This Privacy Notice explains how Vantage Grants Assessors collects, uses, stores and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to foundation clients and their staff, grant applicants whose data we handle on behalf of our clients, and website visitors and enquirers.
Vantage Grants Assessors is a trading name of Vantage Grants Assessors Limited, registered in England and Wales (Company Number: 17072008).
Registered address:
Castledine House Business Centre
5 Heanor Rd
Ilkeston DE7 8DY
For the purposes of UK GDPR, we act as: Data Controller — when we collect and use personal data for our own business purposes; and Data Processor — when we process personal data about grant applicants on behalf of our foundation clients, who act as the Data Controller in those circumstances.
Our ICO registration number is: [ICO REGISTRATION NUMBER]
For any privacy-related queries, or to exercise your rights: amie@vantagegrantsassessors.co.uk
We aim to respond to all privacy-related enquiries within 10 working days.
When carrying out assessment work we may handle personal data about individuals connected to applicant organisations, including names and contact details of trustees and directors, information contained in grant applications, and publicly available information from the Charity Commission and Companies House. In this context we act as data processor on behalf of the foundation.
| Purpose | Lawful basis |
|---|---|
| Managing client relationships and delivering assessment services | Performance of a contract (Art. 6(1)(b)) |
| Carrying out grant assessments on behalf of foundation clients | Legitimate interests of the foundation (as data controller) — we act as data processor |
| Issuing invoices and maintaining financial records | Legal obligation (Art. 6(1)(c)) |
| Responding to enquiries from prospective clients | Legitimate interests (Art. 6(1)(f)) |
| Sending relevant updates where you have opted in | Consent (Art. 6(1)(a)) |
| Complying with legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
We do not use personal data for automated decision-making or profiling.
We do not sell personal data. We may share it with: foundation clients (assessment reports); professional advisers (accountants, legal advisers, insurers); IT and software service providers; and regulatory authorities where required by law.
We do not transfer personal data outside the UK or EEA except where appropriate safeguards are in place.
| Category | Retention period |
|---|---|
| Client contracts and engagement records | 7 years from end of engagement |
| Assessment reports and related correspondence | 3 years from completion |
| Grant applicant data processed on behalf of foundation clients | As directed by the foundation client |
| Invoices and financial records | 7 years (HMRC requirement) |
| Enquiry correspondence (non-clients) | 12 months from last contact |
| Opted-in marketing contacts | Until consent is withdrawn |
Our website may use cookies to improve your experience and understand how visitors use the site. You can manage your preferences via the cookie banner or your browser settings. We do not use advertising or tracking cookies.
We maintain appropriate technical and organisational measures to protect personal data, including password protection and access controls, use of secure cloud services, and encryption of devices containing personal data. In the event of a notifiable data breach, we will inform the ICO within 72 hours.
Under UK GDPR you have the right to: access your data; request rectification; request erasure; restrict processing; data portability; object to processing; and withdraw consent at any time. Contact us at the address above to exercise any of these rights. You also have the right to complain to the ICO: ico.org.uk | 0303 123 1113.
If you are connected with an organisation that has applied to one of our foundation clients, your data may have been shared with us for the purposes of independent assessment. We act as data processor only, and do not use applicant data for any purpose beyond the specific assessment for which it was shared. Questions about how the foundation handles your data should be directed to the foundation itself.
We may update this notice from time to time. The current version is always available on our website. The date at the top of this page shows when it was last updated.