Privacy Policy

Information We Collect

We collect information you provide directly and information collected automatically when you use our website and services. Examples include:

• Information submitted through contact forms, intake forms, and other website forms (for example: name, email, phone, business name, and inquiry details).
• Documents, files, and attachments you upload to support an inquiry or application.
• Business, ownership, operational, and financial information you voluntarily provide in connection with financing or business-service inquiries (for example: revenue figures, requested amounts, time in business, ownership information, and similar details).
• Communications you send to us by phone, email, or SMS, and records of our communications with you.
• Website usage data collected automatically, such as IP address, device and browser information, pages viewed, referring pages, and other analytics and server log data.
• Information about your interactions with our site collected through cookies and similar technologies.

We may combine information collected from different sources to provide, operate, secure, and improve our services.

How We Use Information

We use information for legitimate business purposes, including to:

• Review and respond to inquiries, applications, and requests; evaluate eligibility and potential financing or service options.
• Communicate with you by phone, email, and SMS about your inquiry, account, or our services.
• Operate, maintain, and secure our website, systems, and services, including fraud prevention and incident response.
• Perform recordkeeping, compliance, auditing, and legal obligations.
• Analyze and improve our services, website performance, and user experience.
• Support business operations, internal reporting, and other administrative functions.

KYC and Business Verification Information

As part of business-purpose onboarding, SHBA Capital may collect and review business identity information, signer information, beneficial ownership information, tax identification details, supporting documents, and related onboarding records. We may use this information for verification, fraud prevention, underwriting support, compliance review, service delivery, and recordkeeping.

Verification steps may vary depending on the request, the financing scenario, provider requirements, or risk-based review factors.

Financial Data Intake and Account Verification

In some cases, SHBA Capital may support secure financial-data intake or account-verification workflows connected to business onboarding. This may include the use of approved internal systems or service providers to help evaluate a request, support underwriting-related review, or coordinate with financing-related counterparties.

We do not describe every provider workflow in this policy, but when such tools are used, they are intended to support legitimate business onboarding and review activities.

How Information May Be Shared

We may share information in limited circumstances, including:

• With service providers and vendors who support hosting, communications, CRM, document handling, analytics, security, and other operational functions.
• With professional advisors, such as legal, accounting, or audit professionals, when necessary to support our operations or comply with professional obligations.
• With financing-related counterparties, partners, or other third parties when necessary to evaluate or support a financing or service request you have made.
• When required by law, regulation, or legal process, or to respond to lawful requests by public authorities.
• To protect the rights, property, or safety of SHBA Capital, our users, or others, including to prevent or investigate fraud or security incidents.

We require service providers to protect information and use it only for permitted purposes under our agreements with them.

Sensitive Information Handling

Sensitive onboarding and verification information may be handled through secure internal workflows and approved service providers that support hosting, secure intake, document handling, verification, communications, storage, analytics, or operational review. Access is limited to personnel and providers with a legitimate business need and subject to appropriate internal controls.

While we use safeguards designed to reduce unauthorized access, misuse, loss, or disclosure, no method of transmission or storage can be guaranteed to be completely secure.

Cookies, Analytics, and Tracking Technologies

This website may use cookies, pixels, analytics tools, and similar technologies to understand website traffic, improve site functionality, and support marketing or remarketing efforts. These technologies may be provided by SHBA Capital or by third-party vendors.

You can generally manage cookies through your browser settings. Disabling certain cookies may affect how parts of the site function.

SMS and Text Messaging Disclosures

If you provide a mobile number and consent to receive text messages, SHBA Capital may send text messages related to your inquiry, account follow-up, or related business-financing communications. Consent to receive texts is not a condition of purchase or financing.

Message frequency may vary. Message and data rates may apply. You may opt out of marketing or inquiry-related text messages at any time by replying STOP. For help, reply HELP or contact us using the information listed below.

Participation in text messaging may also depend on your mobile carrier and device capabilities. We do not guarantee message delivery or uninterrupted availability of text-message services.

Email Communications

We may send email communications related to your inquiry, website activity, follow-up conversations, or other business-related updates. Where required, marketing emails will include an unsubscribe option. Transactional or inquiry-response communications may continue as needed to address your request.

Data Retention

SHBA Capital retains information for as long as reasonably necessary for business, legal, compliance, operational, recordkeeping, dispute-resolution, and security purposes. Retention periods may vary depending on the nature of the information, the services involved, and applicable legal or contractual requirements.

Data Retention and Secure Disposal

Onboarding, verification, and related business records may be retained for follow-up review, provider coordination, compliance support, fraud prevention, and other legitimate business purposes. When information is no longer required for these purposes, we seek to dispose of or de-identify it using processes appropriate to the nature of the information, subject to applicable legal, regulatory, contractual, or preservation obligations.

Security

SHBA Capital uses reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, encryption in transit where appropriate, secure service providers, and internal procedures for handling sensitive information. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

User Choices and Opt-Out Rights

You may contact us to request updates to your information, ask questions about how your information is used, or opt out of certain marketing communications. You may opt out of text messages by replying STOP and may unsubscribe from marketing emails through the unsubscribe link provided in those messages where applicable.

Third-Party Links

This website may contain links to third-party websites or services. We are not responsible for the privacy, security, or content practices of third-party sites. You should review the privacy policies of any third-party sites you visit.

Children's Privacy

This website is intended for business and professional audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this site. If we learn that we have collected such information without parental consent, we will take steps to delete it as required by applicable law.

State Privacy Rights

Depending on your jurisdiction, you may have certain privacy rights under applicable law. SHBA Capital may update this Privacy Policy or provide supplemental disclosures where required by law. To make a privacy-related request or inquiry, please use the contact information below.

Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised effective or last-updated date. Continued use of the site after changes are posted is subject to the updated policy.

Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact SHBA Capital at submissions@shbacapital.com, +1 323-994-2601.