Privacy policy
Effective August 2026
How Vantrell Business Capital collects, uses, and shares information — and what you can tell us to do about it.
Who we are
Vantrell Business Capital, operated by Vantrell Business Capital LLC, is a business-financing matching and lead-generation service. We are not a lender. We do not make credit decisions, do not lend money, and do not guarantee approval, amounts, rates, fees, or terms. Participating financing providers make their own decisions under their own policies.
This policy covers our website and our matching service. It applies to information about business owners and business contacts in the United States. We do not knowingly collect information from anyone under 18, and this service is not directed at children.
Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Business and contact details | Business name, your name, business email, phone, state, industry, time in business | You, when you complete the matching form |
| Financing request details | Revenue range, requested amount range, purpose of funds, whether you already have financing | You, when you complete the matching form |
| Prospect records | Business name, owner name, business email, phone, address, industry, estimated revenue | Licensed data vendors, public business records, and referrals. We record the source of every record. |
| Consent records | What disclosure text you were shown, which providers were named, what you authorised, and when | Generated when you use the service |
| Communication records | Whether an email was delivered, bounced, opened a link, was replied to, or was unsubscribed | Our email systems |
| Technical data | IP address, browser type, timestamps | Automatically, for security, fraud prevention, and consent evidence |
What we never ask for. We do not collect Social Security numbers, full dates of birth, driver's licences or government IDs, bank login credentials, bank account or routing numbers, bank statements, tax returns, credit reports, or voided cheques. If a provider needs any of that to underwrite, they collect it directly through their own systems, under their own privacy policy.
If a file we receive contains such fields, our import process strips them before the data is stored.
How we use information
- To identify which participating providers may fit your request, based on their stated criteria.
- To show you those providers by name and record what you authorise.
- To transmit your request to the providers you authorise — never more than two per request.
- To send business-to-business email about our matching service, with a working one-click unsubscribe in every message.
- To record outcomes, such as whether a provider contacted you, so we can hold providers to their obligations.
- To keep the service secure, prevent abuse, and maintain the audit records our compliance obligations require.
- To comply with law and to establish, exercise, or defend legal claims.
We do not use your information to make automated decisions that produce legal or similarly significant effects about you. Matching identifies providers whose stated criteria your answers appear to meet; it is not a credit decision, and no provider is obliged to act on it.
How we share information
With financing providers. Only the providers you explicitly authorise, and never more than two per request. Before anything is sent we show you their names and the exact disclosure you are agreeing to, and we keep a record of both. Once your information reaches a provider, that provider handles it under its own privacy policy, and you should read it.
With service providers. Hosting, database, and email delivery vendors that process information on our instructions and are contractually restricted from using it for their own purposes.
For legal reasons. Where required by law, subpoena, or to protect our rights, users, or the public.
In a business transfer. If the business is sold or merged, information may transfer as part of that transaction, subject to this policy.
We do not sell your information to data brokers, and we do not share it for cross-context behavioural advertising.
Whether this is a “sale” or “sharing” under US state law
Some US state privacy laws define “sale” broadly enough to include disclosing personal information to another business for valuable consideration, even where no money changes hands for the data itself. We receive compensation from providers when an introduction leads to business. Depending on how those definitions are applied, transmitting your authorised request to a provider may be treated as a “sale” under some state laws.
We treat it that way for your benefit rather than arguing the point: you can direct us not to sell or share your information at any time using our Do not sell or share page. Doing so does not affect a request you have already authorised us to transmit, because we cannot retrieve information a provider already holds — but it stops anything further.
Your rights and choices
Depending on where you live, you may have some or all of the following rights. We honour these requests for all US residents, regardless of whether your state currently grants them.
- Know and access. What we hold about you, where it came from, why we have it, and who we disclosed it to.
- Correct. Fix information that is inaccurate.
- Delete. Have your information erased, subject to records we must keep by law — consent evidence and suppression records among them.
- Opt out of marketing. Every marketing email has a one-click unsubscribe. It takes effect immediately and permanently, and we keep a suppression record specifically so we do not contact you again by mistake.
- Opt out of sale or sharing. Via this page.
- Non-discrimination. We will not treat you differently for exercising any of these rights.
- Appeal. If we refuse a request, you may ask us to reconsider, and we will respond in writing.
Make any of these requests through our privacy request form. We verify your identity before acting, respond within the time your state law requires (generally 45 days, extendable once where permitted), and confirm when it is done. An authorised agent may submit a request on your behalf with proof of authorisation.
Retention
| What | How long |
|---|---|
| Matching requests and the answers you gave | Up to 24 months from submission |
| Consent records | At least 5 years — this is the evidence that sharing was authorised |
| Suppression and unsubscribe records | Indefinitely, so we never contact you again by mistake |
| Prospect records never contacted | Up to 24 months, then deleted |
| Audit logs | At least 2 years |
A deletion request shortens these, except where a record is one we are required to keep — an unsubscribe record being the clearest example, since deleting it would defeat its own purpose.
Security
We encrypt data in transit, restrict access by role, store no passwords for staff accounts, keep audit trails of who did what, and deliberately avoid collecting the categories of information that cause the most harm when exposed. Uploaded files are stripped of sensitive columns before storage and deleted once processed.
No system is perfectly secure. If a breach affects your information we will notify you and the relevant authorities as the law requires.
Cookies
We use only the cookies needed to run the site and keep it secure — for example, to keep staff signed in to the administrative console. We do not use advertising cookies, and we do not permit third parties to track you across other websites from ours.
Changes to this policy
If we change this policy we will update the effective date above. For material changes affecting how we use or share information already collected, we will give notice before the change takes effect.
Contact us
Privacy requests: privacy request form.
Anything else: contact page.
By post: Vantrell Business Capital LLC, 48 Wall Street, Suite 1100, New York, NY 10005.