Privacy Policy

How we collect, use, and protect your data.
Last updated: March 2026

1. Who We Are

Brightwild Ventures Ltd (“Brightwild”, “we”, “us”) is the data controller responsible for your personal data. We are a private limited company registered in England and Wales.

Company number: 16727294

Registered address: 101b Church Road, Combe Down, Bath, England, BA2 5JJ

Data protection contact: hello@brightwild.ventures

ICO registration: Brightwild is registered with the Information Commissioner’s Office as required by UK data protection law.

Brightwild provides concessional loans and equity investments to early-stage climate and nature ventures. We operate an online platform to manage venture funding applications, due diligence, and portfolio monitoring.

2. What Data We Collect

2.1 When you apply for funding

If you submit an application through our website or online platform, we collect:

Your name and email address
Your company name, registration number, and registered address
Documents you upload (pitch decks, business plans, financial statements)
Responses to our due diligence questionnaire

2.2 When you use our platform

If you are given an account on our platform, we collect:

Your name and email address
Your login activity (timestamps, IP addresses)
Your acceptance of our Terms of Use

2.3 From public sources

We may collect publicly available information about your company from Companies House, including director names, registered addresses, filing history, and accounts.

2.4 When you contact us

If you email us or communicate with us through other channels, we retain the content of those communications.

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose Data used Lawful basis Assessing your funding application Application details, documents, financial data Legitimate interests AI-powered due diligence analysis Documents, financial data, questionnaire responses Legitimate interests Generating loan or investment contracts Company details, director names, addresses Contract performance Monitoring portfolio companies Financial data, Companies House filings Legitimate interests Communicating with you Name, email address Legitimate interests Platform security and access control Login activity, IP addresses Legitimate interests

4. AI Processing

This is important: we use artificial intelligence to help analyse your application. Here is exactly what that means.

Documents and data you provide are sent to AI language models for analysis. These models generate structured assessments covering financial health, market positioning, environmental impact, and alignment with our investment criteria.
We use multiple AI providers: Anthropic (Claude), Mistral, Google Gemini, and OpenAI (GPT). All are based in the US or EU.
None of these providers use your data to train their AI models. This is confirmed in their terms of service and data processing agreements.
We do not use any AI providers that process data on infrastructure in China or other jurisdictions without adequate data protection.
AI analysis supports but does not replace human decision-making. All investment decisions are made by the Brightwild team.

5. Who We Share Your Data With

We share your personal data only with the following categories of recipient:

AI analysis providers (Anthropic, Mistral, Google, OpenAI) — for automated due diligence analysis, under data processing agreements
Database hosting provider (Supabase, AWS eu-west-2, London) — under a data processing agreement
Companies House — we retrieve publicly available company information
Email provider (Fastmail) — for communications with you

We do not sell your data. We do not share your data with advertisers or marketing companies. We do not share individual venture data with other ventures or portfolio companies.

6. International Transfers

Some of our service providers are based outside the UK:

Anthropic and OpenAI are US-based, covered by the UK-US Data Bridge adequacy framework
Mistral is based in France (EU adequate)
Google Gemini — US-based, with DPA and Standard Contractual Clauses covering transfer
Our database is hosted in AWS eu-west-2 (London, UK)

Where data is transferred outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.

7. How Long We Keep Your Data

Rejected applications: 12 months from the date of rejection
Invested ventures: for the duration of the loan or investment, plus 6 years (for legal and tax compliance)
Stale applications with no progress: 6 months from last activity

After these periods, your data is deleted from our database and file storage.

8. Your Rights

Under UK GDPR, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data (subject to legal retention requirements)
Restriction — ask us to limit how we use your data
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interests

To exercise any of these rights, email hello@brightwild.ventures. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office.

9. Cookies

Our platform uses only essential cookies required for authentication and session management. We do not use analytics, advertising, or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via our platform or by email. The current version is always available on our website.

11. Contact Us

Email: hello@brightwild.ventures

Address: Brightwild Ventures Ltd, 101b Church Road, Combe Down, Bath, England, BA2 5JJ