Privacy Policy

Last Updated: August 2025

BillFlow (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website www.billflow.co.uk (the “Website”) and our financing services (the “Services”).

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Website or Services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

a. Personal Information

• Name, email address, phone number, job title.
• Identification documents (e.g., passport, driver’s licence) for compliance checks.

b. Business Information

• Company name, registration number, VAT number.
• Financial data such as invoices, bank details, credit history.

c. Technical Information

• IP address, browser type, device details.
• Cookies and analytics data relating to your use of the Website.

d. Third-Party Data

• Credit information from agencies and partners.
• Publicly available company records.

2. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Contractual necessity – to provide our Services and fulfil agreements.
• Legal obligation – to meet regulatory requirements (e.g., anti-money laundering, fraud prevention).
• Legitimate interests – to improve our Services, manage risk, and maintain security.
• Consent – where required for marketing communications.

3. How We Use Your Information

We use your information to:

• Deliver and manage our financing Services.
• Conduct due diligence, eligibility checks, and credit assessments.
• Communicate regarding applications, agreements, and customer support.
• Comply with legal and regulatory requirements.
• Improve our Website and Services.
• Send marketing communications (only if you have opted in).

4. Sharing Your Information

We may share your data with:

• Service providers and partners (e.g., IT providers, payment processors, credit agencies).
• Regulators and authorities where legally required.
• Business partners or acquirers in the event of a business sale, merger, or restructuring.

We do not sell your data to third parties for marketing purposes.

5. Data Retention

We retain personal and business data only for as long as necessary to:

• Provide our Services.
• Comply with legal and regulatory requirements.
• Resolve disputes and enforce agreements.

Data no longer needed will be securely deleted or anonymised.

6. International Transfers

If we transfer data outside the UK, we ensure appropriate safeguards are in place (e.g., adequacy decisions, standard contractual clauses) in line with UK GDPR requirements.

7. Data Security

We implement technical and organisational measures to protect data, including encryption, secure servers, and access controls. However, no system is fully secure, and we cannot guarantee absolute security.

8. Cookies

Our Website uses cookies to:

• Ensure essential site functionality.
• Gather analytics to improve performance.
• Personalise user experience.

You can manage cookies via your browser settings. For more details, see our Cookie Policy.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal obligations).
• Restrict or object to processing in certain circumstances.
• Request portability of your data to another provider.
• Withdraw consent (where consent is the lawful basis).

To exercise your rights, contact us at crmt@jardinenorton.com

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

10. Children’s Privacy

Our Services are for businesses only and not directed at individuals under 18. We do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Continued use of our Website and Services indicates acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

BillFlow Limited
1 Caspian Point, Caspian Way, Pierhead St, Cardiff CF10 4DQ
📧 crmt@jardinenorton.com
📞 02921679675

‍