Privacy Policy

1. Introduction

Grant Bridge UK ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grant matching platform and services.

By using Grant Bridge UK, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information

• Name and contact information (email, phone number)
• Business information (company name, address, postcode)
• Financial information (annual turnover, employee count)
• Business profile data (industry sector, challenges, growth areas)
• Payment information (processed securely through Stripe)

Usage Data

• Log files and usage patterns
• Device information and IP addresses
• Cookies and similar tracking technologies
• Grant preferences and search history

3. How We Use Your Information

• Provide and maintain our grant matching services
• Personalise grant recommendations using AI technology
• Process payments and manage subscriptions
• Send important service updates and notifications
• Improve our platform and develop new features
• Comply with legal obligations and prevent fraud

4. Legal Basis for Processing (UK GDPR)

We process your personal data based on:

• Contract: To provide our services and fulfill our agreement with you
• Legitimate Interest: To improve our services and prevent fraud
• Consent: For marketing communications (with your explicit consent)
• Legal Obligation: To comply with UK laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Stripe for payments, Supabase for data hosting
• AI Services: OpenAI for grant matching (data anonymized where possible)
• Website Visitor Identification: Instantly (leadsy.ai) for identifying organisations visiting our site, where you have consented to marketing cookies
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale

We do not sell your personal data to third parties.

6. Website Visitor Identification

We use a website visitor identification service provided by Instantly (delivered from leadsy.ai). Where it is enabled, this service attempts to identify the organisation and, where possible, individuals visiting our site from otherwise anonymous traffic. It does this by matching your IP address and related technical signals against third-party B2B contact databases, and enriching that match with business contact details.

We may use the information produced by this service to inform our sales and marketing outreach, including cold email to organisations that appear to be a fit for our platform.

This service only runs if you have consented to marketing cookies through our cookie banner. If you reject marketing cookies, or you have not made a choice, the script is never loaded and no identification takes place.

To opt out, reject or withdraw marketing consent at any time using our cookie preferences. You can also read Instantly's privacy information at instantly.ai/privacy-policy, or contact us through our contact form and select "Privacy & Legal" to request removal of any data held about you.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure hosting, and regular security assessments. However, no method of transmission over the internet is 100% secure.

8. Your Rights (UK GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, please use our contact form and select "Privacy & Legal" as your inquiry type.

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, typically for the duration of your account plus 7 years for financial records as required by UK law.

10. International Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses.

11. Contact Information

For privacy-related questions or to exercise your rights, please use our contact form and select "Privacy & Legal" as your inquiry type. All privacy requests are reviewed and responded to promptly by our team.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.