Privacy Policy

This Privacy Policy describes how your Personal Information is collected, why it is collected, how it is used, and shared when you visit or become a user on our website at equipal.co or our webapp at https://equipal.app

This policy was last updated on the 15th October 2025.

1. Who we are

Barnsbury Road Finance Ltd t/a equipal (“equipal”, “we”, “us”, “our”) is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our registered office is:
Spaces Camden, 140 Camden Street, London, NW1 9PF, United Kingdom.
You can contact us by email at info@equipal.co.

2. How and Why We Collect Your Data

We collect Personal Information to provide and improve our services, meet legal obligations, and operate our business effectively.

Our lawful bases for processing your data are:

Contractual necessity – where processing is required to perform a contract with you (e.g. to arrange finance requests).
Legal obligation – to comply with laws or regulations (e.g. anti-money laundering or financial reporting).
Legitimate interests – where processing is necessary for our legitimate business interests, including improving our services, performing credit assessments, or sharing limited data with investors for due diligence purposes, and where your rights are not overridden.

Our lawful basis for collecting your Personal Information is that we require the information in order to be able to arrange contracts. We also require your data to comply with legal obligations.

3. Information We Collect

We collect your Personal Information when you register on the platform, complete user forms, upload information to confirm your identity and when you create a Finance Request. We source Personal Information directly from you, from third party credit reference agencies and via technology we employ to track your browsing.

When you visit the website or our webapp, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect data about the individual web pages, what websites or search terms referred you to the Site, and data about how you interact with the Site. We refer to this automatically-collected information as “Device.”

We collect Device Information using the following technologies:

“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

4. How We Use Your Data

We require a segment of a user’s Personal Information in order to fulfil our role in helping to arrange Asset Finance applications. Data may be used to judge how creditworthy a user is or to determine measures to reduce credit risk. We also collect user’s data in order to improve our online service and to ensure our tech is optimised for your needs. We use the Device Information that we collect to improve and optimise our Site (for example, by generating analytics about how our users browse and interact with the Site, and to assess the success of our marketing and advertising campaigns). We use your Personal Information to assist with our online public interest information dissemination, advertising and marketing. Your data is also needed to facilitate corporate transactions including due diligence from potential investors, purchasers and partners.

5. Sharing your personal information

We may share your Personal Information with:

Third-party service providers who process data on our behalf (e.g. hosting, analytics, credit agencies).
Financial partners and funders where required to provide services to you.
Professional advisers, auditors, or insurers.
Prospective investors or purchasers as part of due diligence in a financing, investment, or corporate transaction, under strict confidentiality terms.
Regulators or authorities where required by law or to protect our legal rights.

We use Google Analytics to understand usage patterns; Google’s privacy policy is available at https://policies.google.com/privacy.

Your Personal Information is stored in encrypted storage on AWS servers located inside the EEA and on hard devices (again, this data is encrypted). Where we use tech services that act on your Personal Information we ensure these services are also GDPR compliant.

6. International Data Transfers

Where we transfer data outside the UK (for example, to the United States):

We only do so where an adequate safeguard is in place, such as:
- The UK–US Data Privacy Framework (where the recipient is certified).
- The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
We also perform Transfer Risk Assessments (TRAs) as required by UK law.

7. Data Retention

We retain your Personal Information only for as long as necessary to fulfil the purposes outlined above or as required by law and regulation (e.g. financial record-keeping or anti-money laundering rules).

8. Your Rights

Under UK GDPR, you have several rights as a user with Personal Information which we list below:

The right to be informed– Equipal needs to inform their users what data they hold on them, and how we process it. This is detailed here in this Privacy Policy.

The right of access and data portability– Our users have the right to access the data that Equipal holds on them and request portable version.

The right to rectification– Our users have the right to have inaccurate Personal Information rectified or completed if it is incomplete.

The right to erasure (aka the right to be forgotten)– Our users have the right to request the erasure of their data held. The ability for Equipal to complete such a request is dependant on other obligations to regulators regarding record retention.

The right to object to or restrict processing– Our users have the right to request restriction or suppression of the processing of their Personal Information. This is not an absolute right and only applies in certain circumstances. This may effect our ability to provide services to you.

Rights in relation to automated decision making and profiling– Our users have the right to object to Equipal’s profiling, including profiling for marketing purposes.

Our customers can exercise any of these rights, for example request a Subject Access Request by emailing us at info@equipal.co

Please note, this does not affect any information required to be stored under record retention laws, more information on our record retention policy is set out below.

9. Security

We use appropriate technical and organisational measures to protect your Personal Information, including encryption, access controls, and secure storage. Access to Personal Information is limited to authorised personnel.

10. Changes to This Policy

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

11. Contact Us

For more information about our data practices, if you have questions, or if you would like to make a complaint, please contact us by email at info@equipal.co or by mail using the details provided below:

Barnsbury Road Finance Ltd t/a Equipal, Spaces Camden, 140 Camden St, London, NW1 9PF, United Kingdom or by email to info::equipal.co.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Our ICO registration number is No. ZA284955