Privacy policy

Who runs this site

This site trades as Scotland Business Grant Finder. It is an independent funding discovery service and is not the Scottish Government, a council or a funding body.

Full operator details are being finalised and will be published here before the service launches publicly.

What we collect and why

• Account details. Your email address and, if you sign in with Google, the basic identity Google returns. Used to create and secure your account. Legal basis: performance of a contract with you.
• Business profile. Your council area, postcode, business stage, organisation type, industry, staff numbers, turnover band, trading history, what you need funding for and roughly how much. Used only to match your business against funding criteria and to show you why something matched. Legal basis: performance of a contract, or your consent when you use the grant finder without an account.
• Saved funding. The programmes you save, so you can find them again.
• Alert preferences. Whether you want to hear about new matches, how often and at what match strength. We do not send alert emails yet; when we do, they will only go to people who have asked for them.
• Contact enquiries. Whatever you choose to put in a message to us, used only to answer it. Legal basis: our legitimate interest in responding to enquiries.
• Cookie choice. Your analytics answer, the date and the policy version, so we can honour and evidence it. Legal basis: legal obligation under PECR and UK GDPR.
• Analytics. Generic actions such as "a funding page was opened" — never your email, business name, postcode, turnover, staff numbers, funding amounts or account identifier. You can switch analytics off at any time in the cookie preferences or the privacy centre, and nothing is recorded after that.

What we never ask for

We do not collect special category data — nothing about health, religion, politics, ethnicity, sexual orientation, trade union membership or criminal convictions. We also do not ask for a date of birth, home address, national insurance number, passport details or bank details. Nothing in a funding match needs them.

Who processes data for us

• Supabase — our database and sign-in provider, which stores your account, profile, saved funding and preferences.
• Cloudflare — serves and protects the website. It processes technical request data such as IP addresses for security and delivery.
• Google — only if you choose to sign in with Google, and only for that sign-in.

We do not sell your data, and we do not pass your details to funding providers. When you apply for funding, you do that directly on the provider's own website under their privacy terms.

How long we keep it

• For as long as the account stays open.
• Account data is deleted straight away when you delete your account. Backups are overwritten on the hosting provider's own rolling schedule.
• Kept while the account exists, so the choice can be shown and changed.
• Kept only as long as needed to answer the enquiry and any follow-up.
• Kept only as long as needed to investigate security or abuse.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting anything done beforehand.

You can see and change most of this yourself in the privacy centre, including deleting your account and withdrawing analytics consent. Downloading a copy of your data is not built into the site yet — ask us and we will send it.

Contacting us

A dedicated privacy contact address is being set up and will be published here before the service launches publicly. In the meantime, use the contact page.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.

Cookies

Our cookie policy explains exactly what is stored in your browser and how to change your choices.

Age

This service is for business owners and business advisers. You must be at least 18 to create an account. It is not designed for or directed at children.

Changes

We record a version for this policy. If we make a material change we will update the version and, where the law requires it, ask for your consent again.