Privacy notice
How we collect and use personal information.
Last updated: 22 October 2026
This notice explains how Nimble Capital Limited ("Nimble", "we", "us") collects and uses personal information. It applies to:
- directors, shareholders, beneficial owners and other individuals connected with a business that applies to us for a loan or borrows from us;
- guarantors and anyone who gives security for a loan;
- brokers and other introducers, and the people who work for them;
- valuers, solicitors and other professionals we work with; and
- anyone who contacts us or uses our website.
1. Who we are
Nimble Capital Limited is the controller of your personal information. We are a company registered in England and Wales (company number 17378398) with our registered office at 66 Paul Street, London, EC2A 4NA. We are registered with the Information Commissioner's Office (registration number ZC263121).
If you have any questions about this notice or how we use your information, contact us at [email protected] or write to us at the address above.
2. What we do
We provide short-term secured loans (bridging finance) to businesses for property purchases, refinancing and refurbishment in England and Wales. Our loans are made for business purposes and are not regulated by the Financial Conduct Authority.
3. The information we collect
Depending on your connection with us, we may collect:
- Identity details: name, date of birth, nationality, photographs, and copies of passports, driving licences and other identity documents.
- Contact details: home and business addresses, address history, email addresses and telephone numbers.
- Financial details: assets and liabilities, income, bank statements, source of funds and source of wealth, credit history, and property ownership.
- Business details: your role in a business, shareholdings, directorships, and property and development experience.
- Loan details: the property, the loan applied for, and how the loan is managed and repaid.
- Check results: the results of identity, anti-money-laundering, sanctions, politically exposed person, adverse media, fraud-prevention and credit checks.
- Communications: emails, letters, call notes and meeting notes.
- Website information: details you enter in our enquiry form, and basic technical information about your visit.
Some of this may include information about criminal convictions or offences, where it comes up in anti-money-laundering, sanctions or fraud-prevention checks. We only use it where the law allows.
4. Where we get your information
- From you, for example in an application form, by email or in a meeting.
- From the business applying for a loan, its other directors or shareholders, or its advisers.
- From brokers and other introducers.
- From identity verification, anti-money-laundering and screening providers.
- From credit reference agencies and fraud-prevention agencies.
- From public sources, such as Companies House, HM Land Registry, the electoral register and the internet.
- From valuers, solicitors and other professionals involved in a loan.
5. How we use your information and our lawful bases
We only use your information where the law allows it. We rely on the following lawful bases.
| What we use it for | Lawful basis |
|---|---|
| Assessing a loan application, deciding whether to lend, and preparing terms and loan documents | Our legitimate interest in lending responsibly; and, where you are a party to the loan or guarantee, to take steps at your request before entering into a contract, and to perform the contract |
| Verifying identity and carrying out anti-money-laundering, sanctions and fraud-prevention checks | Legal obligation (including the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017), and our legitimate interest in preventing fraud and financial crime |
| Credit checks on directors, shareholders and guarantors | Our legitimate interest in assessing the credit risk of a loan |
| Managing loans, taking and enforcing security, and recovering money owed | Performance of a contract, and our legitimate interest in protecting our security and recovering debts |
| Sharing information with our funding partners and their advisers | Our legitimate interest in funding our loans |
| Working with brokers, valuers, solicitors and other professionals | Our legitimate interest in running our business |
| Answering enquiries made through our website or by email | Our legitimate interest in responding to people who contact us |
| Keeping records, meeting regulatory requirements, and dealing with complaints and legal claims | Legal obligation, and our legitimate interest in establishing, exercising or defending legal claims |
| Sending business updates to brokers and other contacts | Our legitimate interest in developing our business. You can opt out at any time |
We do not rely on consent for credit, identity, anti-money-laundering or fraud-prevention checks. Where we rely on legitimate interests, we have considered your interests and rights, and you can object (see section 11).
If you do not give us information we need for our legal obligations or to assess a loan, we may not be able to lend.
6. Credit reference and fraud-prevention agencies
To assess an application and to prevent fraud and money laundering, we may search credit reference agencies and fraud-prevention agencies about the business and about its directors, shareholders, beneficial owners and guarantors. When we search a credit reference agency, it will keep a record of the search. Other lenders may see that a search has been made.
The credit reference agencies explain how they use and share personal information in the Credit Reference Agency Information Notice (CRAIN), available from Experian. Equifax and TransUnion publish the same notice.
If we, or a fraud-prevention agency, find a risk of fraud or money laundering, we may refuse to lend, and the agency may keep a record of that risk. Other organisations may then refuse to provide services, finance or employment to you.
7. Who we share your information with
We share personal information only where we need to, and only with:
- our funding partners, the organisations that fund or may buy our loans, and their advisers;
- brokers and introducers involved in an application;
- valuers, solicitors, monitoring surveyors, asset managers, insurers and title insurers involved in a loan;
- identity verification, anti-money-laundering screening, credit reference and fraud-prevention agencies;
- our professional advisers, including accountants, lawyers, compliance consultants and auditors;
- companies that provide services to us, such as IT, cloud hosting, email, document storage and software providers, which act on our instructions;
- receivers, debt recovery agents and courts, if a loan is not repaid;
- regulators, HMRC, law enforcement and other authorities, where the law requires or allows it; and
- a buyer or investor, if all or part of our business or our loans is sold or transferred.
We do not sell personal information.
8. Technology and automated decisions
We use software, including artificial intelligence tools, to help us organise information, check figures and prepare documents such as credit papers. A person at Nimble reviews every application, and every lending decision is made by a person. We do not make decisions about you based solely on automated processing.
9. International transfers
Most of your information is held in the United Kingdom. Some of our service providers, including software, email and artificial intelligence providers, may process information outside the UK, including in the European Economic Area and the United States. Where they do, we make sure the transfer is protected, for example by a UK adequacy decision, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum. You can ask us for details.
10. How long we keep your information
- Loans: for the life of the loan and for 7 years after the loan is repaid and our relationship ends.
- Applications that do not proceed: for up to 2 years after the application ends, unless the law requires us to keep it longer.
- Anti-money-laundering records: for at least 5 years after the relationship or transaction ends, as the law requires.
- Website and email enquiries: for up to 2 years, unless they lead to an application.
- Broker and business contacts: while we have a business relationship, and for up to 2 years after it ends.
We may keep information longer if we need it for a legal claim or a regulator asks us to.
11. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where we no longer have a reason to keep it;
- ask us to restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, and to direct marketing at any time;
- ask for information you gave us to be transferred to another organisation, where this applies; and
- withdraw consent, where we rely on it.
Some rights are limited, for example where we must keep information by law. To use any of these rights, contact us at [email protected]. We will reply within one month.
12. Keeping your information secure
We use appropriate technical and organisational measures to protect personal information, including access controls, encryption and secure cloud services. Our service providers must protect your information and may only use it on our instructions.
13. Our website
Our website is hosted by Cloudflare, which also protects it from spam and attack. To do this, Cloudflare processes technical information about your visit, such as your IP address and browser type, and may set a security cookie that the website needs to work. We do not use analytics, advertising or tracking cookies, so we do not ask you to accept cookies.
Our website loads its fonts from Google Fonts, so your browser sends your IP address to Google when you view a page.
If you use our enquiry form, the details you enter are sent to Formspree, our form provider, which passes them to us by email so we can reply. Formspree is based in the United States (see section 9).
14. Complaints
If you are unhappy with how we have used your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
15. Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.