Privacy Policy

Last updated: February 8, 2026

1. Introduction

Dalcott Capital (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dalcottcapital.com (the “Site”) or use our applicant portal and related services (collectively, the “Services”).

By accessing or using the Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

  • Contact information: Full name, email address, phone number, mailing address.
  • Account credentials: Email and password when you create a portal account.
  • Application data: Loan type, requested amount, collateral descriptions, financial statements, business details, and any other information submitted through loan application forms.
  • Uploaded documents: Government-issued identification, proof of income, collateral documentation, business registration documents, and other supporting files.
  • Communications: Messages and correspondence you send to us via forms, email, or other channels.

2.2 Information Collected Automatically

  • Device and browser data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps.
  • Cookies and similar technologies: Session cookies to maintain your login state and CSRF protection tokens. We do not use third-party tracking cookies for advertising purposes.
  • reCAPTCHA data: We use Google reCAPTCHA v3 to protect our forms from spam and abuse. Google may collect hardware and software information as part of this service. See Google’s Privacy Policy for details.

3. How We Use Your Information

We use the information we collect to:

  • Process and evaluate your loan applications.
  • Create and manage your portal account.
  • Communicate with you regarding your applications, account, and our services.
  • Verify your identity and the accuracy of information provided.
  • Comply with applicable legal and regulatory requirements.
  • Protect against fraud, unauthorized transactions, and other misuse of our Services.
  • Improve our website, services, and user experience.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • Service providers: Third parties who assist with hosting, email delivery, form processing, and security services (e.g., Formspree, Google reCAPTCHA).
  • Legal compliance: When required by law, regulation, legal process, or governmental request.
  • Protection of rights: To enforce our Terms of Service, protect our rights or safety, or investigate potential violations.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

  • Encrypted passwords using industry-standard hashing (bcrypt).
  • CSRF token protection on all forms.
  • Uploaded documents stored outside publicly accessible directories.
  • Server-side MIME type validation on all file uploads.
  • Rate-limited login attempts to prevent brute-force attacks.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Application data and uploaded documents are retained for the duration required by applicable lending regulations.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information, subject to legal retention requirements.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at info@dalcottcapital.com.

8. Canadian Privacy Law (PIPEDA)

If you are a resident of Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access your personal information held by us and to challenge its accuracy. Requests should be directed to the contact information below.

9. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

10. Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when this policy was most recently revised. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: