Privacy Policy
This policy explains what personal information we collect when you enquire about funding for your practice, how we use it, who we share it with, and the rights you have over it.
Who we are
This privacy policy applies to Capital Business Loans Limited, trading as Practice Capital — a business finance brokerage authorised and regulated by the Financial Conduct Authority. Capital Business Loans Limited is the data controller for the personal data described below.
- Company
- Capital Business Loans Limited
- Trading as
- Practice Capital
- Company registration number
- 14491729
- FCA firm reference number
- 1000382
- Registered office
- Suite 31, Shiftworks, 14 Upper Northgate Street, Chester, CH1 4EE
- Contact
- andrew@practicecapital.co.uk · 01244 906505
- Data controller
- Capital Business Loans Limited
- Last updated
- 13 August 2026
Information we collect
Personal information
- Name, email address and phone number
- Practice details — trading name, company or partnership number, trading address, regulator or professional body registration
- Financial information — turnover, fee income, funding requirement, bank statements and management accounts
- Credit history and business credit reports
- Identity verification documents
Technical information
- IP address, browser type and device information
- Website usage data and analytics
- Cookies and similar tracking technologies
- Communication records — calls, emails and messages
How we use your information
Providing our service
- Assessing your funding requirement and processing your enquiry
- Matching your practice with suitable lenders from our panel
- Carrying out credit checks and risk assessments
- Keeping you updated on the progress of your application
- Providing ongoing support and account management
Legal and regulatory purposes
- Complying with FCA rules and regulatory requirements
- Carrying out anti-money laundering (AML) and identity checks
- Preventing and detecting fraud
- Maintaining records for the periods required by law
- Reporting suspicious activity to the relevant authorities
Business purposes
- Improving our services and website
- Understanding the funding needs of professional practices
- Sending relevant updates and marketing where you have consented
- Requesting feedback on the service you received
Who we share your information with
Authorised third parties
- Lenders: we share your enquiry with suitable lenders on our panel
- Credit reference agencies: Experian, Equifax and TransUnion for credit searches
- Companies House: to verify registration details
- Professional advisers: legal, accounting and compliance consultants
- Technology partners: secure hosting, analytics and communication platforms
Regulatory bodies
- Financial Conduct Authority (FCA)
- Information Commissioner's Office (ICO)
- National Crime Agency — suspicious activity reports
- HM Revenue & Customs, where legally required
Your rights under UK GDPR
- Access and portability — request a copy of your personal data, in a portable format
- Correction — have inaccurate or incomplete information put right
- Deletion — request erasure of your data, subject to legal retention requirements
- Objection and restriction — object to or restrict certain processing
- Withdraw consent — opt out of marketing at any time
Data security and retention
Security measures
- 256-bit SSL encryption for all data in transit
- Secure UK-based data centres with continuous monitoring
- Regular security reviews and testing
- Staff training on data protection and information security
- Multi-factor authentication on our systems
How long we keep data
- Active enquiries — for the duration of the application process
- Completed facilities — 6 years from completion (FCA requirement)
- Declined or withdrawn enquiries — 3 years from the decision date
- Marketing consent — until consent is withdrawn
- Other records — as required by applicable law
Contact and complaints
Data Protection Officer
Email: andrew@practicecapital.co.uk
Phone: 01244 906505
Post: Data Protection Officer, Capital Business Loans Limited, Suite 31, Shiftworks, 14 Upper Northgate Street, Chester, CH1 4EE
Regulatory complaints
If you are not satisfied with our response you can contact the ICO (ico.org.uk, 0303 123 1113) about data protection matters, or the FCA (fca.org.uk, 0800 111 6768) about financial services matters.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices, technology or legal obligations. Material changes will be notified by email or by a prominent notice on this website. Continued use of our services constitutes acceptance of the updated policy.
Version 1.0 · Last updated 13 August 2026 · Next review 13 August 2027