How we handle your data

Privacy Policy Last updated: 5 October 2026 Who we are BlackRidge Capital is a trading name of BlackRidge Capital Partners Ltd, registered in England and Wales under company number 17290962. Our registered office is 4-12 Regent Street, London, SW1Y 4PE. We are part of The Carling Group. BlackRidge Capital Partners Ltd is the controller of the personal data described in this policy. This means we decide how and why it is used. In this policy, "we", "us" and "our" mean BlackRidge Capital Partners Ltd. Our ICO registration number is ZC253090. If you have any questions about this policy or how we use your data, contact us at deals@blackridge-capital.co.uk or write to us at the address above. What this policy covers This policy explains how we collect, use, share and protect personal data when you: - visit blackridge-capital.co.uk - contact us by email, phone or our enquiry form - apply for, or receive, finance from us - act for, own, manage or guarantee a business that applies for or receives finance from us - work with us as an introducer, adviser or supplier The personal data we collect Identity and contact details: your name, job title, company, email address, phone number and postal address. Enquiry and deal information: details you give us about a transaction, such as the business being acquired, the timetable, the amount needed and supporting documents like information memoranda, accounts and forecasts. These may include personal data about you and other people involved in the deal. Due diligence and verification information: where you apply for finance or are connected to an applicant, this may include proof of identity and address, date of birth, nationality, ownership and control details, financial information, and results of identity, anti-money laundering, sanctions, fraud prevention and credit checks. Communications: records of emails, calls and meetings with us. Website and technical data: your IP address, browser type, device information and how you use our site, collected through cookies where you have agreed to them. Our Cookie Policy explains this in detail. Marketing preferences: whether you want to hear from us and how. Where your data comes from Most of it comes directly from you. We may also receive it from: - the business you represent, or your co-investors and advisers - introducers, brokers and corporate finance advisers - public sources such as Companies House, the Insolvency Register, the Electoral Register and news reports - identity verification, credit reference, fraud prevention and sanctions screening providers - other companies in The Carling Group - LinkedIn and other platforms where you engage with our content How and why we use your data We only use personal data where the law allows us to. The main purposes and their legal bases are: To respond to your enquiry and assess whether we can help with your transaction. Legal basis: taking steps at your request before entering a contract, and our legitimate interest in assessing new lending opportunities. To carry out due diligence, underwriting and credit assessment, including through our deal analytics platform. Legal basis: taking steps before entering a contract, and our legitimate interest in lending responsibly and managing risk. To verify identity and carry out anti-money laundering, sanctions and fraud checks. Legal basis: legal obligation, and our legitimate interest in preventing fraud and financial crime. To provide, manage and enforce finance agreements, including taking security and guarantees. Legal basis: performance of a contract, and our legitimate interest in recovering money owed to us. To keep records, meet regulatory and tax requirements, and deal with legal claims. Legal basis: legal obligation, and our legitimate interest in protecting our legal position. To send you news, insights and updates about our services. Legal basis: our legitimate interest in promoting our business to business contacts, or your consent where the law requires it. You can opt out at any time. To run, secure and improve our website. Legal basis: our legitimate interest in operating a secure and effective site, and your consent for non-essential cookies. Where we rely on legitimate interests, we have weighed them against your rights and interests. You can ask us for more detail. Automated decisions We use technology, including our proprietary deal analytics platform, to help analyse opportunities. Decisions about whether to provide finance are made by people on our team. We do not make decisions about you based solely on automated processing. Who we share your data with We do not sell your personal data. We share it only where needed for the purposes above, with: - other companies in The Carling Group, for deal assessment, administration and shared services - funding partners and co-lenders involved in providing finance for your transaction - professional advisers, including lawyers, accountants, valuers and auditors - identity verification, credit reference, fraud prevention and sanctions screening agencies - IT, hosting, email, data storage and customer relationship management providers who process data on our behalf - law enforcement, regulators, courts and government bodies, where the law requires it - a buyer or investor if our business, or part of it, is sold or restructured Our service providers may only use your data on our instructions and must keep it secure. International transfers Some recipients, including Carling Group companies in the United Arab Emirates and the United States and some of our service providers, are outside the UK. Where we transfer personal data to a country without UK adequacy regulations, we use appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for more information about these safeguards. How long we keep your data We keep personal data only as long as we need it: - Enquiries that do not proceed to finance: up to 2 years from our last contact. - Customers, guarantors and connected parties: for the life of the relationship and 6 years after it ends, so we can meet legal, regulatory and tax requirements and deal with any claims. - Anti-money laundering records: at least 5 years after the relationship ends, as the law requires. - Marketing contacts: until you opt out, after which we keep a suppression record so we do not contact you again. We may keep data for longer if there is a legal claim or regulatory investigation. How we protect your data We use appropriate technical and organisational measures to protect personal data from loss, misuse and unauthorised access. These include access controls, encryption where appropriate and confidentiality obligations on our staff and suppliers. No method of transmission over the internet is completely secure, so please take care when sending us sensitive documents. Your rights Under UK data protection law, you have the right to: - access a copy of the personal data we hold about you - ask us to correct data that is inaccurate or incomplete - ask us to delete your data in certain circumstances - ask us to restrict how we use your data in certain circumstances - object to our use of your data where we rely on legitimate interests, and to direct marketing at any time - ask us to transfer data you gave us to another organisation, where technically possible - withdraw consent at any time, where we rely on consent Some rights have exceptions. For example, we may need to keep data to meet legal obligations. To use any of these rights, email deals@blackridge-capital.co.uk. We will respond within one month. We may need to verify your identity first. If you do not provide information If you do not provide information we need for due diligence or legal checks, we may not be able to consider your application or provide finance. Links to other websites Our site links to other websites, including LinkedIn, YouTube and The Carling Group. We are not responsible for their privacy practices. Please read their privacy policies. Complaints If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. Changes to this policy We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will tell you where appropriate.