Privacy

The controller of your data is Qashflo, a brand of the BIGhub ecosystem. You can contact us about any privacy question at contact@qashflo.eu.

We only collect the data we need:

• Financing form: name, company, tax ID, country, email, phone, origin of the request (for example, the Qashflo website), language, and the date and time of consent.
• Contact form: name, email, company, phone (optional) and the message you send us.
• Minimal technical data: IP address and browser data, processed for security and abuse prevention (for example, limiting repeated requests).

• Reply to your contact requests — consent or pre-contractual steps at your request.
• Handle your financing request: contact you, explain the process and send the YouLend link — pre-contractual steps at your request.
• Record the contact and follow up in our contact management system (CRM) — legitimate interest in organising commercial follow-up.
• Keep the website secure and prevent abuse — legitimate interest.
• Comply with legal obligations, where applicable.

Your financing request is followed up by people on our team; we do not make automated decisions about you.

Qashflo does not grant financing. After speaking with you, our team sends you the link to submit the application directly to YouLend. The data you enter on the YouLend site is processed by YouLend under its own privacy policy. If your request data has to be shared with YouLend, we will tell you beforehand.

We share data only with providers that help us run the service and with partners needed for your request:

• ActiveCampaign — contact management tool (CRM) where we record requests (processor).
• Hosting and email-delivery providers — to host the website and send contact-form messages (processors).
• YouLend and Modulr Finance B.V. — partners that provide the financing and the account and card infrastructure respectively, each responsible for the data you give them directly.
• BIGhub — the ecosystem Qashflo belongs to, for following up your request.

We do not sell your data.

Some providers (for example, ActiveCampaign) may process data outside the EEA. In those cases we require appropriate safeguards, such as the standard contractual clauses approved by the European Commission.

• Contact and financing requests that do not go ahead: up to 24 months after the last contact.
• Requests that become a contract: during the contractual relationship and then for the applicable legal periods.
• Consents: for as long as needed to demonstrate their validity.

When the period ends, we delete or anonymise the data.

You have the right of access, rectification, erasure, restriction of processing, portability and objection, and you may withdraw consent at any time (without affecting processing already carried out). To exercise your rights, write to contact@qashflo.eu. You also have the right to lodge a complaint with the supervisory authority of your country; in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

We apply appropriate technical and organisational measures to protect the data: encrypted connection (HTTPS), access limited to those who need it, protection against abuse and secure storage of system credentials.

This website currently does not use analytics or marketing cookies. To display the typeface, the website loads it from Google Fonts, which means your browser sends your IP address to Google’s servers. If we start using non-essential cookies, we will update this policy and ask for your consent.

We may update this policy. The date of the last update appears at the top of this page.