Privacy Policy

Information we collect

• Identifiers and contact information such as name, email, phone number, business name, business address, and job title.
• Commercial and financial information such as requested funding amount, revenue history, time in business, industry, banking relationships, ownership information, receivables data, and uploaded bank statements or related supporting documents.
• Application and lender-routing data such as routing results, offer activity, lender responses, external lead identifiers, notes, attribution source, and submission status.
• Technical and usage information such as IP address, browser type, operating system, referring URLs, device identifiers, event logs, cookies, and analytics data.
• Communication records, including emails, calls, SMS messages, portal activity, and support requests.

How we collect information

We collect information directly from you when you complete forms, request funding, upload documents, communicate with us, or otherwise interact with our websites.

We also collect information automatically through cookies, analytics tools, fraud-prevention tooling, and server logs, and we may receive information from brokers, marketing partners, lenders, banks, data providers, and service providers involved in evaluating or servicing a request.

How we use information

• To operate our websites, application flow, document collection process, and customer support functions.
• To assess business eligibility, route applications, and share information with lenders, brokers, funders, or financing partners that may evaluate a request.
• To communicate about applications, statement uploads, underwriting requests, approvals, denials, funded outcomes, servicing issues, and related operational matters.
• To improve our underwriting logic, routing rules, fraud controls, analytics, and commercial reporting.
• To protect against fraud, abuse, unauthorized access, security incidents, and legal claims.
• To comply with contractual obligations, financing-partner requirements, recordkeeping duties, and applicable law.

How we disclose information

We may disclose information to lenders, brokers, capital providers, referral sources, document processors, communications providers, hosting vendors, analytics vendors, compliance providers, and other service providers who help us operate our services.

We may also disclose information when required by law, regulation, legal process, government request, audit, examination, or to protect rights, safety, property, or enforceable contractual interests.

We do not sell personal information for unrelated third-party advertising. We may, however, share application information with financing and distribution partners in order to evaluate, service, or report on a funding request.

Funding partner sharing, credit checks, consent, and lawful basis

When you submit a funding enquiry, we collect the personal and business information described above, including your name, contact details, business identity, requested funding amount, revenue, time in business, industry, and any supporting documents you provide. We use this information to match you to suitable funding, which means sharing your application with Granton Hale’s affiliates and with one or more third-party funding partners (lenders, brokers, funders, and capital providers). Those affiliates and funding partners may contact you directly about funding options.

As part of assessing your enquiry, Granton Hale and its funding partners may carry out soft credit and eligibility checks. Soft checks (sometimes called quotation or eligibility searches) do not affect your credit score and are not visible to other lenders as a hard search. A funding partner you choose to proceed with may later carry out a hard credit check, but only with your knowledge at that later stage.

The lawful bases on which we rely are: (a) your consent, for the soft credit and eligibility searches and for marketing or funding-related contact from us and our funding partners, which you provide via the consent checkbox on the application form; and (b) our legitimate interests and the steps necessary to respond to your enquiry and take pre-contract steps at your request, for receiving, processing, and routing your application to suitable funding partners.

We retain your funding-application data and the associated consent record for up to 6 years from your last interaction with us, reflecting financial-services recordkeeping, audit, and limitation-period requirements, after which it is deleted or anonymised unless a longer period is required by law or to resolve a dispute.

You may withdraw your consent at any time by contacting us using the details below. Withdrawing consent stops further consent-based searches and marketing contact and does not affect the lawfulness of processing carried out before withdrawal. Where we still need to process limited information to administer an existing enquiry, resolve a dispute, or meet a legal obligation, we may continue to do so on another lawful basis.

Cookies, analytics, and similar technologies

We use cookies, pixels, local storage, and similar technologies to remember preferences, measure traffic, understand conversion sources, secure sessions, troubleshoot issues, and improve the website and application experience.

You can manage certain browser-level cookie settings, but disabling some technologies may affect functionality, performance, attribution, or the ability to submit an application successfully.

Communications and consent

By submitting an inquiry or application, you authorize Granton Hale and its partners to contact you by email, telephone, ringless voicemail, and text message regarding your request, ongoing application status, servicing matters, and related offers, subject to applicable law.

You may opt out of marketing communications, but we may still send operational or transactional communications that are necessary to administer a request, respond to support issues, or satisfy legal obligations.

Marketing communications (UK)

If you are in the United Kingdom, we send electronic marketing (such as email or text messages) only where you have consented, or where the "soft opt-in" applies, that is, where you have made an enquiry about or used a similar service from us, the marketing relates to our similar services, and you were given a clear opportunity to opt out when your details were collected.

Every marketing message we send includes a simple way to opt out, and you can also opt out at any time by contacting us using the details below. Opting out of marketing never affects your funding request or the operational communications needed to administer it.

Data retention

We retain information for as long as reasonably necessary to operate our services, comply with partner and legal obligations, resolve disputes, enforce agreements, maintain business records, and protect against fraud or abuse.

Retention periods depend on the nature of the information, the status of the application or funding relationship, legal requirements, and our legitimate operational needs.

Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These measures may include access controls, encryption in transit, credential management, logging, vendor due diligence, and internal access restrictions.

No internet or storage system can be guaranteed to be completely secure. You are responsible for protecting your credentials and notifying us promptly of suspected unauthorized activity.

Your rights and choices

Depending on where you are located, you may have rights to request access to, correction of, deletion of, or restriction regarding certain information, or to object to certain processing activities. You may also have the right to appeal certain decisions or request additional details about our disclosures.

We may need to verify your identity and authority before acting on a request, and we may deny or limit a request where permitted by law, including where records must be retained for compliance, security, fraud-prevention, dispute resolution, or contractual purposes.

Third-party websites and services

Our websites may link to third-party sites, lender portals, banking tools, or partner services. We are not responsible for the content, security, or privacy practices of third parties, and your interactions with those third parties are governed by their own terms and notices.

International and cross-border processing

Because our services may involve cross-border applicants, technology vendors, and capital-provider relationships, information may be processed or stored in jurisdictions other than the one where it was originally collected. Where required, we use reasonable measures designed to support lawful transfers and appropriate handling.

Changes to this policy

We may update this Privacy Policy from time to time. The updated version becomes effective when posted, unless a different effective date is stated. Material updates may be highlighted through the website or another appropriate channel.