Privacy Policy
Last updated: 7 July 2026
Who we are
Andal ("Andal", "we", "us") is a credit broker for small and medium-sized businesses in England. We act as a data controller for the information described in this policy.
Andal Capital Ltd, registered in England and Wales, company number 17187098. Registered office: 66 Paul Street, London, England, United Kingdom, EC2A 4NA.
What we collect
When you submit our contact/enquiry form, we collect:
- Your name
- Your business name
- Your email address
- Your phone number
- The message you send us, describing your finance enquiry
If your enquiry proceeds to a finance application, we may collect further information directly from you or your business in order to introduce you to a suitable lender, for example financial or trading information a lender needs to assess your application. That information is collected separately, with its own explanation of use at the time.
Why we collect it
We use the information you submit to:
- respond to your enquiry;
- understand what type of business finance you're looking for; and
- where you ask us to proceed, act as your broker and introduce you to lenders or finance providers who may be able to help.
Our lawful basis for this processing is to take steps at your request before entering into a contract with you, and/or our legitimate interest in responding to enquiries sent to us. We do not use your information for advertising or marketing purposes.
Who we share it with
If you ask us to proceed with a finance enquiry, we share the relevant information with lenders or finance providers in order to seek terms on your behalf. We do not sell your information, and we do not share it with third parties for their own marketing purposes.
How long we keep it
We keep your information for as long as needed to handle your enquiry and, if it proceeds, for the duration of the finance deal. After that, we retain it only for as long as we're required to by law or regulation to meet our compliance, legal, and accounting obligations, after which it is securely deleted.
If your enquiry does not proceed to a deal, we keep the enquiry details for a limited period in case you get back in touch, then delete them.
Cookies and analytics
This site does not use advertising cookies, tracking cookies, or third-party analytics. The only external request the site makes is to Google Fonts, to load the typefaces used on this page; this does not set cookies or track you.
This site is hosted on Cloudflare Pages. Cloudflare sets a small number of strictly
necessary cookies (for example __cf_bm and, where a challenge is triggered, cf_clearance) to detect bot traffic, protect the site from abuse, and keep it
available. These cookies do not identify you personally and are set by Cloudflare as our
hosting and security provider, not for advertising or tracking. See Cloudflare's cookie policy for details.
Your rights
Under UK GDPR, you have the right to:
- ask us what personal data we hold about you, and get a copy of it (access);
- ask us to correct inaccurate data (rectification);
- ask us to delete your data, where we're not required to keep it for legal or compliance reasons (erasure);
- ask us to restrict or object to certain processing; and
- ask for your data in a portable format, where applicable.
To exercise any of these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Security
We use appropriate technical and organisational measures to keep the information you share with us secure, and limit access to it to people who need it to handle your enquiry or deal.
Data protection contact
For any question about this policy or your data, contact:
contact@andal.uk
ICO registration reference: [PLACEHOLDER].
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.