Privacy Notice | Last Mile Capital

This privacy notice explains how Last Mile Solutions Limited collects, uses, shares, and protects personal information when you visit our website, contact us, or submit a finance enquiry. We are committed to handling your personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This notice was last updated on 4 May 2026.

Who we are

Last Mile Capital is a trading name of Last Mile Solutions Limited, a company registered in England and Wales under company number 16461576. Our registered office is 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

For the purposes of UK data protection law, Last Mile Solutions Limited is the data controller of personal information you provide to us through this website or in connection with a finance enquiry.

You can contact us about this notice or about your personal data by emailing hello@lastmilecapital.co.uk or by writing to the registered office address above. We have not appointed a Data Protection Officer because we are not legally required to do so, but the email address above will reach the person responsible for data protection at our firm.

What we do, in plain terms

Last Mile Capital is a specialist asset finance arranger. We work with limited companies, partnerships, and other commercial borrowers, and we introduce them to funders who can provide the facility they need. We do not lend our own money, and we do not arrange consumer credit. The personal information we collect is collected in a business-to-business context.

We are not authorised or regulated by the Financial Conduct Authority. Our activities involve introducing commercial borrowers to lenders for business purposes only, which falls outside the scope of FCA-regulated consumer credit activity.

What personal information we collect

We collect personal information in the following ways.

Through our contact form: your name, the business you represent, your email address, your phone number, the audience type you select, the sector you operate in, and the message you send us.
Through our enquiry forms on the customer and funder pages: your sector, the type of facility you are interested in, the indicative ticket size, details about your business, and your contact information.
Through direct correspondence with us: anything you choose to share by email, by phone, or in a meeting.
Through our website analytics and server logs: technical information such as your IP address, browser type, the pages you visit, and the time of your visit. This information is used to understand how the site is used and to keep it secure.
Through anti-money laundering and sanctions checks: identification documents, beneficial ownership information, and the results of checks against the UK Sanctions List published by the Office of Financial Sanctions Implementation (OFSI) and against politically exposed persons and adverse media databases.

We do not deliberately collect special category personal data (such as health data or data revealing political opinions). Please do not include such information in your enquiry message.

Why we use your personal information, and our lawful basis

UK GDPR requires us to identify a lawful basis for each purpose for which we process your personal data. The list below sets out our purposes and the lawful basis we rely on for each.

Responding to your enquiry, scoping a facility, and introducing you to one or more funders. Lawful basis: legitimate interests. Our legitimate interest is operating our finance arranging business and progressing your enquiry. We have considered the impact on you and concluded that this processing is necessary, proportionate, and within your reasonable expectations when you submit an enquiry.
Carrying out customer due diligence, identity verification, sanctions screening, and other anti-money laundering checks. Lawful basis: legal obligation. We are required to do this under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017.
Keeping records of your enquiry and any subsequent transaction for our internal pipeline, audit, and dispute defence purposes. Lawful basis: legitimate interests, and where applicable, legal obligation (record-keeping requirements under MLR 2017 and tax law).
Sending occasional updates about our services to business contacts who have enquired with us. Lawful basis: legitimate interests (soft opt-in for our existing business contacts under the Privacy and Electronic Communications Regulations). You can opt out at any time using the unsubscribe link or by emailing us.
Operating, securing, and improving our website, including honeypot and rate-limit protections on forms. Lawful basis: legitimate interests in keeping our systems secure and functional.

Who we share your personal information with

We share your personal information only where it is necessary for the purposes set out above. The categories of recipient are as follows.

Funder partners. When we introduce you to a funder, we share your business and contact details together with the relevant facility information. We tell you which funder or funders we are introducing you to before we make the introduction. The funder will then become a separate data controller and will provide you with their own privacy notice.
Anti-money laundering and sanctions screening providers. We use third-party verification services to perform identity, sanctions, and PEP checks where required by MLR 2017.
Our hosting and technology providers. Our website is hosted by SiteGround and runs on WordPress with the Yoast SEO and SiteGround Optimizer extensions. These providers process technical data on our behalf as data processors under written contracts.
Professional advisers. From time to time we may share information with our solicitors, accountants, and auditors where this is necessary for legal advice, accounting, or audit.
Regulators, law enforcement, and courts. We will share information where we are required to do so by law, by a regulator, by a court order, or to defend our legal rights.

We do not sell your personal information. We do not run third-party advertising cookies, and we do not share your personal information with advertising networks for behavioural targeting.

International transfers

We aim to keep personal information within the United Kingdom. Where a service provider processes data outside the UK (for example, where a hosting or screening provider operates from the European Economic Area or another country), we rely on the UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate supplementary measures, to keep your data protected to UK GDPR standards.

How long we keep your personal information

We keep personal information only for as long as we need it.

Enquiry data where no facility is arranged: kept for up to 24 months from the date of enquiry, then deleted or anonymised.
Customer data where a facility is arranged: kept for 6 years from the end of our relationship with you, in line with the limitation period for contract claims in England and Wales.
Anti-money laundering records: kept for 5 years from the end of our business relationship with you, as required by MLR 2017.
Marketing contact records: kept until you opt out, plus a short suppression period to make sure we do not contact you again in error.
Website server logs: kept for up to 12 months for security and diagnostic purposes.

How we keep your personal information secure

We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access controls on our internal pipeline, honeypot fields and rate limiting on public forms, nonce-protected AJAX submissions, and security headers configured at the hosting layer. We restrict access to personal information to people in our firm and our processors who need it for the purposes set out in this notice. We review our controls periodically.

Your rights

Under UK GDPR you have the following rights in relation to your personal data.

The right to be informed about how we use your data, which is the purpose of this notice.
The right of access to a copy of the personal data we hold about you.
The right to rectification of inaccurate or incomplete data.
The right to erasure of your data in certain circumstances.
The right to restrict processing in certain circumstances.
The right to data portability for data you have provided to us, where we process it by automated means under consent or contract.
The right to object to processing based on legitimate interests, and an absolute right to object to direct marketing.
Rights in relation to automated decision-making and profiling. We do not make decisions about you that have legal or similarly significant effects using automated processing alone.

Some of these rights are not absolute and depend on the lawful basis we rely on and the purpose of processing. We will tell you if an exception applies.

To exercise any of these rights please email hello@lastmilecapital.co.uk. We may need to verify your identity before we respond. We will respond within one month, although for complex requests this can be extended by a further two months.

Cookies and analytics

We use a small number of cookies and similar technologies for the website to function and to understand how it is used. We do not run third-party advertising cookies. Where required by the Privacy and Electronic Communications Regulations, we ask for your consent before setting non-essential cookies. You can withdraw your consent at any time by clearing cookies in your browser.

Complaints

If you are not happy with how we have handled your personal data, please contact us first at hello@lastmilecapital.co.uk so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk, by phoning 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this notice

We may update this notice from time to time to reflect changes in our services or in the law. The date at the top of the notice shows when it was last updated. Where the changes are significant, we will take reasonable steps to bring them to your attention.

Privacy notice.