FundingAtlas

Privacy

Privacy Policy

How FundingAtlas collects, uses and protects your personal information under UK GDPR.

Last Updated: 14 June 2026

1. Introduction

FundingAtlas is an independent UK platform that helps founders, advisors and finance teams discover, compare and act on UK funding opportunities — including grants, loans, equity programmes and tax incentives. We provide a searchable catalogue, advisor-reviewed opportunities, comparisons, decision guides and funding alerts.

We are committed to protecting your privacy and handling your personal information transparently and lawfully. This notice explains what we collect, why we collect it, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller: FundingAtlas (Michael Flanagan, Founder). Contact: michael@fundingatlas.co.uk.

2. Information We Collect

Account information

  • Name and display name
  • Email address
  • Login credentials (passwords are hashed; we never store them in plain text)
  • Account preferences and settings

Funding activity information

  • Saved grants and watchlists
  • Funding assessment responses
  • Funding Finder searches and filters
  • Alert and notification preferences
  • Report downloads

Technical information

  • IP address
  • Browser type and version
  • Device and operating system information
  • Cookies and similar technologies
  • Aggregate analytics data (pages viewed, referrers, session duration)

3. How We Use Information

  • Operating and maintaining the FundingAtlas platform
  • Personalising funding recommendations and matches
  • Delivering funding alerts and notifications you have requested
  • Improving platform performance, content and user experience
  • Security, fraud prevention and abuse detection
  • Responding to customer support enquiries
  • Meeting legal, regulatory and accounting obligations

4. Marketing Communications

Where you have opted in, we may send you email alerts about new and closing funding opportunities, periodic funding updates and our newsletter. Every marketing email includes a one-click unsubscribe link, and you can manage your alert preferences at any time from your account. Transactional messages (account, security, support) are not marketing and will continue while your account is active.

5. Legal Basis for Processing

  • Consent — for marketing emails, newsletters and non-essential cookies.
  • Legitimate interests — for analytics, platform improvement, security and personalising your experience, balanced against your rights and freedoms.
  • Contractual necessity — to provide the account and services you have signed up for.
  • Legal obligation — where we must process data to comply with UK law.

6. Data Sharing

FundingAtlas does not sell your personal information. We share data only with:

  • Infrastructure and service providers that host the platform, database and authentication on our behalf, under written data-processing terms.
  • Analytics providers used to understand aggregate usage and improve the service.
  • Email delivery providers used to send transactional messages, alerts and (where you have opted in) marketing emails.
  • Legal authorities, regulators or law-enforcement agencies where we are required to do so by law, or to protect our rights, users or the integrity of the service.

7. Data Retention

  • Account data — retained while your account is active and for up to 12 months after deletion to handle disputes and legal obligations.
  • Funding activity (saved grants, assessments, searches) — retained while your account is active; deleted with your account.
  • Email alerts and newsletter subscriptions — retained until you unsubscribe, plus a short suppression record so we do not contact you again.
  • Technical and analytics logs — retained for up to 24 months in aggregated or pseudonymised form.
  • Records required by law (e.g. tax, accounting) — retained for the statutory period.

8. Cookies

FundingAtlas currently uses limited cookies necessary for platform functionality and analytics.

  • Essential cookies — required for sign-in, sessions and security. These cannot be disabled without breaking the service.
  • Analytics cookies — help us understand aggregate usage so we can improve the platform.
  • Preference cookies — remember your settings (e.g. dismissed prompts, UI choices) so the platform behaves consistently between visits.

You can control cookies through your browser settings. Blocking essential cookies will prevent you from signing in or using parts of the service.

9. Security

We take the security of your data seriously and apply technical and organisational measures appropriate to the risk, including:

  • Encryption in transit (HTTPS/TLS) for all traffic to and from FundingAtlas
  • Encryption at rest for our managed database
  • Role-based access controls and row-level security on sensitive tables
  • Hashed passwords and managed authentication
  • Monitoring, logging and routine security review of our infrastructure
  • Reputable, security-vetted hosting and infrastructure providers

No internet service can be guaranteed 100% secure. If we ever become aware of a personal data breach affecting you, we will notify you and the Information Commissioner's Office (ICO) where required by law.

10. Your Rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — ask us to delete your personal data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests, including direct marketing.
  • Withdraw consent — at any time where processing is based on consent.
  • Complain to the ICO — the UK supervisory authority at ico.org.uk. We would appreciate the opportunity to address your concerns first.

To exercise any of these rights, email michael@fundingatlas.co.uk. We will respond within one month.

11. International Transfers

Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or adequacy decisions issued by the UK government.

12. Children

FundingAtlas is a service for businesses, founders and advisors and is not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to This Notice

We may update this notice from time to time. Material changes will be communicated by email or via a prominent notice on the platform. The "Last Updated" date at the top of this page always reflects the current version.

14. Contact

Michael Flanagan
Founder, FundingAtlas
michael@fundingatlas.co.uk