Legal

Privacy policy

Last updated 18 May 2026.

1. Who we are

Kartapay (kartapay.co.uk) is operated by Best Business Loans Ltd, registered in England and Wales, company number 16833937, registered office Cust Hall, Toppesfield, Halstead, Essex CO9 4LL. Best Business Loans Ltd is the data controller for personal data collected through this site.

2. What we collect

Lead form data you submit on quote pages: business name, contact name, email, phone, turnover band, finance or payments type, business sector. Optional fields are noted on the form.
Companies House lookup data when you use the company search field. We query Companies House and display match results in the form; we do not store the search query.
Analytics data if you accept cookies: anonymised page views, country, device type, scroll depth, click events. We use Google Analytics 4 and Microsoft Clarity. Without consent, no analytics cookies are set and no analytics data is collected (Google Consent Mode v2 default-deny).
Server logs from Cloudflare: IP address, user agent, request URL. Retained for security and abuse prevention; not joined to lead form data.

3. Why we collect it

To contact you about the quote you requested, and to introduce you to the UK-licensed acquirer, payment facilitator, or FCA-registered lender best suited to your enquiry.
To improve the site content (which pages help, which do not).
To meet our legal and regulatory obligations (Companies House verification of UK trading business, anti-fraud checks).

4. Who we share it with

Lead data is shared only with the UK-licensed acquirers, payment facilitators, or FCA-registered finance lenders relevant to the product you requested. We disclose the name of the partner on the form before you submit. We do not sell data to general lead aggregators. Analytics data is processed by Google and Microsoft under their respective terms.

5. How long we keep it

Lead form data: 24 months from your last interaction. Analytics: per Google Analytics 4 default (14 months). Server logs: 30 days.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any right, email [email protected]. We respond within 30 days. You can also complain to the Information Commissioner's Office.

7. Cookies

Detailed cookie list and consent controls: cookies policy.

8. Changes

If we materially change this policy we update the "Last updated" date above. Continued use of the site after a change indicates acceptance.

PL Po polsku

Polityka prywatności , w skrócie

Administrator danych: Best Business Loans Ltd, brytyjska spółka z o.o., numer Companies House 16833937, adres: Cust Hall, Toppesfield, Halstead, Essex CO9 4LL.

Co zbieramy: dane z formularza kontaktowego (nazwa firmy, dane kontaktowe, branża, obrót, rodzaj finansowania), dane wyszukiwania w Companies House (nie przechowujemy zapytań), dane analityczne tylko po Twojej zgodzie (Google Analytics 4 + Microsoft Clarity, oba pod kontrolą Google Consent Mode v2 , domyślnie odrzucone).

Po co zbieramy: aby skontaktować Cię z brytyjskim licencjonowanym acquirerem lub pożyczkodawcą zarejestrowanym w FCA. Nie sprzedajemy danych agregatorom leadów.

Komu udostępniamy: tylko brytyjskiej firmie wskazanej na formularzu przed wysłaniem (jednemu acquirerowi albo jednemu pożyczkodawcy). Nie panelowi.

Jak długo: dane formularza 24 miesiące od ostatniej interakcji. Analityka GA4 14 miesięcy. Logi serwera 30 dni.

Twoje prawa (UK GDPR): dostęp, korekta, usunięcie, ograniczenie, przeniesienie, sprzeciw. Napisz na [email protected] , odpowiadamy w ciągu 30 dni. Możesz też złożyć skargę do brytyjskiego ICO (ico.org.uk).

Cookies: domyślnie wszystko zablokowane do momentu akceptacji w banerze. Szczegóły: polityka cookies.

RO În română

Politica de confidențialitate , pe scurt

Operator de date: Best Business Loans Ltd, SRL britanic înregistrat la Companies House cu numărul 16833937, adresa: Cust Hall, Toppesfield, Halstead, Essex CO9 4LL.

Ce colectăm: datele tale din formularul de contact (nume firmă, contact, sector, cifră de afaceri, tip finanțare), date Companies House la căutare (nu salvăm interogările), date analitice doar după consimțământ (Google Analytics 4 + Microsoft Clarity, ambele controlate de Google Consent Mode v2 , implicit refuzat).

De ce le colectăm: ca să te conectăm cu un acquirer britanic licențiat sau un creditor autorizat de FCA. Nu vindem datele către agregatori de lead-uri.

Cui le împărtășim: doar firmei britanice numită pe formular înainte de trimitere (un singur acquirer sau un singur creditor). Nu un panel.

Cât timp le păstrăm: datele de formular 24 de luni de la ultima interacțiune. Analitica GA4 14 luni. Loguri server 30 zile.

Drepturile tale (UK GDPR): acces, corectare, ștergere, restricționare, portabilitate, opoziție. Scrie la [email protected] , răspundem în 30 de zile. Poți depune și plângere la ICO Marea Britanie (ico.org.uk).

Cookies: tot blocat implicit până accepți pe banner. Detalii: politica cookies.

Note / Uwaga / Notă: The English version above is the authoritative legal text. · Polska wersja powyżej tekstu angielskiego jest streszczeniem i nie zastępuje obowiązującej wersji angielskiej. · Versiunea în limba română de mai sus este un rezumat și nu înlocuiește versiunea engleză obligatorie.