Privacy policy
Last updated: 11 June 2026
1. Who we are
In this Privacy Policy, “Merchant Business Loans”, “MBL”, “we”, “us” and “our” refer to the operator of merchantbusinessloans.co.uk. Merchant Business Loans is a trading style of Funding Flow. Contact us at hello@merchantbusinessloans.co.uk.
2. What data we collect
Information you provide through our Quick Apply and Fact Find forms: name, business name, email, phone, business sector, monthly card takings, how long you have been trading, the amount of funding you want, and other business details. We also collect website usage data through analytics, and minimal technical signals used to protect our forms from automated abuse.
3. How we use your data
To contact you about your enquiry; assess whether a merchant cash advance is suitable; match you with funding partners and arrange finance; carry out fraud, anti money laundering and identity checks; send updates if you opt in; meet our legal obligations.
4. Who we share your data with
To arrange finance we share your information more widely than a typical website. By submitting an enquiry you understand it may be shared with:
- Lenders and funding partners on our panel, to assess your business and decide whether to make an offer.
- Other brokers and introducers, including our sister company Funding Flow, where we pass your enquiry on to arrange a more suitable product.
- Credit reference agencies: we and our funding partners may carry out credit searches on your business and where relevant its directors or owners, which may leave a record other organisations can see.
- Fraud prevention agencies: if you give false or inaccurate information and fraud is suspected, details may be passed to fraud prevention agencies and used by other organisations making credit decisions.
- Service providers who help us operate, including email delivery (Resend), hosting, analytics and bot protection.
- Regulators and law enforcement where required by law.
We never sell your data and only share where necessary to fulfil your enquiry, prevent fraud, or where legally required.
5. Our lawful bases
Legitimate interest in arranging the finance you asked us to source; your consent for marketing; legal obligations for fraud prevention, anti money laundering and record keeping.
6. How long we keep data
Active enquiries: duration of our relationship. Completed or declined: up to 6 years for financial record keeping. You can ask us to delete your data at any time, subject to those obligations.
7. Your rights
Access, correct, delete, restrict, object, and data portability. Contact hello@merchantbusinessloans.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Cookies
We use analytics and functional cookies. Manage them via our cookie banner and browser. See our Cookies page.
9. Bot protection (Cloudflare Turnstile)
We use Cloudflare Turnstile to protect forms from bots. It processes minimal technical signals (IP address, browser user agent, sitekey) to confirm you are a real visitor. Lawful basis: our legitimate interest in protecting the site from abuse and fraud.
10. Changes
We may update this policy; continued use after changes means acceptance.