Love Capitals · Last updated 6 November 2026
Privacy Notice
Your privacy matters to us. This notice explains what personal data Love Capitals collects when you use our website or services, why we collect it, who we share it with, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1Who we are
Love Capitals helps UK businesses find and arrange business finance, including business loans, merchant cash advances, invoice finance and asset finance.
Love Capitals is a trading name of OneCloud Pvt Ltd (“Love Capitals”, “we”, “us”, “our”), the data controller responsible for your personal data.
| Registered company | OneCloud Pvt Ltd, trading as Love Capitals |
| Company number | 16991609, registered in England and Wales |
| Registered office | Jhumat House, 160 London Road, Barking, IG11 8BB |
| ICO registration number | ZC130857 |
| hello@lovecapitals.co.uk | |
| Telephone | 020 8097 9100 (Monday to Friday 9am–6pm, Saturday 10am–2pm) |
We are not required to appoint a Data Protection Officer. Any question about this notice or your personal data can be sent to hello@lovecapitals.co.uk with the subject line “Data protection”.
When we introduce you to a lender or finance provider, that firm will also process your data as an independent controller under its own privacy notice.
2The personal data we collect
We collect only the information we need to deal with your enquiry and arrange the finance you request. Most of it comes directly from you.
| Category | What it includes | When we collect it |
|---|---|---|
| Identity and contact | Name, job title, telephone number, email and postal address | Enquiry form, calls and emails |
| Business | Company name and number, industry, size, turnover and trading history | Enquiry form and follow-up conversations |
| Identity documents | Passport or driving licence | Optional upload, only where an application requires it |
| Financial | Bank statements, accounts, card turnover and existing borrowing | Optional upload for finance applications |
| Communications | Emails, messages, call notes and, where we tell you, call recordings | Whenever you contact us |
| Marketing preferences | Your opt-in and opt-out choices | Enquiry form and any later changes |
| Technical | IP address, device and browser type, pages visited and cookie identifiers | Automatically when you use our website (see section 9) |
We do not ask for information about criminal convictions. If a lender asks for it as part of its own application, it handles that information as an independent controller.
Information from other sources
We may also receive information about you from:
- lenders and finance providers, about the progress or outcome of your application;
- credit reference and fraud prevention agencies, through our finance partners;
- public sources such as Companies House; and
- people who refer you to us, such as your accountant or a business contact.
Information about other people
If you give us details of other people, such as fellow directors or guarantors, please make sure they are aware and direct them to this notice.
3How we use your data and our lawful basis
We use your personal data only where the law allows it. The table below sets out each purpose and the lawful basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and preparing finance options | Taking steps at your request before entering a contract, and performing our contract with you (Art. 6(1)(b)). Where you act for a company, our legitimate interest in dealing with its representatives (Art. 6(1)(f)) |
| Passing your application to the lender or finance provider you choose | Performing our contract with you (Art. 6(1)(b)) |
| Identity, anti-money-laundering and fraud checks | Legal obligation (Art. 6(1)(c)) and our legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Managing our relationship with you, handling complaints and keeping records | Legitimate interests (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c)) |
| Sending marketing by email or text to individuals | Your consent, or for existing customers the soft opt-in for similar services, under PECR |
| Marketing to corporate email addresses and business telephone lines | Legitimate interests (Art. 6(1)(f)) |
| Operating, securing and improving our website | Legitimate interests for essential functions; your consent for non-essential cookies |
| Establishing, exercising or defending legal claims | Legitimate interests (Art. 6(1)(f)) |
Ticking the consent box on our enquiry form allows us to contact you about your enquiry. It is separate from marketing consent, which is always optional and can be withdrawn at any time.
Automated decision-making. We do not make decisions about you based solely on automated processing. Lenders may use automated scoring as part of their own assessment, and their privacy notices explain how this works.
4Who we share your data with
We never sell your personal data. We share it only with the following recipients, and only to the extent necessary.
Service providers acting on our instructions
- HubSpot, our customer relationship management system.
- Netlify, which hosts our website and processes form submissions and uploaded files.
- Providers of our email, business software and telephony services.
- Website analytics and spam-prevention providers.
- IT support providers and our accountants.
Partners who arrange or provide your finance
- Business lenders and finance providers.
- Commercial finance brokers, where we introduce you to one.
We share information with a partner only after you ask us to proceed, and only what that partner needs for the finance you have asked about.
Other recipients where necessary
Credit reference and fraud prevention agencies (through our partners), regulators and law enforcement bodies where the law requires, our professional advisers, and any buyer of our business, who would be bound by this notice.
5International transfers
Some of our service providers, including HubSpot and Netlify, may process personal data outside the UK, for example in the European Economic Area or the United States. Where this happens, we make sure the transfer is protected by UK adequacy regulations (including the UK–US Data Bridge for certified organisations), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You can request a copy of the relevant safeguard by contacting us.
6How long we keep your data
| Type of data | Retention period |
|---|---|
| Enquiries that do not proceed | 2 years from our last contact with you |
| Customer records and arranged finance | 6 years after our relationship ends, to handle claims and meet tax obligations |
| Uploaded ID and bank statements | 90 days after we pass them to the relevant partner, unless the law requires longer |
| Identity verification records, where required by law | 5 years after our relationship ends |
| Call recordings | Up to 12 months |
| Marketing preferences | Until you opt out, after which we keep a suppression record so we do not contact you again |
| Cookies | As set out in our Cookie Policy |
At the end of the relevant period we securely delete or anonymise your data.
7How we protect your data
We use appropriate technical and organisational measures to keep your data secure. These include encrypted transmission for our website and forms, access controls and multi-factor authentication on our systems, and restricting identity and financial documents to the staff who need them. If a data breach is likely to put your rights at risk, we will notify you and the ICO as the law requires.
8Your rights
Under UK data protection law you have the right to:
- access a copy of the personal data we hold about you;
- rectify data that is inaccurate or incomplete;
- erase your data in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to processing based on legitimate interests, and to direct marketing at any time;
- data portability, receiving data you gave us in a machine-readable format where processing is based on consent or contract;
- withdraw consent at any time, without affecting processing carried out before you withdrew it; and
- rights in relation to automated decision-making and profiling, which allow you to object to your data being used in an automated individual decision-making process (making a decision solely by automated means without any human involvement) and to profiling (automated processing of personal data to evaluate certain things about you). Profiling can be part of an automated decision-making process.
To exercise any of these rights, email hello@lovecapitals.co.uk or call 020 8097 9100. There is no charge. We may ask you to verify your identity, and we will respond within one month. For complex requests this may be extended by up to two further months, in which case we will let you know.
To stop receiving marketing, use the unsubscribe link in any email or reply STOP to any text message.
9Cookies
We use essential cookies to make our website work and, only with your consent, analytics and marketing cookies. You can change your preferences at any time using the cookie settings on our website. For full details, please see our Cookie Policy.
10Complaints
If you are unhappy with how we have handled your personal data, please contact us first at hello@lovecapitals.co.uk and we will do our best to resolve your concern.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
11Changes to this notice
We review this notice regularly and may update it from time to time. The date at the top shows when it was last revised. If we make a significant change that affects you, we will tell you directly.