Privacy Policy

1. Who we are

In this Privacy Policy, "Funding Flow", "we", "us", and "our" refer to Funding Flow, the operator of fundingflow.co.uk. You can contact us at hello@fundingflow.co.uk.

2. What data we collect

We collect information you provide directly through our Get Funded and Fact Find forms, including your name, phone number, email address, and business details. We also collect website usage data via analytics tools to improve your experience.

3. How we use your data

• To contact you about your finance enquiry
• To match you with appropriate lenders
• To send relevant updates if you have opted in

4. Who we share data with

We pass your enquiry details to lenders for the purpose of arranging finance. We never sell your data. We use Resend for email delivery. Your data is only shared where necessary to fulfil your enquiry or where we are legally required to do so.

5. How long we keep data

• Active enquiries: for the duration of the relationship
• Completed or declined enquiries: 3 years
• You can request deletion of your data at any time

6. Lawful basis

Our lawful bases for processing your data are: your consent (for analytics and any marketing cookies); the taking of steps to arrange finance at your request; and our legitimate interests in matching you with lenders and in preventing fraud and automated abuse.

7. Your rights

You have the right to access, correct, delete, and object to the processing of your personal data. To exercise any of these rights, contact us at hello@fundingflow.co.uk.

To make a data subject access request or exercise any of your rights, email hello@fundingflow.co.uk. We will respond within one month.

8. Cookies

We use analytics cookies (Google Analytics) to understand how visitors use our site, and functional cookies to remember your preferences. You can manage cookie settings in your browser at any time.

We also use Microsoft Clarity to understand how visitors interact with our website through heatmaps, scroll maps, and session recordings. This helps us improve the site experience. Clarity does not record sensitive information entered into forms. You can opt out by declining analytics cookies via our cookie banner.

9. Bot protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect our forms from automated bot submissions. Turnstile is a privacy-respecting alternative to traditional CAPTCHAs and runs invisibly in the background on our enquiry, application, and contact forms.

To verify you are a real visitor and not a bot, Turnstile processes minimal technical signals including your IP address, browser user-agent string, TLS fingerprint, and the sitekey associated with our website. Cloudflare cannot directly identify you from these signals and does not use them to build a profile of you across other websites.

For full details on how Cloudflare processes this data, see the Cloudflare Turnstile Privacy Addendum.

Our lawful basis for this processing is our legitimate interest in protecting our website and our users from automated abuse, spam, and fraudulent submissions.

10. Changes to this policy

We may update this policy from time to time. Continued use of the site after changes constitutes acceptance of the updated policy.