Privacy policy
How we collect, use and protect the information you share with GFIRS.
Last updated: July 2026
The summary below sets out how GFIRS operates today. The complete policy is being finalised with our advisers and will replace this page on publication. For anything not covered here, contact hello@gfirs.com.
Who we are
GFIRS Intelligence Ventures Limited is the data controller for information collected through this platform. We are registered in England and Wales, company number 17026995, with our seat in Milton Keynes, United Kingdom.
What we collect
For founders and their organisations: identity and contact details, the answers you submit through the rating questionnaire, and the supporting documents you upload (such as financial statements, governance policies and impact evidence).
For funders: identity and contact details, your organisation, and the filter and preference settings you save.
We also retrieve publicly available information from company registries, such as Companies House and its local equivalents, to verify registration details.
Why we use it
To produce and publish your GFIRS rating, to operate your account, to make rated organisations discoverable to funders where you have chosen to publish, and to maintain an audit trail of rating decisions.
Who we share it with
Published ratings and the profile information you choose to publish are visible to funders using the platform. Supporting documents are private to you and are not shared with funders.
We use service providers for hosting, database and storage infrastructure. They process data on our instructions and are bound by contract.
We do not sell your data, and we do not use it for advertising.
How long we keep it
Ratings and their supporting audit records are retained so that a published rating remains explainable. Account and submission data are retained while your account is active, and for a limited period afterwards to meet our legal and record-keeping obligations.
Your rights
You have rights of access, rectification, erasure, restriction, portability and objection in respect of your personal data. See our UK GDPR notice for detail on how to exercise them, or contact hello@gfirs.com.
Security
Access to your data is restricted by role and enforced at the database level. Uploaded documents are held in private storage and are accessible only to your organisation and authorised GFIRS reviewers. Data is encrypted in transit.
GFIRS Intelligence Ventures Limited, registered in England and Wales, company number 17026995, Milton Keynes, United Kingdom. Contact hello@gfirs.com.