Privacy Policy

ProbablyBig Ltd ("ProbablyBig", "we", "us", "our") is the data controller for information collected through this platform. We are registered in England and Wales (Company No. 15821047) at 15 Finsbury Square, London, EC2A 1HD. You can reach our data team at privacy@probablybig.co.uk.

We collect the following categories of personal data: Identity data — name, date of birth, government ID (required for investor eligibility checks under UK anti-money-laundering rules). Contact data — email address, phone number, postal address. Financial data — bank account details for payment processing; tax reference number if you request SEIS/EIS tax certificates. Investment data — the campaigns you back, amounts invested, portfolio performance. Usage data — pages visited, features used, time on platform, device and browser type. Marketing preferences — whether you have consented to receiving product updates, campaign alerts, and founder news. We use your data to: operate your account; process investments; comply with our legal and regulatory obligations; improve our product; and, where you have consented, send you marketing communications.

We rely on the following legal bases under UK GDPR: Contract — processing necessary to provide the investment platform service you signed up for. Legal obligation — identity verification, anti-money-laundering checks, tax reporting, and FCA compliance requirements. Legitimate interests — fraud prevention, platform security, product improvement, and aggregate analytics. Consent — marketing communications. You can withdraw consent at any time by unsubscribing or contacting us.

We share your data only where necessary: Payment processors — to process investments and refunds. Identity verification providers — to meet our AML/KYC obligations. HMRC — where required for SEIS/EIS reporting. Companies you invest in — your name and investment amount are shared with the relevant company for their statutory records. Cloud infrastructure providers — AWS and Vercel, both operating under UK GDPR-equivalent protections. We do not sell your data. We do not share data with advertisers.

We keep your account data for as long as your account is active. When you close your account, we delete or anonymise personal data within 90 days, except where we are required to retain it by law (for example, AML records must be kept for 5 years; financial records for 6 years).

Under UK GDPR you have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Request erasure (where no legal obligation requires us to retain it). • Object to processing based on legitimate interests. • Restrict processing in certain circumstances. • Data portability — receive your data in a machine-readable format. • Withdraw consent for marketing at any time. To exercise any of these rights, email privacy@probablybig.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. See our Cookie Policy for full details.

We will notify you by email if we make material changes to this Privacy Policy. The effective date at the top of this page will also be updated. Your continued use of the platform after changes go live constitutes acceptance of the revised policy.