Legal

Privacy & Cookie Policy

Last updated: November 2026 — Version 1.3

1. Who we are

iLendi Capital is an acquisition finance and loans broker. We arrange finance for people buying businesses across the UK. We are not a lender — we prepare funding applications and place them with lenders on your behalf.

MBA Capital Partners Limited (trading as iLendi Capital). Registered in England and Wales. Company Number: 17527751. Registered office: 32-33 Upper Street, London, N1 0PN. We are an independent commercial finance broker, not a lender. We arrange non-regulated business and commercial finance, lending to companies rather than to consumers, which falls outside the FCA’s regulated activities. Where a transaction would require FCA authorisation, including a regulated owner-occupier mortgage, we refer it to a regulated firm.

iLendi Capital is the data controller for the personal information we collect through this website. We are registered with the Information Commissioner’s Office (ICO). ICO Registration Number: ZC279135.

2. What personal data we collect

2.1 Contact and enquiry forms

• Your name
• Your email address
• Your telephone number
• The type of business you are looking to buy
• Any other information you choose to include in your message

HubSpot enquiry form

On our Buy a Business Finance page, the enquiry form is provided by HubSpot. HubSpot receives your contact details, purchase stage, purchase price band, business type and the consent choices you submit, so we can manage and respond to your enquiry. The embedded form also connects to HubSpot and its spam protection providers when the page loads. Marketing messages depend on the permissions recorded with your form submission; you can unsubscribe from those messages or contact us to withdraw your permission. We do not send these form details to Google Ads for customer matching. With advertising-cookie acceptance, we retain campaign parameters (utm_source, utm_medium, utm_campaign, utm_term and utm_content) and the Google click identifier (gclid) for your browser session and include them with your HubSpot enquiry to understand which advert led to it.

2.2 Website analytics

We use Google Analytics 4 to understand how visitors use our website. This collects anonymised information including pages visited, time spent on the site, the device and browser used, and the general geographic area you are browsing from. This data does not identify you personally. Google Analytics only loads after you have given your consent through our cookie consent banner.

2.3 Advertising measurement

With your consent we use Google Ads conversion measurement to understand whether enquiries on our website came from our advertising and help optimise advertising toward successful enquiries. After a contact enquiry is successfully submitted, Google receives a conversion event, page address, browser and device information, IP address and advertising cookie identifiers. Cookie identifiers can identify a browser; this measurement is not anonymous. We do not send form fields, financial details, email addresses or phone numbers to Google Ads, and enhanced conversions and customer matching are not enabled. Google Ads measurement only loads after you accept advertising cookies through our cookie consent banner, and you can withdraw that choice at any time using the Cookie settings link in the footer. We also report clicks on telephone, WhatsApp and email links to Google Ads; a click measures contact intent, not a completed conversation. We do not include the telephone number, email address or message in these events.

2.4 Cookies

With your advertising-cookie consent, the Meta Pixel shares page visits and a Lead event following a successful business enquiry with Meta Platforms (Facebook and Instagram), for advertising measurement and optimisation. Meta receives the page address, browser and device information, IP address and advertising cookie identifiers. We do not send enquiry form fields, financial details, email addresses or phone numbers to Meta, and do not enable advanced matching or automatic form-data collection. Cookie identifiers can identify a browser; this sharing is not anonymous. You can decline or withdraw using Cookie settings in the footer; future reporting then stops.

See section 9 for full details of the cookies we use and how to control them.

2.5 Data you provide by telephone or email

If you contact us directly by telephone or email, we will collect the personal information you share with us during that communication, including your name, contact details, and details of the business purchase you are considering.

3. Why we collect your data and our legal basis

3.1 To respond to your enquiry

Legal basis: legitimate interests (Article 6(1)(f) UK GDPR). We have a legitimate interest in responding to enquiries from prospective clients.

3.2 To arrange acquisition finance and loans on your behalf

Legal basis: performance of a contract, or steps taken prior to entering a contract (Article 6(1)(b) UK GDPR).

3.3 To comply with our legal and regulatory obligations

Legal basis: legal obligation (Article 6(1)(c) UK GDPR). We must maintain certain records and carry out anti-money laundering checks under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017.

3.4 To improve our website and services

Legal basis: consent (Article 6(1)(a) UK GDPR). With your consent we use Google Analytics to understand how our website is used. You can withdraw this consent at any time through cookie settings.

4. Who we share your data with

We do not sell your personal data. We share it only in these circumstances:

• Lenders — where you instruct us to arrange finance, and always discussed with you first.
• Professional advisers — solicitors, accountants and others involved in your transaction.
• Service providers — our website hosting and secure enquiry storage provider, and Google Analytics (website analytics, United States, covered by Standard Contractual Clauses).
• Meta Platforms (Facebook and Instagram) — only with advertising-cookie consent, for advertising measurement and optimisation; data may be processed outside the UK, including in the United States.
• Regulators, law enforcement agencies or courts where we are legally required to disclose.

5. How long we keep your data

• Enquiries that do not proceed: up to 12 months, then securely deleted.
• Active and completed cases: a minimum of five years from completion or the end of our business relationship, whichever is later, as required by our anti-money laundering obligations.
• Analytics data: retained for 14 months, then automatically deleted by Google.

6. Your rights under UK GDPR

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data where there is no longer a lawful reason to hold it.
• Right to restrict processing — ask us to limit how we use your data in certain circumstances.
• Right to data portability — ask us to provide your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw consent at any time where we rely on it.

To exercise any of these rights, please contact us using the details in section 8. We will respond within one month. There is no charge for making a request.

7. International data transfers

Some of our service providers are based outside the United Kingdom, including in the United States. Where we transfer personal data outside the UK we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

8. How to contact us

iLendi Capital, 32-33 Upper Street, London, N1 0PN. Email: enquiries@ilendicapital.co.uk. Telephone: 0203 488 8126.

If you are not satisfied with our response, you may complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Telephone: 0303 123 1113. Website: ico.org.uk.

9. Cookies

9.1 Essential cookies

These are necessary for the website to function and cannot be switched off. They do not collect information that could identify you, and no consent is required. This site stores your cookie choice in your browser’s local storage (ilendi_cookie_consent) and uses a cross-site request forgery token when you submit the enquiry form.

9.2 Analytics cookies

With your consent we use Google Analytics 4 to collect anonymised information about how visitors use our website. These cookies are only placed after you accept analytics cookies.

• _ga — distinguishes users — 2 years
• _ga_[ID] — maintains session state — 2 years

9.3 Advertising cookies

With your consent we use Google Ads conversion measurement to record when an enquiry follows a click on one of our adverts. These cookies are only placed after you accept advertising cookies, and they are not used to show you adverts. Session attribution is cleared when you withdraw advertising permission.

9.4 Managing cookies

The Meta Pixel loads only after you accept Advertising cookies. Its _fbp and, where applicable, _fbc cookies associate browser visits with advertising (normally up to 90 days). Our browser consent record includes your separate choices, the time and notice version identifying the purposes and recipients shown. Earlier Google-only choices are re-asked before Meta can load. Withdrawal retains your refusal and stops future Meta events, including in other open tabs; blocked events are not replayed if you later accept.

You can change your choice at any time using the Cookie settings link in the footer. Most browsers also allow you to refuse or delete cookies directly.

10. Changes to this policy

We may update this policy from time to time. When we make significant changes we will update the “last updated” date at the top of this page.