Who are we?

Crystal Business Finance Ltd are commercial finance brokers based in Solihull, however we have representation throughout the UK.  We act as a broker for our clients.  Crystal Business Finance Ltd are Authorised and Regulated by the Financial Conduct Authority. FRN: 653671.

How will we use the information about you?

Here at Crystal Business Finance, we take your privacy seriously and we will use your personal information in a number of ways which will help us;

  1. Enable lenders to make decisions,
  2. For fraud prevention,
  3. For audit purposes,
  4. For statistical analysis,
  5. Credit reference checks

We may share your information with, and obtain information about you from credit reference agencies or fraud prevention agencies.  Information you provide may be put onto a register and shared with other lenders to prevent fraudulent claims.

You can use this link to find out more at

We will not disclose your information to any company outside of our approved panel of lenders except to help prevent fraud or if required by law to do so.

For further information on how your information is used, how we maintain the security of your information and your rights to access/alter and change information we hold on you, please contact

Your Personal Data:

What do we need?

Crystal Business Finance Ltd will be what’s known as the “controller” and the “processer” of your personal data you provide to us. We collect personal data about you which includes your name, address history, contact details (telephone and email) and may also include any special types of information or location-based information.  Information may be collected in writing or by recording of telephone or face to face conversations.

We also gather (where relevant to our finance application on your behalf) evidence of:

  • Financial status
  • Regular financial commitments

Why do we need it?

We need to know your personal data in order to provide you with an accurate recommendation for your personal circumstances.  We will not collect any personal data from you we do not need in order to provide and oversee this service to you.

For processing of data to be lawful under GDPR Crystal Business Finance Ltd use;

  1. Consent: the individual has given clear consent for Crystal Business Finance Ltd to process their personal data for a specific purpose.
  2. Contract: the processing is necessary for a contract Crystal Business Finance Ltd have with an individual, or because they have asked you to take specific steps before entering into a contract.
  3. Legal obligation: the processing is necessary for Crystal Business Finance Ltd to comply with the law (not including contractual obligations).
  4. Legitimate interests: the processing is necessary for Crystal Business Finance Ltd’s legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

Please note it may adversely affect a lender’s decision should you not provide your permission to search.

What do we do with it?

Automated Decision Making: Crystal Business Finance Ltd will pass your data captured to one or more of our approved panel of lenders; some of them may use automated decision-making in respect of your application for finance.  We will only collect the minimum amount of data needed and have a clear retention policy for the profiles we create.

You have the right to not be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning you or any significant effects.  You can request human intervention and challenge the decision made this way by contacting

All the personal data we use is controlled by Crystal Business Finance Ltd in the UK, however, for the purposes of IT hosting and maintenance, this information is located on servers within the European Union.  No third parties have access to your personal data unless the law allows them to do so.  We have a Data Protection regime in place to oversee the effective and secure processing of your personal data.  More information on this framework can be found on our website:

We may pass your data to selected members of our approved panel of lenders in order to provide you with offers of products suitable to meet your requirements.

If you wish to see the individual funder privacy policies please email or call 0121 506 9060.

Your data is stored electronically on our encrypted server in the cloud.  Our servers are based in the UK.

How long do we keep it?

We are required under regulation to keep all your personal data, including name, address history, contact details (telephone and email) for a minimum of 6 years after the conclusion of our business relationship, at which time it will be destroyed.  The information used for marketing will be kept with us until you notify us that you no longer wish to receive this information.

What are your rights?

If at any point you believe retained information is incorrect you can request to see this information and have it corrected and possibly deleted.  Providing you this information is free of charge, but charges may apply for excessive requests.

If you wish to raise a complaint on how we have handled your personal data, you can contact one of our Directors who will investigate the matter.

Where relevant, you have the right to withdraw consent and object at any time and this means that we cannot process your data provided without your consent.

More information about your rights can be found on the Information Commissioner’s website.

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).

Our ICO registration number is: Z1182698. Please go to

In the case of a complaint please contact

We will share your details with carefully selected members of our approved panel of lenders so that they process your information, allowing Crystal Business Finance Ltd to offer suitable and sustainable products that they provide.