loans Ltd is the data controller for personal data we collect.

What we collect

  • Business data. Company name and number, sector, trading time, turnover band, ticket size requested, use of funds.
  • Applicant data. Name, email, phone, role at the company.
  • Credit signals. Self-declared (CCJ status, missed payments, decline history) and where you authorise it, soft-search data from a credit reference agency.
  • Server logs. IP, user agent, URL, timestamp. Retained 30 days.
  • Cookies. Essential (matcher session, consent state). Analytics and marketing cookies only with consent.

Why we collect it

  • To run the eligibility checker and match you to lenders.
  • To pass your application data to a lender you select.
  • To report aggregated, anonymised conversion data back to lenders for panel monitoring.
  • To improve the matcher logic over time.

Lawful bases

Eligibility-checker inputs and lender introductions: contract performance (we cannot match you without the data) and legitimate interest. Soft credit search: consent (you tick a box). Marketing: consent (opt in). Server logs and essential cookies: legitimate interest (running the site).

Who we share with

  • Lenders on our panel, when you choose to apply with them. They become independent data controllers from that point and apply their own privacy policy.
  • Hosting and infrastructure providers (Cloudflare).
  • Email and CRM providers we use to operate the site.
  • Credit reference agencies, only if you authorise a soft search.

We do not sell personal data. We do not pass data to advertisers or data brokers.

Retention

  • Eligibility-checker entries that did not progress to application: 90 days.
  • Applications introduced to a lender: 6 years (commercial record-keeping requirement).
  • Email correspondence: 3 years.
  • Marketing opt-outs: indefinitely (so we honour them).

Your rights

Access, rectification, erasure, restriction, objection, portability. Email privacy@fundbiz.co.uk to exercise any of these. You can also complain to the ICO at ico.org.uk.

Last reviewed: 26 April 2026.