PRIVACY
Your data, handled properly.
How we collect, use and protect personal data — built around the GDPR and operated to ISO/IEC 27001 information-security standards.
Placeholder policy. This GDPR-aligned template is to be reviewed and completed by our Data Protection Officer and counsel before launch. It does not yet constitute the platform's final privacy notice. Last updated June 2026.
Who we are
[Company] Finance (the “Company”, “we”, “us”) is the data controller for personal data processed through this platform. Our registered details and supervisory authority will be confirmed here before launch. You can reach us about privacy at hello@example.com.
What we collect
We may collect:
- Identity & contact data — name, firm, role, email and phone you provide.
- Business & financial data — invoice, payer and certified-work details where you apply for financing.
- Compliance data — information required for KYB/KYC and AML/CFT checks.
- Technical & usage data — IP address, device and browser information, and how you use the platform.
[Placeholder.] The full data inventory will be itemised here per processing activity.
Lawful basis
We process personal data under the bases set out in the GDPR: performance of a contract (to provide financing and risk-sharing services), legal obligation (to meet AML/CFT and other regulatory duties), legitimate interests (to operate, secure and improve the platform) and, where required, your consent. The specific basis for each processing activity will be detailed here.
How we use it
We use personal data to assess and provide financing, to verify and certify work, to meet our legal and regulatory obligations, to communicate with you, to keep the platform secure and to improve our services. [Placeholder.] A full purpose-by-purpose table will be provided.
Sharing
We may share personal data with service providers acting on our instructions (processors), with funding and risk-sharing counterparties where you engage with those services, with auditors and advisers, and with authorities where required by law. We do not sell personal data. A full list of recipient categories will be provided here.
International transfers
Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with any supplementary measures required. [Placeholder.] Details of transfer mechanisms and locations will be confirmed.
Retention
We keep personal data only as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory (including AML/CFT record-keeping) and reporting requirements. [Placeholder.] Specific retention periods by data category will be set out here.
Your rights
Subject to conditions, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected, or incomplete data completed;
- have your data erased in certain circumstances;
- restrict or object to certain processing;
- data portability;
- withdraw consent where processing relies on it; and
- lodge a complaint with your supervisory authority.
To exercise any right, contact us at hello@example.com.
Cookies
We use only the cookies necessary to operate the platform and, where you consent, a limited set to understand usage. [Placeholder.] A full cookie table — name, purpose, duration and how to manage preferences — will be provided here before launch.
Contact & DPO
For any privacy question, or to reach our Data Protection Officer, email hello@example.com. The DPO's name and direct contact details will be published here before launch. Our information-security programme is aligned to ISO/IEC 27001.
See also our legal & regulatory notices.
Keep Europe building. Get paid today.
Two doors: finance your construction invoices, or partner with us on risk-sharing.
INVESTEU-ALIGNED · ISO 27001 · GDPR