Privacy Policy

Principal Room Ltd

Registered in England & Wales

Registered Office:
[Insert Registered Office]

Email:
privacy@principalroom.com

For the purposes of UK GDPR and the Data Protection Act 2018, Principal Room Ltd is the Data Controller.

Depending on how you use the platform we may collect:

Personal Information

• Full name
• Email address
• Telephone number
• Company name
• Job title
• Business address
• Country
• Profile photograph
• Biography
• Website
• LinkedIn profile

Professional Information

Including information such as:

• Investment interests
• Asset classes
• Geographic focus
• Typical capital amount
• Typical capital requirement
• Funding preferences
• Lending criteria
• Development experience

You choose what professional information appears on your public profile.

When creating an account we collect:

• Username
• Password (encrypted)
• Account status
• Membership type
• Referral code
• Registration date

Passwords are never stored in plain text.

We may store:

• Connection requests
• Connection history
• Support enquiries

These communications help us operate and improve the platform.

Principal Room includes AI-powered features designed to improve introductions and member experience.

AI may analyse:

• Profile information
• Search criteria
• Industry sectors
• Funding preferences
• User interactions within the platform

AI recommendations are intended as assistance only.

Users remain solely responsible for conducting their own due diligence before entering into any transaction.

During the Founding Membership period no payment information is collected.

Once paid memberships launch, payments will be securely processed by Stripe.

Principal Room does not store your full payment card details.

Stripe's own Privacy Policy will also apply to payment processing.

We use your information to:

• Operate the platform
• Create member profiles
• Verify applications
• Facilitate introductions
• Improve AI recommendations
• Respond to enquiries
• Provide customer support
• Send account notifications
• Improve our services
• Detect fraud and abuse
• Comply with legal obligations

We may send:

• Application confirmations
• Approval notifications
• Password reset emails
• Security notifications
• Service updates
• Billing communications (when applicable)

Marketing emails will only be sent where you have provided consent or where otherwise permitted by law.

You may unsubscribe from marketing communications at any time.

Under UK GDPR we process personal data based on:

• Your consent
• Performance of our contract with you
• Our legitimate business interests
• Compliance with legal obligations

We do not sell your personal information.

We may share data with trusted service providers including:

• Supabase
• Stripe
• Email delivery providers
• Analytics providers
• Cloud hosting providers

These providers process data only on our behalf.

Some information you choose to provide will be visible to other approved members.

You control the content of your profile.

Only include information you are comfortable sharing.

We use industry-standard security measures including:

• HTTPS encryption
• Secure authentication
• Encrypted passwords
• Role-based permissions
• Database security
• Secure cloud infrastructure

No online service can guarantee absolute security, but we take reasonable steps to protect your information.

We retain information only for as long as necessary to:

• Operate the platform
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

You may request deletion of your account at any time, subject to legal obligations.

Under UK GDPR you have the right to:

• Access your information
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent where applicable

Requests may be sent to:

privacy@principalroom.com

Principal Room uses cookies to:

• Maintain login sessions
• Improve website performance
• Remember preferences
• Analyse website usage

Please see our separate Cookie Policy.

Where personal information is transferred outside the United Kingdom, appropriate safeguards will be implemented.

Principal Room is intended for business professionals aged 18 or over.

We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time.

The latest version will always be published on this page.

Where significant changes are made, members may be notified by email.

Principal Room Ltd

Email:
privacy@principalroom.com

If you are unhappy with how we handle your personal information you have the right to complain to the Information Commissioner's Office (ICO).