Business funding for growing companies

Privacy Policy

Natlus Capital · natluscapital.com · Last updated November 5, 2026

This Privacy Policy explains how Natlus Capital (“we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit natluscapital.com (the “Site”), apply for financing, or otherwise deal with us. Our financing products are offered for business purposes only. This policy is not a notice for consumer, personal, family, or household credit. Even so, the owners, principals, guarantors, and representatives of the businesses we serve are individuals, and we treat their personal information with care.

Except as described below or as permitted by law, we do not disclose personal information about our customers or former customers.

1. Our Role: Funder and Broker

Depending on the transaction, Natlus Capital may act in one of two capacities, and how we handle your information depends on which one applies.

  • Funder. When we fund a transaction ourselves, such as a business loan or a purchase of future receivables, we are your counterparty. We use your information to underwrite, fund, service, and collect on that transaction.
  • Broker. When we arrange financing through a third-party funder, we send your application and supporting documents to one or more funding partners so they can evaluate your request. The funder you choose becomes your counterparty, and its own privacy policy and contract govern how it handles your information from that point on, in addition to this policy.

We will tell you which role we are playing as required by law and by your transaction documents. Where it is practical, we will let you know which funders, or which types of funders, will receive your file before it is sent.

2. Information We Collect

Not every category below applies to every person.

A. Information you give us. When you complete an application, request a quote, or contact us by form, phone, text, or email, you may give us your name, date of birth, Social Security number (where needed for identity verification or a personal guaranty), Employer Identification Number, business legal name and DBA, business and home addresses, phone numbers, email address, ownership percentage, government-issued ID, bank statements, tax returns, financial statements, and similar records.

B. Transaction and account information. If you obtain financing through us, we collect details about it, including amounts, balances, payment history and schedule, repayment bank or card details, renewal eligibility, default or collection events, and our communications with you.

C. Information from third parties. We may receive information about you or your business from business and consumer credit bureaus, bank-data connection services you authorize, identity-verification and fraud-prevention providers, public records, funding partners, and referral partners.

D. Site and device information. When you visit the Site, we and our service providers collect your IP address, browser and device identifiers, pages viewed, the page that referred you, and information gathered through cookies and similar tools (see Section 6).

E. Calls and messages. If you call us, text us, or email us, we keep the content of those communications and may keep recordings, transcripts, and notes (see Section 9).

F. Referral partner information. If you reach us through a broker, independent sales organization, or other referral partner, we receive the information that partner collected from you, along with the partner’s identifier for tracking the referral.

3. How We Use Your Information

We use the information we collect to:

  • verify your identity and your authority to act for your business;
  • evaluate, underwrite, price, fund, service, renew, and collect on financing, whether we act as funder or broker;
  • match your application with suitable funding partners;
  • communicate with you about your application, account, payments, and renewals;
  • operate, secure, troubleshoot, and improve the Site and our services;
  • detect, prevent, and investigate fraud, unauthorized access, money laundering, and other unlawful activity;
  • meet legal, regulatory, audit, tax, accounting, and recordkeeping obligations;
  • carry out internal research, analytics, and reporting, using aggregated or de-identified data where possible; and
  • send marketing messages in line with Section 8 and your opt-out rights.

We do not sell your personal information for money.

4. How We Share Your Information

Funding partners. When we broker a transaction, we send your application and supporting information to the funder or funders selected for your file. Each funder uses your information under its own privacy policy and contract.

Referral partners. If a referral partner sent you to us, we may tell that partner the status and outcome of your referral. Those partners are contractually limited to using this information for the referral relationship and must keep it confidential.

Capital providers and investors. We may share transaction-level performance data with lenders, investors, and other capital providers who finance our portfolio, under agreements that limit their use of it to that relationship.

Credit bureaus and data exchanges. We may report account performance to business credit bureaus and to industry data exchanges that help commercial-financing providers assess risk and prevent fraud. We do not report your personal consumer credit information to consumer reporting agencies.

Service providers. We use vendors to help us run our business, including website hosting, customer-relationship management, email and text delivery, telephone systems, identity verification and fraud screening, bank-data connection, document storage, payment processing, analytics, and professional advisors such as accountants and attorneys. They may use your information only to perform services for us.

Legal and government requests. We may disclose information to comply with a subpoena, court order, regulatory request, or other legal process, to respond to law enforcement, to enforce our agreements, and to protect against fraud or security issues.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of some or all of our assets, your information may be transferred as part of that deal, with protections at least as strong as those in this policy.

With your consent. We may share information for other purposes that we disclose when we collect it or that you approve.

Mobile information. We do not share your mobile number, or any text-message opt-in or consent information, with third parties for their own marketing or promotional purposes.

5. Sources of Personal Information

We collect personal information from you directly; from your authorized representatives and the business you own or control; from referral partners; from funding partners that return decisioning information; from credit bureaus; from identity-verification, fraud-prevention, and compliance vendors; from bank-data connection services you authorize; from public records; from Site analytics; and from our service providers.

6. Cookies and Online Tracking

Cookies are small files stored on your device when you visit a website. The Site uses cookies, pixels, tracking parameters in links (such as UTM tags), local storage, and similar tools to keep the Site working, remember your preferences, measure performance, and, where you allow it, support advertising.

Your choices. Where the law requires it, a cookie banner lets you accept or reject non-essential cookies by category, and you can change your choice at any time through the Cookie Settings link in the Site footer. Essential cookies cannot be turned off because the Site depends on them. We honor Global Privacy Control (GPC) signals as an opt-out of the “sale” or “sharing” of personal information where state law treats GPC as a valid opt-out.

Analytics. With your consent, we use [ANALYTICS TOOLS, e.g., Google Analytics / Google Tag Manager] to learn how visitors use the Site. This may include pages viewed, links clicked, browser and device type, approximate location from your IP address, and a cookie identifier.

Advertising. With your consent, we may use [ADVERTISING TOOLS, e.g., Google Ads, Meta, Microsoft Advertising] to measure our ads and show you relevant ones. These providers may set their own cookies and collect information about your visits to our Site and other sites, and their own privacy policies apply to that data.

7. FCRA and ECOA Notices

Fair Credit Reporting Act. With your authorization, we may obtain personal consumer credit reports on business owners, principals, and guarantors in connection with an application, account review, or renewal. If we take adverse action on a business application based in whole or in part on information in such a report, we will give you the notice the law requires, including the name, address, and toll-free number of the reporting agency, your right to a free copy of the report, and your right to dispute its accuracy.

Equal Credit Opportunity Act. We do not discriminate against applicants on any basis prohibited by the Equal Credit Opportunity Act (15 U.S.C. § 1691) or Regulation B (12 C.F.R. Part 1002). For business-credit applications, we give notice of action taken as Regulation B requires.

8. Calls, Text Messages, and Email

By giving us your phone number or email address, you allow us and our service providers to contact you there about your application, identity verification, account servicing, payments, renewals, collections, fraud prevention, and legally required notices. These contacts may include calls, texts, and emails, and may be made with automated dialing or prerecorded messages as permitted by law. Message and data rates may apply.

Marketing. We do not send marketing texts or place automated or prerecorded marketing calls to you without your prior express written consent given to Natlus Capital specifically. Renewal and new-financing offers may count as marketing where the law says so.

Text opt-out. Reply STOP to any text to stop non-essential messages, or HELP for assistance. Message frequency varies. [Add SMS program name, short code, and carrier language once the texting program is set up.]

Email opt-out. Click the unsubscribe link in any marketing email, or email us at the address in Section 14.

Servicing messages. Opting out of marketing does not stop servicing, security, fraud-prevention, collection, account, or legally required messages, as the law allows.

9. Call Recording

Calls between you and Natlus Capital may be recorded and transcribed for quality assurance, training, compliance, and dispute resolution. We will tell you at the start of a call if it is being recorded, and by staying on the line you agree to the recording.

10. Data Retention

We keep your information for as long as your account is active and as long as we need it to provide services, meet legal and regulatory recordkeeping requirements for commercial financing, resolve disputes, defend against claims, and enforce our agreements. Records from closed accounts are kept for the period the law requires, including tax, anti-money-laundering, and licensing schedules, and are then securely deleted or anonymized.

11. Data Security

We use administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, role-based access controls, multi-factor authentication for employee systems, activity logging, vendor due diligence, and a written information security program. No system is perfectly secure. If a security incident affects your personal information, we will notify you and any required regulators within the time that applicable state breach-notification laws require.

12. Your State Privacy Rights

Depending on where you live, state privacy laws may give you rights over the personal information we hold about you as an individual, such as a business owner, guarantor, authorized representative, or website visitor. These laws include those of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. More states may be added over time, and we will update this policy as new laws take effect.

Depending on your state, you may have the right to:

  • know and access the personal information we have collected about you, including its sources, recipients, and purposes;
  • receive a portable copy of certain information;
  • correct inaccurate information;
  • delete personal information, subject to legal retention requirements;
  • opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising;
  • limit the use of sensitive personal information (such as Social Security number or financial-account information) to what is needed to provide the service; and
  • not be retaliated against for using these rights.

Some state laws exempt information collected in a business-to-business or financial-institution context, which may limit how these rights apply to you. Where the application of an exemption is unclear, we aim to apply the protection that is most favorable to you.

How to use your rights. Contact us using the details in Section 14. You may also use an authorized agent. We will verify your identity using the information we already have and respond within the time your state’s law requires, generally 45 days, extendable once where allowed.

Deleting your information. You may ask us to delete your personal information at any time. We will delete or anonymize what we can, but we must keep certain financing, identity, payment, tax, fraud-prevention, and regulatory records for the periods the law requires, and we will keep those in restricted-access systems and will not use them to market to you.

Nevada. Nevada residents may tell us not to sell certain personal information. We do not engage in sales as Nevada law defines them.

13. Children and Users Outside the United States

Our services are meant for business owners and their authorized representatives. The Site is not directed to children under 13, and we do not knowingly collect their personal information. If we learn that we have, we will delete it.

The Site and our services are offered to people in the United States only. If you access the Site from elsewhere, your information will be transferred to and processed in the United States.

14. Contact Us

If you have questions about this policy or want to use your privacy rights, contact:

Natlus Capital Attn: Privacy; Email: accounts@natluscapital.com; Phone: (866) 451-9260

15. Changes to This Policy

If we change this policy, we will post the updated version at natluscapital.com/privacy-policy/ and change the date at the top. For significant changes, we will give additional notice where the law requires it.