Privacy Policy

1. Introduction

Fundsure Limited ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website https://fundsure.co.uk (the "Website") and our services (the "Services").

We are the data controller for the personal data we process. Our details are:

If you have questions about this Policy or your data, contact us at support@fundsure.co.uk or +44 20 7898 8522.

2. Data We Collect

We collect the following types of personal data:

Directly from you (when you use our Services):

• Identity data: Full name, date of birth, nationality, residential address.
• Contact data: Email address, phone number.
• Verification data: Copies of identity documents (e.g., passport, driving licence), proof of address (e.g., utility bills), live selfies or video for facial matching (biometric data).
• Company-related data: Company name, number, registered address, details of directors/PSCs/shareholders.
• Payment data: Card details (processed via secure third-party payment providers; we do not store full card numbers).
• Communication data: Records of emails, messages, or support queries.

Automatically (when you visit the Website):

• Technical data: IP address, browser type, device information, operating system.
• Usage data: Pages visited, time spent, referral source.
• Cookie data: See Section 9 below.

We do not knowingly collect data from children under 18.

3. How We Collect Your Data

• Directly via forms, uploads, and interactions on the Website.
• Through automated technologies (e.g., cookies, server logs).
• From third parties where necessary (e.g., credit reference agencies for enhanced checks, or publicly available registers like Companies House).

4. Purposes and Lawful Bases for Processing

We process your personal data for the following purposes and lawful bases under UK GDPR:

We do not use automated decision-making (including profiling) that produces legal effects without human review.

5. Sharing Your Data

We share personal data only where necessary:

• With Companies House (for filings and verifications).
• With third-party verification providers (e.g., ID document validation technology providers).
• With payment processors (e.g., Stripe or similar - PCI-DSS compliant).
• With professional advisers (e.g., lawyers, accountants) or regulators/supervisors (e.g., HMRC).
• In the event of a business transfer (e.g., merger/sale).

We require all third parties to respect the security of your data and comply with the law. We do not sell your data.

6. International Transfers

Some third-party providers may process data outside the UK/EEA. Where this occurs, we ensure adequate safeguards (e.g., UK International Data Transfer Agreement or Addendum to EU SCCs).

7. Data Retention

We retain personal data only as long as necessary:

• AML and verification records: Up to 7 years after the end of our relationship (to comply with Money Laundering Regulations).
• Contract-related data: Up to 6 years after completion (limitation periods).
• Website technical data: Up to 26 months (analytics).

After retention periods, data is securely deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational measures, including:

• Encryption of data in transit (HTTPS) and at rest.
• Access controls and regular security reviews.
• Staff training on data protection.

However, no transmission over the internet is 100% secure. You upload data at your own risk.

9. Cookies and Similar Technologies

We use cookies for essential functions (e.g., session management), analytics (e.g., Google Analytics - anonymised), and functionality.

You can manage cookies via your browser settings. Essential cookies cannot be disabled if you wish to use the Services.

10. Your Rights

Under UK GDPR, you have rights including:

• Access to your data (subject access request).
• Rectification of inaccurate data.
• Erasure ("right to be forgotten" - subject to legal retention obligations).
• Restriction of processing.
• Objection to processing (e.g., for legitimate interests).
• Data portability.
• Withdrawal of consent (where applicable).

To exercise rights, contact us at the details above. We respond within one month (extendable for complexity).

You can complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk if unhappy with our response.

11. Changes to This Policy

We may update this Policy periodically. Changes will be posted here with a new "Last Updated" date. Material changes will be notified via the Website or email.

12. Contact Us

For privacy queries or rights requests: