Legal · Privacy

Privacy Policy

Effective February 14, 2026

This Privacy Policy describes how Steelbanc Holdings, Inc. and its affiliates (“Steelbanc”, “we”, “us”) collect, use, and disclose information about individuals who visit our website, communicate with the firm, or use our products and services.

1. Information we collect

We collect information you provide to us directly when you submit an inquiry, request information, apply for a credit facility, communicate with our personnel, or use the secure client portal. This may include your name, business email address, business telephone number, employer, role, the company you represent, and information about the financing your company is seeking.

When you visit our website, we automatically collect limited technical information including IP address, browser type and version, referring page, and basic interaction events (e.g., pages viewed, forms submitted). We use a small set of essential cookies to maintain session state in the secure client portal. We do not use third-party advertising or cross-site tracking cookies.

2. How we use information

We use information about you to:

  • Respond to your inquiries and route them to the appropriate banker;
  • Evaluate, underwrite, document, and service credit facilities;
  • Provide and secure the client portal and other services;
  • Comply with applicable law, regulation, and contractual obligations;
  • Conduct internal research, portfolio monitoring, and risk management;
  • Communicate with you about your relationship with Steelbanc.

3. How we share information

We do not sell personal information. We share information about you with: our service providers and counterparties strictly as necessary to provide our services (e.g., custodial banks, audit firms, technology vendors under written confidentiality obligations); other lenders or participants where you have consented in connection with a syndicated or club facility; and governmental, regulatory, or judicial authorities where required by law or to defend our legal rights.

4. Data retention

We retain personal information for so long as we maintain an active relationship with you or your employer, and for an additional period thereafter as required by applicable law, recordkeeping obligations, statutes of limitation, or for legitimate business purposes including dispute resolution and audit. Borrower transaction records are retained for the life of the facility plus seven years.

5. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. The Steelbanc client portal is encrypted in transit using 256-bit TLS, authenticated with mandatory multi-factor authentication, and audited annually under SOC 2 Type II.

6. Your rights

Depending on where you are located, you may have rights under applicable data protection law to access, correct, delete, or obtain a copy of personal information we hold about you, and to restrict or object to certain processing. You may exercise these rights by writing to privacy@steelbanc.com. We will respond within thirty (30) days.

7. International transfers

Steelbanc is headquartered in the United States. Information we collect is processed and stored in the United States and may be transferred to other jurisdictions where our service providers operate. We rely on appropriate safeguards for such transfers as required by applicable law.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date at the top of the policy. Material changes will be communicated to existing clients in writing.

9. Contact

Questions about this Privacy Policy may be directed to privacy@steelbanc.com or to:

Steelbanc Holdings, Inc.
Attn: Privacy Officer
One Vanderbilt Avenue, 38th Floor
New York, NY 10017