Funding Fred

United States

US Privacy Notice

This notice explains what information we collect, why we use it, who receives it, and the retention and deletion rules for a US business funding request.

Updated July 17, 2026Version us-2026-07-17

Who we are and what we do

Lucky Growth Partners Ltd, trading as Funding Fred, operates a business funding introduction service. We assess initial eligibility and may introduce an applicant to one selected funding partner. We are not a lender, do not make the partner's credit decision, and do not guarantee funding.

This notice applies when you use https://fundingfred.com/us, submit a US application, upload requested documents, or connect an account through Plaid.

Information we collect and where it comes from

  • Identity and contact data: name, email, phone number, date of birth, residential address, IP address, and browser or device details.
  • Business and application data: legal and trading names, entity type, registration state, address, industry, formation details, owners or officers, website, funding amount and purpose, time operating, revenue, existing finance, and application responses.
  • Business verification data: public Secretary of State and registry information returned through Middesk after you enter a business name and state.
  • Credit eligibility data: a consumer report, FICO® Score, soft-inquiry status, and report reference obtained through iSoftpull only after a separate authorization.
  • Connected-bank data: when you choose Plaid, the account information identified in Plaid Link for the accounts you select. Depending on the enabled Plaid products, this may include account and balance details, account-holder information, and transaction history. We do not receive your online-banking password.
  • Documents: files you choose to upload, their filename, type, size, checksum, scan result, and delivery status.
  • Website and advertising data: pages, events, device or browser identifiers, IP address, referral and campaign information, and advertising click identifiers. Where permitted, advertising services may receive hashed contact identifiers for measurement or matching.

We receive information from you, public registries, Middesk, iSoftpull and consumer reporting agencies, Plaid and your selected financial institution, our funding partners, and website, fraud-prevention, analytics, and advertising providers.

Why we use information

We use information to:

  • provide the application, verify identity and business details, and prevent fraud;
  • assess initial eligibility, select a funding partner, and progress the request;
  • verify revenue and cash flow when you connect a bank account or upload financial documents;
  • communicate about the request and provide support;
  • maintain consent, disclosure, security, and compliance records; and
  • operate, secure, troubleshoot, measure, and improve our services and advertising.

Middesk business verification

When you use the business search, we send the business name and state you enter to Middesk. Middesk returns public registry information that can include legal names, addresses, entity status and type, formation information, people associated with the entity, industry codes, website, and limited identifier fragments where available. We use this information to help you select the correct business and verify its status.

iSoftpull, FICO® Scores, and consumer reports

For US applications, we ask for a separate written authorization before instructing iSoftpull to obtain a consumer report and FICO® Score through a soft inquiry. We use the result only to assess business-funding eligibility and match the request with a funding provider. We may share the resulting score, status, and report reference with the selected funding partner. A soft inquiry does not affect your credit score.

Accepting this privacy notice is not the credit authorization. We do not request the report if the separate authorization is not given. A funding partner may ask for its own authorization or later conduct other checks under its own notice and permissible purpose.

Plaid bank connection

Connecting an account is optional and is not authorized by the initial application checkbox. Before Plaid Link opens, we present a separate notice naming the selected funding partner, the purpose of access, and how to disconnect. Plaid Link identifies the account-data categories requested and lets you choose the financial institution and account or accounts to connect.

We use connected-bank data only to verify revenue and cash flow, assess eligibility, and support underwriting. We share it only with the selected funding partner named in the connection notice and service providers needed to operate the connection. You can disconnect through Plaid Portal or contact us. Disconnecting stops future access, but does not automatically delete data already delivered to us or a funding partner. Plaid's own collection and retention are described in its End User Privacy Policy.

Document uploads

Before upload, we identify the funding partner that will receive the file and explain the purpose. Selecting upload instructs us to hold the file temporarily and deliver it to that partner for verification, eligibility assessment, underwriting, or progressing the request. Each instruction is recorded against the particular document and recipient. The partner may retain its copy under its own privacy notice and legal obligations.

Who receives information

We disclose application information to one selected funding partner when needed to assess or progress the request. We create a recipient-specific audit record naming that partner and the data categories disclosed. We also use service providers for business verification, credit-report access, bank connectivity, document storage and malware scanning, hosting, communications, fraud prevention, analytics, and advertising. Providers may use information only for the contracted service or as otherwise explained in their own notice and permitted by law.

We may also disclose information when required by law, to protect rights or security, or in connection with a corporate transaction. We do not publish application data or sell application lists for cash.

SMS messaging privacy

If you consent to receive SMS from Funding Fred, we may send application updates, document-upload reminders, application-status messages, and funding-outcome follow-ups. We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes.

Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. Consent to receive SMS is not a condition of purchase.

US funding partner list

Partner-list version 2026-06-18. The partner selected for an application may be one of the currently configured partners below. Marketing consent is presented separately from the funding-request and credit authorizations.

No US funding partners are currently configured.

Analytics, advertising, sale, and sharing

We use services such as Meta, TikTok, Google, Microsoft Clarity, and Taboola for analytics, conversion measurement, and advertising. Some state laws may define advertising disclosures as a “sale,” “sharing,” or targeted advertising even when no money is paid for the information. We do not sell application lists for money. Where a state opt-out right applies, you may ask us to stop covered advertising disclosures using the contact details below. This does not stop disclosures needed to process the funding request you asked us to provide.

Retention and deletion rules

RecordRule
Application and communicationsNormally no longer than six years after the last activity, unless a shorter period is sufficient or law, a dispute, fraud prevention, or another documented obligation requires longer.
Consent and disclosure evidenceSix years from the event. This includes the wording, version and hash, time, recipient, data categories, IP address, and user agent needed to prove the instruction.
Uploaded file in Funding Fred storageUp to seven days from upload, then automatically deleted. Metadata and the consent/delivery audit record may remain for six years. A recipient's copy follows its own notice.
Document slot and access linkAn unused upload slot normally expires after 14 days. A funding-partner access token expires after 30 days; the underlying file is still subject to the seven-day rule.
Plaid connection and bank dataFuture access ends when you disconnect or when it is no longer needed for the request. Bank data already retrieved is kept only for the underwriting and application-record period stated above, unless the connection notice specifies a shorter period. Plaid and the selected partner apply their own retention rules to their copies.
Marketing preference or suppression recordKept as long as reasonably needed to honor an opt-out and demonstrate compliance.
Security, analytics, and advertising dataKept for the shortest period reasonably needed for security, troubleshooting, measurement, and contractual or legal requirements, then deleted or de-identified.

When a retention period ends, we delete, de-identify, or securely dispose of the record. Deletion from backups may occur on the next scheduled backup rotation. We may preserve a record while a legal hold, dispute, security investigation, or statutory duty applies, and will delete it when that exception ends.

Your privacy choices and state rights

Depending on your state and subject to legal exceptions, you may have rights to know or access, correct, delete, obtain a portable copy, opt out of covered sale, sharing, targeted advertising or certain profiling, and appeal a denied request. We will not discriminate against you for exercising an applicable privacy right. You may also withdraw marketing consent at any time. A request to delete does not require us to erase records we must keep for legal, fraud-prevention, security, accounting, dispute, or consent-proof purposes.

Submit a request to [email protected] with “US Privacy Request” in the subject. We may need to verify your identity and authority before acting. An authorized agent may submit a request where state law permits.

Security and children

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, document malware checks, and limited-duration access credentials. No system can guarantee absolute security. This service is for business applicants aged 18 or older and is not directed to children.

Changes and contact

We may update this notice when our practices, providers, or legal obligations change. The date and version above identify the published notice. Material changes apply prospectively, and we will request a new instruction when the scope of an authorization materially changes.

Questions or requests: [email protected]. Lucky Growth Partners Ltd, trading as Funding Fred.