Privacy Policy

Last updated: April 2026

1. Data controller

Ventureship Ltd ("we", "us", "our") is the data controller for personal data collected through this platform.

Registered address: [Portland House, Belmont Business Park, Durham, England, DH1 1TW]

Contact: victoriaperronetmiller@ventureship.co.uk

ICO Registration No: [YOUR ICO NUMBER — register at ico.org.uk]

2. What we collect

We collect and process the following personal data:

  • Account data: name, email address, password (hashed), university, degree, graduation year
  • Profile data: skills, career interests, bio, LinkedIn URL, portfolio URL, city, avatar
  • Assessment data: psychometric questionnaire responses and computed scores
  • Submission data: work submitted for ventureships, feedback received, scores
  • Application data: cover notes, application status, review history
  • Company data: company name, industry, size, contact details, logo
  • Usage data: pages visited, actions taken (stored in audit logs)
  • Communication data: enquiry messages, notification preferences

3. Lawful basis for processing

  • Contract: We process your account, profile, submission, and assessment data to deliver the Ventureship service you have signed up for.
  • Consent: We send marketing emails only with your explicit consent. You can withdraw consent at any time via your settings or the unsubscribe link in any email.
  • Legitimate interest: We use analytics data to improve the platform. We retain anonymised submission data to maintain ventureship quality benchmarks.

4. Who we share data with

We share personal data only with the following processors, all of whom are GDPR-compliant:

  • Supabase Inc. — database hosting, authentication (EU data region)
  • Vercel Inc. — website hosting and delivery
  • Resend Inc. — transactional and marketing email delivery
  • Stripe Inc. — payment processing (for company subscriptions)
  • Anthropic PBC — AI-powered brief generation (no personal data sent)

We do not sell personal data to any third party. Company users can view student names, universities, skills, and scores through the platform, but not email addresses or personal contact details.

5. Data retention

  • Active accounts: Data retained while your account is active.
  • Deleted accounts: Personal data is removed within 30 days of deletion request. Submissions may be retained in anonymised form for quality benchmarking.
  • Marketing consent records: Retained for 3 years after withdrawal for compliance evidence.
  • Audit logs: Retained for 2 years.

6. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data (download from Settings, or submit a data request)
  • Rectification — correct inaccurate data via your profile settings
  • Erasure — delete your account via Settings → Privacy → Delete account
  • Data portability — download your data in JSON format from Settings
  • Object to processing based on legitimate interest
  • Withdraw consent for marketing at any time

To exercise any right, email victoriaperronetmiller@ventureship.co.uk or use the GDPR request form.

7. Cookies

We use essential cookies for authentication and session management. Analytics cookies are only loaded with your explicit consent. See our Cookie Policy for full details.

8. International transfers

Some of our processors (Supabase, Vercel, Stripe) may process data in the United States. All transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

9. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the platform. The "last updated" date at the top of this page will always reflect the most recent version.