Privacy Policy

This is personal information about you that you give to us when:

• submitting personal information via our Site
• following us, interacting with us and posting on our social media pages including our official pages on Facebook, Instagram, Twitter and LinkedIn and other social media platforms
• participating in surveys for research purposes
• you visit our offices
• we interact with you at events
• corresponding with us by phone, email or in another way.

This information is provided by you entirely voluntarily.

This includes information provided on the Site at the time of registering as a member, posting details of projects, using any of the communication tools we provide for our members, pledging funds to a project on the Site or cancelling a pledge and when generally using our Site. For example you may give us your personal information by filling in forms, uploading profile information and other content to the Site, managing your account online,  engaging in correspondence with us by phone, email or otherwise and meeting with us at events (e.g. you may provide us with your business card). We may also ask you for information and copies of identity documents when you wish to apply for partner funding, when you report a problem with our Site or when you exercise your legal rights.

If we do not receive this information, you may be unable to register with the Site, list projects or raise funds, pledge funds to projects, communicate with other members or communicate with us effectively or allow us to comply with our own obligations.

Information that we collect about you

We may automatically collect the following information:

• details of your visits to our Site, including, but not limited to traffic data, location data, weblogs and other communication data, and the resources you access;
• technical information, including anonymous data collected by the hosting server for statistical purposes, the Internet protocol (IP) address used to connect your computer or device to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. Please see our Cookies Policy for further information; and
• details regarding when and how you consented to receive marketing communications from us (including the time and date you provided your consent).

We may also view any personal information which you allow to be shared, such as the information you upload to the Site (such as your Crowdfunder profile), and information you share on third party social networks.

When you visit our social media pages we collect:

• the information you post on those pages;
• information regarding your interactions with the content we post; and
• statistical information regarding all our followers’ activities (but from which we cannot identify you as we only have access to this information in aggregated form).

Personal information we may receive from other sources

We may obtain certain personal information about you from other sources (including those outside of our business) which may include our suppliers and our clients. The third parties that may send us personal information about you are as follows:

Other members

Members of the Site may share personal information about you with us, for example, if you misuse the Site or breach our Guidelines.

Our partners

We may receive your personal information from our partners if you have indicated to them that you would like us to contact you about funding opportunities or about a particular funding programme. We will only use this personal information for the purposes of email marketing if our partners have obtained your prior consent for us to do so.

Third party applications

We may receive your personal information from third party applications with which we have integrated such as Strava. We will only collect the data stated and will only use this data for the purposes stated at the point of your consent. 

Governmental and other public authorities

We may receive your personal information from the police, HMRC and other public authorities, for example, in connection with their investigations. We may also receive your personal information indirectly from such authorities e.g. from a third party sharing information originating from a court, or otherwise relating to legal or regulatory proceedings.

Social media networks (publicly available source)

We may view your social media profile registration data where you choose to register with our Site using your existing social media profile and log-in details.

We process different types of personal information about you. To make it easier to understand the information that we use about you, we have categorised this information in the table below and provided a short explanation of the type of information each category covers.

We process the following categories of personal information about you:

Behavioural

Your activities, actions and behaviours

Biographical

Your life experiences

Contact

Information which can be used to address, send or otherwise communicate a message to you

Banking/Billing

Information used to send/receive funds to/from you

Fraud

Information relating to the occurrence, investigation or prevention of fraud

Identity

Information that verifies your identity including formal identification documents or unique identification numbers linked to you

Legal

Information relating to legal claims made by you or against you or the claims process

Fundraising

Information relating to your pledges and fundraising, including information relating to your account with our loyalty partners

Marketing Preferences

Your preferences in respect of any marketing communications form us from time to time in relation to products or services which we believe may be of interest to you

Correspondence

Information contained in our correspondence or other communications with you about projects and other activities on our Site, our services or our business

Sensitive data

We do not knowingly collect personal information about children or personal information that is ‘sensitive’ personal data from a legal perspective (also known as ‘special category data’) or that relates to criminal convictions or offences.

We use your personal information for a variety of reasons. We rely on different legal grounds to process your personal information, depending on the purposes of our use and the risks to your privacy. You will only receive unsolicited marketing communications from us if you have consented and can opt-out of receiving them at any time. We do not share your personal information with companies that would send their marketing to you.

We use your personal information in the following ways:

4.1 Where you have provided CONSENT

We may use and process your personal information for the following purposes where you have consented for us to do so (whether by giving that consent to us directly or indirectly, for example to one of our partners):

• to contact you via email with marketing information about our projects, funding opportunities and business (see 'Marketing' for further details); and
• to use any personal data we access through the use of cookies (see our Cookie Policy for further details).

You may withdraw your consent for us to use your information in any of these ways at any time. Please see 'Your rights over your personal information' for further details.

4.2 Where necessary for us to carry out PRE-CONTRACT STEPS you have requested or for the performance of our CONTRACT

We will use your personal information where this is necessary for us to perform our contract with you or to carry out any pre-contract steps you’ve asked us to so that you can enter into that contract, for the following purposes:

• to register and set you up as a member on our Site;
• to publish details of your pledges (unless you choose to pledge anonymously), your projects and the rewards you wish to offer;
  
• to process your pledges and share your details with our payment processors so that payments can be made from you;
  
• to set up your recurring pledges;
  
• to display your data on your projects from third party software with which we have integrated, such as Strava, where you have requested this;
  
• to share your personal information with our funding partners to obtain funding for your projects;
  
• to share your personal information with our loyalty partners to allow you to make pledges using loyalty points that you have with them;
  
• to run our competitions and promotions that you enter from time to time and to distribute prizes.
  

4.3 Where necessary to comply with our LEGAL OBLIGATIONS

We will use your personal information to comply with our legal obligations:

• to keep a record relating to the exercise of any of your rights relating to our processing of your personal information;
• to perform anti-money laundering and related checks where the law requires these;
  
• to anonymise, pseudonymise and destroy your personal information in accordance with our retention policies and data protection law;
  
• to handle and resolve any complaints we receive relating to the services we provide.
  

4.4 Where necessary for us to pursue a LEGITIMATE INTEREST

We may use and process your personal information where it is necessary for us to pursue our legitimate interests as a business for the following purposes:

Processing necessary for us to promote our business, brand and activities and measure the reach and effectiveness of our campaigns

• for analysis and insight conducted to inform our marketing strategies, and to enhance and your visitor experience;
• to tailor and personalise our marketing communications based on your attributes;
  
• to supply your details to social media and other online platforms operated by other companies for them to contact you with our targeted advertising online, unless you object. You may receive advertising based on information about you that we have provided to the platform or because, at our request, the platform has identified you as having similar attributes to the individuals whose details it has received from us. To find out more, please see further ‘Our use of social media’;
  
• to identify and record when you have received, opened or engaged with our website or electronic communications (please see our Cookie Policy for more information);
  
• to send you emails about your projects or your pledges;
  
• to supply your details to a project owner where you have made a pledge to their project;
  
• to supply your details to our programme partners where you have set up or pledged on a fundraiser for that programme partner. Please see Section 5 for more details;
  
• if you chose to claim gift aid on your pledge, to provide information to donations management organisations and project owners to enable your gift aid claim to be filed. Please see “Donations Management Organisations” in Section 5 for more details.
  

Processing necessary for us to support our members with their enquiries

• to respond to correspondence you send to us and fulfil the requests you make to us.

Processing necessary for us to respond to changing market conditions and the needs of our guests and visitors

• to analyse, evaluate and improve our Site and other services so that your visit and use of our Site, fundraising support and other services and social media pages, are more useful and enjoyable (we will generally use data amalgamated from many people so that it does not identify you personally);
• to undertake market analysis and research (including contacting you with surveys) so that we can better understand you as a guest;
• for the purposes of developing new initiatives and features on our Site (for example new types of fundraising options or support.

Processing necessary for us to operate the administrative and technical aspects of our business efficiently and effectively

• to administer our Site and our social media pages and for internal operations, including troubleshooting, testing, statistical purposes;
• to evaluate whether your project should receive funding from our funding partners, including by sharing your personal information with the relevant funding partner(s);
• for the prevention or detection of fraud and other criminal activities or to assist in the apprehension of offenders, including by sharing your personal information with the relevant partner(s);
• to verify the accuracy of data that we hold about you and create a better understanding of you as an account holder or visitor;
• for network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access, including to archive, destroy, pseudonymise or anonymise your personal information;
• to comply with a request from you in connection with the exercise of your rights (for example where you have asked us not to contact you for marketing purposes, we will keep a record of this on our suppression lists in order to be able to comply with your request);
• for the purposes of corporate restructure or reorganisation or sale of our business or assets;
• for efficiency, accuracy or other improvements of our databases and systems, for example, by combining systems or consolidating records we hold about you;
• to enforce or protect our contractual or other legal rights or to bring or defend legal proceedings;
• to inform you of updates to our terms and conditions and policies; and
• for other general administration including managing your queries, complaints, or claims, and to send service messages to you.

Marketing communications: If you give your consent, we may use your personal information to contact you by email to send you newsletters or to notify you with details of projects, services and competitions. We try to adapt any marketing material that we send to you, for example by notifying you of projects that apply to your interests and in your location. If you do not wish to receive email communications from us, please inform us by using the unsubscribe link inside the email messages we send, by using our comments form or, if you have a registered account on our Site, by changing your Profile settings from within your account.

We provide tools that allow project owners to send backers news and updates on their projects. However, we do not permit project owners to send fundraising requests or any other type of marketing communications using these tools. Project owners can access contact details for the backers relating to their projects. Any communications they send using these details will be sent solely based on their decisions and for which they will be acting as the controller of your personal information. Please see the Introduction to this policy above.

If you opt-out of receiving marketing communications from us, we keep your email address on our suppression list for a defined period to ensure that we comply with your wishes. Please see further 'The periods for which we retain your personal information.'

We only disclose and share your personal information outside our business in limited circumstances. If we do, we will put in place a contract that requires recipients to protect your personal information, unless we are legally required to share that information. Any suppliers that work for us will be obliged to follow our instructions. We do not sell your personal information to third parties.

As the controller of your personal information, we decide why and how it is processed. Our responsibility for that processing extends to processing by our service providers if they process your personal information based on our instructions.  We also work with other, more independent, organisations in connection with some of the processing activities described in this statement, such as our partners, social media platforms and certain suppliers, such as the payment service providers we work with.

Where that personal information is collected and sent to other organisations for a processing purpose that is in both our and their interests or where we make decisions together in relation to that particular processing, we will be “joint controllers” with the organisations involved.  Where this applies, we and the other organisation will be jointly responsible to you under data protection laws for this processing.  If, however, we pass your personal information to an organisation that independently decides why and how to use your personal information then it will be separately responsible to you for that processing and use your personal information in the ways described in its privacy policy (and not ours).

We may disclose your information to the following:

Our partners

• our funding partners with whom we work to make further sources of funding available to project owners,
• our programme partners with whom we work on broader fundraising programmes. Any information received about a backer or project owner in respect of a particular Project (as described in this policy) will also be received by the programme partner associated with that Project where it falls within their programme;
• our loyalty partners with whom we work to allow you to pledge using loyalty points you have with them. 
  

Our partners include private sector organisations such as banks, retailers, media companies and also organisations in the public and third sector such as local councils and charities respectively.

We also administer and promote competitions with some of our partners from time to time. When we do so we and the relevant partner may make joint decisions regarding how we use your personal information in connection with those competitions and will provide a further notice to you explaining the relationship between us.

• donations management organisations in relation to projects raising funds for charitable causes. We may, for example, share your information and details about your donation with Swift aid or The Charities Trust when you choose to Claim Gift Aid on a donation you are making.
• If the project to which you pledge is using Swiftaid to process gift aid claims (which is stated on the donation page), the following also applies: If you claim Gift Aid on your pledge, an account profile will be created with Swiftaid for you and you may receive service emails from them. Swiftaid is a third party and uses your personal data in accordance with its own privacy policy and donor terms. To edit your account details or close your account, you will need to contact Swiftaid directly.
• if you make a pledge to a project we will share details of your pledge and the information you have provided such as name and email address) with the project owner and (if applicable) programme partner -for them to administer your pledge and gift aid (if applicable), and to contact you in connection with your pledge, gift aid or the their project in accordance with our Terms
• backers to allow them to identify the project owners responsible for the projects to which they pledge, in accordance with our Terms;
  
• social media platforms to communicate with you and to promote products and services. See further our list of suppliers below and also ‘Our use of social media’;
• our third party service providers, agents and subcontractors (Suppliers) for the purposes of providing services to us or directly to you on our behalf, including the operation and maintenance of our Site and social media pages.

Our Suppliers can be categorised as follows:

Accountants and legal and security advisers and consultants

Professional Services (Accountancy, Security & Legal)

Advertising, PR, digital and creative agencies

Media (Advertising & PR)

Banks, payment processors and financial services providers

Finance (Banking & Payment Processing)

Business intelligence and performance services

IT (Business Performance)

Cloud software system providers, including database, email and document management/monitoring providers

IT (Cloud Services)

Customer support services tool

Customer Services (Support)

Customer relationship management services

IT (Customer Relationship Management)

Delivery and mailing services providers

Logistics (Delivery Service)

Event booking service provider

Events (Booking)

Facilities and technology service providers including scanning and data destruction providers

IT (Data Management)

Fraud and identity verification services

IT (Verification)

Tax administration

Government (Tax Administration)

Health and safety claims administrators and consultants

Health & Safety (Claims)

Insurers and insurance brokers

Insurance (Underwriting & Broking)

Market and customer research providers

Media (Market Research)

Online survey platforms and services

IT (Survey)

Social media platforms

Media (Social Media)

Team and remote collaboration tools and services

IT (Collaboration)

Website and data analytics platform providers, and website performance tools

IT (Data Analytics)

Website and App developers

IT (Software Development)

Website marketing, search and integration services

IT (Software Development and Marketing)

Website hosting services providers

IT (Hosting)

File and data transfer providers

IT (Cloud)

The Suppliers above are located in the United Kingdom, European Economic Area or the USA.

When we use Suppliers, we only disclose to them any personal information that is necessary for them to provide their services and only where we have a contract in place that requires them to keep your information safe and secure.

You may be required to create an account with certain Suppliers to use their services, for example, with the payment service providers we work such as Stripe and Mangopay.  These Suppliers will process your personal information in the ways described in their privacy policies (not ours) so please use the links to access and read their privacy policies.

We may disclose the personal information to other third parties as follows:

• any third party who is restructuring, selling or acquiring some or all of our business or assets or otherwise in the event of a merger, re-organisation or similar event; and
• if we are under a duty to disclose or share your information in order to comply with any legal or regulatory obligation or request, including by the police, courts, tribunals, regulators or similar authorities or if we voluntarily decide to cooperate with such authorities.

We use social media platforms in a variety of different ways, including by publishing pages through which you can interact, running competitions or advertising to you using information you have provided those platforms or which has been provided by us or collected from this Site.  Our legal relationship with each platform varies with the particular way we use that platform.

We process your personal information using social media platforms in a variety of ways, as follows:

Pages. We use your personal information when you post content or otherwise interact with us on our official pages Facebook, Instagram, Twitter, LinkedIn and other social media platforms. We also use the Page Insights service for Facebook, Instagram and LinkedIn to view statistical information and reports regarding your interactions with the pages we administer on those platforms and their content.  Where those interactions are recorded and form part of the information we access through the Page Insights services, we and the relevant platform are joint controllers of the processing necessary to provide that service to us.

Single sign-on. Our Site incorporates a feature provided by social media and other digital service providers that allows you to log into your account on this Site using the same login you have already set up with those providers. This feature is known as a ‘single sign-on service’.  Any use we make of the personal information we receive from the platform using this feature is processing for which we are the sole controller.

Data from your profile. When you use single sign-on services, you will be prompted to confirm that you are happy to share with us your email address and certain other personal information you hold with those providers.  You may be asked if you would like to share information with us that goes beyond what is needed to log you into your account on our Site. For example, you may be asked if you would like us to use your contact details or date of birth for direct marketing purposes. We will only use your personal information in this way if you agree.

Targeted advertising. We use social media platforms (as well as search engines and third party websites and other platforms) to deliver targeted advertising to you via those platforms, unless you object.  You may receive advertising because you have previously interacted with us (such as by visiting one of our Sites) or because of your profile on a social media platform on which you have an account. You can find our more by consulting the help pages of the relevant social media platform but in summary we use social media platforms to send targeted advertising using two main methods:

• ‘Custom audience’ targeting.  You may receive advertising based on information about you that we have provided to the platform or allowed it to collect using cookies/pixels or code embedded in our Site (or a combination of the two).  For example, we may target you if you have signed up to our mailing list and where cookies have detected that you have visited our Site in the last month.  Please see the paragraph below regarding our use of cookies to send targeted advertising using social media.
• ‘Lookalike audience’ targeting.You may also receive advertising because, at our request,  the social media platform has identified you as falling within a group or ‘audience’ whose attributes we have selected, or a group that has similar attributes to you (or a combination of the two).

Cookies.We use cookies and similar technologies in this Site to collect and send information to Facebook (who operates the Facebook and Instagram platforms) and LinkedIn about actions you take on this Site. In particular, Facebook (who operates the Facebook and Instagram platforms) uses this information to provide services to us and also for further processing for its own business purposes.  We and Facebook are joint controllers of the processing involved in collecting and sending your personal information to Facebook using cookies and similar technologies as each of us has a business interest in Facebook receiving this information.   You can find out more about these technologies by visiting our Cookie Policy.  The services we receive from Facebook that use this information are delivered to us through Facebook’s Business Tools, which include Facebook Login (Facebook’s single sign-on service, see above), Facebook Pixel and Website Custom Audiences (which includes ‘lookalike audience’ targeting).  The data from these tools allows us to target advertising to you within Facebook’s social media platform by creating audiences based on your actions on our website and applications. They also allow Facebook to improve and optimise the targeting and delivery of our advertising campaigns for us.  Please see the paragraph above for further information.

We use LinkedIn Insight Tag, a small piece of code that we embed in this Site that allows us to perform in-depth campaign reporting and unlock insights about users that may visit this Site via our LinkedIn campaigns (e.g. by allowing us to discover business demographics by layering LinkedIn data on data about our Site’s visitors).  LinkedIn Insight Tag enables the collection of metadata such as IP addresses, timestamps, and events such as page views.  You can find out more about these technologies by visiting our Cookie Policy.

Our relationship with social media platforms. As we are joint controllers/controllers with these platforms for certain processing, we and each platform have taken some or all of the following steps, depending on the platform:

• entered into agreements in which we have agreed each of our data protection responsibilities for the processing of your personal information described above;
• agreed that we are responsible for providing to you the information in this privacy statement about our relationship with each platform; and
• agreed that each platform is responsible for responding to you when you exercise your rights under data protection law in relation to that platform’s processing of your personal information as a joint controller.

Facebook, LinkedIn and Twitter also process, as our processors, personal information that we submit for the purposes of matching, online targeting, measurement, reporting and analytics purposes.  These services include the processing these platforms carry out when they display our advertisements to you in your social media feed at our request after matching contact details for you that we have uploaded to them.  These advertisements may include forms through which we collect contact information you give to us.

Further information.The Facebook company that is a joint controller of your personal information is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The LinkedIn company that is a joint controller of your personal information is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.   The Twitter company that is a controller of your personal information is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland.  For further information regarding these platforms and their use of your personal information, please see:

• Facebook’s Controller Addendum for Page Insights and Controller Addendum for Business Tools and LinkedIn’s Page Insights Joint Controller Addendum which include information regarding how our and those platforms’ responsibilities to you are allocated as controllers of your personal information;
• Facebook's Data Policy, LinkedIn’s Privacy Policy and Twitter Privacy Policy which include details of the legal reasons (known as ‘lawful bases’) on which each platform relies to process your personal information, together with details regarding your data protection rights; and
• Facebook’s help pages regarding its Page Insights and Business Tools and its terms and conditions relating to those tools.
• LinkedIn’s help pages regarding its Page Insights and its terms and conditions relating to its advertising services, including LinkedIn Insight Tag.
• Twitter’s GDPR FAQ regarding its role and relationship with us.

All the personal information collected about you by us or on our behalf may be transferred to countries outside the United Kingdom (UK) European Economic Area (EEA). By way of example, this may happen where any of our suppliers are located in a country outside of the UK and EEA or if any of our servers or those of our third party service providers are from time to time located in a country outside of the EEA. These countries may not have similar data protection laws to the UK and so they may not protect the use of your personal information to the same extent.

If we transfer your information outside of the UK and EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. These steps include imposing contractual obligations on the recipients of your personal information or ensuring that the recipients are subscribed to ‘international frameworks’ that aim to ensure adequate protection.   Please contact us using the details at the end of this policy for more information about the protections that we put in place.

If you use our services whilst you are outside the UK and EEA, your information may be transferred outside the UK and EEA in order to provide you with those services.

We take the security of your personal information seriously and use a variety of measures based on good industry practice to keep it secure. Nonetheless, transmissions over the internet and to our Site may not be completely secure, so please exercise caution. When accessing links to other websites, their privacy policies, not ours, will apply to your personal information.

We employ security measures to protect the personal information you provide to us, to prevent access by unauthorised persons and unlawful processing, accidental loss, destruction and damage. When we have provided (or you have chosen) a password or pin allowing you access to certain parts of the Site, you are responsible for safeguarding it and keeping it confidential and you promise not to allow it to be used by third parties. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do everything possible to protect your personal information, we cannot guarantee the security of any personal information during its transmission to us online. You accept the inherent security implications of using the internet and will not hold us responsible for any breach of security unless we are at fault.

Our Site and social media pages may contain links to other websites run by other organisations which we do not control. This policy does not apply to those other websites‚ so we encourage you to read their privacy policies. We are not responsible for the privacy policies and practices of other websites (even if you access them using links that we provide) and we provide links to those websites solely for your information and convenience. We specifically disclaim responsibility for their content, privacy practices and terms of use, and we make no endorsements, representations or promises about their accuracy, content or thoroughness. Your disclosure of personal information to third party websites is at your own risk.

In addition, if you linked to our Site from a third party website, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party website and recommend that you check the policy of that third party website.

We will not hold your personal information in an identifiable format for any longer than is necessary for the purposes for which we collected it. For certain purposes we retain your personal information for a very short period whilst for others we retain it for a period of 7 years after the information is no longer required for business reasons so that we can deal with any legal proceedings that could arise.

We retain your personal information for the following periods:

• Registration information - 7 years from the date your account is closed for any reason.
• Information (other than registration information) relating to projects/project owners including pledged amounts - For unsuccessful projects, 7 years from the date your account is closed for any reason. For successful projects, indefinitely (but please see exceptions below).
• Information relating to backers (other than registration information) including pledge history - 7 years from the date your account is closed for any reason.
• Identity documents - If we require these for financial or fraud verification purposes, 7 years. If we require these to share with our payment processors for client verification purposes, 6 months. If we require these to verify your identity for a request by you in connection with your rights over your personal information (see below), 2 years.
• Web traffic and device information - 26 months from the date of collection.
• Social media handles - Until you stop following our social media account or page.
• Marketing preferences - For as long as you have not opted-out and if you opt-out, indefinitely after we place you on our suppression list to ensure we respect your wishes.
• Complaints and queries - 2 years, except where these relate to legal claims, in which case 7 years.

The only exceptions to the periods mentioned above are where:

• you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law (see further 'Your rights in relation to your personal information');
• you exercise your right to require us to retain your personal information for a period longer than our stated retention period (see further Your rights in relation to your personal information);
• we bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible;
• we archive the information, in which case we will delete it in accordance with our deletion cycle; or
• in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

You have a number of rights in relation to your personal information under data protection law. In relation to certain rights, we may ask you for information to verify your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within 30 days after we have received this information or, where no such information is required, after we have received full details of your request.  You have the following rights, some of which may only apply in certain circumstances:

10.1. To be informed about the processing of your personal information (this is what this policy sets out to do)

10.2. To have your personal information corrected if it is inaccurate and to have incomplete personal information completed

The accuracy of your information is important to us and we make it easy for you to review and correct the personal information that we hold about you in your Profile. If you change your name or address/email address, or you discover that any of the other information we hold is inaccurate or out of date, you can let us know by contacting us in any of the details described at the end of this policy but we ask you to first check that you cannot correct your details using the tools in your Profile.

When downloading a list of backers on their project, project owners will see the address details of those members who pledged on their project. Please note that if you change your address after the project owner has downloaded this data (this usually happens once their project is successful) the details the project owner may become out of date, until the project owner downloads a new list of data - so we would recommend also contacting the project owner to inform them of a change to your contact details.

10.3. To object to processing of your personal information

Where we rely on our legitimate interests as the legal basis for processing your personal information for particular purposes, you may object to us using your personal information for these purposes by emailing or writing to us at the address at the end of this policy. Except for the purposes for which we are sure we can continue to process your personal information, we will temporarily stop processing your personal information in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise we will provide you with our justification as to why we need to continue using your data.

However we strive to provide you with choices regarding certain personal data uses, you can therefore ask us to stop sending you project updates at any time by following the opt out links on any project updates sent to you or by updating your preferences in your profile.

You may object to us using your personal information for direct marketing purposes and we will automatically comply with your request. If you would like to do so, pleasefollow the opt out links on any marketing email sent to you or by updating your preferences in your profile.

10.4. To withdraw your consent to processing your personal information

Where we rely on your consent as the legal basis for processing your personal information, you may withdraw your consent at any time by contacting us using the details at the end of this policy. If you would like to withdraw your consent to receiving any direct marketing to which you previously opted-in, you can also do so using our unsubscribe tool.

You can also opt out of receiving our newsletter at any time by editing your Profile settings (login, click your name at the top right of the website then choose Profile settings).

You can choose to receive or opt-out of future marketing from Projects you have pledged on.

The project owner will be responsible for handling your information after they receive it from us. The project owner, when downloading a list of backers on their project will see who has elected to receive marketing from them.

Please note that our standard receipt emails and notifications or a Project closing successfully or unsuccessfully contain important financial information regarding your pledge and so cannot be turned off.

If you withdraw your consent, our use of your personal information before you withdraw is still lawful.

10.5. To restrict processing of your personal information

You may ask us to restrict the processing your personal information in the following situations:

- where you believe it is unlawful for us to do so; or

- you have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings.

In these situations, we may only process your personal information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.

10.6. To have your personal information erased

In certain circumstances, you may ask for your personal information to be removed from our systems by emailing or writing to us at the address at the end of this policy. Unless there is a reason that the law allows us to use your personal information for longer, we will make reasonable efforts to comply with your request.

10.7. To request access to your personal information and information about how we process it

You have the right to ask for a copy of the information that we hold about you by emailing or writing to us at the address at the end of this policy. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.

Remember, you can access a lot of your personal information through your account: You can see a record of the pledges you have made in the My pledges section (login, click your name at the top right of the website then choose My pledges).

• You can also see a record of the projects you have created and run - see the My projects section.
• You can also review and edit the personal information you have provided to Crowdfunder via your Profile settings.

If you wish to make a Subject access request please first check you cannot get the data from the areas listed above. If you wish to access data not listed there please be specific in your request and send us a message to [email protected] . We will then, in adherence with the ICO guidelines, respond to your request.

10.8. To electronically move, copy or transfer your personal information in a standard, machine-readable form

Where we rely on your consent as the legal basis for processing your personal information or need to process it in connection with a contract in place directly with you, you may ask us to provide you with a copy of that information in a structured data file. We will provide this to you electronically in a structured, commonly used and machine readable form, such as a CSV file.

You can ask us to send your personal information directly to another service provider, and we will do so if this is technically possible. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.

10.9. Rights relating to automated decision making, including profiling

We do not envisage that any decisions that have a legal or significant effect on you will be taken about you using purely automated means, however we will update this policy and inform you if this position changes.

After completing an expression of interest form for funding from one of our funding partners we will show you partner funds you may be eligible for. You can view the full list of funds at any time. Part of your eligibility for a fund may include automated processes, but the decision to approve funding will not be purely automated.

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the data protection regulator in the UK (or if you are located outside the UK, a similar regulator in the country in which you live) where your personal information has or is being used in a way that you believe does not comply with privacy laws.  The contact details for the ICO are available on the ICO website.  However, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.

Please check this page regularly for changes to this policy. We will email you with changes if we hold a valid email address for you.

We may review this policy from time to time and any changes will be notified to you by posting an updated version on our Site and, where appropriate, by contacting you by email. Any changes will take effect 7 days after we post the modified terms on our Site or after the date we notify you by email. We recommend you regularly check this page for changes and review this policy each time you visit our Site.

You can contact us with your queries in relation to this policy or for any other reason using our webform or by post or email.

To contact us in relation to this policy, including to exercise any of your rights in relation to your personal information, please contact us via our form.

Crowdfunder Limited’s company registration number is 07831511 and registered office address is  Crowdfunder, 3 Southview House St Austell Enterprise Park, Carclaze, St Austell, Cornwall, United Kingdom, PL25 4EJ