Privacy policy

Effective August 2026

How Vantrell Business Capital collects, uses, and shares information — and what you can tell us to do about it.

Draft. This document has not been reviewed by a lawyer. It describes how the service actually works, but it is not legal advice and must be reviewed and approved by qualified counsel before this service handles real customer data.

Who we are

Vantrell Business Capital, operated by Vantrell Business Capital LLC, is a business-financing matching and lead-generation service. We are not a lender. We do not make credit decisions, do not lend money, and do not guarantee approval, amounts, rates, fees, or terms. Participating financing providers make their own decisions under their own policies.

This policy covers our website and our matching service. It applies to information about business owners and business contacts in the United States. We do not knowingly collect information from anyone under 18, and this service is not directed at children.

Information we collect

CategoryExamplesWhere it comes from
Business and contact detailsBusiness name, your name, business email, phone, state, industry, time in businessYou, when you complete the matching form
Financing request detailsRevenue range, requested amount range, purpose of funds, whether you already have financingYou, when you complete the matching form
Prospect recordsBusiness name, owner name, business email, phone, address, industry, estimated revenueLicensed data vendors, public business records, and referrals. We record the source of every record.
Consent recordsWhat disclosure text you were shown, which providers were named, what you authorised, and whenGenerated when you use the service
Communication recordsWhether an email was delivered, bounced, opened a link, was replied to, or was unsubscribedOur email systems
Technical dataIP address, browser type, timestampsAutomatically, for security, fraud prevention, and consent evidence

What we never ask for. We do not collect Social Security numbers, full dates of birth, driver's licences or government IDs, bank login credentials, bank account or routing numbers, bank statements, tax returns, credit reports, or voided cheques. If a provider needs any of that to underwrite, they collect it directly through their own systems, under their own privacy policy.

If a file we receive contains such fields, our import process strips them before the data is stored.

How we use information

  • To identify which participating providers may fit your request, based on their stated criteria.
  • To show you those providers by name and record what you authorise.
  • To transmit your request to the providers you authorise — never more than two per request.
  • To send business-to-business email about our matching service, with a working one-click unsubscribe in every message.
  • To record outcomes, such as whether a provider contacted you, so we can hold providers to their obligations.
  • To keep the service secure, prevent abuse, and maintain the audit records our compliance obligations require.
  • To comply with law and to establish, exercise, or defend legal claims.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you. Matching identifies providers whose stated criteria your answers appear to meet; it is not a credit decision, and no provider is obliged to act on it.

How we share information

With financing providers. Only the providers you explicitly authorise, and never more than two per request. Before anything is sent we show you their names and the exact disclosure you are agreeing to, and we keep a record of both. Once your information reaches a provider, that provider handles it under its own privacy policy, and you should read it.

With service providers. Hosting, database, and email delivery vendors that process information on our instructions and are contractually restricted from using it for their own purposes.

For legal reasons. Where required by law, subpoena, or to protect our rights, users, or the public.

In a business transfer. If the business is sold or merged, information may transfer as part of that transaction, subject to this policy.

We do not sell your information to data brokers, and we do not share it for cross-context behavioural advertising.

Whether this is a “sale” or “sharing” under US state law

Some US state privacy laws define “sale” broadly enough to include disclosing personal information to another business for valuable consideration, even where no money changes hands for the data itself. We receive compensation from providers when an introduction leads to business. Depending on how those definitions are applied, transmitting your authorised request to a provider may be treated as a “sale” under some state laws.

We treat it that way for your benefit rather than arguing the point: you can direct us not to sell or share your information at any time using our Do not sell or share page. Doing so does not affect a request you have already authorised us to transmit, because we cannot retrieve information a provider already holds — but it stops anything further.

Your rights and choices

Depending on where you live, you may have some or all of the following rights. We honour these requests for all US residents, regardless of whether your state currently grants them.

  • Know and access. What we hold about you, where it came from, why we have it, and who we disclosed it to.
  • Correct. Fix information that is inaccurate.
  • Delete. Have your information erased, subject to records we must keep by law — consent evidence and suppression records among them.
  • Opt out of marketing. Every marketing email has a one-click unsubscribe. It takes effect immediately and permanently, and we keep a suppression record specifically so we do not contact you again by mistake.
  • Opt out of sale or sharing. Via this page.
  • Non-discrimination. We will not treat you differently for exercising any of these rights.
  • Appeal. If we refuse a request, you may ask us to reconsider, and we will respond in writing.

Make any of these requests through our privacy request form. We verify your identity before acting, respond within the time your state law requires (generally 45 days, extendable once where permitted), and confirm when it is done. An authorised agent may submit a request on your behalf with proof of authorisation.

Retention

WhatHow long
Matching requests and the answers you gaveUp to 24 months from submission
Consent recordsAt least 5 years — this is the evidence that sharing was authorised
Suppression and unsubscribe recordsIndefinitely, so we never contact you again by mistake
Prospect records never contactedUp to 24 months, then deleted
Audit logsAt least 2 years

A deletion request shortens these, except where a record is one we are required to keep — an unsubscribe record being the clearest example, since deleting it would defeat its own purpose.

Security

We encrypt data in transit, restrict access by role, store no passwords for staff accounts, keep audit trails of who did what, and deliberately avoid collecting the categories of information that cause the most harm when exposed. Uploaded files are stripped of sensitive columns before storage and deleted once processed.

No system is perfectly secure. If a breach affects your information we will notify you and the relevant authorities as the law requires.

Cookies

We use only the cookies needed to run the site and keep it secure — for example, to keep staff signed in to the administrative console. We do not use advertising cookies, and we do not permit third parties to track you across other websites from ours.

Changes to this policy

If we change this policy we will update the effective date above. For material changes affecting how we use or share information already collected, we will give notice before the change takes effect.

Contact us

Privacy requests: privacy request form.
Anything else: contact page.
By post: Vantrell Business Capital LLC, 48 Wall Street, Suite 1100, New York, NY 10005.