GrantTree Privacy Policy

Your privacy is of the highest importance to us, and we promise to protect it in accordance with this policy.

This policy explains when and how we collect personal information about people, what we do with it, when we share it, and your rights – for example your right to opt out of marketing.

1. Important information and who we are

Throughout this Privacy Policy, ‘we’ or ‘GrantTree’ means GrantTree Limited of Fora, 21-33 Great Eastern Street, London, England, EC2A 3EJ. GrantTree helps your business access funding to fuel your growth and innovation.

2. Purposes of this Privacy Policy

This policy aims to give you information on how we collect and process your personal data through your use of our Products, Services and web site, including any data that you may provide when you contact us, sign up to use our Services or use our Products.

We will also use cookies to collect personal data about you when you use our website. Click here for our Cookies Policy and the full list of cookies we use on our website.

It’s important that you read this Privacy Policy so that you know what we do with the personal data we process about you. We’ll be clear and open with you about why and how we collect and process your personal data and how we use it.

3. Data Controller

GrantTree is the data controller in relation to our website and is responsible for your personal data.

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy manager at privacy@granttree.co.uk.

4. When and How We Collect Information From You

We collect personal information about you in a variety of ways:

When you use our website ‘contact us’ form to enquire about products and services;
When you meet with or contact a GrantTree representative;
During the process of providing services to clients, for example when evaluating and formulating a claim for a tax credit or grant;
When you register to receive our updates.

5. What Type of Information is Collected

5.1 If you are using our website:

If you are using our website or requesting information, we may collect, use, store and transfer personal data.

5.2. If we process a claim for a tax credit or grant

If we process a claim for a tax credit or grant we may collect or have disclosed to us your date of birth, national insurance number and details of your remuneration.

6. How is Your Personal Information Collected?

We use different methods to collect data from and about you depending on how we are interacting with you.

If you are using our website, you may give us your personal information through direct interactions, by filling in forms online or by corresponding with us by post, phone, email or otherwise. This includes personal information you provide when you:

Request a demonstration of our Products and/or Services;
Request marketing to be sent to you;
Sign up for our newsletter; or
Give us feedback or contact us.
Technical information such as IP addresses may be collected as part of the normal use of our website.

If you are an employee of a company that uses our services, we may be given personal data about you by your employer

7. How We Use Your Personal Data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are when appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your personal data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below:

We only rely on legitimate interests where we have balanced the interest being pursued against your interests, rights and freedoms and have concluded that the processing is not unwarranted. If you would like to see a copy of our legitimate interests assessment, please contact us using the details below.

Purpose	Lawful ground for use
Provision of services and account management;	Contract
To provide information, products and services that are requested from us;	Contract
To evaluate and formulate any tax credit or grant application or similar that we are asked to advise on or prepare;	Contract
To meet a legal or regulatory obligation;	Legal obligation
Service improvements;	Legitimate interest
To ensure that content from our site is presented in the most effective manner;	Consent
To administer our site and for internal business administration and operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;	Consent
To notify you about changes to our service;	Contract and/or Consent
As part of our efforts to keep our site safe and secure.	Consent
Marketing (If you do not want your personal information to be used for marketing purposes, please click on an unsubscribe link or contact your GrantTree representative.)	Consent

8. Sharing and Disclosure of Personal Information

Personal information may be disclosed to other businesses under common control with GrantTree. However, we will not release your personal information to any company outside of the GrantTree group for their mailing or marketing purposes. If we are acquired or sell one of our businesses, we may transfer your personal information to the new owner to be used by them and their group companies but only if they are in the same line of business as us.

We may share your personal information where we are permitted to do so by contract or we have a legitimate interest in doing so with the following third parties.

8.1 Our Suppliers

We use third-party suppliers to provide services to us, for example, IT services to us. These suppliers may process your information on our behalf. Google in respect of Google Analytics for website and advertising impact assessments, Pipedrive for CRM and Mailchimp for marketing emails.

8.2 Legal Obligations

We may share your personal information with third parties where required or permitted by law, if we believe we need to do so to exercise, defend or protect our rights, or to comply with legal proceedings.

8.3 Employers

Where your employer used our Products or Services we may hold employment information on you given to us by them.

8.4 Changes to our business

If ownership of all or part of our business changes, or we undergo a reorganisation we may transfer your personal data to the new owner or successor company so we can continue to provide you with the services.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

9. How Do We Share Your Data Outside the EEA?

Whenever we transfer your personal data outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring that we only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of persona data in non-EU countries. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

The EEA comprises all of the European Union countries and Iceland, Liechtenstein and Norway.

10. Retention

How long we retain personal information depends on its type. For example:

Information relating to a claim for a tax credit or grant will be kept for the duration of the engagement and for the period afterward in which it may be necessary to questions or requests in relation to them, as per our contract terms and conditions;
We will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes we collected it for. For example, we are bound to retain contracts made on the platform as they act as a record moving forwards, equally, we need to retain profile information so we know which profiles are attached to which companies. In contrast, conversations you have with us over email or through our live chat software will be retained while the matter is ongoing, but once our conversation ends we may delete the record of that conversation.

11. Your Rights and How to Contact Us

GrantTree is a trading name of GrantTree Limited. We are a company incorporated in England. Our company number is 07403467. Our registered office is Fora, 21-33 Great Eastern Street, London, England, EC2A 3EJ.

If you have any questions on the processing of your personal data, would like to exercise any of your rights, are unhappy with how we’ve handled your personal data or have any other questions relating to this Privacy Policy please email privacy@granttree.co.uk.

If you are not satisfied with our response to any complaint or believe our processing of your personal data does not comply with data protection law, you have the right to make a complaint to the relevant data protection regulator. In the UK, this is via the Information Commissioner’s Office (ICO), Information Commissioner’s OfficeWycliffe house, Water Lane, Wilmslow, Cheshire SK9 5AF Tel 0303 123 1113. The ICO’s website is www.ico.org .

11.1. Your Rights

You have a right (commonly referred to as “subject access”) to see a copy of your personal information, to be told its source, and to be told whether and for what purposes it is being processed. You are entitled to be told whether it will be given to any other organisations or people. Where you believe there is an error in the information you are entitled to request its correction; and you may request its deletion. Some of these rights are subject to exceptions that may be applicable depending on the exact circumstances.

11.2. Accessing Your Information

For assistance and to exercise these rights feel free to contact us in the first instance. Where we are the “controller” we will address your request directly. Where we are a “processor” or “sub-processor” of information we will liaise with you and the controller of the information to allow you to exercise your rights via them. If you believe we have not complied with the requirements of the General Data Protection Regulation you have the right to lodge a complaint to the Information Commissioner’s Office. They may require you to contact us first to see if we can resolve your complaint.

12. Changes to this Privacy Policy

This Privacy Policy was updated on 8 Feb 2023. We may update it from time to time so we recommend that you check back here occasionally. If we make changes we think may affect you significantly, particularly if they could have an impact on the choices you have made about marketing, we’ll provide you with a prominent notice by the most appropriate medium so you know about the changes before they happen.