Privacy Notice

1. Who we are

This website is operated by Octagon Commercial Finance Ltd, a company registered in England and Wales (Company No. 14401756), registered office 73 High Street, Newport Pagnell, MK16 8AB.

Octagon Commercial Finance Ltd is an Appointed Representative of The Fiducia Network Ltd, which is authorised and regulated by the Financial Conduct Authority under FRN 917537. We are a credit broker, not a lender.

For the purposes of UK data protection law, Octagon Commercial Finance Ltd is the data controller of the personal information we collect through this website and through our brokering activity. We are registered with the Information Commissioner's Office (ICO) under registration number ZB480956.

2. What we collect

We only collect information you give us, or that we generate about your enquiry:

• Contact details you enter into the callback form: first name, last name, phone number, email address and the type of finance you're asking about.
• Enquiry details — anything you tell us about the property, business or funding requirement, whether through the website, by phone, by email or in a meeting.
• Records we build as we source terms on your behalf: correspondence, notes of calls, copies of documents you supply, indicative terms we obtain from lenders, and (if you instruct us) the application file we submit.

We do not use cookies for analytics or advertising on this website. We do not run tracking pixels. If that changes we will update this notice and — where required — ask for your consent first.

3. Why we use it, and our lawful basis

We do not send marketing to consumers on the basis of legitimate interests without your consent. If you tick the consent box on the callback form, we contact you about your enquiry only — not for general marketing.

4. Who we share it with

We share your information only with parties who need it to deliver the service you asked for, or where we're required to:

• Lenders on our panel — to obtain indicative terms and, if you instruct us, to place a full application. We share only what each lender needs to assess the deal.
• The Fiducia Network Ltd — our principal firm. Fiducia has oversight of our regulated activity and can request our records for compliance monitoring.
• Professional advisers — solicitors, valuers, accountants — where you or the lender ask us to liaise with them for your transaction.
• Our IT and business-service providers — email hosting, CRM, phone system, cloud storage. These are contractually bound to keep your information secure and use it only for the service they provide us.
• Regulators, law enforcement and courts — the FCA, the Information Commissioner's Office, HMRC, the Financial Ombudsman Service, or a court — where we're required by law to disclose.

We never sell your personal information to anyone. We do not share it with unrelated third parties for their own marketing.

5. Where your information is held

Your information is held on systems located in the United Kingdom and the European Economic Area. Where a service provider processes data outside the UK / EEA, we ensure it is protected by an appropriate safeguard recognised under UK GDPR (for example, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with UK addendum).

6. How long we keep it

• Enquiries that do not proceed: up to 12 months from your last contact, so we have a record if you come back to us.
• Cases we've brokered: at least 6 years from the end of the relationship, to meet FCA record-keeping and defend potential complaints, or longer where a lender, HMRC or another regulator requires it.
• Anti-money-laundering records: at least 5 years from the end of the business relationship, as required by the Money Laundering Regulations.

We securely delete or anonymise information when we no longer need it for these purposes.

7. Keeping your information secure

We use commercially reasonable technical and organisational measures to protect your information: access controls, encrypted connections, staff training and reputable service providers. No system is perfectly secure — please do not send us information that isn't reasonable for the enquiry, and let us know immediately if you think an email address you've been using has been compromised.

8. Your rights

Under UK data protection law you have the right to:

• Ask us for a copy of the personal information we hold about you (a Subject Access Request).
• Ask us to correct information that's wrong or incomplete.
• Ask us to delete information we no longer have a lawful basis to hold.
• Ask us to restrict how we use your information while a query is being resolved.
• Object to us using your information on the basis of our legitimate interests.
• Ask us to give you (or a service you name) your information in a portable format, where the lawful basis is consent or contract.
• Withdraw any consent you've given us — at any time, without affecting the lawfulness of anything we did before you withdrew it.

To exercise any of these rights, email info@octagoncommercialfinance.co.uk or write to us at the registered office. We aim to respond within one calendar month.

9. If you're not happy with how we've handled your information

Please tell us first — we take it seriously and will try to put it right. You can also complain to the Information Commissioner's Office:

10. Contact

Questions about this notice, or about how we use your information:

11. Changes to this notice

We may update this notice — for example if we change the systems we use, or the law changes. The version and date at the top of this page tells you when it was last updated. If we make a change that materially affects how we use your information, we'll let you know before it takes effect.