Last Updated: 1 July 2026

Data Controller

Business Credit Services Ltd, trading as Capital Advance, is the data controller responsible for your personal information.

• Company: Business Credit Services Ltd
• Companies House registration: 16066739
• Registered address: 128 City Road, London, EC1V 2NX
• ICO registration: ZB929415

Data Protection Officer

Our Data Protection Officer function is provided under contract by Incall Ltd, an external information security and data protection consultancy. The DPO is responsible for overseeing compliance with applicable data protection laws and acting as a point of contact for individuals wishing to exercise their rights.

The DPO can be contacted at: dpo@capitaladvance.co.uk

Introduction

Capital Advance is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal information when you visit our website or interact with our services.

Information We Collect

We may collect the following types of personal information:

Information you provide: your name, contact details, business information, and financial information when you apply for a loan or interact with our website.

Information collected automatically: when you visit our website, we may automatically collect information about your device, including IP address, browser type, and operating system, as well as information about your interactions with our website such as the pages you visit and the links you click.

Information from third parties: we may obtain information about you from third parties, including credit reference agencies, fraud prevention services, and identity verification providers.

Credit Reference and Affordability Checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).

We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

• Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority. FCA Firm Reference Number: 742313
• TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority. FCA Firm Reference Number: 737740

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

• Creditsafe Transparency Notice: https://www.creditsafe.com/gb/en/legal/transparency-notice.html
• TransUnion Bureau Privacy Notice: https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

How We Use Your Information

We use your personal information for the following purposes:

• Processing loan applications: to assess your loan application, make credit decisions, and administer your loan if approved.
• Providing customer service: to respond to your inquiries, provide customer support, and resolve any issues.
• Fraud prevention: to prevent fraud and protect our business and customers.
• Legal and regulatory compliance: to meet our obligations under applicable law and financial services regulation.
• Improving our services: to analyse how our website is used, identify trends, and improve our services.

Non-Automated Decision Making and Profiling

We may use automated systems and tools to support certain business processes, such as risk assessment, fraud prevention, affordability checks, identity verification, or record management.

These tools may analyse personal data using predefined criteria or rules to generate indicators, scores, or recommendations. However, we do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing. Any such decisions are subject to meaningful human review.

The use of these tools may influence the speed or level of review applied to an application or request, but individuals will not be subject to automatic rejection or adverse decisions without human involvement.

Marketing and Communications

Capital Advance does not currently send marketing communications to customers or website visitors. Should this change in future, we will only send marketing materials with your explicit consent, and you will have the right to opt out at any time via an unsubscribe link in the communication or by contacting our Data Protection Officer.

Sharing Your Information

We may share your personal information with:

• Credit reference and fraud prevention agencies: as described in the Credit Reference and Affordability Checks section above.
• Third-party service providers: who help us operate our business, such as payment processors, IT service providers, and cloud storage providers, under appropriate confidentiality and data protection obligations.
• Law enforcement and regulatory authorities: as required by law, or to protect our rights or the rights of others.
• Group and affiliated companies: Capital Advance does not currently share personal data with affiliated or group companies. Should our corporate structure change in future to include such entities, we will update this Privacy Policy accordingly.

Data Security

We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include enforced multi-factor authentication, encrypted data storage with our enterprise cloud providers, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with our legal and regulatory obligations, and resolve disputes. Loan-related data is typically retained for a period of six years following the closure or repayment of a loan, in line with FCA and general commercial record-keeping requirements.

International Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, such as UK-recognised adequacy decisions or standard contractual clauses, to ensure your data receives an equivalent level of protection.

Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

• Access: the right to request access to your personal information.
• Rectification: the right to request correction of any inaccuracies.
• Erasure: the right to request deletion of your personal information (subject to legal and regulatory retention obligations).
• Restriction: the right to request restriction of processing of your personal information.
• Objection: the right to object to the processing of your personal information.
• Data portability: the right to request transfer of your personal information to another organisation.
• Withdraw consent: where processing is based on consent, the right to withdraw that consent at any time.
• Complain to the ICO: the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, please contact our Data Protection Officer at dpo@capitaladvance.co.uk. We will respond to all valid requests within one month.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any significant changes by posting a notice on our website or by contacting you directly where appropriate.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact:

Business Credit Services Ltd, trading as Capital Advance
128 City Road, London, EC1V 2NX

• Data Protection Officer: dpo@capitaladvance.co.uk
• General enquiries: team@capitaladvance.co.uk
• Telephone: 0207 362 9054