Privacy Policy

Simply Invoice Finance is a trading style of Goodman Corporate Consultancy Limited. This Privacy Notice explains how we collect, use, share and protect your personal data, and sets out your rights. We are legally obliged to provide this information to you as an FCA-regulated firm.

1. Who we are

Simply Invoice Finance is a trading style of Goodman Corporate Consultancy Limited ("we", "us", "our"), an independent commercial finance brokerage. Goodman Corporate Finance is also a trading style of the same company.

We are the data controller responsible for your personal data.

• Legal entity: Goodman Corporate Consultancy Limited

• Registered in England and Wales, company number: 5364029

• Registered office: 5 Prospect Place, Millennium Way, Pride Park, Derby, DE24 8HG

• Authorised and regulated by the Financial Conduct Authority under number: 733340

• Registered with the Information Commissioner's Office (ICO) under number: Z1828753

We are an independent commercial finance broker, not a lender. We may receive payment from the finance provider if you decide to enter into an agreement with them.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

How to contact us about your data: Email: compliance@goodmancorporate.com Correspondence address: Data Protection, Simply Invoice Finance, 274 Breedon Street, Long Eaton, Nottingham, NG10 4FD

(Our registered office is 5 Prospect Place, Millennium Way, Pride Park, Derby, DE24 8HG, as shown above. Please send data protection correspondence to the Breedon Street address.)

We are not required to appoint a statutory Data Protection Officer. Data protection matters are handled by our compliance function, reachable at the email above.

2. The personal data we collect

We may collect, use, store and transfer the following types of personal data:

• Identity data: name, date of birth, job title or role in the business

• Contact data: email address, telephone number, postal address

• Business and financial data: details of your business, its trading performance, income, expenditure, assets and liabilities

• Enquiry data: the information you provide when you complete our online enquiry form or otherwise contact us

• Communication data: emails, correspondence and call recordings

• Technical data: limited website usage data and cookie data (see section 11)

We only collect data that is necessary to provide our services.

We do not carry out personal credit searches on you.

3. Where we obtain your data

We obtain personal data from the following sources:

• Directly from you — when you complete our online enquiry form, speak to us, email us, or otherwise provide information during your enquiry or application.

• Red Flag Alert — we obtain company credit and business risk profiles from Red Flag Alert to assess a business and identify suitable funders. Where a business is a sole trader or partnership, or where information about a company's directors is included, some of this data may constitute personal data.

• Finance providers and third parties — we may receive information from lenders and funders in the course of arranging your facility.

We do not obtain personal credit reference data or run personal credit searches.

4. How we use your data, and our lawful basis

We use your personal data only where the law allows. For each purpose, the lawful basis under UK GDPR Article 6 is shown below.

Purpose Lawful basis

To respond to your enquiry and take steps at your request before entering into a contract Performance of a contract (or steps prior to a contract)

To assess your business's circumstances and identify suitable funders Legitimate interests (to provide brokerage services effectively) and, where relevant, performance of a contract

To submit applications to lenders and finance providers on your behalf Performance of a contract

To communicate with you about your enquiry or application Performance of a contract / legitimate interests

To meet our legal, regulatory and FCA obligations Legal obligation

To keep records and manage, protect and improve our business Legitimate interests (running and safeguarding our business)

To send you marketing communications (see section 5) Consent, or legitimate interests where permitted

Where we rely on legitimate interests, we have considered your rights and interests and are satisfied our processing does not override them. You can ask us for more information about this balancing assessment at any time.

Where we rely on consent, you can withdraw it at any time by contacting us.

5. Marketing

We may send you information about our services that we believe is relevant to you.

• We will only send you marketing where we are permitted to do so, either with your consent or, where the law allows, on the basis of our legitimate interests.

• You can opt out of marketing at any time, by using the unsubscribe link in any marketing email or by contacting us at compliance@goodmancorporate.com.

• Opting out of marketing will not affect any processing necessary to deal with your enquiry, application or facility.

We do not sell your personal data.

6. Call recording

We may record telephone calls for:

• training and quality assurance

• compliance with our regulatory requirements

• maintaining accurate records of communications

Call recordings are held securely and handled in accordance with this Privacy Notice and applicable data protection law.

7. Who we share your data with

We may share your personal data with:

• Lenders and finance providers — so they can assess and provide the funding you are seeking. This is a core part of what a broker does; by asking us to arrange finance, you understand that we will pass your details to relevant funders.

• Red Flag Alert — as a provider of company credit and business risk data (see section 3).

• Technology providers — including our CRM and secure data storage systems, and the third-party platform that hosts our online enquiry form (Monday.com).

• Professional advisers — such as accountants, auditors and lawyers, where necessary.

• Carefully selected service providers that support our internal processes, which may include AI-enabled tools (see section 9).

• Regulators and authorities — including the FCA, and others where we are required to do so by law.

We share only the minimum data necessary for the relevant purpose, and we require our providers to protect your data and use it only on our instructions.

8. International transfers

Some of the providers we use (for example, technology platforms such as Monday.com) may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place, such as:

• a UK "adequacy" decision covering the destination country, or

• the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for details of the safeguard applied to any transfer.

9. Use of Artificial Intelligence (AI)

We use carefully selected technology tools, including artificial intelligence, to support the efficiency and quality of our services. AI may be used to help with:

• drafting communications

• summarising information or documents

• supporting internal administrative processes

• improving marketing and service delivery

Importantly:

• AI is not used to make solely automated decisions about you that produce legal or similarly significant effects.

• All AI outputs are reviewed by a qualified person before being relied upon.

• Final decisions and advice are always made by people.

We take steps to limit the data used to what is necessary, to protect confidentiality, and to use trusted systems and providers. While AI can improve efficiency, it has limitations, and human oversight ensures outputs are appropriate and accurate.

10. Data retention

We keep your personal data only for as long as necessary for the purposes for which we collected it, including to meet legal, regulatory, tax or reporting requirements.

In financial services this is typically up to 6 years after our relationship with you ends, unless a longer period is required or permitted by law. When data is no longer needed, we securely delete or anonymise it.

11. Cookies

Our website uses cookies to help it function and to understand how visitors use it.

• Essential cookies are necessary for the website to work.

• Analytics cookies help us understand website traffic and improve the site. These are only used with your consent.

When you first visit our website, you can accept or decline non-essential cookies through our cookie banner, and you can change your browser settings to manage cookies at any time.

[Roxanne — confirm this section matches the live cookie banner.] The site currently shows a banner referring to analytics cookies with Accept / Decline options, so the wording above is written to match that. If the banner is later changed, update this section so the two stay consistent.

12. Data security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.

No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security.

13. Your rights

Under data protection law you have the right to:

• access your personal data

• request correction of inaccurate data

• request erasure of your data (in certain circumstances)

• restrict our processing (in certain circumstances)

• object to our processing (including to direct marketing)

• request the transfer of your data (data portability)

• withdraw consent where we rely on it

To exercise any of these rights, contact us at compliance@goodmancorporate.com. We will respond within one month. We will not usually charge a fee, and we may need to verify your identity first.

14. Complaints

If you have any concern about how we handle your personal data, please contact us first so we can try to put things right:

Email: compliance@goodmancorporate.com 

We will acknowledge your complaint within 5 working days and aim to provide a full response within one month. If we need longer because your complaint is complex, we will tell you and keep you informed.

If you remain unhappy, you have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: www.ico.org.uk

You are not required to complain to us first, but we would welcome the chance to resolve your concern directly.

15. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website, and the "last updated" date below will change.

Last updated: 04/09/2026