Privacy Policy
Effective date: 3 March 2026
1. Who we are
Funding Spotter (“we”, “us”, “our”) operates the website at fundingspotter.com. We provide a platform that tracks UK equity rounds in real-time via Companies House filings.
For questions about this policy or your personal data, contact us at [email protected].
2. Data we collect
Account data
When you create an account, we collect your name, email address, and any profile information you provide. Authentication is handled by Clerk (see Third Parties below).
Usage data
We log your IP address, browser type, pages visited, and timestamps when you use the platform. This is used for security, rate-limiting, and service improvement.
Waitlist and contact submissions
If you submit a waitlist or contact form, we collect your name, email, company name, and any message you provide, along with your IP address.
Story submissions
If you submit a story tip, we collect any information you include in that submission. Only information you voluntarily provide is collected.
3. How we use your data
- Providing the service, to authenticate you, deliver platform features, and respond to your requests.
- Security and fraud prevention, IP logging, rate-limiting, and detecting abuse.
- Communications, to respond to enquiries and, where you have consented, send product updates.
- Analytics, to understand how the platform is used and improve it. Analytics data is aggregated and not used to identify individuals.
- Legal compliance, to meet our obligations under applicable law.
4. Legal basis (UK GDPR)
We process your personal data on the following legal bases:
- Contract, processing necessary to provide the service you have signed up for.
- Legitimate interests, security logging, fraud prevention, and service improvement, where these do not override your rights.
- Consent, for optional communications such as marketing emails. You can withdraw consent at any time.
- Legal obligation, where we are required to process data by law.
5. Third-party services
We share data with the following trusted third parties to operate the platform:
Clerk
Authentication provider. Stores your email address, name, and session data. Data processed in the US under Standard Contractual Clauses. Clerk Privacy Policy
Cloudflare
Hosting, CDN, and DDoS protection. Processes IP addresses and request metadata. Cloudflare Privacy Policy
6. Data retention
Account data is retained for as long as your account is active. If you delete your account, personal data is removed within 30 days, except where we are required to retain it by law (e.g. financial records).
IP address logs are retained for up to 90 days for security purposes. Waitlist and story submission data is retained until you request deletion or we no longer require it.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Data security
We use industry-standard security measures including encrypted connections (TLS), access controls, and secure credential management. No system is completely secure; if you believe your data has been compromised, please contact us immediately.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.