Skip to content
BizKindly logo

Privacy policy

Last updated

This policy explains what BizKindly collects, why, who receives it, how long we keep it and how to have it deleted. BizKindly is an education site; we are not a lender, broker or adviser.

What we collect

  • What you give the matcher: what you want to explore; ranges for the amount you are looking for, how long the business has been running and its monthly revenue; your own estimate of your credit score; your industry, legal structure and state; the business name if you give one; your first name, last name and email; and a phone number only if you choose to give one.
  • Your consent: the exact wording beside each box you ticked (the Terms and Privacy box, the newsletter box and, if you gave a phone number, the calls-and-texts box), its version, and the time you agreed.
  • Which options you were shown and which you opened, so we can show them again and so the companies can tell us when a referral led somewhere.
  • Where you came from, if the link you followed carried a campaign tag (for example utm_source). Tags that look like anything other than a short code are discarded.
  • Your IP address and browser type, only as one-way codes. We keep a keyed code made from them as evidence of your consent and to stop abuse. We do not keep the address or browser string itself.

How we protect it

Your name, email, phone number, business name and your answers about the business (including revenue and your credit estimate) are encrypted in our database (AES-256-GCM), with the key held separately from the data. We look you up by a keyed one-way code of your email rather than by the email itself. None of these ever appears in a web address, an analytics event or an advertising pixel. We never ask for a Social Security number, an EIN, bank details or a password, and we never check your credit.

Who receives it

We do not sell your personal information. A company whose option you open receives your name and email only when both of these are true: you opened that company's option from the same browser you used for the matcher, and that company has been set up with us to receive them so you do not have to type them again. If your browser sends a Global Privacy Control signal, we never pass them on, even then. Otherwise the company receives only a reference code it cannot use to identify you. We never pass on your phone number, business name, revenue or credit estimate. Our service providers (hosting, database, email delivery) process data on our behalf.

Email

If you tick the newsletter box (it is never ticked for you), we send guides and reminders about the options from your visit, at most four messages over about ten days, and the weekly BizKindly newsletter. Every email has a one-click unsubscribe link. Withdrawing is immediate and permanent for that address. If a company tells us you signed up with them, we stop the reminders.

Cookies

We set two strictly necessary cookies, each holding only a random code: bk_draft keeps your answers between the matcher's steps, and bk_match lets you return to your options. If the link you arrived from carried campaign tags, a third cookie, bk_attr, holds those short tags so they can be kept with your request. All three expire after 24 hours. We set no advertising or analytics cookies.

Analytics

We use Plausible Analytics to count visits and see which pages and steps are used. Plausible does not use cookies, does not collect personal information, and does not track you across other websites; it reports only aggregate statistics. The events we send name the page or matcher step, never anything you type.

How long we keep it

  • Matcher answers in progress and the options page link: 24 hours.
  • If a later visit through the matcher leaves out the phone number, we delete the stored number and its calls-and-texts consent.
  • Your record: deleted after 24 months with no activity from you (a new visit through the matcher or opening an option).
  • If you unsubscribe or ask us to delete your data, we keep only the one-way code of your email, so that we never email that address again.
  • Records of payments companies made to us are kept for accounting, with your details removed.

Your choices and rights

You can ask us to delete your data at any time: we email you a link to confirm, and deletion is permanent. Depending on where you live (for example California, Colorado, Connecticut, Virginia), you may also have rights to know, correct or opt out; see Do not sell or share.

Your rights under U.S. state privacy laws

If you live in California (under the CCPA, as amended by the CPRA) or another state with a similar law, you can ask us:

  • to tell you what personal information we hold about you, where it came from, why we use it and who receives it;
  • to correct it, or to delete it;
  • to opt out of any sale or sharing of it, and of the use of sensitive personal information. We do not sell or share personal information, and we do not use sensitive personal information to infer anything about you.

Global Privacy Control. We honour a Global Privacy Control (GPC) signal from your browser as a valid opt-out of the sale or sharing of your personal information. When your browser sends it, opening a company's option still takes you to that company's site, but we send the company no personal information about you (no name, email or other details), only a reference code it cannot use to identify you. We do not record anything extra about the signal.

What we collect, by legal category: identifiers (name, email, a keyed code of your IP address); information you give about your business (ranges for amount, time in business and revenue, a self-estimated credit band, industry, structure and state, and its name if given); a phone number if you give one; internet activity on our site (which options you were shown and opened, and campaign tags); and inferences limited to which topic's options to show you. It comes from you and from your browser, and is used for the purposes described above. In the last 12 months we have not sold or shared personal information for cross-context behavioural advertising, and we do not knowingly collect information from anyone under 16.

To delete your data, use our deletion form. For any other request, write to us at the address below. We confirm requests by email to the address we hold for you, so that only you (or an agent you authorise in writing) can make them, and we answer within 45 days. We will not treat you differently for using any of these rights.

Contact

BizKindly's mailing address: 16192 Coastal Highway, Lewes, DE 19958, US.