Privacy Policy

*Last updated 2 April 2025  

Purpose of this privacy notice

About us

Rapital.co.uk is a website operated by United Kapital Limited, part of the Capify Group. Capify provides funding solutions to small and medium-sized businesses. This privacy notice refers to Capify and its group companies collectively as “Capify” or the “Capify Group.” Capify provides funding for businesses. To run our business, we collect, use, and share information about individuals (‘personal information’).

Our services (and this website) are not intended for children. We do not knowingly process the personal information of children.

This privacy notice

This privacy notice tells you what to expect us to do with your personal information.

This notice will occasionally be updated. It might also be supplemented by additional privacy notices for specific services or activities.

Controller

The Capify Group is made up of different legal entities, which are identified below: 

Capify UK LLC (registered in the USA) 
United Kapital Limited LLC (registered in the USA) 
Capiota Limited LLC (registered in the USA) 
UK SME Capital LLC (registered in the USA) 
United Kapital Limited (registered in England and Wales under company number 06575165) 
Capify UK Limited (registered in England and Wales under company number 11715963)

Capify UK SPV-1 LLC (registered in the USA)

Where your personal information is collected through our websites, United Kapital Limited is the legal entity responsible for this information (the ‘controller’).

Where your personal information is collected as part of our other business operations, the legal entity acting as controller will vary according to those operations. You can ask us to identify the relevant Capify controller of your personal information.

Contact details

You can contact us about our processing of personal information:

Email: mydata@capify.co.uk

Post: First Floor, Hamilton House, 249 Church Street, Altrincham, Cheshire, WA14 4DR, UK

Your personal information

Do we collect personal information about you?

The table below summarises whether we are likely to collect information about you and the types of information we collect:

Type of individual

Types of information collected

You are a sole trader who applies to us for a loan

Your name, address (including past addresses), contact details, and date of birth.

ID documents and facial biometric information to confirm your identity.

Your bank statements and credit history.

The accounting data of your business

Details of our loan, including loan repayments.

Details of your other employers and your roles with them.

Details of your directorships, memberships, and shareholdings of other companies.

Details of your personal assets.

Results of our anti-money laundering, politically exposed persons, and sanctions checks.

You are a director, member, or shareholder of a legal entity that applies to us for a loan

Your name, address (including past addresses), contact details, and date of birth.

ID documents and facial biometric information to confirm your identity.

Your bank statements and credit history.

Your connection with the loan applicant.

Details of your employers and your roles with them.

Details of your directorships, memberships, and shareholdings of other companies.

Details of your personal assets.

Results of our anti-money laundering, politically exposed persons, and sanctions checks.

You are a guarantor for a loan, or have been put forward to us as a guarantor

Your name, address (including past addresses), contact details, and date of birth.

ID documents [and facial biometric information to confirm your identity].

Your bank statements and credit history.

The accounting data of your business

Details of your other employers and your roles with them.

Details of your directorships, memberships, and shareholdings of other companies.

Details of your personal assets.

Results of our anti-money laundering, politically exposed persons, and sanctions checks.

You are a Financial Associate (we explain below what this means)

Your name, address (including past addresses), contact details, and date of birth.

ID documents [and facial biometric information to confirm your identity].

Your bank statements and credit history.

Details of your employers and your roles with them.

Details of your directorships, memberships, and shareholdings.

Details of your personal assets.

You are a representative of our customers or suppliers (including potential customers and suppliers)

Your name, and contact details.

Details of the entity you represent and your role.

You are a representative of a regulator or government body which has dealing with us

Your name, and contact details.

Details of the regulator or government body you represent and your role.

You are an attendee of an educational, networking, or marketing event organised by us

Your name, and contact details.

Details of your employer and your role.

You are a visitor to our offices

Your name, and contact details.

The name of your employer and your job title.

CCTV recordings of you while at our offices.

You are a visitor to our websites or social media accounts

You are a visitor to our websites or social media accounts

  • IP address and general location (e.g., city or region)
  • Device type, operating system, and browser type
  • Pages visited, time spent on each page, and navigation paths
  • Clicks, scrolls, and other interaction data
  • Referring website or source (e.g., search engine or ad)
  • Social media profile information (if interacting with our accounts or ads)
  • Preferences and interests inferred from your activity
  • Cookie data and unique identifiers (e.g., device ID or advertising ID

Financial Associate

You could be a Financial Associate where you are in a joint personal financial arrangement with someone else, and that someone else is:

  • a director, member, or shareholder of a legal entity applying to us for a loan
  • a person providing us with a guarantee for a loan

Typically, you would only be in a joint personal financial arrangement with someone else where you are their spouse, partner, or parent.

Lawful bases and data protection rights

Your rights

Under UK data protection law, we must have a ‘lawful basis’ for collecting and using your personal information. You can find out more about lawful bases on the ICO’s website.

Your data protection rights are summarised below. The lawful basis we rely on might affect your data protection rights. You can find out more about your data protection rights and the exemptions which might apply on the ICO’s website:

  • Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
  • Your right to rectification– You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
  • Your right to erasure– You have the right to ask us to delete your personal information.
  • Your right to restriction of processing– You have the right to ask us to limit how we can use your personal information.
  • Your right to object to processing– You have the right to object to the processing of your personal data.
  • Your right to data portability– You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
  • Your right to withdraw consent– When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request under your data protection rights, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

The lawful bases for our processing

The table below summarises the lawful bases for our processing. Where we rely on ‘legitimate interests’ as our lawful basis, the table also provides the reason for us doing so:

Purpose for which we use your personal information

Our lawful basis

Our legitimate interests reason

Making loan decisions, managing loans, and enforcing the terms of loans and guarantees including through debt collection (where you represent or are connected to a customer or potential customer, or you are a Financial Associate)

Legitimate interests

Contract (where you are a sole trader or a guarantor for a loan)

To ensure our business remains viable, we need to make loans in appropriate circumstances and to manage the repayment of those loans. This entails understanding the circumstances of loan applicants (as well as the circumstances of their representatives, owners, and guarantors), confirming their respective identities, and recovering unpaid loans from borrowers and their guarantors

Referring details of your loan application to other lenders or brokers (where you are a sole trader who does not meet our lending criteria, or you are a consumer)

Consent

Not applicable

Sharing information with other lenders who hold a charge over your property (where you are giving your property as security for a loan from us)

Legitimate interests

To ensure existing lenders are aware of our interest in the secured property

Managing relationships with our customers and suppliers (where you represent or are connected to a customer or supplier)

Legitimate interests

To ensure our customers and suppliers remain willing to deal with us, we need to understand them and to communicate with them

Managing relationships with regulators and government bodies (where you represent a regulator or government body)

Legitimate interests

To operate our business, we need to communicate with regulators and government bodies

Marketing our services to customers and potential customers, including through targeted advertisements on third party websites and social media platforms (where you represent or are connected to a customer or potential customer)

Legitimate interests

Consent

To maintain and grow our business, we need to promote ourselves to individuals who make decisions about seeking funding for their businesses

Analysing your interactions with our marketing communications (where you receive a communication from us, including by email, SMS, social media, or online advertising)

Legitimate interests

To maintain and grow our business, we need to understand the effectiveness of our marketing campaigns

Analysing your interactions with our website and social media accounts (where you visit our website or social media accounts)

Legitimate interests

To maintain and grow our business and to protect the security of our websites, we need to understand who visits our websites and social media accounts and how they interact with these public sites

Preventing financial crime, including fraud (where you represent or are connected to a customer or potential customer, or you are a Financial Associate)

Legitimate interests

Legal obligation

To avoid our business and its reputation being damaged, we need to minimise the risk of being the target of financial crime and the risk of enabling financial crime to be perpetrated against others

Complying with laws and regulations applicable to us

Legal obligation

Not applicable

Dealing with the queries, complaints, and claims we received (where you are involved in the query, complaint, or claim)

Legitimate interests

To operate a business and maintain our reputation, we need to respond to the queries, complaints, and claims we receive

Making a complaint or legal claim, including the enforcement of our agreements through legal proceedings (where you are involved in our complaint or claim)

Legitimate interests

To ensure our business remains viable, we need to protect our rights and make third parties fulfil their obligations to us.

Facial biometric information

Under the UK GDPR, we must also have a special category condition where we use facial biometric information to confirm your identity. The special category condition we rely on is the ‘prevention or detection of unlawful acts’.

Opt-out preferences

Where we send you marketing communications by electronic means (such as email or SMS), you can opt-out from receiving further marketing communications from us by clicking the ‘unsubscribe’ link.

Where we send you marketing communications by other means, you can opt-out from receiving further marketing communications from us by sending your request to the contact information at the top of this privacy notice.

What are our sources of personal information

Our sources

We obtain your personal information from:

  • you (such as when you complete one of our loan forms, use our website – please see the section below on cookies, or engage with us in correspondence or through social media)
  • loan applicants (where you are connected to the loan applicant or are a Financial Associate)
  • publicly available sources (such as Companies House, the Land Registry, and the internet)
  • legal bodies or professionals (such as the courts and solicitors)
  • debt collection agencies
  • credit reference agencies (please see the section below regarding credit reference agencies)
  • providers of anti-money laundering checks, politically exposed person checks, and sanctions checks
  • market research agencies

Cookies

We use cookies and similar tracking technology to collect personal information about you. To find out more about how what our cookies do and how you can control them, please see our cookie policy.

Credit Reference Agencies (CRAs) and credit checks

When processing an application for one of our lending products, we might use CRAs and other approved third parties to run credit and identity checks on you if you are:

  • a sole trader (and applicant for the loan)
  • a director, member, or shareholder of the loan applicant
  • a guarantor for a loan
  • a Financial Associate

This involves us providing personal information we hold about you to one or more CRAs. In return, the CRAs provide us with information about your financial situation and financial history.

Where we have provided a lending product, we might use CRAs to carry out periodic checks on individuals previously checked to verify there has not been a change in their circumstances.

Effect of credit checks

Our credit checks will be visible to other lenders. Depending on the CRA, it might be classified as a hard search, but should not impact the credit score.

Record linking

If you are a Financial Associate of a sole trader applying for a loan (or are a joint applicant for a loan), we will link your records together. This will result in the CRAs also linking your records together.

Being linked with someone else in this way could affect your credit score. You will remain subject to this linking in the CRAs’ records until you or the other linked person is successful in asking the CRAs to break the linking.

Reporting to CRAs

If you are a sole trader and do not repay a loan in full and on time, then we will report this to the CRAs.

Credit Reference Agency Information Notices (CRAIN)

CRAs process your personal information independently of us.

The activities of CRAs, the data they hold, the ways in which they use, share, and retain personal information, and your data protection rights with the CRAs are explained in more detail in the industry-wide credit reference agency information notice (“CRAIN”).

The CRAs we use are set out below with links to their respective CRAINs:

  • Equifax: https://www.equifax.co.uk/privacy-hub/crain

How long we keep personal information

Where we hold your personal information in connection with a loan, we will normally retain this information for 6 years after the loan is repaid. If the loan is not repaid then we will normally retain this information for 12 years from the date of the last payment or acknowledgment.

Where we hold your personal information in connection with a loan application which is abandoned or refused, we will normally retain this information for 6 years from the date of abandonment or refusal.

Who we share personal information with

Processors

Processors are external companies we use to help us run our business efficiently. Our processors use your personal information on our behalf in accordance with our instructions. They are not permitted to use your personal information for their own purposes.

We use the following categories of processors:

  • IT companies that host our IT systems, email, customer relationship management, and backups
  • IT companies that provide customer relationship management systems, and automated business services
  • financial technology companies that provide us with payment services.

Other organisations we share with

We also provide your personal information to:

  • credit reference agencies
  • debt collection agencies
  • financial or fraud investigation authorities, including the National Crime Agency
  • professional or legal advisers
  • insolvency practitioners
  • regulatory authorities
  • external auditors
  • organisations we are legally obliged to share personal information with
  • other legal entities within the Capify Group

If we sell the business of one or more legal entities within the Capify Group, then your personal information might be transferred to the new owner as part of the sale of the business assets.

Sharing information outside the UK

Where necessary, we might transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguards regarding any of our transfers, please contact us using the contact information at the top of this privacy notice.

How to complain

If you have concerns about our use of your personal information, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy after receiving our response, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint.