Privacy Policy

Who we are

Andal ("Andal", "we", "us") is a credit broker for corporate clients in England: limited companies, LLPs, and partnerships of four or more partners. We act as a data controller for the information described in this policy.

Andal Capital Ltd, registered in England and Wales, company number 17187098. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

What we collect

When you submit our contact/enquiry form, we collect:

• Your name
• Your business name
• Your email address
• Your phone number
• The message or question you send us

When you start an enquiry through our enquiry page, we collect the above plus:

• Your business's entity type (limited company, LLP, or qualifying partnership)
• The type of finance and product you're asking about
• The amount of funding you're seeking
• Approximate property value, where the enquiry concerns commercial property
• Your business's approximate annual turnover and years trading
• Your funding timeframe
• Any additional notes you choose to add

If your enquiry proceeds to a finance application, we may collect further information directly from you or your business in order to introduce you to a suitable lender, for example financial or trading information a lender needs to assess your application. That information is collected separately, with its own explanation of use at the time.

If we ask your business to sign a non-circumvention agreement through a link we send you, we collect the signatory's name and position, the business's entity type, company number, and registered address, and the signature itself. To show how and when the agreement was signed, we also record the date and time, the IP address, and the browser details used to sign it.

If you work with us as a self-employed contractor and sign a contractor agreement through a link we send you, we collect your name, email address, address, and signature, together with the same signing record.

Why we collect it

We use the information you submit to:

• respond to your enquiry or question;
• understand what type of business finance you're looking for; and
• where you ask us to proceed, act as your broker and introduce you to lenders or finance providers who may be able to help.

Our lawful basis for this processing is to take steps at your request before entering into a contract with you, and/or our legitimate interest in responding to enquiries sent to us. We do not use your information for advertising or marketing purposes.

Who we share it with

If you ask us to proceed with a finance enquiry, we share the relevant information with lenders or finance providers in order to seek terms on your behalf. We do not sell your information, and we do not share it with third parties for their own marketing purposes.

We also use service providers to run this website and deliver what you submit to our team: Cloudflare hosts the site and protects it from abuse, and Resend delivers form submissions to our inbox by email. They process your information only to provide those services to us.

How long we keep it

We keep your information for as long as needed to handle your enquiry and, if it proceeds, for the duration of the finance deal. After that, we retain it only for as long as we're required to by law or regulation to meet our compliance, legal, and accounting obligations, after which it is securely deleted.

If your enquiry does not proceed to a deal, we keep the enquiry details for a limited period in case you get back in touch, then delete them.

A signed non-circumvention agreement, and the record of how it was signed, is kept for its protection period and for six years after that ends, the period in which a claim under it could be brought.

A signed contractor agreement, and the record of how it was signed, is kept while you work with us and for six years after it ends.

Cookies and analytics

This site does not use advertising cookies, tracking cookies, or third-party analytics. Fonts and all other files are served from our own domain, so visiting the site does not send your details to any other company.

This site is hosted on Cloudflare Pages. Cloudflare sets a small number of strictly necessary cookies (for example __cf_bm and, where a challenge is triggered, cf_clearance) to detect bot traffic, protect the site from abuse, and keep it available. These cookies do not identify you personally and are set by Cloudflare as our hosting and security provider, not for advertising or tracking. See Cloudflare's cookie policy for details.

Your rights

Under UK GDPR, you have the right to:

• ask us what personal data we hold about you, and get a copy of it (access);
• ask us to correct inaccurate data (rectification);
• ask us to delete your data, where we're not required to keep it for legal or compliance reasons (erasure);
• ask us to restrict or object to certain processing; and
• ask for your data in a portable format, where applicable.

To exercise any of these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Security

We use appropriate technical and organisational measures to keep the information you share with us secure, and limit access to it to people who need it to handle your enquiry or deal.

To protect our forms from automated abuse, we keep a short-lived, hashed record of the IP address and email address used to submit them. It is used only to limit repeated submissions and is deleted automatically within 24 hours.

Data protection contact

For any question about this policy or your data, contact inquiries@andal.uk.

ICO registration reference: ZC192369.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.