enquiries@hertfordshirebusinessfinance.co.uk
Commercial Finance Broker

Privacy Policy

Your privacy matters to us. This policy explains how Hertfordshire Business Finance collects, uses, and protects your personal data.

Who We Are

Hertfordshire Business Finance is a trading style of Lenzie Consulting Ltd, registered in England and Wales (company number 08174104), registered office Lynch Farm, Kensworth, Dunstable, LU6 3QZ. We are a commercial finance arranger and introducer serving businesses and property professionals across Hertfordshire.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller responsible for your personal data.

If you have any questions about this privacy policy or how we handle your personal data, please contact us at enquiries@hertfordshirebusinessfinance.co.uk.

What Data We Collect

We may collect and process the following categories of personal data:

Information You Provide Directly

  • Contact form submissions: name, email address, telephone number, company name, and the details of your enquiry.
  • Enquiry form submissions: additional details such as your funding requirements, property information, business turnover, and preferred contact method.
  • Phone calls: information discussed during telephone conversations with our team, which may be recorded for training and quality purposes.
  • Email correspondence: any personal data included in emails you send to us.

Information Collected Automatically

  • Website analytics: IP address, browser type, operating system, referring URLs, pages visited, time spent on site, and other usage data collected through cookies and similar technologies.
  • Device information: screen resolution, device type, and language preferences.

How We Use Your Data

We use your personal data for the following purposes:

  • Matching you with lenders: to assess your requirements and identify the most suitable finance products from our panel of lenders.
  • Responding to enquiries: to contact you regarding your enquiry and provide the information or assistance you have requested.
  • Improving our services: to analyse website usage, improve the content and functionality of our website, and enhance the customer experience.
  • Marketing communications: where you have given your explicit consent, we may send you information about our services, market updates, and relevant finance opportunities. You can withdraw your consent at any time.
  • Regulatory compliance: to meet our legal and regulatory obligations, including anti-money laundering checks and record-keeping requirements.

Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

  • Contractual necessity: processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract we have with you (for example, sourcing finance on your behalf).
  • Legitimate interest: processing is necessary for our legitimate business interests, such as improving our services, website analytics, and internal record-keeping, provided these interests do not override your fundamental rights and freedoms.
  • Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time by contacting us.
  • Legal obligation: processing is necessary to comply with a legal obligation to which we are subject, such as anti-money laundering regulations.

Data Sharing with Third Parties

We do not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

  • Lenders on our panel: we share relevant information about you and your funding requirements with lenders in order to obtain quotes and facilitate your finance application. This is essential to providing our broking service.
  • Service providers: trusted third-party providers who support our business operations, including website hosting, email services, CRM platforms, and analytics providers. These providers are contractually bound to protect your data.
  • Professional advisors: solicitors, accountants, and other professional advisors where necessary to facilitate your transaction.
  • Legal and regulatory obligations: we may disclose your data where required by law, regulation, or court order, or to comply with requests from regulatory authorities such as the Financial Conduct Authority or the Information Commissioner's Office.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:

  • Enquiry data: retained for up to 3 years from the date of your last interaction with us, unless you request earlier deletion.
  • Client transaction records: retained for a minimum of 6 years after the completion of a transaction, in line with regulatory requirements and limitation periods.
  • Marketing consent records: retained for as long as you remain subscribed. Upon withdrawal of consent, we will delete your marketing data within 30 days.
  • Website analytics data: anonymised analytics data may be retained indefinitely. Identifiable analytics data is retained for up to 26 months.

Your Rights under UK GDPR

Under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data. You may exercise any of these rights at any time by contacting us.

  • Right of access: you have the right to request a copy of the personal data we hold about you (known as a Subject Access Request).
  • Right to rectification: you have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to erasure: you have the right to request that we delete your personal data where there is no compelling reason for its continued processing (also known as the "right to be forgotten").
  • Right to restrict processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of your data.
  • Right to data portability: you have the right to request that we transfer your personal data to another organisation, or directly to you, in a structured, commonly used, and machine-readable format.
  • Right to object: you have the right to object to the processing of your personal data where we are relying on legitimate interest as the legal basis, or where we are processing your data for direct marketing purposes.

We will respond to all legitimate requests within one month. In certain circumstances, we may need to extend this period by up to two further months, in which case we will notify you. There is no fee for exercising your rights, except where requests are manifestly unfounded or excessive.

Cookies

Our website uses cookies and similar technologies to distinguish you from other users, improve your browsing experience, and help us analyse website traffic. Cookies are small text files that are placed on your device when you visit our website.

We use the following types of cookies:

  • Strictly necessary cookies: required for the website to function correctly.
  • Analytics cookies: help us understand how visitors interact with our website so we can improve it.
  • Functional cookies: remember your preferences and enhance your experience.

For full details about the cookies we use and how to manage your cookie preferences, please see our Cookie Policy.

How to Contact Us

If you wish to exercise any of your rights, have questions about this privacy policy, or want to discuss how we handle your personal data, please contact us:

Making a Complaint

We take all privacy concerns seriously and will endeavour to resolve any issues promptly. If you are not satisfied with our response, or believe we are processing your personal data in a way that is not lawful, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Updates to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. When we make material changes, we will update the "last updated" date at the bottom of this page. We encourage you to review this policy periodically.

Last updated: February 2026