Privacy Policy

Backed is a trading name of Quotra EOOD, registered in Bulgaria under company number 206167499, with registered address at Kiril I Metodiy 12, Gorna Oryahovitsa, Bulgaria.

Backed is the controller for the processing described in this policy, except where this policy states that a third-party provider acts as an independent controller.

Privacy contact: ioan@backeduk.com

Identity and contact information

• First and last name
• Email address
• Mobile telephone number
• Your relationship to the business, where relevant

Enquiry information

• The amount of funding you would like to borrow
• Your trading style (limited company / LLP, or sole trader / partnership)
• Company name and, where applicable, Companies House number
• How long the business has been trading
• Estimated yearly turnover
• Any other information you choose to include in your enquiry

We do not ask for, and you should not send us, sensitive documentation such as bank statements, credit reports, identity documents or biometric data. If that information is needed, the finance provider you are introduced to will request it from you directly, under its own privacy notice.

Technical and acquisition information

• A form session identifier used to join up the steps of a single enquiry
• Page path and referring page
• UTM and advertising campaign parameters
• Browser and device information (user agent)
• Which form steps you viewed, completed or left, so we can improve the form
• Advertising click identifiers such as fbclid and the Meta ad, campaign and placement identifiers of the ad you arrived from
• Advertising cookies set by Meta and OpenAI (including Meta's _fbp and _fbc), set only where you have consented to advertising cookies
• Your approximate country, read from our hosting provider so we know whether to show you a cookie banner

Communication information

• Telephone and email correspondence
• Enquiry notes and customer service communications
• Marketing opt-in and opt-out preferences

We identify a lawful basis for each activity rather than relying on a single basis.

• Responding to your enquiry, reviewing your requirement and introducing you to a finance provider — steps taken at your request prior to entering into a contract, and our legitimate interest in operating an introduction service.
• Allowing the selected finance provider to contact you about your enquiry — steps taken at your request, and where required, your consent.
• Carrying out or arranging a soft credit search — your consent, given on the form.
• Preventing fraud and misuse of our forms — legitimate interests and, where applicable, legal obligation.
• Website analytics and measuring advertising performance to improve the form and our acquisition — consent where non-essential cookies or similar technologies are used, otherwise legitimate interests.
• Sharing hashed contact details with Meta to measure and improve our advertising — your consent, given through the cookie banner, in every region where consent is required.
• Complying with legal obligations and keeping records — legal obligation.
• Establishing, exercising or defending legal claims — legitimate interests.
• Direct marketing from Backed — consent where required, otherwise legitimate interests for existing business contacts. See section 6.

When you submit a funding enquiry through Backed, fulfilling that request requires us to share your enquiry with a commercial finance provider so that it can assess the enquiry and contact you. We send only information that is reasonably relevant to the enquiry you submitted. We do not broadcast your details to an open panel of unrelated brokers or companies.

Any credit assessment, documentation request, decision, rate or offer is made by that provider under its own privacy notice and terms.

Depending on your business profile and each provider's criteria, we may pass your enquiry to one or more of the following funding partners: Capify, iwoca and FlexyKap (MaxCap). Capify and iwoca receive your enquiry directly through their systems. FlexyKap is a manual partner: we share your enquiry with them by email, and we may contact you to collect any extra details they need. Where none of these partners can take your enquiry, we may pass it to Tera Business Finance. After you submit, we show you which partners received your enquiry. Each partner assesses the enquiry and contacts you under its own privacy notice, as an independent controller.

Where you have consented to advertising cookies, or where you are in a country in which consent is not required for them, we also share a hashed (irreversible) version of your email address, telephone number and name with Meta Platforms through the Meta Conversions API, so that Meta can measure which of our ads led to an enquiry. Meta cannot read the hashed values as plain text, and we do not share the content of your enquiry with Meta. If you decline advertising cookies, we still record that an enquiry happened so we can count our advertising results, but we do so anonymously: no email address, telephone number, name, cookie identifier, IP address or device information is sent — only a random internal reference that cannot be linked back to you, flagged for Meta’s Limited Data Use so it is not used to build a profile of you.

Where you have consented to advertising cookies, or where you are in a country in which consent is not required for them, we also load OpenAI’s advertising pixel, which measures how our advertising performs and receives the events described in section 12. If you decline advertising cookies, it never loads.

We also use service providers that process information on our behalf under contract, such as hosting, database, email, CRM and analytics providers, and we may disclose information to professional advisers or authorities where we are legally required to do so.

Where a finance provider receives your enquiry and uses it for its own assessment, decision-making and customer relationship, that provider determines its own purposes and means of processing. In those cases Backed and the provider each act as separate, independent controllers, and each is responsible for its own processing and for providing its own privacy information to you.

Some suppliers act only on our instructions as our processors. The relationship applied to any particular partner reflects the data-processing terms actually agreed with that partner.

Being contacted about the enquiry you submitted is part of responding to that enquiry. It is separate from marketing.

• Enquiry contact: you ask us, and the finance provider we introduce you to, to contact you about the funding you asked about.
• Additional marketing: separately and optionally, you can choose to receive occasional relevant updates from Backed.

Marketing consent is never pre-selected, is never required in order to submit an enquiry, and is never bundled into acceptance of our Terms. We record your preference and the time it was given, and every marketing message includes a simple way to opt out. You can also opt out at any time by emailing ioan@backeduk.com.

We do not obtain permission for an open list of partners to market unrelated products to you. The purpose of sharing your enquiry stays linked to that enquiry. If a provider wants permission for unrelated future marketing, it must ask you separately and transparently, and rely on its own appropriate lawful basis.

We keep information only for as long as reasonably necessary for the purposes for which we collected it, including managing your enquiry, partner attribution, reconciliation, customer support, compliance and record-keeping, complaints and disputes, legal obligations and fraud prevention. Aggregated or anonymised analytics may be kept for longer.

Retention periods are set internally per category of data and reviewed periodically. If you would like to know the current retention period applied to your information, contact us at ioan@backeduk.com.

We use reasonable technical and organisational measures to protect personal data, including limited internal access on a need-to-know basis, authentication and access controls, secure hosting, encryption in transit, restrictions on provider access, and internal handling procedures. No system or transmission method can be guaranteed to be completely secure, and we do not claim otherwise.

Because we use tools such as cloud hosting, databases, CRM systems, advertising platforms, analytics platforms, email providers and automation software, some information may be processed outside the UK or the country in which you are located. Where personal information is transferred internationally and a safeguard is required, we put in place an appropriate legal transfer mechanism for that transfer.

Subject to the conditions in applicable data protection law, you may have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Request erasure of your information
• Request restriction of processing
• Object to processing
• Data portability, where applicable
• Withdraw consent, where processing relies on consent

You have an absolute right to object to processing of your information for direct marketing. If you object, we will stop using your information for that purpose.

To exercise any right, email ioan@backeduk.com. If you are in the UK, you also have the right to complain to the Information Commissioner's Office (ico.org.uk). If you are in the EU, you may complain to your local supervisory authority, including the Bulgarian Commission for Personal Data Protection.

Essential storage

To run the funding form we store a short-lived session identifier in your browser, plus the campaign parameters of the page you arrived on, so the steps of a single enquiry can be joined together. We also store your cookie choice, so we do not ask again on every visit. This storage is necessary to operate the site and does not require consent.

Advertising pixels (Meta and OpenAI)

We use the Meta Pixel together with the Meta Conversions API, and OpenAI’s advertising pixel, to measure how our advertising performs. Meta’s tools set the _fbp and _fbc cookies in your browser; OpenAI’s pixel may set its own advertising cookies. They report events such as viewing the form, starting it and submitting an enquiry.

In the UK, the EEA and Switzerland, neither pixel loads and no advertising cookie is set unless you press Accept on our cookie banner. If you choose Essential only, the pixels are never loaded, no advertising cookie is set, and no data about you is sent to Meta or OpenAI. Outside those regions the pixels load by default, in line with local rules.

Changing or withdrawing your choice

You can change your mind at any time using the Cookie settings link in the footer of every page. Withdrawing consent stops the pixel and deletes the advertising cookies we set. It is as easy to refuse or withdraw as it is to accept. You can also clear or block cookies in your browser settings.

We may update this policy. The version number and last updated date at the top of this page show the current version. See also our Terms & Conditions.

Quotra EOOD, Kiril I Metodiy 12, Gorna Oryahovitsa, Bulgaria — ioan@backeduk.com