Privacy Policy

1. Data We Collect

Account and identity data: name, email, password hash, profile image, role, title, bio, location, verification status and KYC documents.

Organisational data: organisation name, type, location, description, members, documents and verification materials.

Project and application data: project details, funding requirements, proposals, attachments and application history.

Communication data: messages, consortium invitations and support tickets.

Payment data: transaction history and subscription status (full card details are processed by our payment provider, not stored by us).

Usage data: log data, device information, IP address, search queries, page visits and feature interactions, collected to improve matching algorithms and platform performance.

Sensitive data: health sector funding information you upload. Do not upload identifiable patient information or protected health data unless an expressly designated feature permits it.

2. How We Use Your Data

• Providing, personalising, securing and improving the Platform;
• Account registration, authentication and verification (KYC/identity checks);
• AI-powered matching and funding recommendations;
• Processing payments and managing subscriptions;
• Facilitating communications between users;
• Sending essential service, security and billing messages;
• Sending marketing communications where you have opted in or where otherwise lawful;
• Fraud prevention, security monitoring and legal compliance;
• Analytics, performance measurement and product development using aggregated or de-identified data.

3. Legal Bases for Processing

We process personal data on the following legal bases:

• Contract: to provide the Platform under our Terms of Service;
• Legitimate interests: security, fraud prevention, analytics and service improvement;
• Legal obligation: compliance with applicable law;
• Consent: for non-essential cookies and marketing communications (withdrawable at any time);
• Vital interests or public task: where applicable for health-sector activities.

4. Who We Share Data With

We share data only as necessary:

• Other Platform users, in line with your visibility and sharing settings;
• Service providers supporting cloud hosting, storage, authentication, security, email, analytics, payments, verification, AI and maintenance;
• Institutional administrators where your account is associated with their organisation;
• Lawyers, auditors, accountants, insurers and other advisers under confidentiality duties;
• Authorities or others where required by valid legal requests, safety, fraud investigation or legal claims;
• Parties to a merger, financing, acquisition, restructuring or asset sale, subject to appropriate protection.

We do not sell personal data to advertisers or data brokers.

5. International Transfers

We and our providers may process data outside the country of collection. For restricted transfers from the EEA, UK, Switzerland or similar jurisdictions, we will use adequacy decisions, approved contractual clauses or another lawful mechanism with supplementary safeguards where needed. Contact hfh@healthfundhub.com for information.

6. Security

We use reasonable technical and organisational measures appropriate to risk, potentially including encryption, role-based access, authentication, logging, monitoring, backups, vulnerability management, confidentiality duties, provider assessment and incident response. No system is completely secure — protect your credentials and report suspected unauthorised access to hfh@healthfundhub.com.

7. Data Retention

We retain personal data only as long as reasonably necessary:

• Account data: for the lifetime of your active account plus a reasonable wind-down period.
• Project and application data: while legally required for the funding relationship.
• Messages: for the duration of the relationship and applicable limitation periods.
• Transaction and tax records: as required by applicable law (typically 7 years).
• Security logs: for fraud prevention and security purposes.
• Support records: until resolution plus applicable limitation periods.
• Marketing records: until withdrawal of consent or objection, plus a suppression record.

8. Cookies

We may use cookies, local storage and similar technologies for sign-in, preferences, security and performance measurement. Where required, non-essential technologies operate only after consent. Browser restrictions may impair functionality.

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Confirmation and access to your personal data;
• Correction of inaccurate data;
• Deletion (“right to be forgotten”), subject to legal exceptions;
• Restriction of processing;
• Object to legitimate-interest processing and direct marketing;
• Data portability;
• Withdraw consent at any time;
• Human review of significant automated decisions;
• Lodge a complaint with your local data protection authority.

Submit requests through your account settings or by emailing hfh@healthfundhub.com. We will respond within applicable deadlines. We do not discriminate against you for exercising privacy rights.

10. Account Deletion

Request deletion through your account settings or email hfh@healthfundhub.com. We may close the account, remove or de-identify profile data, delete content not required for legal purposes, and retain limited security, fraud, compliance or dispute records as required by law. Information already lawfully shared with others may remain in their records. Irreversibly anonymised metrics may be retained as they no longer identify a person.

11. Marketing Communications

Where permitted, we may send information about Platform features, funding-related services and events. Unsubscribe using the link in any marketing email or via account settings. Opt-out does not stop essential account, security, billing or service messages.

12. Children

The Platform is intended for adults and authorised professional or institutional users, not children under 18. We do not knowingly collect data directly from children through individual accounts. Contact hfh@healthfundhub.com if you believe we have inadvertently collected data from a child.

13. Regional Disclosures

EEA, UK and Switzerland: You may exercise the rights above and complain to the supervisory authority where you live, work or believe a violation occurred.

United States: Residents of some states may have additional access, correction, deletion, opt-out, profiling and appeal rights. We do not sell personal information for money. Appeal by emailing hfh@healthfundhub.com with subject “Privacy Appeal.”

Other jurisdictions: Local rights may apply — contact hfh@healthfundhub.com.

14. Changes to This Policy

We may update this Policy for changes to the Platform, our practices or applicable law. We will post the revision and update its date. Material changes receive additional notice where required. New uses requiring consent will not begin until consent is obtained.