Privacy policy

We collect enough information to respond to your enquiry and, only if you ask us to, introduce you to a provider. We don't sell your data, and we don't pass it to anyone else for their own marketing. You can ask us what we hold, or ask us to delete it, at any time.

What actually happens when you contact us

1. Your details go to us, carried by the service providers that run this website for us: our website host (Cloudflare, which also runs the form's automated spam and bot check), our database provider (Supabase), which stores a copy of the enquiry, and our email services (Resend, which sends us a notification of the enquiry, and the providers that host our team inboxes). They handle it to provide those services to us. No lender or provider sees your details at this point.
2. We read it and check whether your situation matches a facility we can help with.
3. We do not currently pass enquiries to any provider. If we later offer an introduction and you say yes to it, we may then pass your details to a provider, and only then.
4. If it isn't a fit, or you haven't asked for an introduction, your details go no further than us and the service providers above.

Who we are

Established Finance (Muswell Rose Consulting Ltd, company number 15269776, registered office 40 De Vere Road, Colchester, Essex, England, CO3 4EA) is the data controller for personal information collected through this website. It is registered with the Information Commissioner's Office, registration number ZC186833.

What we collect

• What you tell us directly: your name, business name, contact details, and a description of your funding situation, if you contact us or use one of our facility tools.
• What's collected automatically, and only with your consent: basic analytics (pages viewed, general location, device and browser type) so we can see the site is working and being read. See our Cookie Policy for exactly what this involves.

How we use it

To respond to an enquiry you've made; to review whether your situation matches a facility we can help with; and, only if you ask us to, to introduce you to a provider so they can assess your funding requirement. We do not sell your information, and we do not use it for marketing by any other business.

Our legal basis for using it

Legitimate interest, for responding to an enquiry you've made directly with us. Where we make an introduction to a provider, we rely on your consent, which you give at the point you ask us to introduce you. Where we use analytics cookies, we rely on your consent, given via the cookie banner.

Who we share it with

We may share your details with a provider only once you've asked us to make that introduction, so they can assess your funding requirement. We don't share your details with anyone else for their own marketing purposes.

We also use service providers who handle your details on our behalf to provide those services: website hosting and a spam and bot check on our forms (Cloudflare), database storage for enquiries (Supabase), email delivery (Resend and the providers that host our inboxes) and, only if you accept analytics cookies, website analytics (Microsoft Clarity and Google Analytics).

How long we keep it

We keep your information for 24 months from your last contact with us, unless we're required to keep it longer for legal or regulatory reasons, or you ask us to delete it sooner.

Your rights

Under UK GDPR, you have the right to ask what personal data we hold about you, ask us to correct or delete it, restrict or object to certain uses of it, and ask for a copy in a portable format. To exercise any of these, contact us using the details below.

Counting visits

We count visits with our own counter, so we know how many people use the site and which pages help. It does not use cookies. It does not record your IP address or which browser you use. Your browser keeps a random code for the day, so a second visit that day is not counted twice. The code is replaced the next day and is never linked to an enquiry. For each page we note the page, the page you came from on this site, how long it was on screen, how far down you scrolled, and whether you are on a phone, tablet or computer. On the first page of a visit we also note the website that sent you (for example a search engine) and any campaign name in the link; if you came from an advert we note only that it was an advert, not the advert's tracking code. We also note which of our buttons were shown and clicked, and clicks on our phone and email links and on links to other websites (which website only), which of our links or buttons you clicked to move to another page (the link's text and where it goes, never anything you type) and how far people get through our forms and which question needed correcting (never what you type). We also note when a file is downloaded (the file's name and type, for example a PDF or Word file) and when a copy or print button is used, never what is copied and never anything you type. In our tools, calculators and site search we also note what you type or choose and what the tool showed you, so we can see what people look for and whether the tool helped. We never note this in our enquiry forms. In name, email, phone, address or card boxes we note only that something was entered (for example 'name added'), never what was typed, and anything else that looks like an email address, phone number or postcode is removed before it leaves your browser. We keep these as daily counts of each entry. If you come back on a later day without following a link, your browser remembers which website first sent you (just that website's name and the date, no code), so we can see where returning visitors first found us; "Don't count me" deletes it. We put each day's pages together to see the common routes through the site, only as totals. We keep each day's records for up to 7 days, then keep only the daily totals. We use the counts only to improve this site and do not share them, apart from Cloudflare and Supabase, who host the data for us. The law allows this kind of counting without asking first (Privacy and Electronic Communications Regulations, Schedule A1, paragraph 5). To stop being counted on this site, use the "Don't count me" link at the bottom of any page. If your browser sends Global Privacy Control, we don't count you at all.

We keep a short record in your browser of how you first reached this site: the page you landed on, the website or campaign link that sent you, the pages you view and basic device details. It is there for every visitor, stays in your browser while you read the site, and is not sent to us unless you send an enquiry. If you do, it goes with your enquiry so we can see where it came from. It resets after 30 days, and clearing your browser's site data removes it.

Cookies

This site uses a small number of cookies. See our Cookie Policy for what's set and how to manage it.

Contact & complaints

For any question about how we handle your data, or to exercise your rights: hello@establishedfinance.co.uk. If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office, the UK's data protection regulator.