Seven Hills Capital Group
    Speak to Our TeamGet In Touch
    Get in touch

    Privacy Policy

    Last updated: 01 July 2026

    Seven Hills Capital Group is committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, store and share your personal data when you visit our Website or enquire about our services.

    Seven Hills Capital Group is a trading name of SMW Consultancy (UK) Limited (company number 13664811). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    1. Data We Collect

    Information you provide to us

    When you submit an enquiry, contact form or booking request through our Website, we may collect:

    • Your name
    • Your email address
    • Your phone number
    • Your business name and details
    • Details of your finance requirements
    • Any other information you choose to provide

    Information collected automatically

    When you visit our Website, we automatically collect certain technical information including:

    • Your IP address
    • Browser type and version
    • Pages visited and time spent on each page
    • Referring website
    • Device type and operating system

    This information is collected using cookies and similar technologies. Please see our Cookie Policy for more information.

    2. How We Use Your Data

    We use your personal data for the following purposes:

    • To respond to your enquiry and provide our credit broking services
    • To search the market and introduce you to appropriate lenders on your behalf
    • To communicate with you about your enquiry or application
    • To comply with our legal and regulatory obligations as an FCA-regulated credit broker
    • To improve our Website and services
    • To send you relevant information about our services where you have consented to receive it

    3. Legal Basis for Processing

    We process your personal data on the following legal bases:

    • Contract: where processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract with you
    • Legal obligation: where we are required to process your data to comply with our regulatory obligations under FCA rules and UK law
    • Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services and preventing fraud
    • Consent: where you have given us clear consent to process your data for a specific purpose, such as receiving marketing communications

    4. Who We Share Your Data With

    We may share your personal data with the following categories of recipients:

    Lenders and finance providers

    When we introduce you to a lender, we will share relevant personal and financial information with them for the purpose of assessing your finance application. We will always inform you before making any such introduction.

    Technology and service providers

    We use the following third party platforms to operate our business, all of whom process data on our behalf as data processors:

    • GoHighLevel (GHL) — our CRM and marketing automation platform. Data may be processed outside the UK. GoHighLevel is subject to standard contractual clauses and appropriate safeguards.
    • Google Analytics — website analytics. Data is processed by Google LLC. Google Analytics is subject to Google's data processing terms and standard contractual clauses.
    • Email marketing platform — GHL — used to send service-related and marketing communications where consent has been given.

    Regulatory bodies

    We may be required to share your data with the Financial Conduct Authority, the Information Commissioner's Office, or other regulatory or law enforcement bodies where we are legally required to do so.

    5. Data Retention

    We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements.

    As an FCA-regulated firm, we are required to retain records relating to regulated activities for a minimum of 5 years. Where a credit agreement is entered into, records will be retained for the duration of the agreement and for 5 years thereafter.

    Enquiry data where no agreement was entered into will be retained for 12 months and then securely deleted unless you have consented to receive marketing communications.

    6. Your Rights

    Under UK GDPR, you have the following rights in relation to your personal data:

    • Right of access: to request a copy of the personal data we hold about you
    • Right to rectification: to request correction of inaccurate or incomplete data
    • Right to erasure: to request deletion of your personal data in certain circumstances
    • Right to restriction: to request that we restrict processing of your data in certain circumstances
    • Right to data portability: to receive your data in a structured, machine-readable format
    • Right to object: to object to processing based on legitimate interests or for direct marketing purposes
    • Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time

    To exercise any of these rights, please contact us at steven@sevenhillscapitalgroup.com. We will respond within one calendar month.

    You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

    7. Data Security

    We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include secure data storage, access controls and staff training.

    However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

    8. International Transfers

    Some of our third party service providers, including GoHighLevel and Google, may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses approved by the ICO.

    9. Marketing Communications

    We will only send you marketing communications where you have given your consent to receive them. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at steven@sevenhillscapitalgroup.com.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. We encourage you to review this Policy periodically.

    11. Contact Us

    If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

    Seven Hills Capital Group — a trading name of SMW Consultancy (UK) Limited
    Email: steven@sevenhillscapitalgroup.com
    Phone: 07859 391508
    Website: www.sevenhillscapitalgroup.com
    Company Registration: 13664811
    FCA Registration: 1054187