Privacy Policy

Who we are and how to contact us

NBS Finance provides commercial-finance broking and introduction support, mainly for UK limited companies. NBS Finance is not a lender. For privacy questions or requests, email info@nbsfinance.co.uk, call 07849 709772, or write to NBS Finance, Pinfold Lane, Southport, Merseyside, PR8 3QL.

Information we collect

We collect the information you enter into the form: contact details, your role, business details, funding requirement, trading history, turnover, homeowner status, relevant operator-licence information, existing-finance details and any notes you add. We also keep the enquiry reference, submission date and enquiry status.

If you choose to upload business bank statements, we collect the PDF files and basic file details such as filename, size and upload date. Statements may contain account identifiers, balances, payment details and transaction history. Never provide bank-login details, passwords, card PINs or security codes.

Why we use the information and our lawful bases

We use the information to respond to your enquiry, understand the business requirement, discuss possible funding routes, prepare an introduction if you choose to continue, protect the service against misuse, manage records and deal with legal claims or complaints.

We normally rely on our legitimate interests in operating and protecting a commercial-finance introduction service and responding to business enquiries. We balance those interests against your rights and reasonable expectations. We may also rely on steps taken at your request before entering an arrangement and on legal obligations where they apply. We do not use the form acknowledgement as blanket consent for these activities, and we do not use enquiry details for electronic marketing without a separate lawful basis.

Who we share information with

We only share relevant enquiry information with a lender, funder or broker partner after we have discussed a possible route with you and you choose to continue. We may also disclose information where the law requires it or where reasonably necessary to establish, exercise or defend legal claims. We do not sell personal information.

Vercel provides website hosting and private file storage, and Neon provides the enquiry database. These suppliers process information for us under their service terms and security controls. Where a supplier processes information outside the UK, we rely on an appropriate transfer safeguard where required.

Saving answers on your device

The form can save a limited set of non-sensitive answers in session storage so you do not lose progress while using the same browser tab. It does not save contact details, financial figures, homeowner status, company number, notes, provider names or uploaded files. The saved answers expire after two hours, are removed when the tab session ends, and can be cleared from the welcome screen. This storage is not used for advertising or cross-site tracking.

How long we keep information

New or unsuccessful enquiry records are scheduled for review after 12 months. Records for enquiries that progress are scheduled for review after 24 months. Uploaded bank statements are scheduled for a separate review after 90 days because they are particularly sensitive. A review may lead to deletion, anonymisation or a documented extension where the information is still needed for the enquiry, a complaint, a legal obligation or a legal claim.

Security-event records are normally kept for no more than 90 days, while technical rate-limit and duplicate-submission records are normally kept for no more than two days. We do not silently delete customer enquiries when a review date arrives; an authorised administrator reviews them first.

Deletion

An authorised administrator can permanently delete an individual bank-statement file or the complete enquiry. Complete deletion removes the enquiry, its attached-file metadata and its private statement files from active application storage, together with duplicate-submission records and application security events linked to its reference. The action requires an authenticated session, the admin password, the exact enquiry reference and a separate confirmation.

Hosting and database providers may retain encrypted backup copies or short-lived operational logs for a limited period under their own backup and security lifecycle. Those copies are not available through the NBS Finance admin area and expire through the provider's normal deletion process. Application logs are designed not to contain form answers or uploaded documents.

Your rights

Depending on the circumstances, you may ask us to access, correct, erase or restrict personal information, object to processing based on legitimate interests, or provide information in a portable format. Some rights have legal limits. Contact us using the details above and we will respond without undue delay.

You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.

Automated decisions and security

The form adapts which questions are shown based on your answers, but it does not make a solely automated lending decision or approve or decline finance. A person reviews the enquiry.

We use access controls, private document storage, request limits, input validation and authenticated administration to protect the service. No internet service can guarantee absolute security, so only provide information relevant to the enquiry. We may update this policy when the service or legal requirements change; the latest version will be published here.