Legal
Privacy policy
How we collect, use, share and protect personal information when you use our website and services, and your rights under UK data protection law.
Last updated 5 November 2026
Who we are
BrightSky is the trading name of Wallace Business Services Ltd, a company registered in England and Wales (number 17562930), registered office 18 Abbots Grove, Stevenage, England, SG1 1NP. We are the controller of the personal information described in this policy and are registered with the Information Commissioner’s Office (registration number ZC293956).
Questions about this policy or your information can be sent to hello@brightskyfunding.com.
What we collect
- Contact and identity details: your name, email address, phone number and job title, and for directors and shareholders, dates of birth, home addresses and address history, which lenders need.
- Business details: your business name, company number, sector, trading history, turnover, what you need funding for and how much.
- Financial information: bank statements you upload or share through open banking, and information about existing borrowing.
- Records of our contact with you: notes of calls, emails and messages, and recordings of calls where we tell you a call is recorded.
- Technical information: your IP address, browser type, the pages you visit and how you arrived at our website, for example from an advertisement.
We collect this from you, from public sources such as Companies House, and, with your permission, from your bank through open banking. When you apply, lenders may share the outcome of their checks with us.
How we use it, and why we’re allowed to
| What we do | Lawful basis |
|---|---|
| Respond to your enquiry, find suitable lenders and prepare and submit applications you ask us to make | Taking steps at your request before entering into a contract, and our legitimate interests in running our business |
| Keep records of our advice and your application | Legal obligation, and our legitimate interests in being able to show what we did |
| Prevent fraud and keep our services secure | Legitimate interests and legal obligation |
| Understand how people find and use our website, and how our advertising performs, using Google Analytics and Google Ads | Your consent, given through our cookie settings |
| Send you marketing emails about funding options and guides | Your consent, which you can withdraw at any time |
Who we share it with
- Lenders, when you ask us to submit an application or to explore options with a specific lender. Lenders will use your information under their own privacy notices, including to carry out credit and fraud checks.
- Service providers who help us run our business, such as Hetzner for hosting, Google Workspace for email, and our telephone and open banking providers, and, if you allow it, Google for website analytics and advertising measurement. Service providers may only use your information on our instructions.
- Authorities and regulators, where the law requires it.
We don’t sell your personal information.
Where it’s stored
We store information in the UK and the European Economic Area. If a provider processes it elsewhere, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement.
How long we keep it
If you become a client, we keep records for six years after our relationship ends, to meet legal and regulatory requirements and to deal with any questions or claims. If you enquire but don’t go ahead, we keep your details for up to two years in case you return, unless you ask us to delete them sooner.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that’s wrong or incomplete;
- ask us to delete your information, or to restrict how we use it, in some circumstances;
- object to our use of your information based on legitimate interests, and to direct marketing at any time;
- ask us to transfer information you gave us to another organisation; and
- withdraw consent where we rely on it.
To use any of these rights, email hello@brightskyfunding.com. We’ll respond within one month. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
See our cookie policy for how our website uses cookies and similar technologies.
Changes to this policy
We’ll update this page if the way we use personal information changes, and show the date it was last updated at the top.