Privacy Policy

FindMyGrant ("we", "us", "our") is a UK-based business grants discovery platform. We are the data controller responsible for your personal data collected through this website and service.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: privacy@findmygrant.co.uk

We collect and process the following categories of personal and business data:

Account Data: Your full name, email address, and password (stored in hashed form) when you register for an account.

Business Data: Your company name, Companies House number, business website, industry/sector, and UK county, which you provide during onboarding to enable grant matching.

Usage Data: Information about how you interact with the platform, including pages visited, grants viewed or saved, and feature usage, collected via standard server logs and analytics.

Payment Data: When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full card details on our servers. We retain records of subscription status and transaction history.

Communications: If you contact us via our contact form or email, we retain the contents of that correspondence.

We use your personal data for the following purposes, on the lawful basis indicated:

Grant Matching (Contract Performance): We use your business profile (industry, county) to filter and present relevant grant opportunities from our database.

Account Management (Contract Performance): To create and maintain your account, process subscription payments, and provide access to platform features.

Service Communications (Legitimate Interests): To send you transactional emails such as account verification, password resets, and subscription confirmations.

Platform Improvement (Legitimate Interests): To analyse aggregate usage patterns and improve our matching algorithms and user experience.

Legal Compliance (Legal Obligation): To comply with applicable UK laws, including tax, fraud prevention, and regulatory obligations.

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

We use the following types of cookies on our platform:

Strictly Necessary Cookies: Required for the platform to function, including authentication session cookies that keep you logged in. These cannot be disabled.

Analytics Cookies: We may use anonymised analytics tools to understand how users navigate the platform. No personally identifiable information is shared with analytics providers.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using authenticated features of the platform.

We share data with trusted third-party service providers who process data on our behalf. These include:

Stripe (Payment Processing): When you subscribe, your payment details are processed by Stripe, Inc. Stripe acts as a data processor and is PCI-DSS compliant. Their privacy policy is available at stripe.com/privacy.

Email Service Providers: We use a third-party email delivery service to send transactional emails. Only your email address and name are shared for this purpose.

Hosting & Infrastructure: Our platform is hosted on secure cloud infrastructure. All data is stored and processed within the UK or EEA, or with appropriate safeguards in place.

All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

As a data subject under UK GDPR, you have the following rights:

Right of Access: You may request a copy of all personal data we hold about you.

Right to Rectification: You may ask us to correct inaccurate or incomplete data.

Right to Erasure: You may request that we delete your personal data, subject to legal retention obligations.

Right to Restrict Processing: You may ask us to pause processing your data in certain circumstances.

Right to Data Portability: You may request your data in a structured, machine-readable format.

Right to Object: You may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at privacy@findmygrant.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We retain your personal data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it by law (for example, financial records which must be retained for 7 years under UK tax law).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), hashed password storage, and access controls limiting who can view personal data within our organisation.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a prominent notice on the platform. The date of the latest update is shown at the bottom of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

FindMyGrant Email: privacy@findmygrant.co.uk

You may also contact the UK Information Commissioner's Office (ICO) if you believe your data rights have been violated: ico.org.uk | 0303 123 1113.