Privacy Policy

Updated: 21st May 2024

Bolton Business Finance Ltd is a limited company registered in England and Wales under company number 12495909 having our registered office at Westgate Avenue, Westgate House, Bolton, Greater Manchester, BL1 4RF.

We are registered with the Information Commissioner’s Office (ICO); our ICO registration reference number is ZA712923. We will be the ‘data controller’ for the purposes of data protection laws in relation to any personal information we hold about you.

Please address any queries regarding data protection matters to our Information Officer, Marcus Wright by writing to the above address.

To provide you with our services, we will need to process your personal information (data). The purpose of this privacy notice is to confirm what we will do with your information and to explain your legal rights under the General Data Protection Regulations (GDPR) and other data protection laws which may apply.

What information do we collect about you?

We will need to collect personal information about you in order to provide our services. This information will include your:

  • Name;
  • Date of birth;
  • Address (business and personal);
  • Telephone number/s;
  • Email address;
  • Financial details; and
  • Details of assets / liabilities

We may also need to collect other details about you that are relevant to the work you want us to do.

Data Protection legislation says that we must have a valid lawful basis for processing your data. The lawful bases for processing your data are set out in Article 6 of the GDPR; in most cases, we will only process your personal data:

  • If it is necessary for us to be able to perform duties under a contract we have with you, or because you have asked us to take specific steps before entering into a contract;
  • If it is necessary for us to comply with the law (not including contractual obligations); or,
  • If it is necessary in the legitimate interests of this firm or the legitimate interests of a third-party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

If none of the above reasons apply, we may ask for your specific permission (consent).

In rare instances, we might also need to collect and process more sensitive or ‘special category’ data. We will only collect or process this data if it is essential for us to be able to provide you with services. If we need any special category data, we will ask you for specific written permission to process this type of information; and tell you why and how the information will be used.

If we collect data about you from a third-party, we will tell you: what that information is and where it has come from (unless you already have that information, the law says we can’t, or it is confidential). If the information is wrong or incomplete, you will be entitled to ask us to correct it.

If it is otherwise legal, we may use your details to contact you with information about services we think may interest you. You can tell us at any time not to send you these messages.

If we have asked for your consent to have and process your personal information, you can withdraw that consent at any time by contacting Marcus Wright, by writing to the above address. This will not affect any processing of your data that was done prior to you withdrawing your consent.

If you want to withdraw your permission for receiving marketing communications, you can do that at any time by contacting us.


We will not usually process children’s personal information (under the age of 13 years). In the unlikely event that it is necessary for us to do so, we will request the permission of the child’s guardian. If the child is over 13 years, we will request the child’s permission.

Sharing your information

It may be necessary for us to pass on your personal information to other people or organisations to provide our services. This may include but not be limited to:

  • Your Creditors, Bank and HMRC
  • Solicitors instructed to act on your case;
  • Surveyors and Agents involved in the valuation of your assets;
  • Banks and Other Lending Providers
  • Other professional advisers such as Accountants
  • Courts / Court Representatives
  • Regulators such as the FCA and Information Commissioner
  • Trade bodies (e.g. NACFB)

Whenever possible, we will only share your personal information with them on a confidential basis.

If we sell our business to a third party, or go through a corporate re-organisation, we will transfer personal data to the company that acquires the business.

Transferring your information to another country

It is extremely unlikely that it will be necessary for us to transfer your personal information to another country. If this is necessary, we will discuss this with you beforehand.

How long do we keep your information?

We will not retain your personal data for longer than necessary. We will retain your data for different time periods depending on the type of data concerned, the services we have provided and the purpose (or purposes) for which the data was collected. We may need to keep your personal information after we have completed the work you ask us to do.

Your rights

Under the GDPR, as a ‘data subject’, you have the following legal rights:

  • Right to be informed – you have the right to be informed about the collection and use of your personal data. 
  • Right of access – You have the right to access your personal data. This is commonly referred to as subject access; see below for more information on Subject Access Requests.
  • Right of rectification – you have a right to have inaccurate personal data rectified or completed if it is incomplete. You can make a request for rectification verbally or in writing. We will respond to a request within one calendar month.
  • Right to erasure – you have a right to request for your personal data to be erased. The right to erasure is also known as ‘the right to be forgotten’. You can make a request for erasure verbally or in writing. We will respond to a request within one calendar month.
  • Right to restriction of processing – you have the right to request the restriction or suppression of your personal data. When processing is restricted, we are permitted to store the personal data, but not use it. We will respond to a request within one calendar month.
  • Right of portability – The right to data portability allows you to obtain and reuse your personal data across different services. The right only applies to information you have provided to us as a controller.
  • Right to object – you have the right to object to the processing of your personal data in certain circumstances. You have an absolute right to stop your data being used for direct marketing. In other cases where the right to object applies we may be able to continue processing your data if we have a compelling reason for doing so. You can make an objection verbally or in writing. We will respond to an objection within one calendar month.
  • Right to object to important decisions being made about you, profiling or anything about you being evaluated, by an automated process without any human involvement.

Subject Access Requests

You have the right to access your personal data held by Bolton Business Finance Ltd, including the right to obtain a copy of the personal data we process. You can submit your request:

  • In writing to our Information Officer, Marcus Wright at Westgate Avenue, Westgate House, Bolton, Greater Manchester, BL1 4RF or
  • By calling our Information Officer, Marcus Wright on 0161 5469128

We expect to respond to your request within one month of receipt of a request and proof of your identity. To help us establish your identity, you must provide 2 pieces of identification that clearly shows your name, date of birth, and current address.

Requests Made on a Data Subject’s Behalf

In some situations, an individual may submit an access request on someone else’s behalf. For third-party requests, we require proof of:

  • The data subject’s identity.
  • The requester’s identity.
  • The requester’s legal authority to act on the data subject’s behalf, such as:
    • Written consent signed by the data subject;
    • A certified copy of a Power of Attorney; or
    • Evidence of parental responsibility if the data subject is a child.

To help us process your request, please provide as much detail as possible about the personal data you are requesting access to. Please include dates, names, types of documents, or any other information to help us locate your personal data.

We will contact you for additional information if the scope of your request is unclear or does not provide sufficient information for us to conduct a search. We will begin processing your request as soon as we have verified your identity and have all of the information, we need to locate your personal data.

If the information you request includes data related to a third party, we will either seek that individual’s consent before responding to your request, or we will redact third parties’ personal data before responding. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Fair Processing Notice For Fraud Prevention and Detection

  1. Our lenders will undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require them to process personal data about you.
  2. The personal data you have provided, we have collected from you, or we have received from third parties will be used by our lenders to prevent fraud and money laundering, and to verify your identity.
  3. Details of the personal information that will be processed include, for example: name, address, date of birth, contact details, financial information, employment details and device identifiers including IP address.
  4. Our lenders and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.
  5. Our lenders will process your personal data on the basis that they have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect their business and to comply with laws that apply to them. Such processing is also a contractual requirement of the services or financing you have requested.
  6. Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.

Consequences of processing

  1. If our lenders, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, they may refuse to provide the services or financing you have requested. 
  2. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us on the details above.

Data transfers

  1. Whenever fraud prevention agencies transfer your personal data outside of the United Kingdom or European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.

Your rights

  1. Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
  2. For more information or to exercise your data protection rights, please contact us using the contact details above.
  3. You also have a right to complain to the Information Commissioner’s Office which regulates the processing of personal data.”


If you are not happy with the way in which we are processing your personal information, or you are not satisfied with how we have handled your complaint, you can raise the matter with our Information Officer (Marcus Wright), or with the ICO.

Marcus Wright

Bolton Business Finance Ltd

Westgate Avenue, Westgate House, Bolton, Greater Manchester, BL1 4RF

0161 5469128


Information Commissioner

Wycliffe House

Water Lane




Phone: 0303 123 1113 or 01625 545 745