Data processing for website visitor or service user

Data processing for potential or actual investor

How we use your personal data

Purpose	Data processed	Lawful basis for processing	Retention period
Responding to your queries and interest in investing.	Name; contact details; investor status	Legitimate interests.	Completion of enquiry plus 12 months.
Processing your Investor Registration form to become a member of our Angel Investor Network.	Full name; Address; contact details (address, telephone and email); Investor experience Investor status Investment appetite and sector interests Referee contact details may be requested	Contract performance.	12 months from when you last expressed interest in our services.
Enabling a presenting company to contact you, where you have requested an introduction at a Showcase event.	Name and contact details (mostly likely to be an email address, but also phone number if so requested by you)	Contract performance.	12 months from when you last expressed interest in our services.
Checking basic investor eligibility prior to accessing web-based Fund documents.	Name and contact details (email address and telephone number). Investor status	Contract performance and legitimate interests.	12 months from when you last expressed interest in our services.
Checking investor appropriateness upon receiving your application form and, assuming you pass, also processing your Fund investment application.	Full name; Address; Nationality; NI number; contact details (address, telephone and email); date of birth; Country of Birth and residency/citizenship information; details of your financial intermediary (if applicable); investment amount, details regarding personal investment status (if investing directly) which include statements about earnings and net worth, information about your investment appetite, experience, knowledge and objectives.	Legal Obligation and Contract Performance.	For the duration of the Fund plus 5 years.
Undertaking investor due diligence during the application stage (including anti-money laundering checks).	Personal information obtained from Credit Reference Agencies and Fraud Prevention Agencies including public (e.g. defaults, CCJs) and shared credit history, financial situation and financial history; Fraud debt and theft information (e.g. details of money you owe, suspected instances of fraud or theft, and details of any devices used for fraud); Information about your source of income and source of wealth; payment related information, such as sort code and bank account and credit/debit card information.	Legal obligation and Contract Performance.	For the duration of the Fund plus 5 years.
Retaining records as required by governmental and/or regulatory bodies.	Country of Birth and residency/citizenship information; Investor credentials Personal information obtained from Credit Reference Agencies and Fraud Prevention Agencies including public (e.g. defaults, CCJs) and shared credit history, financial situation and financial history; Fraud debt and theft information (e.g. details of money you owe, suspected instances of fraud or theft, and details of any devices used for fraud); Information about your source of income and source of wealth;	Legal obligation.	For the duration of the Fund plus 5 years.
Providing Fund update reports on six-monthly basis.	email address and/or postal address	Contract performance.	For the duration of the Fund plus 12 months.
Sending you monies.	payment related information, such as sort code and bank account and credit/debit card information	Contract performance.	For the duration of the Fund plus 12 months.
Sending information about our services that may be of interest to you.	email address and/or postal address	Legitimate interests.	Three years from when you last expressed interest in our services.
Analysing your use of our website to improve user experience.	Online identification such as IP address.	Legitimate interests.	Per Google Analytics data retention terms

Data sharing

To meet the Purposes stated above, we share your personal data with:

Kin Capital Partners LLP for the purpose of proving Oxford Innovation Finance with Fund Administration services
Kin Nominees Limited for the purpose of providing Oxford Innovation Finance with Nominee services
SQW Group Ltd and its subsidiaries for the purpose of providing support services to Oxford Innovation Finance
Governmental and regulatory bodies for the purpose of complying with our legal obligations
Third-party service providers, search engine facilities, advertising, and marketing.

We may compile statistics about the use of our website including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data that can be used to identify you.

Your personal data may have been shared with us by the following organisations:

Data type	Source
Investment status, name and contact details (phone number and/or email address)	Oxford Angels Network, our partner organisation who have combined with OION (Oxford Innovation Finance’s own angel network)
Investment status	Kin Capital Partners LLP
Investment status, nationality	Kin Nominees Limited

For us to perform the normal functions of our company and in providing you with services and information, some of your personal data will be transferred overseas. We have the following safeguards in place to protect your data:

International organisation	Safeguards in place to protect your personal data	How you can obtain a copy of the safeguards
Eventbrite, USA	Standard Contractual Clauses	Eventbrite data protection details
Mailchimp, USA	Standard Contractual Clauses	Mailchimp data protection details
Microsoft SharePoint, EU	Standard Contractual Clauses	Microsoft data protection details