LEGAL
Privacy Notice
2.1 Who we are
Fundrly Ltd is the data controller responsible for personal information collected through the Fundrly website and in connection with enquiries about our services.
We process personal data in accordance with applicable UK data protection legislation, including the UK GDPR and the UK Data Protection Act 2018.
2.2 Information we collect
Depending on your interaction with Fundrly, we may collect:
Name, job title and business contact details.
Company name, location, sector and website.
Information about business development stage, objectives and proposed fundraising activity.
Information provided through enquiry forms, emails or other communications.
Technical information necessary to operate and secure the website.
If you subsequently engage Fundrly, we may collect additional information relevant to the diagnostic, subject to the agreed engagement arrangements. We ask clients not to send us personal data about their own customers or employees beyond what the assessment requires; aggregated information is usually sufficient.
2.3 How we use your information
We use personal information to:
Respond to enquiries and communicate with prospective clients.
Evaluate whether our diagnostic services are appropriate for a business.
Prepare proposals and administer prospective or existing engagements.
Provide contracted services.
Maintain business records and meet legal obligations.
Protect the security and integrity of our systems.
Send relevant updates where permitted by applicable marketing and data protection laws.
Develop and improve our assessment methodology, criteria, benchmarks and tools. For this purpose we anonymise information from engagements so that it no longer identifies any company or individual before we use it; anonymised information is not personal data.
2.4 Lawful bases for processing
Depending on the circumstances, we rely on:
Contractual necessity: Where processing is required to take steps requested by an individual before entering into a contract or to perform a contract with that individual.
Legitimate interests: To manage business enquiries, communicate with business contacts, administer our services, anonymise engagement information to improve our methodology, and protect our legitimate commercial interests, provided these interests are not overridden by individuals' rights.
Legal obligations: Where processing is necessary to comply with applicable law.
Consent: Where we request consent for a specific purpose, including optional marketing communications where consent is the applicable basis.
Consent may be withdrawn at any time.
2.5 Marketing communications
We may offer visitors the opportunity to subscribe to Fundrly updates.
Subscription is optional and is not a condition of submitting an enquiry.
We will comply with applicable electronic marketing requirements and provide a straightforward method of unsubscribing from marketing communications. Our updates are about investment readiness and business preparation; they do not promote any investment or any company we have assessed.
2.6 Sharing information
We may share personal information with service providers supporting our website, email, enquiry management and business administration, being providers of web hosting, email, enquiry forms, customer relationship management, document storage and accounting services.
Such providers will be subject to appropriate contractual and security arrangements where required.
We do not sell personal information. We may disclose personal information where required by law, a court or a regulator.
2.7 International transfers
Where personal information is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place as required by applicable data protection law, such as the UK–US data bridge for certified providers, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
2.8 Data retention
We retain personal information only for as long as necessary for the purpose for which it was collected, including applicable contractual, regulatory and legal requirements.
Our retention periods are:
Unsuccessful or inactive enquiries: 12 months after the last substantive contact.
Client engagement records: six years following completion, subject to relevant legal requirements.
Marketing information: until withdrawal of consent or another applicable reason for deletion.
Anonymised information derived from engagements: retained indefinitely, as it is not personal data.
2.9 Your rights
Subject to applicable law, individuals may have rights to:
Access their personal information.
Request correction of inaccurate information.
Request erasure of personal information.
Restrict or object to certain processing.
Request data portability where applicable.
Withdraw consent where processing relies on consent.
Requests may be directed to contact@fundrly.com, and we will respond within one month.
Individuals also have the right to lodge a complaint with the Information Commissioner's Office at www.ico.org.uk.
2.10 Security
Fundrly takes appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
2.11 Automated processing
Information supplied through our enquiry process may be categorised to help determine the appropriate response. We may use software, including AI-assisted tools, to help prepare and check assessments; every assessment is reviewed and finalised by a person.
Fundrly does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
2.12 Changes
We may update this Privacy Notice to reflect changes in legal requirements, technology or our business operations. The latest version will be available on this website.