1. Who We Are
BizBritain Finance Limited ("BizBritain", "we", "us", "our") is a UK-based financial brokerage and business support provider. We are authorised and regulated by the Financial Conduct Authority (FCA) and registered with the Information Commissioner's Office (ICO) under registration number ZA062551.
We act as a data controller when determining how and why personal data is processed.
2. Scope of This Policy
This privacy policy applies to all services, platforms, and websites operated by BizBritain, including:
- www.bizbritain.com
- Customer-facing applications
- Internal and partner-facing systems used to assess applications
- Any associated subdomains, portals, or digital services
This policy explains how we collect, use, store, and share your personal data across these services.
3. The Services We Provide
We provide:
- Business finance brokerage services
- Application support for funding (including Start Up Loans and other finance products)
- Digital tools to help you prepare applications and business plans
- Internal assessment and review of applications before submission to lenders
BizBritain acts as a credit broker, not a lender. We do not provide loans directly or make final lending decisions.
Some of these services involve processing financial, identity, and business-related information to assess eligibility and suitability for funding.
4. The Data We Collect
We may collect and process the following categories of personal data:
Identity Data
Name, date of birth, nationality, identification documents (e.g. passport, driving licence), national insurance number.
Contact Data
Address, email address, telephone number.
Financial Data
Bank account information, transaction data, income and expenditure, credit profile, funding requirements.
Business Data
Business plans, forecasts, financial projections, trading history, Companies House information.
Employment & Background Data
Employment history, qualifications, CV information, directorships.
Technical Data
IP address, browser type, device information, usage data.
Special Category Data
Where required for specific programmes (e.g. equality monitoring), we may process limited data such as ethnicity or health information.
Criminal Data
Where required for regulatory or fraud prevention purposes.
5. How We Collect Your Data
We collect data:
- Directly from you (forms, applications, communications)
- From partners (e.g. Start Up Loans Company, referral partners)
- From publicly available sources (e.g. Companies House)
- Automatically via website and platform usage
6. How We Use Your Data
We use your personal data to:
- Assess your eligibility for finance
- Prepare and review applications
- Provide advice and support services
- Submit applications to lenders and funding partners
- Meet legal and regulatory obligations
- Prevent fraud and financial crime
- Improve our services and platforms
Our lawful bases include:
- Performance of a contract
- Steps prior to entering into a contract
- Legitimate interests (e.g. operating and improving our services)
- Legal and regulatory obligations
7. AI-Assisted Processing
In some cases we may use technology, including AI-assisted tools, to support the processing of applications.
These tools may be used to:
- Analyse documents (e.g. business plans, financial data, bank statements)
- Extract and structure information
- Assist in drafting summaries and assessments
- Support internal decision-making processes
Important:
- AI is used only as a support tool
- All lending or application decisions are reviewed and made by a human
- AI does not make final decisions about your application
Where AI tools are used, they operate under our instructions and are subject to contractual and data protection safeguards.
In some cases, you may be offered the option to opt in to AI-assisted processing to enable faster assessment. You may choose not to opt in.
8. Sharing Your Data
We may share your data with:
Funding and Programme Partners
Such as lenders, The Start Up Loans Company, GC Business Finance, and other programme partners.
Service Providers (Processors)
Including:
- Cloud hosting providers
- IT and system administration providers
- Communication providers
- Document processing, analytics providers, and AI-assisted technology providers
These providers process data only on our instructions and are contractually required to protect it.
Professional and Regulatory Bodies
Including regulators, auditors, legal advisors, and HMRC where required.
Referrals to Third Parties
In some cases, we may introduce you to third-party providers, partners, or lenders.
Where you choose to proceed with a referral, you may be directed to the third party's website or platform. Any information you provide to them will be processed in accordance with their own privacy policy.
We do not automatically share your personal data with these third parties unless it is necessary for the service you have requested and you have been informed accordingly.
We do not sell your personal data.
9. International Transfers
Some of our service providers may be located outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreements (IDTA)
- Standard Contractual Clauses (SCCs)
- Transfers to countries with recognised adequacy decisions
We ensure your data receives an equivalent level of protection.
10. Data Retention
We retain personal data only as long as necessary for:
- Providing our services
- Meeting legal and regulatory obligations
- Handling complaints and disputes
Typically:
- Application and service records are retained for up to 6 years
- Some data may be retained longer where required by law
Where possible, data may be anonymised and used for analysis and improvement.
11. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Access controls and role-based permissions
- Secure storage systems
- Encryption in transit and at rest
- Monitoring and incident response procedures
Access is limited to those who need it to perform their role.
12. Your Rights
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion (where applicable)
- Object to processing
- Restrict processing
- Request data portability
You also have the right to object to certain types of processing, including profiling.
Requests can be made via: privacy@bizbritain.com
13. Automated Decision-Making
We do not make solely automated decisions that have legal or significant effects on you.
All decisions relating to finance applications involve human review.
14. Contact Us
If you have any questions or wish to exercise your rights:
Email: privacy@bizbritain.com
Address: BizBritain Finance Limited, Level 18, 40 Bank Street, Canary Wharf, London E14 5NR
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
15. Updates to This Policy
We may update this policy from time to time.
The latest version will always be available on our website.
