Privacy notice

Last updated: 13 November 2026

1. Who we are

FundingBid is a trading name. We are the "controller" of your data, which means we decide how it's used.

Privacy email: privacy@fundingbid.co.uk

2. What we collect

your contact email address
your organisation's legal name
your organisation's charity or company number
your project answers
the result of your application, if you tell us or we find it in public data
payment records from Stripe (amount, date, plan). We never see your card details.
basic technical data needed to run the site securely, such as your IP address in our hosting provider's logs

We use one essential cookie, which keeps you signed in to your application. We don't use advertising or analytics cookies.

3. What we don't collect

We never ask for dates of birth, home addresses, bank details or bank statements. You add those directly into the lottery's own form.

We ask you not to enter personal details about the people your project helps. If any are entered by mistake, please tell us and we'll remove them.

4. Why we use your data, and our lawful basis

What we do	Why	Lawful basis
Provide the tool, save your answers, send your sign-in link	To deliver what you paid for	Contract
Take payment and keep financial records	To run the business and meet tax rules	Contract; legal obligation
Ask for your result at week 16	To track outcomes and offer the reapply discount	Legitimate interests
Check public National Lottery grant data	To see if your grant was awarded (see below)	Legitimate interests
Improve FundingBid using anonymised statistics	To make the questions and prompts better	Legitimate interests
Email you about planning your next application (only if you agreed)	To help you with future applications	Consent

Result tracking. The National Lottery publishes the grants it awards as open data. We may check this using your organisation's name and charity or company number to see whether your grant was awarded.

5. Who we share data with

We use these service providers ("processors") to run FundingBid. They only use your data to provide their service to us.

Stripe – payment processing
Netlify – website and app hosting, and storing your saved answers
Resend – sending emails such as your sign-in link and result check
Anthropic – a text-processing service powered by AI. It processes your project answers to suggest stronger versions. It deletes them within 30 days and doesn't use them to train its models.

We don't sell your data. We don't share it with the National Lottery.

6. International transfers

Some of our providers (Netlify, Resend, Anthropic and Stripe) are based in, or store data in, the United States. Each one's data processing terms include safeguards for data sent from the UK, such as the UK addendum to the standard contractual clauses or the UK extension to the EU-US Data Privacy Framework.

7. How long we keep it

We keep your data for 5 years from the last time you used your account, then delete it. We keep it this long:

for our business records
to track application results, including checking public grant data
to improve the service using anonymised statistics

Anonymised statistics that can't identify you or your organisation may be kept after that. Payment records are kept for as long as tax law requires, usually 6 years.

8. Your rights

You have the right to:

ask for a copy of your data
ask us to correct it
ask us to delete it
object to how we use it, including result tracking and emails about future applications
ask us to limit how we use it
ask for your data in a portable format

To use any of these rights, email privacy@fundingbid.co.uk. We'll reply within one month.

9. Complaints

If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Changes

We'll update this notice if anything changes and show the date at the top.