Privacy notice

1 · The short version

We collect what you type into our forms, and very little else. There is no third-party analytics on this site, no advertising network, and no tracking cookie. We do not sell your information, we do not add you to a mailing list you did not ask for, and we do not share it with anyone except the service providers listed below who are needed to make the site work.

2 · What we collect, and why

When you use the collaboration form: your name, email address, the institution you gave, the areas you said you were interested in, anything you wrote in the note, and which path on the site brought you to the form. We use it to reply to you and to understand what people want to work on with us.

When you use the investor-information page: your name, email address, institution, the type of investor you told us you are, and your own statement about your eligibility. We use it to decide whether and how to continue a conversation.

When you send a grant enquiry: the contact details you give plus what you tell us about the funding body, programme, timing and requirements. We use it to assess fit and to prepare a proper application if there is one.

When you contribute: Stripe processes the payment. Stripe receives your card or bank details directly — we never see or store them. We receive a record that a contribution succeeded, its amount and currency, and the identifier Stripe gives it.

Automatically: the user-agent string your browser sends with a form submission, kept to detect abuse, and ordinary server logs held by our hosting provider.

3 · Why we are allowed to hold it

Where the GDPR, UK GDPR or a similar law applies to you: we rely on your consent when you choose to submit a form, on our legitimate interest in running and protecting the network and in replying to institutions who contact us, and on our legal obligations where we must keep financial records. You can withdraw consent at any time, and we will act on that.

4 · Who processes it for us

Cloudflare hosts the site and holds its database, including the records created by the forms above. Stripe processes contributions and holds the payment details we never receive. Each has its own privacy terms and each is bound to process this information only for us. We add no other processor without updating this page.

5 · The Evidence Ledger is public by design

Public records are meant to be read. Before anything is published we consider who could be identified by it, and coordinates and personal details about individuals are generalised or withheld rather than published precisely. If you submit evidence about a person, you are telling us you have their consent. If something about you has been published that should not have been, write to us and we will take it down while we look into it.

6 · How long we keep it

Enquiry and collaboration records are kept while the relationship is live and for up to two years after our last exchange, then deleted. Records tied to a contribution are kept for as long as tax and accounting law requires. Published ledger records are intended to be permanent, which is the point of a ledger — so we are careful about what goes into one.

7 · What you can ask us to do

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or ask for it in a portable form. Write to [email protected] and we will reply within 30 days. We will not charge you and we will not make you explain yourself. If you are in the EEA or the UK you may also complain to your data protection authority; if you are in California you have equivalent rights and we do not discriminate against anyone who uses them.

8 · Where it goes, and keeping it safe

We operate globally, so your information may be processed outside your own country, including in the United States, under the safeguards our providers put in place for international transfers. In transit it is encrypted. Access is limited to the people who need it. No system is perfect, and if a breach affects you we will tell you and the relevant authority promptly rather than quietly.

9 · Children

The site is intended for adults acting in a professional capacity. We do not knowingly collect information from children. Where a programme involves young people, it runs through a partner institution with its own safeguarding duty, and their details do not come to us through this site.

10 · Changes

If this notice changes, the date at the top changes with it, and we will describe anything material rather than hoping you do not notice.