1. Introduction

GrantScout ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our services.

2. Information We Collect

We collect the following types of information:

• Personal Information: Name, email address, phone number, and business contact details
• Business Information: Company name, industry, business type, funding needs, and other details provided in our onboarding form
• Payment Information: Payment details processed through our payment provider (we do not store full card details)
• Usage Data: Information about how you interact with our website and services

3. How We Use Your Information

We use your information to:

• Provide grant research and matching services
• Process payments and manage subscriptions
• Communicate with you about our services
• Improve our services and website
• Comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: To fulfill our service agreement with you
• Legitimate Interest: To improve our services and communicate with you
• Legal Obligation: To comply with applicable laws and regulations
• Consent: Where you have provided explicit consent

5. Data Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party providers who help us operate our business (e.g., payment processors, hosting services)
• Legal Requirements: When required by law or to protect our rights

All third parties are required to maintain appropriate security measures and use your data only for specified purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically, we retain:

• Customer data for the duration of our service relationship and up to 7 years after for accounting and legal purposes
• Payment records as required by financial regulations

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at contact@grantscout.co.uk

9. Cookies and Tracking

Our website may use cookies and similar technologies to improve your experience. You can control cookie preferences through your browser settings.

10. International Transfers

Your data is primarily stored and processed within the UK and European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: contact@grantscout.co.uk
Location: York, UK

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.