Legal

Privacy Policy

Effective date: 1 March 2026

1. Introduction

CapBridge is a trading name of Premier Card Machines Ltd (Company No. 14433858), registered in England & Wales. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and share your personal data when you use our website, services or communicate with us.

This policy is issued in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we act as a data controller, Premier Card Machines Ltd is responsible for your personal data.

By using our website or submitting an enquiry, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller for the purposes of UK GDPR is:

Premier Card Machines Ltd (trading as CapBridge)
Company No. 14433858
Registered in England & Wales
Email: info@capbridge.co.uk

3. What Personal Data We Collect

We may collect the following categories of personal data:

  • Identity data: full name, job title
  • Contact data: email address, telephone number, business address
  • Business data: company name, company registration number, trading history, industry sector, number of employees
  • Financial data: monthly card turnover, annual revenue, existing debts, funding amount sought
  • Technical data: IP address, browser type and version, operating system, referral source, pages visited, time spent on pages
  • Marketing data: your preferences for receiving marketing communications from us and our partners
  • Communication data: records of correspondence, call recordings (where notified), and chat transcripts

We do not collect special category data (such as health data, racial or ethnic origin, political opinions, or biometric data) unless strictly necessary and with your explicit consent.

4. How We Collect Your Data

We collect personal data through:

  • Direct interactions: when you complete our online enquiry forms, request a quote, telephone us, or email us
  • Automated technologies: cookies, server logs, and similar technologies when you browse our website (see our Cookie Policy)
  • Third parties: publicly available business information, Companies House records, and data from our lending partners where you have given them permission to share

5. How We Use Your Data

We use your personal data for the following purposes:

  • To assess your funding requirements and match you with suitable lending partners
  • To submit applications to funding providers on your behalf
  • To communicate with you regarding your enquiry, application status, and service updates
  • To fulfil our contractual obligations to you
  • To send marketing communications where you have opted in or where we rely on legitimate interest
  • To improve our website, services, and customer experience
  • To comply with legal and regulatory obligations
  • To detect and prevent fraud

6. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

  • Contract: processing is necessary to perform our contract with you (e.g. submitting your application to funding providers)
  • Legitimate interest: processing is necessary for our legitimate business interests, such as improving our services, fraud prevention, and direct marketing to existing clients, provided these interests do not override your rights and freedoms
  • Consent: where you have given clear consent for us to process your data for a specific purpose, such as receiving marketing communications or sharing data with selected partners
  • Legal obligation: processing is necessary to comply with a legal or regulatory obligation (e.g. anti-money laundering requirements)

Where we rely on legitimate interest, we carry out a balancing test to ensure your rights are not overridden. You may request details of this assessment by contacting us.

7. Data Sharing with Lending Partners

As a business funding broker, we share your personal and business data with our panel of FCA-regulated lending partners to facilitate your funding application. These partners may include merchant cash advance providers, business loan providers, and card machine providers.

When we share your data with lending partners:

  • We share only the information necessary for them to assess your application
  • Each lending partner acts as an independent data controller for the data they receive
  • We require all partners to have appropriate data protection measures in place
  • We will inform you which partners we intend to share your data with before doing so

We may also share your data with:

  • Service providers who assist in operating our business (e.g. IT support, CRM providers, email platforms)
  • Professional advisers including solicitors, accountants, and insurers
  • Regulatory bodies, law enforcement, or government agencies where required by law

8. International Transfers

We primarily store and process your data within the United Kingdom. Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO) or transfers to countries deemed to have an adequate level of data protection.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:

  • Enquiry data (no application submitted): 12 months from last contact
  • Application data (funded): 6 years from the end of the funding agreement, in line with regulatory requirements
  • Application data (declined or withdrawn): 3 years from the date of the decision
  • Marketing consent records: retained for the duration of the consent, plus 12 months after withdrawal
  • Website analytics data: 26 months

After the applicable retention period, your data is securely deleted or anonymised.

10. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: you may request a copy of the personal data we hold about you (a Subject Access Request)
  • Right to rectification: you may ask us to correct any inaccurate or incomplete personal data
  • Right to erasure: you may request that we delete your personal data where there is no compelling reason for its continued processing
  • Right to restrict processing: you may ask us to suspend processing of your personal data in certain circumstances
  • Right to data portability: you may request a copy of your data in a structured, commonly used, machine-readable format
  • Right to object: you may object to processing based on legitimate interest or for direct marketing purposes
  • Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal

To exercise any of these rights, please contact us at info@capbridge.co.uk. We will respond to your request within one month, as required by UK GDPR. In complex cases, we may extend this by a further two months, and we will inform you if this is necessary.

11. Cookies

Our website uses cookies to improve your experience and analyse website traffic. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption, access controls, secure data storage, and regular security reviews.

Whilst we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee the absolute security of your data transmitted to our website.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at info@capbridge.co.uk.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Premier Card Machines Ltd (trading as CapBridge)
Email: info@capbridge.co.uk