Privacy Policy

1. Scope and Purpose

This Privacy Policy explains how Investate collects, uses, stores, shares, and protects personal data when you use our website, submit forms, register interest, attend events, or engage with our services.

2. Categories of Data We Collect

Depending on your interaction with us, we may collect:

• Identity and contact data, such as full name, email address, and phone number.
• Profile and application data, such as education background and career interests.
• Technical and usage data, such as IP address, browser type, pages visited, and device identifiers.
• Communication data, including enquiries, support requests, and event registrations.
• Preference data, such as marketing consent choices and content interests.

3. How We Use Personal Data

• Provide, operate, and improve our services and digital experience.
• Process applications, event registrations, and partnership enquiries.
• Send service updates, relevant opportunities, and operational communications.
• Protect our website, users, and systems from misuse or unlawful activity.
• Comply with legal, regulatory, and governance obligations.

4. Legal Bases for Processing

Where required by law, we rely on lawful bases including consent, contractual necessity, legitimate interests, and legal obligations. Where consent is used, you may withdraw it at any time.

5. Cookies and Similar Technologies

We may use cookies and similar technologies for security, analytics, session continuity, and performance improvements. You can manage cookie preferences through your browser settings.

6. Marketing Communications

Where permitted, we may send service, events, and opportunity-related communications. You can opt out of non-essential marketing communications at any time through unsubscribe links or by contacting us directly.

7. Data Sharing and Recipients

We do not sell personal data. We may share data with vetted service providers, event co-hosts, advisers, auditors, regulators, or law enforcement where required and lawful, with appropriate safeguards in place.

8. International Transfers

If personal data is transferred outside your jurisdiction, we implement reasonable safeguards designed to protect personal data in line with applicable legal standards.

9. Data Retention

We retain personal data for as long as needed to fulfill the purposes described in this policy and to meet legal, accounting, or reporting requirements. Retention periods vary by data type and business need.

10. Security Measures

We maintain technical and organisational controls intended to reduce the risk of unauthorised access, disclosure, loss, alteration, or misuse of personal data.

11. Your Privacy Rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, object, or request portability of your personal data. You may also have the right to lodge a complaint with a supervisory authority.

12. Children and Young People

Our website is not directed at children under the age required by applicable law for independent consent. If we learn that data has been provided inappropriately, we will take reasonable steps to remove it.

13. Automated Decision-Making

We do not rely exclusively on automated decision-making that produces legal or similarly significant effects without meaningful human review, unless permitted by law.

14. Third-Party Websites

This website may link to external websites. We are not responsible for third-party privacy practices, content, or availability. You should review third-party policies directly.

15. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated effective date.

16. Contact

For privacy queries, please contact us at contact@investate-uk.org.