Your privacy matters

Privacy Policy

We believe in complete transparency about how we handle your data. Because our platform serves young people, we take extra care to protect their privacy.

Last updated: 26 February 2026

We never sell your data

Not to anyone. Not ever.

Extra care for under 18s

GDPR-K compliant protections.

Stripe handles payments

We never see your card details.

1. What We Collect

  • •Account information: your name, email address, and role (student, teacher, parent, or supporter).
  • •School information: for students and teachers, we collect your school name and school email domain for verification.
  • •Project data: any content you upload, including text, images, and videos for project pages.
  • •Payment information: handled entirely by Stripe. We never see or store your card details.
  • •Usage data: how you interact with the platform, pages visited, and features used, to improve the service.

2. How We Use Your Data

  • •To create and manage your account, and to verify your identity and role.
  • •To display your project to potential supporters and the public.
  • •To process payments, track funding progress, and manage milestone drawdowns.
  • •To send you important notifications about your projects, funding, and account.
  • •To maintain platform safety through content moderation and reporting systems.
  • •To improve the platform based on aggregate, anonymised usage patterns.

3. How We Protect Your Data

  • •All data is transmitted over HTTPS (encrypted connections).
  • •Sensitive payment data is handled by Stripe, a PCI DSS Level 1 certified payment processor.
  • •Access to personal data is restricted to authorised team members only.
  • •Our database is hosted on Supabase with row-level security enabled.
  • •We conduct regular security reviews and keep all software up to date.

4. Children's Privacy (Under 18)

  • •Futurepreneurs takes the privacy of young people extremely seriously.
  • •Student accounts require a school-issued email and teacher verification before a project can go live.
  • •Parental consent is required before any student project becomes publicly visible.
  • •We do not sell, share, or use children's data for advertising or marketing purposes.
  • •Parents can view all data associated with their child's account and request deletion at any time.
  • •We comply with UK GDPR requirements for processing children's data, including GDPR-K protections.

5. Who Can See Your Data

  • •Public project pages: your project title, description, images, and funding progress are visible to everyone.
  • •Teachers can see the projects of students they mentor, including drawdown requests.
  • •Parents can see their child's projects, funding status, and drawdown activity.
  • •Supporters can see the projects they have supported and any updates posted by the student.
  • •Platform administrators can access all data for moderation and support purposes.
  • •We do not sell your data to third parties. Ever.

6. Communications

  • •We send transactional emails for important events: account verification, project updates, funding milestones, and drawdown approvals.
  • •We may occasionally send platform updates and new feature announcements.
  • •You can manage your notification preferences from your account settings.
  • •We will never send you marketing emails from third parties.

7. Your Rights

  • •Access: you can request a copy of all personal data we hold about you.
  • •Correction: you can update or correct your personal information at any time.
  • •Deletion: you can request deletion of your account and associated data.
  • •Portability: you can request your data in a common, machine-readable format.
  • •Objection: you can object to processing of your data in certain circumstances.
  • •To exercise any of these rights, email us at privacy@futurepreneurs.co.uk.

8. Cookies and Analytics

  • •We use essential cookies to keep you logged in and maintain your session.
  • •We use anonymous analytics to understand how the platform is used and where to improve.
  • •We do not use advertising cookies or tracking pixels from third parties.
  • •You can manage cookie preferences in your browser settings.
  • •For full details, see our Cookie Policy.

9. Data Protection Officer

  • •Our Data Protection Officer (DPO) oversees compliance with data protection law and is available to answer any questions about how we handle your data.
  • •Contact the DPO at: dpo@futurepreneurs.co.uk.
  • •You may contact the DPO regarding any data protection concern, including exercising your rights, reporting a data breach, or requesting more information about our data practices.
  • •The DPO reports directly to the Futurepreneurs leadership team and operates independently in matters of data protection compliance.

10. Data Retention

  • •Active accounts: We retain your personal data for as long as your account is active and in use.
  • •Inactive accounts: If your account is inactive for 24 months, we will notify you and may close the account after a further 30 days without response.
  • •Deleted accounts: When you request account deletion, we delete your personal data within 30 days. Some anonymised data may be retained for aggregate analytics.
  • •Project data: Funded project data (descriptions, milestones, financial records) is retained for 7 years after project completion, as required for financial record-keeping.
  • •Financial records: Payment and drawdown records are retained for 7 years in compliance with UK tax and financial regulations (HMRC requirements).
  • •Safeguarding records: Any safeguarding records are retained in accordance with statutory guidance — typically until the child reaches 25 years of age.

11. International Data Transfers

  • •Your data is primarily stored and processed in the European Economic Area (EEA) and the United Kingdom.
  • •Our database is hosted by Supabase, with servers located in the EU (Frankfurt, Germany).
  • •Our website is hosted by Vercel, which may process some data in the United States. Vercel complies with the EU-US Data Privacy Framework.
  • •Stripe processes payment data and may transfer data internationally. Stripe complies with the EU-US Data Privacy Framework and uses standard contractual clauses.
  • •We ensure that any international data transfers comply with UK GDPR requirements and that appropriate safeguards are in place.

12. Lawful Basis for Processing

  • •Contract: We process your data as necessary to provide the Futurepreneurs service (creating accounts, managing projects, processing payments).
  • •Consent: For students under 18, we obtain parental consent before making project data publicly visible. You can withdraw consent at any time.
  • •Legitimate interest: We process some data based on our legitimate interest in improving the platform, preventing fraud, and ensuring safety — balanced against your rights and freedoms.
  • •Legal obligation: We retain financial and safeguarding records as required by UK law.
  • •We do not use automated decision-making or profiling that produces legal effects or significantly affects users.

Questions about your privacy? Email our data protection team at privacy@futurepreneurs.co.uk or visit our Contact page.