Who we are
Capitool Business Finance Limited is the data controller for personal data collected through this website. We are incorporated in England and Wales under company number 17262406.
Registered office: Bohemia, Maldon Road, Witham, England, CM8 1HU
Privacy contact: admin@capitool.co.uk
What we collect
When you send a contact or funding enquiry, we collect the information you choose to provide. This may include your name, business name, email address, phone number, requested funding range, funding purpose and message.
Our hosting and security systems may also process technical information such as your IP address, browser details, request time and referring page. A short-lived hash derived from an IP address is used to limit repeated form submissions. If you consent to analytics, Google Analytics and Microsoft Clarity also process information about your visit as described below. We do not store a copy of the submitted enquiry in a website database.
Please do not send bank details or other sensitive information through these forms.
Why we use it
We use enquiry information to:
- respond to you and discuss your business finance requirements;
- assess which lenders from our panel may have potentially relevant criteria;
- prevent spam, fraud and misuse of the forms;
- meet legal, regulatory and record-keeping obligations that apply to us.
Our usual legal basis for responding to an enquiry is taking steps at your request before entering into a contract and our legitimate interests in operating and protecting the business. Other legal bases may apply where we have a legal obligation or ask for consent.
Email delivery and sharing
Website enquiries are sent by email to Capitool. Authorised staff and service providers involved in hosting, email delivery, security or professional advice may process personal data only where needed for those purposes.
If you ask us to explore finance, we may need to share relevant information with lenders or other finance providers. We will explain this before information is submitted for a lender’s assessment. We do not sell personal data.
Cloudflare Turnstile
We use Cloudflare Turnstile to distinguish genuine users from automated abuse. Cloudflare may process technical and device information for this security purpose under its own privacy terms. Turnstile is used for security, not advertising.
Optional website analytics
If you consent through our cookie settings, we use Google Analytics 4 to understand website activity, including pages visited, approximate location, device and browser information, and how visitors navigate the site. Google processes this information under its own privacy policy.
With the same consent, we use Microsoft Clarity to produce heatmaps and session replays. Clarity records interactions such as clicks, scrolling and page changes, and can capture page content and layout. We mark our enquiry forms for masking so their contents are not included in replays. We use Clarity to improve the website, and do not use it for our own advertising. Microsoft describes its processing in the Microsoft Privacy Statement. Clarity retains playback data for 30 days and click and heatmap data for up to 9 months; labelled or favourited sessions may also be retained for 9 months. Microsoft’s retention details
Both services are disabled until you consent. Our basis for activating them is your consent. You can withdraw it at any time through Cookie settings in the footer. This stops further analytics tracking and removes first-party analytics cookies; it does not affect your access to the website or enquiry forms. Data already collected remains subject to the providers’ retention rules. See our cookie policy for cookie details.
Retention and security
We retain enquiry emails and related correspondence only for as long as needed for the enquiry, legal obligations, dispute handling and legitimate business records. Access is limited to authorised people. No method of transmission or storage is completely secure, but we use proportionate organisational and technical safeguards.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict your data, object to processing, and request portability. Contact admin@capitool.co.uk to make a request.
You may also complain to the UK Information Commissioner’s Office. Visit ico.org.uk for current contact details and guidance.
Changes
We may update this policy when our website or processing changes. The last-updated date above identifies the current version.