Legal
Privacy Policy
Last updated: July 2026
1. Introduction
This policy explains how OpenLane Finance ("we", "us") collects, uses, shares and protects your personal data when you use our website and our business-finance application journey. OpenLane Finance is a trading name of L2 Digital Limited, a company registered in England and Wales (company number 11486769) and registered with the Information Commissioner's Office (registration ZC110848). L2 Digital Limited is the data controller for the personal data described here. We are a marketing partner that introduces trading UK businesses to Funding Options by Tide, a credit broker; we are not a lender and we do not make lending decisions. By using our website and application journey you accept the practices described in this policy.
2. Information we collect
We collect the following categories of personal data:
- Information you give us in the application. The amount and purpose of finance you want; your business name, company number, business type and average monthly turnover; and your name, date of birth, home address, residential status, email address, phone number, and whether you are a director.
- Correspondence. Any information you provide if you contact us by email or other means.
- Public register information. When you search for your business we query the public Companies House register and may retrieve your company's registered details and the names of its current directors, to help you complete the form accurately.
- Usage and device data. Pages viewed, links clicked, which version of a landing page you were shown, your IP address, browser user-agent, referring URL, and campaign parameters in the link you arrived on (such as
utm_source,gclidorfbclid).
We do not intentionally collect special category (sensitive) personal data.
3. How we use your information
We use your personal data to:
- assess your business finance application and, where you are eligible, share it with Funding Options by Tide so they can review it and, if suitable, contact you about finance from their panel of partner lenders;
- verify and pre-fill your business details using the public Companies House register;
- respond to your enquiries and provide customer support;
- detect and prevent fraud, and keep our website secure;
- measure and improve our website and our advertising (advertising measurement only where you have consented); and
- comply with our legal and regulatory obligations.
4. Lawful basis for processing
Under UK GDPR we rely on:
- Steps prior to a contract / legitimate interests — to handle your application and introduce you to Funding Options by Tide at your request;
- Consent — for advertising cookies and advertising measurement, and for optional marketing;
- Legitimate interests — for basic site measurement, security and fraud prevention; and
- Legal obligation — where we must process data to meet regulatory or legal duties.
5. Who we share your data with
Funding Options by Tide. When you submit your application we share your details with Funding Options by Tide, a credit broker, so they can review your information and, if suitable, contact you by phone or email about finance offers from their panel of partner lenders. Funding Options by Tide receives a commission from lenders for arranging finance and becomes an independent controller of the data they receive; their own terms and privacy policy then apply.
We also share data with the providers we need to run the service, each under a data-processing agreement:
| Recipient | Purpose |
|---|---|
| Our hosting / CDN provider | Serving the website securely. |
| Compass (our own lead & application management system) | Recording and managing applications and enquiries. |
| Companies House | Verifying public company details and directors. |
| Google (Tag Manager & advertising platforms) | Advertising measurement — only where you have consented. |
| Funding Options by Tide | Reviewing your application and arranging finance from a panel of partner lenders. |
We never sell or rent your personal data.
6. International transfers
Some of our providers may process data outside the UK or EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses, to keep your data protected to UK standards.
7. How long we keep it
Application and enquiry records are kept for up to 24 months from your last contact with us, then deleted unless a longer period is required by law. Consent records are kept for 24 months as evidence of the consent given. Anonymous analytics records are kept for up to 26 months.
8. Cookies and tracking
We set a strictly necessary _nr_bid cookie (a random browser identifier, containing nothing about you personally) so we can count a visit once, keep you on a consistent version of a page, and connect an application to the campaign that brought it; and short-lived _nr_var_* cookies to remember which version of a page you were shown. Advertising and analytics storage are switched off by default and are only enabled if you tick the optional advertising-consent box — which is never ticked for you, and never required to apply.
9. Your data protection rights
You have the right to access, rectify, erase, restrict or object to our use of your personal data, to receive it in a portable format, and to withdraw consent at any time. To exercise any of these, contact us using the details below and we will respond within one month. Once your data has been shared with Funding Options by Tide, you may also need to exercise your rights with them directly under their privacy policy.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we would appreciate the chance to put it right first.
10. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls and secure hosting — to protect your data. No transmission over the internet can be guaranteed completely secure, but we work to protect your information and act promptly on any suspected breach.
11. Children's data
Our website and application journey are intended for adults running or representing a business. We do not knowingly collect data from anyone under 18.
12. Links to other websites
Our site and the finance journey may link to third-party websites (including Funding Options by Tide and lenders). We are not responsible for their privacy practices — please review their policies before sharing your data with them.
13. Updates to this policy
We may update this policy from time to time. The current version is always available on this page, with the "last updated" date shown at the top.
14. Contact us
For any privacy question, or to exercise your rights, contact the data protection lead at L2 Digital Limited (company number 11486769) — [privacy contact email — to be confirmed]. See also our Terms of Business.