Looking to open a corporate account? We’ll connect you with the right banking partner
Privacy policy for the IFB mobile app
Last updated: September 26, 2026
1. ABOUT THIS PRIVACY POLICY
This Privacy Policy explains how INTERNATIONAL FINTECH BUSINESS LTD, trading as International Fintech Business or IFB (“IFB”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you use the International Fintech Business mobile application and related online services that link to this Privacy Policy (together, the “Services”).
INTERNATIONAL FINTECH BUSINESS LTD
Company number: 14431830
Registered office: Level 18 40 Bank Street, London, England, E14 5NR
Privacy contact: support@ifbusiness.uk
For the processing described in this Privacy Policy, INTERNATIONAL FINTECH BUSINESS LTD is generally the controller of your personal information.
The Services include functionality that may allow users to:
The application is principally an information, marketplace and enquiry platform. It does not itself execute acquisitions, transfer ownership of businesses, process payments between buyers and sellers, or provide regulated financial or investment services through the application.
Where an enquiry develops into a transaction, consultancy engagement, regulatory project, due diligence exercise or other professional service, those activities may be undertaken outside the application under separate agreements and may involve additional processing of personal information.
This Privacy Policy should be read together with any additional privacy information or notices that we provide to you in connection with a particular service.
The personal information we collect depends on how you interact with the Services and which features you use.
We may collect:
Identity and contact information
Account and authentication information
We do not receive your Google or Apple account password when you use those services to sign in.
Marketplace and enquiry information
This may include:
Business and professional information
Depending on the nature of an enquiry, this may include information relating to:
Documents and files
Where a relevant feature is available, you may choose to upload documents, images or files in connection with a listing, enquiry, sale request, consultation or other Service.
You should provide only information that is reasonably necessary for the relevant purpose.
Information submitted in connection with a company or transaction may relate to another individual, for example:
If you provide personal information relating to another person, you should ensure that you are entitled to provide it and, where required, that the person has been appropriately informed.
We may also receive information about individuals from other users, corporate representatives, professional advisers, counterparties or public sources.
The Services are not designed to require users routinely to provide special category personal information, such as information concerning health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, biometric identification, sexual orientation or sex life.
The Services are also not intended routinely to collect criminal offence information.
However, documents or information voluntarily submitted in connection with a company, individual, regulatory matter or due diligence enquiry may exceptionally contain this type of information.
Please do not submit special category or criminal offence information unless:
Where IFB receives such information, we will process it only where we have a lawful basis and any additional condition required by applicable data protection law. Information that is unnecessary for our purposes may be deleted or redacted.
When you access or use the Services, we may automatically collect certain technical and usage information, including:
We do not intend to collect precise GPS location unless a specific feature requires it and appropriate notice and device permission are provided.
Depending on the functionality you choose to use, the application may request permission to access particular device functions, for example:
We will request device permissions only where they are relevant to functionality available through the application.
You can control device permissions through your mobile device settings.
Where available, you may choose to sign in using services such as Sign in with Google or Sign in with Apple.
If you do so, we may receive information authorised by you and made available by the relevant identity provider, such as:
Google and Apple separately process information in accordance with their own privacy terms.
We may obtain personal information from:
We use personal information only where we have a lawful reason to do so.
Our principal processing activities are set out below.
| Purpose | Examples | Principal lawful basis |
|---|---|---|
| Account creation and administration | Creating accounts, authentication, maintaining account settings and providing account functionality | Performance of a contract or steps requested before entering into a contract |
| Operating the marketplace | Providing listings, searches and marketplace functionality | Contract and/or legitimate interests |
| Buyer enquiries | Responding to expressions of interest and facilitating communication concerning potential acquisitions | Contract, pre-contractual steps and/or legitimate interests |
| Seller and listing enquiries | Reviewing companies submitted for potential sale or listing | Contract, pre-contractual steps and/or legitimate interests |
| Custom searches | Identifying businesses or opportunities based on user requirements | Contract or pre-contractual steps |
| Consultations | Arranging consultations and responding to requests for professional services | Pre-contractual steps and/or legitimate interests |
| Communications | Responding to enquiries, support requests and other communications | Contract and/or legitimate interests |
| Administrative communications | Account notices, changes to the Services, security alerts and policy updates | Contract, legitimate interests and/or legal obligation |
| Security and fraud prevention | Protecting accounts and systems, identifying misuse and investigating suspicious activity | Legitimate interests and, where applicable, legal obligation |
| Service improvement | Troubleshooting, performance analysis and understanding use of the Services | Legitimate interests and, where required for relevant technologies, consent |
| AI-assisted functionality | Processing a user-requested search or other AI-assisted feature | Contract, pre-contractual steps and/or legitimate interests |
| Marketing | Information about relevant IFB services, opportunities or developments | Consent where required and otherwise legitimate interests where permitted by law |
| Compliance | Responding to courts, regulators, public authorities or lawful requests | Legal obligation and/or legitimate interests |
| Legal claims | Establishing, exercising or defending legal rights | Legitimate interests and other applicable legal grounds |
| Corporate transactions | Due diligence relating to an investment, financing, merger, restructuring, sale or acquisition involving IFB | Legitimate interests and/or legal obligation |
Our legitimate interests
Where we rely on legitimate interests, those interests may include:
Where required, we balance these interests against the rights and interests of the individuals concerned.
Consent
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.
Where consent is legally required for a particular analytics technology, device permission, direct marketing activity or similar feature, we will seek the relevant consent or permission before carrying out that processing.
The Services may contain features powered by artificial intelligence or machine-learning technology.
We currently may use third-party AI service providers, including OpenAI, to support functions such as AI-assisted marketplace search.
When you intentionally use an AI-assisted feature, information submitted through that feature may be sent to the relevant AI provider together with limited contextual information necessary to generate the requested result.
We seek to minimise personal information transmitted to AI providers.
In particular, ordinary use of marketplace search is not intended automatically to transmit:
to an AI service provider unless a particular feature requires such processing and appropriate information is provided to users.
You should avoid entering unnecessary personal or sensitive information into AI search or other free-text fields.
AI-assisted search is intended to help identify, organise or present information. IFB does not currently use the Services to make decisions about users solely by automated means that produce legal effects or similarly significant effects.
If this changes, we will update this Privacy Policy and provide any additional information required by law.
We may share personal information where reasonably necessary for the purposes described in this Privacy Policy.
We use third-party providers to operate and support the Services.
These may include providers of:
Providers currently relevant to the Services may include:
Some providers act as processors on IFB’s instructions, while others may process particular information as independent controllers under their own legal obligations and privacy terms.
Where a third party processes personal information for IFB as a processor, we require appropriate contractual protections and expect the provider to protect personal information to standards consistent with applicable data protection law and this Privacy Policy.
Where necessary to progress a marketplace enquiry, we may share relevant information with:
We aim to disclose only the information reasonably necessary at the relevant stage.
More extensive disclosure of confidential, due diligence or transaction information may be subject to separate confidentiality arrangements or transaction processes.
We may disclose information to our:
where reasonably necessary.
We may disclose information where required or permitted by law to:
Personal information may be disclosed as part of negotiations or due diligence relating to:
Appropriate confidentiality and data protection arrangements will be used where necessary.
IFB operates internationally and uses technology and service providers that may process personal information in different countries.
As a result, personal information may be transferred to or accessed from countries outside the United Kingdom or the country in which you are located.
Where UK-protected personal information is transferred outside the United Kingdom and applicable law requires a transfer mechanism, we will use an appropriate mechanism. Depending on the circumstances, this may include:
Where required, we will also undertake the applicable assessment of the protection afforded to the information in the destination country.
For personal information protected by the EU GDPR, we may rely on:
You may contact us if you require further information about safeguards used for a particular international transfer.
The Services may use:
These technologies may be used to:
Some technologies are technically necessary to provide the Services.
Where applicable law requires consent for non-essential analytics, advertising, storage/access technologies or similar processing, we will seek consent before activating the relevant technology.
We do not currently intend to use personal information for third-party behavioural advertising or cross-application tracking.
If such functionality is introduced in the future, we will provide appropriate information and obtain any permission or consent required by applicable law or platform rules before activating it.
We may send you communications concerning:
These are service communications and may be necessary for us to provide the Services.
Separately, where permitted by law, we may send marketing communications concerning IFB services, relevant marketplace opportunities or similar business information.
Where consent is required, we will send such marketing only after obtaining the required consent.
You can opt out of marketing at any time by:
Opting out of marketing does not prevent us from sending necessary account, security, transaction-related or administrative communications.
Push notifications can also be disabled through your device settings.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, regulatory, security, accounting and dispute-resolution requirements.
Our normal retention approach is:
| Information | Normal retention approach |
|---|---|
| User account and profile | While the account remains active and ordinarily deleted or anonymised following account deletion, subject to information that must be retained for another lawful purpose |
| Account authentication and security records | For the period necessary to protect the account and investigate security issues; certain logs may normally be retained for up to 12 months |
| Marketplace enquiries | Ordinarily up to 3 years after the last meaningful interaction unless connected with a transaction, engagement, complaint or dispute |
| Consultation enquiries | Ordinarily up to 3 years after the interaction unless they develop into a professional engagement |
| Records connected with a completed transaction or contractual engagement | Normally up to 6 years following completion, subject to applicable legal or regulatory requirements |
| Uploaded documents | Until no longer required for the relevant enquiry, transaction or engagement, subject to legal, regulatory, security or dispute-related retention |
| Technical and analytics information | Normally no longer than 24 months unless a shorter period is configured or longer retention is required for security or investigation purposes |
| Marketing records | While the marketing relationship remains active; limited suppression records may be retained after opt-out so that we can respect the user’s preference |
| Backups | Deleted through normal backup rotation following deletion from active systems |
These periods are general guidelines rather than absolute rules.
We may keep information longer where reasonably necessary to:
Where we no longer need identifiable information, we may delete or anonymise it.
You may request deletion of your account through the account settings or other deletion functionality made available through the application.
A deletion request may also be submitted through IFB’s published account-deletion page or by contacting support@ifbusiness.uk.
When you request deletion of an account, we will delete or anonymise personal information associated with that account unless we have a lawful reason to retain particular information.
For example, we may retain limited records where necessary for:
Information retained for such purposes will not continue to be used for normal account or marketing purposes.
Where personal information has been provided to processors acting on our behalf, we will take reasonable steps to ensure that applicable deletion requirements are also implemented by those processors.
Information stored in backups may remain until it is removed through the normal backup rotation process.
We use technical and organisational measures designed to protect personal information against:
Depending on the information, systems and risks involved, these measures may include:
No internet transmission, application or information-storage system can be guaranteed to be completely secure.
Users are also responsible for maintaining the confidentiality and security of their account credentials and devices.
If you believe that your account or personal information has been compromised, please contact us promptly.
The Services are intended exclusively for persons aged 18 or over.
We do not knowingly permit persons under 18 to create an account or use the Services and do not knowingly collect personal information directly from children.
If we become aware that a person under 18 has created an account or provided personal information through the Services, we will take reasonable steps to deactivate the account and delete the information unless retention is required by law.
If you believe that a person under 18 has provided personal information to us, please contact support@ifbusiness.uk.
Depending on applicable law and the circumstances of the processing, you may have the right to:
These rights are not absolute. Applicable law may allow or require us to refuse or limit a request in particular circumstances.
We may take reasonable steps to verify your identity before acting on a request.
Right to object
Where we process your personal information on the basis of legitimate interests, you may have the right to object to that processing on grounds relating to your particular situation.
You have the right to object at any time to the use of your personal information for direct marketing.
Withdrawal of consent
Where processing is based on consent, you can withdraw that consent at any time.
Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
Exercising your rights
You may exercise your rights by contacting:
support@ifbusiness.uk
or by using any data-subject request functionality that IFB makes available.
We will respond in accordance with the time limits and requirements imposed by applicable data protection law.
If you have concerns about how we use your personal information, we encourage you to contact us first so that we can investigate the matter.
Data protection complaints can be submitted to:
support@ifbusiness.uk
or by post to:
INTERNATIONAL FINTECH BUSINESS LTD
Level 18 40 Bank Street, London, England, E14 5NR
We will:
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the United Kingdom’s data protection supervisory authority.
If you are located outside the United Kingdom and another data protection authority has jurisdiction over the processing, you may also have the right to lodge a complaint with that authority.
The Services may be available to users in jurisdictions outside the United Kingdom.
Depending on:
you may have additional rights concerning your personal information.
Where applicable legislation provides rights beyond those described in this Privacy Policy, IFB will comply with those requirements to the extent they apply to our processing.
Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be limited.
Where legally required due to the scale or nature of IFB’s activities in another jurisdiction, IFB may publish a jurisdiction-specific supplement or additional privacy notice.
The Services may contain links to or integrate with third-party services.
This Privacy Policy governs processing carried out by IFB. It does not govern processing independently carried out by third parties under their own privacy policies.
For example, Google, Apple and other providers may independently process information when you use their services, devices, application stores or authentication systems.
We encourage users to review the privacy information provided by relevant third parties.
We may update this Privacy Policy from time to time, including where:
The date at the beginning of this Privacy Policy indicates when it was last updated.
Where a change materially affects how we use personal information, we may provide additional notice through the application, by email or through another appropriate communication where required.
We will not use personal information for a materially incompatible new purpose without taking the steps required by applicable law.
Questions concerning this Privacy Policy, our processing of personal information, data protection rights or data protection complaints can be sent to:
INTERNATIONAL FINTECH BUSINESS LTD
Company number: 14431830
Level 18 40 Bank Street, London, England, E14 5NR
Privacy contact: support@ifbusiness.uk
ICO registration number: ZC234903
