Privacy Policy

1. Who We Are

Grants Hub operates grantshub.co.uk, a grant discovery platform for UK organisations. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

Contact: hello@grantshub.co.uk

2. Data We Collect

• Account data: email address, organisation name, organisation type, password (hashed)
• Profile data: organisation profiles you create including sector, region, contact details, and notes
• Usage data: grants you save, alerts you set, searches you perform
• Payment data: handled entirely by Paddle — we do not store card details
• Technical data: IP address, browser type, device type, pages visited
• Organisation contact details from public registers: if you run a charity, we may hold its name, registered number, and the contact email address and website it published on the Charity Commission for England and Wales or Charity Commission for Northern Ireland register.

3. How We Use Your Data

• To provide and improve the Grants Hub service
• To send grant alerts and deadline notifications you have opted into
• To process payments and manage your subscription
• To provide AI-powered grant recommendations based on your profiles
• To send essential account communications (password resets, billing notices)
• To email charities that may benefit from Grants Hub, using the contact details they published on their register entry. We send at most two emails and never share these details. The link in each of these emails carries a code unique to that email, so we can see whether it was clicked and which pages were visited afterwards. We use this only to decide whether to contact your organisation again. These emails contain no tracking images, so we do not record whether they are opened.

4. Legal Basis for Processing

We process your data under the following legal bases: Contract (to deliver the service you signed up for); Legitimate interests (to improve and secure the service, prevent fraud, and contact organisations that may benefit from Grants Hub using contact details they have made public. You can object at any time and we will stop); Consent (for marketing to individuals, where the law requires it).

5. Data Sharing

We do not sell your personal data. We share data only with:

• Paddle — payment processing
• Amazon Web Services — cloud hosting and database storage
• OpenAI — AI features (grant recommendations, proposal letters). Only profile description data is shared, never personal contact details.
• Resend — sending account and service emails
• Zoho — sending and receiving our outreach email
• Sentry — error monitoring, so we can find and fix faults in the service
• Vercel — website hosting and page-view statistics (no cookies)

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

If we contacted your organisation and you didn't reply, we won't contact you again after one follow-up, and we remove your details from our outreach lists within 12 months. If you ask us to stop, we keep a minimal, scrambled record of your address so that we never contact you again.

7. Your Rights

Under UK GDPR you have the right to: access your data; correct inaccurate data; delete your data; restrict or object to processing; data portability. To exercise any of these rights, email us at hello@grantshub.co.uk.

You can object to marketing at any time and we will stop straight away. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

We use essential cookies only — for authentication and session management. We do not use tracking or advertising cookies.

9. Security

All data is transmitted over HTTPS. Passwords are stored as bcrypt hashes. Our database is hosted on AWS RDS with access restricted to our application servers only.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email. The latest version is always available at grantshub.co.uk/privacy.