Privacy Policy

1. Who we are

Westford Capital Group ("Westford", "we", "us") is a project and capital financing company headquartered in Asheville, North Carolina. This policy explains how we handle personal information.

2. Information we collect

Contact details you submit (name, email, phone, company); project information (location, sector, amount, term, description); documents you choose to upload; and technical data such as browser type and pages visited.

We do not intentionally collect sensitive personal data. Identity documents are collected only for KYC and anti-money-laundering checks.

3. How we use information

To review funding proposals, respond to enquiries, perform know-your-customer and anti-money-laundering checks, improve our services, and comply with legal obligations.

4. Legal bases

Where applicable law requires a legal basis, we rely on your consent, steps taken at your request before entering a contract, our legitimate interests, and compliance with legal obligations.

5. Sharing

We may share information with syndicate partners, professional advisers, service providers and regulators where necessary. We do not sell personal information.

6. International transfers

As a global financier, information may be transferred across borders with appropriate safeguards such as standard contractual clauses.

7. Retention

Application data is retained for up to seven years after a relationship ends, or less where no relationship is formed, unless law requires otherwise.

8. Security

We apply administrative, technical and physical safeguards. Documents are encrypted in transit and access is restricted to authorised staff.

9. Your rights

Depending on your jurisdiction you may request access, correction, deletion, restriction or portability of your data, and may withdraw consent at any time by contacting us.

10. Cookies and analytics

This site uses essential cookies and browser local storage to remember your cookie choice, language and display currency, and to keep a copy of submitted applications on your device. No advertising cookies are used.

Analytics are optional and off by default. Only where analytics are enabled for this site and you choose "Accept all" do we load Plausible Analytics, a cookieless, privacy-focused service that counts page views without collecting personal data. Where Google Analytics or Google Tag Manager has been configured for this site, those Google services are likewise loaded only after you choose "Accept all" and may set cookies to measure site usage. If you choose essential only, no analytics script is loaded.

11. Client portal and email

The client portal lets you follow your application, exchange messages with your deal team and upload documents. Access uses a one-time sign-in link sent to the email address on your application; session cookies keep you signed in and expire automatically.

Transactional emails (application receipts, portal sign-in links and status updates) are delivered through Resend, our email delivery provider, which processes your name, email address and message content solely to deliver those emails. We do not use these emails for marketing.

12. Documents you upload

Files you add to the portal document vault are stored encrypted at rest with our database provider, are visible only to you and your deal team, and can be deleted by you at any time.

13. Changes

We may update this policy and will post the revised version with a new effective date.