Mitton Ridge Partners ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our lead generation campaigns.
For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Mitton Ridge Partners is the Data Controller of your personal data.
1. INFORMATION WE COLLECT
Information You Provide to Us We collect information you provide directly to us, including:
Contact Information: Name, email address, phone number, company name, and mailing address.
Business Information: Company size, revenue, industry, loan volume, and other business-related details.
Account Information: Username, password, and other registration details.
Communication Data: Information you provide when you contact us, request information, or communicate with our support team.
Payment Information: Billing details and payment method information (processed securely through third-party payment processors).
Information We Collect Automatically When you access or use our Services, we automatically collect certain information, including:
Usage Data: Pages viewed, links clicked, time spent on pages, and other usage statistics.
Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities.
Information from Third Parties We may receive information about you from third-party sources, including:
Lead Data: Information submitted by business owners through our lead generation campaigns, including contact details, loan requirements, and business information.
Marketing Partners: Data from advertising platforms, analytics providers, and other business partners.
Public Sources: Publicly available business information and records (e.g., Companies House).
2. HOW WE USE YOUR INFORMATION & OUR LAWFUL BASIS
Under UK GDPR, we must have a "lawful basis" for processing your personal data. We use the information we collect for the following purposes:
Provide and Improve Services: To process transactions and deliver our services.
Lawful Basis: Performance of a Contract.
Lead Distribution: To distribute business loan leads to our clients (finance brokers, lenders, and funding companies).
Lawful Basis: Consent (where explicitly provided) or Legitimate Interests (for B2B operations).
Communication: To respond to inquiries and provide customer support.
Lawful Basis: Legitimate Interests or Performance of a Contract.
Marketing: To send promotional materials and newsletters.
Lawful Basis: Consent or Legitimate Interests (under the "soft opt-in" exception for existing business clients). You may opt out at any time.
Analytics: To analyze usage patterns and optimize our website.
Lawful Basis: Consent (for non-essential cookies) and Legitimate Interests.
Legal Compliance: To comply with legal obligations, enforce our Terms & Conditions, and protect our rights.
Lawful Basis: Legal Obligation.
Fraud Prevention: To detect, prevent, and address security issues.
Lawful Basis: Legitimate Interests.
3. LEAD DISTRIBUTION AND DISCLOSURE
Lead Distribution to Business Clients Mitton Ridge Partners operates as a lead generation service. When a business owner submits their information through our forms, we distribute that information to our business clients (finance brokers, lenders, and funding companies) who have contracted with us to receive leads.
Exclusivity Commitment Unless otherwise specified, leads are sold exclusively to one business client. We do not resell or redistribute leads to multiple buyers.
Business Owner Consent By submitting information through our lead generation forms, business owners explicitly consent to having their information shared with our business clients for the purpose of receiving offers, quotes, and communications related to their business financing inquiry.
4. MARKETING COMMUNICATIONS
If you submit your contact information through our services, you may receive communications from Mitton Ridge Partners and our business clients via telephone, email, and SMS/text messaging.
In accordance with the Privacy and Electronic Communications Regulations (PECR), we will only send you marketing communications if you have consented to receive them, or if you are a corporate body (B2B) or an existing customer where we have a legitimate interest to do so.
You have the absolute right to opt out of marketing communications at any time. You may revoke your consent by contacting us at [email protected] or by following the unsubscribe instructions provided in our communications.
5. HOW WE SHARE YOUR INFORMATION
We may share your information in the following circumstances:
Business Clients: We share lead information with finance brokers, lenders, and funding companies who have contracted with us.
Service Providers: We share information with third-party vendors who perform services on our behalf (e.g., payment processors, CRM providers, hosting services).
Legal Compliance: We may disclose information to comply with legal obligations, respond to lawful requests from authorities, or enforce our agreements.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
With Your Consent: We may share information with third parties when you provide explicit consent.
We do not sell or rent your personal information to third parties for their independent marketing purposes without your consent.
6. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to collect information about your use of our website.
Essential Cookies: Necessary for the operation of our Services.
Analytics Cookies: Help us understand how users interact with our Services.
Advertising Cookies: Used to deliver relevant advertisements.
Preference Cookies: Remember your settings and preferences.
We will obtain your consent before placing non-essential cookies on your device. You can control or withdraw your consent through our cookie banner or your browser settings.
7. DATA SECURITY
We implement robust administrative, technical, and physical safeguards to protect your information from unauthorized access, alteration, or destruction. However, no electronic storage or internet transmission is entirely secure. While we strive to protect your data, we cannot guarantee its absolute security.
8. DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your data is no longer required, we will securely delete or anonymize it.
9. YOUR DATA PROTECTION RIGHTS
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): Request deletion of your data (subject to legal exceptions).
Right to Restriction of Processing: Request that we suspend processing your data under certain scenarios.
Right to Data Portability: Request the transfer of your data to you or a third party in a structured, machine-readable format.
Right to Object: Object to our processing of your data where we rely on legitimate interests, or for direct marketing purposes.
Right to Withdraw Consent: Where we are relying on your consent to process your personal data, you can withdraw this at any time.
To exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to verify your identity.
10. INTERNATIONAL DATA TRANSFERS
As a UK-based company, we process your data primarily within the UK. If we need to transfer your personal data outside of the UK (for example, if our servers or service providers are located in the United States or the European Economic Area), we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or ensuring the destination country has an adequacy decision from the UK government.
11. CHILDREN'S PRIVACY
Our Services are designed for businesses and are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically.
13. CONTACT US AND COMPLAINTS
If you have questions, concerns, or wish to exercise your data protection rights, please contact us:
Mitton Ridge Partners Email: [email protected]
If you feel that your data has not been handled correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.