01Privacy
What we collect, and what we refuse to.
How Atlas Business Capital handles information about you and your business. Written to describe this website as it is actually built, not as a template imagines it.
02Controller
Who is responsible.
Atlas Business Capital is the data controller for the information described here. Anything on this page can be raised with us by email at funding@atlasbusiness.capital or by phone on (305) 791-3797.
We arrange merchant cash advances and other working capital with third-party funding companies for businesses in the United States. We are a broker. We are not a lender, a bank or a funder, and we do not make the credit decision.
This policy explains what we collect when you use this website, call or email us, or complete the application on it, why we hold it, who else sees it, and what you can require us to do about it.
Last updated
31 July 2026
If we change this policy we will change the date above. Material changes will be described here rather than absorbed silently.
03Collected
Everything the application asks for.
There is one form on this site and it is the application. This is what it collects, what the site records on its own, and what reaches us when you call or email instead.
The application, and what it collects
The application is on this website, at /apply, and you can complete it without speaking to anybody first. It is long, and it is the only place on this site that asks for any of this:
- Business identity: legal name, EIN, address, entity type and start date
- Trading detail: annual and monthly sales, premises and any existing advance
- Owner detail: home address, date of birth, Social Security number and licence number
- Documents: 4 months of bank statements and photo ID
- A signature, with the date, time and IP address it was made from
A second owner holding 20% or more is asked for the same personal detail, and three trade references are asked for by name and phone number. At the moment you sign, the date and time, your IP address, your browser and device details and the result of a VPN, proxy and hosting-network check are recorded and written onto the document itself.
The application is assembled into a single signed PDF in memory, emailed to us, and then discarded. There is no database behind this site and no copy of your documents is left on the web server.
While you are filling the application in, your answers are saved as a draft in this browser’s local storage, on your own device, so that a closed tab or a flat battery does not cost you the form. That draft holds everything you have typed, including the Social Security number and the date of birth, in clear text and not encrypted. It is not sent to us or to anyone else until you submit the application. The documents you upload are never written to it. The “Clear and start again” button at the foot of the form erases it, and so does a submission that goes through. On a shared or public computer, use that button before you walk away.
We do not send you a copy of the completed document, so keep your own record of what you provided. The signing is ours: there is no third-party e-signature service in the middle of it, and your documents are not handed to one. Ask us at any time and we will tell you what your application contained.
Collected automatically
Your IP address, which reaches our server with every request and is recorded on the application at the moment you sign it. Your browser sends standard request information, as it does to every website.
There is no analytics suite, no advertising pixel and no session recording on this site at the time of writing.
When you call or email instead
Your number reaches us with the call, your address with the email, and with either we hold whatever you chose to tell us and anything you attached. There is no form in the middle of it, so what we have is what you sent.
Please keep Social Security numbers, bank details and card numbers out of email. The application is the place for anything of that kind. We will never ask you for a bank login or a password by any route.
04Purpose
Why we hold it, and our lawful basis.
Every purpose has a stated basis. Consent is only one of them, and using it for everything would be wrong: consent can be withdrawn, and some records must survive withdrawal to remain meaningful.
| Purpose | Lawful basis | Notes |
|---|---|---|
| Replying to you, and handling an application you send us | Steps before a contract | You asked us to arrange funding, so replying to you and working on what you send us is the step you asked for. |
| Placing your file with funders | Consent | Nothing goes to a funder unless you tell us to send it. You can refuse or withdraw at any point. |
| Marketing calls, texts and emails | Consent | The optional tick box on the application, separate from the authorization you sign and never pre-ticked. Withdrawable at any time. |
| Spam and fraud prevention | Legitimate interests | Keeping an open form usable. The application screens out automated submissions, and records the IP address, browser and device details described above. |
| Keeping records of consent and of what we were asked to do | Legal obligation and legitimate interests | A consent record that is deleted on request cannot evidence the consent it recorded. |
Withdrawing consent
Email funding@atlasbusiness.capital or reply STOP to any text message. Withdrawal takes effect going forward and does not make our earlier processing unlawful. It may mean we can no longer progress your funding request, which is a practical consequence rather than a penalty.
06Transfers
Where it goes.
Information about you is handled by the funding companies and the service providers described above, and they may hold or process it outside the country you are in.
Where information crosses a border we rely on the safeguards required by the law that applies to that transfer. If you want to know which safeguard applies to your file before you send anything, ask us and we will tell you in writing first.
Retention
How long we keep it.
A call or an email that goes nowhere is kept while we are still dealing with it and for a reasonable period afterwards, in case you come back.
Where a file is placed, records are kept for as long as needed to deal with questions, disputes or regulatory obligations arising from it.
If you ask us to stop contacting you we keep the minimum needed to honour that instruction. Deleting the record entirely would lose the instruction not to contact you, which would defeat the request.
A completed application is kept on this website for no time at all. It is built in memory, emailed to us and discarded, so what we hold afterwards is the email we received, on the same footing as the records above.
07Rights
What you can require us to do.
We do not charge for any of this and we will not treat you differently for asking.
Everyone
Whatever your state, and regardless of whether a statute requires it of us, you may ask us to:
- Tell you what we hold about you and where it came from
- Correct anything inaccurate
- Delete it, where we have no overriding reason to keep it
- Stop contacting you, by any or all channels
- Withdraw consent, at any time
These are offered to everyone who contacts us, not only to residents of states that mandate them. It costs us nothing to apply one standard, and working out whether you qualify for a right before granting it is not a good use of your time or ours.
California
Rights vary by state. Under the California Consumer Privacy Act, as amended, California residents may:
- Ask what personal information we have collected and where it came from
- Ask us to correct or delete it
- Opt out of any sale or sharing. We do neither
- Not be discriminated against for exercising these rights
A Global Privacy Control signal has nothing here to act on. It tells a site to opt you out of the sale or sharing of your personal information, and we do neither, so there is no such processing for it to stop. Residents of other states with comparable laws may exercise equivalent rights by contacting us the same way.
How to exercise any of this
Email funding@atlasbusiness.capital or call (305) 791-3797. We may need to confirm who you are before acting, so that someone else cannot obtain your data by asking for it. We respond within the time the applicable law allows, and sooner where we can.
08Security
How it is protected.
The site is served over HTTPS. What you send reaches us through our messaging and email providers rather than sitting in a database on this website, and access is limited to the people who work the files.
The application carries sensitive material, including the documents you upload to it. It is assembled in memory into a single document, sent to us, and left nowhere on this website afterwards.
We will never ask you for a bank login, a password or a one-time code. Anyone who does is not us.
Cookies
No cookies. One saved draft.
At the time of writing there is no analytics suite, no advertising pixel, no remarketing tag and no third-party tracker on this website, so there is no cookie banner because there is nothing to consent to.
One thing is kept on your device: the draft of the application, described in section 03 above. It is local storage rather than a cookie, it is never sent anywhere on its own, and you can erase it from the form itself.
If that changes we will update this page and add proper controls before anything is set. You can also block cookies in your browser.
Other sites, and children
Links to other websites are their responsibility, not ours. This service is for businesses and is not directed to anyone under 18, and we do not knowingly collect information about children.
Ask us anything about this.
If something here is unclear, or you want your information removed, say so and we will deal with it.