How the client portal uses your data

Who we are

Ace Business Finance Ltd, trading as Fundur, is the controller of your personal data. We are a credit broker: we introduce businesses to lenders, and we are not a lender ourselves. Registered in England and Wales, company number 13467397, at Studio B1, Witan Studios, Witan Gate West, Milton Keynes, MK9 1EJ. We are registered with the Information Commissioner’s Office, number [ICO registration number].

Questions about this notice or your data go to [privacy@fundur.co.uk].

What we collect

• About you: your title, name, date of birth, email address, phone number, home address and postcode, residential status, nationality (for example homeowner or tenant) and your share of the business. Lenders ask for your date of birth, home address and residential status to identify you and assess the application; we ask for them on asset finance applications, where a lender needs them to consider it at all.
• About the business: its name, company number, VAT number, website, trading address, business type, sector, how long it has traded, turnover, card takings, any existing cash advance balance, and how much funding it needs, over what term and for what.
• Documents you upload: for example bank statements, accounts, identification and anything else a lender asks for. Bank statements can include details of the people and businesses you pay and are paid by.
• Figures we work out: for example monthly revenue read from your bank statements, and turnover, profit and net assets read from your accounts. An account manager checks these before they are used.
• From Companies House: the public record of your company: its registered name, status, incorporation date, registered office, its directors (with the month and year of birth the register shows) and the people with significant control over it. We use this to check your application and to fill in lenders' application forms accurately.
• Your account: your login email, a scrambled (hashed) copy of your password, and, if you sign in with Apple or Google, the account identifier they give us. We never see your Apple or Google password.
• What happens on your application: which lenders it was put to, what they said, and whether you accepted an offer.

Information about other people

If you give us details about someone else, such as another director, you must have their agreement to do so and tell them about this notice. We use their information in the same way as yours.

Why we use it, and our legal basis

The portal suggests which lenders might suit the business, but it does not decide anything on its own. A member of our team decides which lenders to approach, and each lender makes its own lending decision.

Who we share it with

Lenders

We share your application and documents with the lenders we put it to. Each lender becomes a separate controller of your information and will give you its own privacy notice.

Credit reference and fraud prevention agencies

Applying through this portal does not in itself search your credit file. Lenders we put your application to are likely to search the credit files of the business and its directors with credit reference agencies such as Experian, Equifax and TransUnion, and may check fraud prevention databases. Those searches can leave a footprint on the file. How the agencies use your information is explained in the Credit Reference Agency Information Notice.

Our suppliers

We use these companies to run the portal and our business. They act on our instructions, under contract, and may not use your information for anything else.

We may also share information where the law requires it, for example with the Financial Conduct Authority, or with a buyer if our business is sold.

Transfers outside the UK

Some of our suppliers are based in, or store data in, the United States or the European Economic Area. Where that happens we rely on the UK’s adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum, so that your information keeps the same protection. [Confirm the safeguard for each supplier.]

How long we keep it

We keep your application, documents and account for [six years] after the last activity on your application, because we have to be able to show regulators and lenders what we did and why. After that we delete it, unless we need it for a complaint or legal claim that is still open. Lenders keep what we send them under their own retention policies.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that is wrong
• ask us to delete it, where we do not need to keep it
• ask us to restrict how we use it, or object to our using it
• ask for it in a format you can take elsewhere

To use any of these, email [privacy@fundur.co.uk]. We will reply within one month. Deleting your information while an application is in progress means we can no longer arrange finance for you.

Cookies

The portal sets one cookie, which keeps you signed in. It is strictly necessary for the portal to work, so we do not ask for consent to it. We do not use advertising or analytics cookies.

Keeping it secure

Your documents are stored privately and can only be opened by our team after signing in. Passwords are stored scrambled, so nobody at Fundur can read them. If something goes wrong that puts your information at risk, we will tell you and the Information Commissioner’s Office where the law requires it.

Complaints

If you are unhappy with how we have used your information, please tell us first at [privacy@fundur.co.uk]. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. For other complaints, see how to complain.