Privacy policy

1. Who we are and scope

Capital Ally ("Capital Ally", "we", "us") is a referral partner to third-party lenders and financing providers. We introduce businesses to lenders that fit their request and may receive a referral fee when financing closes. This policy applies to https://www.capitalally.net(the "Site"), our eligibility check and application forms, and our communications with you by phone, text message and email. It does not apply to any lender's website or to a lender's handling of your information once you apply with that lender, which is governed by that lender's own privacy notice.

Our services are for businesses and business owners seeking commercial financing. They are not directed to consumers seeking credit for personal, family or household purposes, and they are not directed to children under 18. We do not knowingly collect information from anyone under 18.

2. Information we collect

Information you provide

• Contact details: name, business name, email address, mobile and business phone numbers, mailing address, state of operation.
• Business and financing details: industry, time in business, revenue range, requested amount, use of funds, existing debt, and any information you choose to include in messages or on a call.
• Documents you send us to support a request, such as bank statements, tax returns, financial statements, invoices, equipment quotes and identification, which may contain account numbers and government identifiers.
• Communications: the content of emails, text messages, calls and voicemails with us. Calls may be recorded for quality and compliance where the law permits, with notice.

Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, pages viewed, time on page, links clicked, referring URL and approximate location derived from IP address.
• Advertising identifiers and campaign parameters attached to the link you arrived on (for example utm and click identifiers from Meta or Google).
• Session activity on the Site, including interactions with our forms, recorded through Microsoft Clarity as described in Section 6.
• Consent records: when you submit a form we capture the time, the page, the consent language shown to you and a certificate of that consent through ActiveProspect TrustedForm, so we can demonstrate that consent was given.

Information from other sources

• Lenders and financing partners you are matched with may tell us the status or outcome of your request.
• Referral partners (for example an accountant or equipment dealer) may pass us your contact details with your permission.
• Public records, business databases and identity or fraud-prevention services used to verify the information you provide.

3. How we use information

• To evaluate your financing request and match it with lenders and products in our network.
• To contact you about your request, by phone, text and email, and to schedule and conduct calls with a funding specialist.
• To send you the information a lender needs and to relay offers, requests for documents and status updates.
• To verify identity, prevent fraud, and comply with anti-money-laundering, know-your-customer and other legal obligations.
• To operate, secure and improve the Site, including measuring which pages and advertisements lead to enquiries.
• To send marketing about our services where you have agreed to receive it. You can opt out at any time (Section 8).
• To establish, exercise or defend legal claims and to enforce our Terms of Use.

4. Consent to calls, texts and emails

When you check the consent box on our eligibility form, you agree that Capital Ally and the lending partners we match you with may call, text and email you at the numbers and address you provided about your funding request, including using an automatic telephone dialing system and prerecorded or artificial voice messages. Consent is not a condition of purchasing any goods or services. Message and data rates may apply. Message frequency varies. Reply STOP to any text to opt out, or HELP for help. Full program terms are in our SMS terms.

If you do not consent, you can still reach us by email at [email protected].

5. How we share information

• Lenders and financing partners. We share the information in your request, and the documents you provide, with the lenders and financing providers we select for your request so they can evaluate it and, with your agreement, contact you. Each lender is responsible for its own use of your information.
• Service providers that host the Site, store data, send email and text messages, provide call handling and recording, verify identity and consent, and provide analytics, acting on our instructions.
• Advertising and analytics partners (Meta and Microsoft) as described in Section 6.
• Referral partners who introduced you to us, limited to the status of your request, where you were referred through them.
• Legal and safety. Regulators, courts, law enforcement and other parties where required by law, subpoena or legal process, or to protect the rights, property or safety of Capital Ally, our clients or others.
• Business transfers. A buyer or successor in a merger, acquisition, financing or sale of assets, subject to this policy.

We do not sell your personal information for money. Sharing information with advertising partners to measure and improve advertising may be treated as a "sale" or "sharing" under some state laws; you can opt out of that as described in Section 8.

6. Cookies, pixels and tracking

We and our partners use cookies, pixels, local storage and similar technologies on the Site:

• Meta Pixel and Conversions API to measure whether our advertising on Facebook and Instagram results in enquiries, and to build audiences for advertising. When you submit a form we send Meta an event that may include hashed contact details, your IP address and browser information.
• Microsoft Clarity to record how visitors use the Site (mouse movement, scrolling, clicks and form interaction, with typed personal information masked) and to produce heatmaps, so we can improve the Site.
• ActiveProspect TrustedForm to create a certificate of the consent you give on our forms, including a record of the page as you saw it.
• Essential storage to remember the answers you have given in a multi-step form during your visit and the campaign parameters you arrived with.

You can control cookies through your browser settings and can opt out of Meta's ad personalisation in your Facebook settings. Blocking essential storage may prevent the forms from working. We do not currently respond to browser "Do Not Track" signals; we do honour Global Privacy Control signals for opt-out of sharing where required by state law.

7. How long we keep information

We keep request and consent records for as long as needed to fulfil the purposes above and to meet legal, regulatory and audit obligations, typically for five years after your last interaction with us, and longer where a claim or investigation is open. Documents you provide are deleted or returned when they are no longer needed for a live request unless the law requires us to keep them.

8. Your choices and rights

• Marketing. Unsubscribe from marketing email using the link in any message. Reply STOP to any text message. Ask us not to call you at [email protected]. We will still contact you about an active request where necessary.
• Access, correction, deletion and portability. You may ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or ask for it in a portable format.
• Opt out of sale or sharing and targeted advertising. Email [email protected]with the subject "Do not sell or share my personal information", or send a Global Privacy Control signal from your browser.
• No discrimination. We will not treat you differently for exercising these rights.

These rights are available to residents of California (under the CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws, and we extend them to everyone. We will verify your identity before acting on a request, usually by matching the information you give us to our records, and respond within 45 days (extendable once by 45 days where the law allows). You may appeal a decision by replying to our response; we will explain the outcome of the appeal and, where applicable, how to contact your state attorney general. An authorised agent may make a request on your behalf with written permission.

California notice at collection. In the past 12 months we have collected the categories of personal information listed in Section 2 (identifiers, commercial information, internet activity, professional information, and inferences), for the purposes in Section 3, and disclosed them to the categories of recipients in Section 5. We do not use or disclose sensitive personal information other than to provide the services you request. We do not sell personal information of anyone under 16.

9. Security

We use encryption in transit, access controls, and vendor due diligence to protect information, and we limit access to staff and providers who need it. No method of transmission or storage is completely secure. Please send sensitive documents only through the secure links we provide, not by unencrypted email, and never share account passwords with us.

10. Other important information

• Third-party sites. Links to lenders and other sites are provided for convenience; their privacy practices are their own.
• International visitors. The Site is operated in the United States and information is processed there.
• Changes.We will post any changes to this policy here with a new "last updated" date, and give notice of material changes by email where we have your address.

11. Contact

Questions, requests or complaints about privacy: [email protected]. Please include "Privacy" in the subject line.