Privacy policy

Capzy Capital Limited ("Capzy", "we", "us") is a credit broker, not a lender. We help UK businesses compare and arrange finance from our panel of lenders.

We collect information you give us and information we gather when you use our service:

• Contact details — your name, business name, email address and phone number.
• Business and financial information — company registration details, turnover, bank statements and accounts you provide (or connect securely) to support an application.
• Open Banking information — when you choose to connect a bank through Plaid, we receive read-only account details, balances and up to 6 months of transactions. We derive financial indicators and a generated application report from that data; we do not retain a separate reusable raw transaction dataset.
• Identity information — documents such as photo ID, used to meet our legal obligations.
• Usage information — how you use our website and product, including when a funding report or broker video is opened and the furthest playback reached. These signals show activity, not whether you understood or agreed with the content.
• Messages and optional recordings — the written messages you exchange with Capzy and any screen, camera, microphone or uploaded video a broker chooses to send in that conversation.
• Calls — recordings and transcripts of calls with us, and the notes we make from them, including notes drafted by AI tools and checked by a broker.

Usage analytics is processed in our EU PostHog project using pseudonymous account or application identifiers. Measurements include page types, actions, experiment variants and confirmed document or bank-connection outcomes. They exclude customer contact details, document contents and screen recordings. We rely on our legitimate interest in improving Capzy; you can object, or ask about access to or deletion of these records, by contacting us.

• To assess which lenders and products fit your business.
• To submit applications to lenders on your behalf, with your consent.
• To communicate with you about your applications and our service.
• To keep an accurate record of our calls, check the quality of our service and train our brokers.
• To meet legal and regulatory obligations, including anti-money-laundering checks.
• To improve our service, including through usage analytics and tests of the document-upload journey.

Checking your eligibility with Capzy does not affect your credit score. Where a lender needs to run a hard credit check before making a final offer, they will tell you first.

We use automated tools to help a human broker summarise application information and identify points to review. These tools do not make a lending decision, and a broker reviews the output before acting on it.

We rely on contract (to provide the brokerage service you ask for), legal obligation (identity and anti-fraud checks), legitimate interests (running and improving our business) and consent (marketing and non-essential cookies), as defined by UK GDPR.

We record and transcribe calls, and use AI to draft call notes, on the basis of our legitimate interests in keeping accurate records and improving our service.

• Lenders on our panel — only what they need to consider your application, and only when you ask us to proceed.
• Service providers — hosting, analytics and communication tools that help us run Capzy, under contracts that protect your data.
• Plaid — to establish and maintain the read-only bank connection you choose to authorise.
• Anthropic — to help a human broker interpret pre-aggregated financial indicators. We do not send Anthropic raw transaction lists, bank credentials, account identifiers or counterparty names for this purpose.
• OpenAI and Anthropic — to transcribe call recordings and draft call notes and coaching for a broker to review.
• Regulators and law enforcement — where the law requires it.

We never sell your personal information.

We keep each record only for as long as its purpose, a legal duty or an active complaint requires. Enquiry and ordinary application data is reviewed after 24 months of inactivity and is then deleted or anonymised where we have no reason to retain it. Evidence connected to accepted funding, an agreement, complaint or legal claim may be retained for up to six years after the relevant relationship or agreement ends.

Unfinished video uploads are removed after 24 hours and inactive unsent recordings after 30 days. An ordinary video message is removed 12 months after its conversation closes, or after 24 months of inactivity. A recording that forms part of accepted-funding evidence may follow the longer evidence period above. A documented legal or complaint hold pauses deletion only for the records it covers.

Call recordings are kept for up to 90 days.

Usage analytics uses PostHog's standard retention, which makes seven years of events available for analysis on our current plan. This does not automatically delete older events. You can contact us to request deletion of analytics records already collected.

Under UK data protection law you can:

• Ask for a copy of the information we hold about you.
• Ask us to correct or delete your information.
• Object to or restrict how we process it.
• Ask us to transfer it to another provider.
• Withdraw consent at any time, where consent is the basis we rely on.

Your right to object to call recording. You can ask us not to record a call at any time. Tell your broker and they will stop recording and take notes instead.

To exercise any of these rights, email hello@capzy.com. We respond within one month.

Your data is encrypted in transit and at rest, access is limited to the people who need it, and we review our security practices regularly. No system is perfectly secure, but we treat your financial information with the care we'd expect for our own.

If you're unhappy with how we've handled your data, contact us first and we'll try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.