Privacy policy

1. Introduction

SERIN (“we”, “our”, “us”) is committed to protecting the privacy and security of your personal data. This privacy policy explains how we collect, use, store, and share your information when you use the SERIN platform.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information we collect

We collect the following types of information:

• Account information: name, email address, password (encrypted), and organisation details you provide during registration.
• Organisation data: charity name, registration number, location, organisation type, and other profile information.
• Application data: grant application content you create, save, and submit through the platform.
• Usage data: how you interact with the platform, including pages visited, features used, and session duration.
• Payment data: billing information processed securely through Stripe. We do not store your full card details.

3. How we use your information

• To provide and improve the SERIN platform and its features
• To match you with relevant grant funding opportunities
• To generate AI-assisted application content tailored to your organisation
• To process your subscription payments
• To send you important service updates and, with your consent, marketing communications
• To comply with our legal obligations

4. Data sharing

We do not sell your personal data. We share data only with:

• Service providers: Firebase (hosting and database), Stripe (payments), and Google Gemini (AI features) — all under strict data processing agreements.
• Legal obligations: when required by law or to protect our rights.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@serin.org.uk.

7. Cookies

We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies (with your consent) to understand how the platform is used. You can manage your cookie preferences at any time.

8. Security

We take appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.

9. Contact us

If you have questions about this privacy policy or how we handle your data, please contact us at privacy@serin.org.uk or visit our contact page.