Last updated: 9 November 2026

Privacy Policy.

This policy explains how Solid Bond collects and uses personal data about founders, applicants, investors, business contacts and visitors to our website. It covers what we collect, why, our lawful basis, who we share it with, how long we keep it and the rights you have. We've tried to keep it in plain English.

1. Who we are

This website is run by Solid Bond Capital Ltd, a company registered in England and Wales (company number 09916328), whose registered office is at First Floor, Swan Buildings, 20 Swan Street, Manchester, England, M4 5JW. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZB053957. We are the controller of the personal data described in this policy, which means we decide how and why it is used.

If you have any questions about this policy or want to use your rights, contact us by email at admin@solidbond.com or through our contact page.

2. The personal data we collect

Depending on how you deal with us, we may collect:

  • Identity and contact details: name, job title, company, email address, phone number, LinkedIn profile and postal address.
  • Application and business information: what you share when you apply for funding or pitch to us, such as your pitch deck, financial information, cap table, plans, and information about your co-founders and team.
  • Due diligence and verification information: if we move towards investing, information needed for legal, anti-money-laundering and identity checks, such as proof of identity and address, date of birth, shareholdings and directorships.
  • Communications: emails, messages and notes of calls and meetings. With your knowledge, we may record or transcribe video calls to keep an accurate record.
  • Investor information: if you invest alongside us, details needed to manage that relationship and meet our legal obligations.
  • Website and device information: IP address, browser and device type, pages visited, how you arrived at our site, approximate location (country or city) and interactions such as which buttons are clicked.
  • Advertising information (only with your consent): cookie and device identifiers used by Google and LinkedIn to measure our ads and show you relevant ones, and whether you clicked one of our ads.
  • Marketing preferences: whether you want to hear from us and how.
  • Complaints: what you tell us when you make a complaint, and our records of how we handled it.

We don't intentionally collect special category data (such as health, ethnicity or religious beliefs). Please don't include it in an application unless it's relevant and you're happy for us to have it.

3. Where we get it from

  • From you: when you apply, email us, meet us, sign up for updates or use our website.
  • From people who introduce you: such as other investors, accelerators, advisers or portfolio founders.
  • From public sources: such as Companies House, LinkedIn, your company website, press coverage and startup databases.
  • From data enrichment and research tools: which help us find and verify business contact details and company information.
  • From verification providers: when we carry out identity and anti-money-laundering checks.
  • From Google and LinkedIn: aggregated and individual reports about how people interact with our ads and website, where you've consented to marketing cookies.

4. How we use it and our lawful basis

We only use personal data where the law allows. For each purpose, the lawful basis is shown in bold.

  • Assessing applications and investment opportunities, including contacting you, reviewing your pitch and carrying out due diligence. Legitimate interests (finding and assessing investments) and steps at your request before entering into a contract.
  • Making and managing investments, including legal documents, shareholder records and reporting. Contract, legal obligation and legitimate interests.
  • Identity and anti-money-laundering checks and keeping records required by law. Legal obligation.
  • Building and maintaining business relationships with founders, investors, advisers and others in the startup ecosystem, including keeping notes in our contact database. Legitimate interests.
  • Sending updates and news about Solid Bond and our portfolio to business contacts. Legitimate interests for corporate contacts, or consent where the law requires it. Every email includes a way to unsubscribe.
  • Publishing news about our investments, which may name founders and include their quotes or photos, with their agreement. Legitimate interests and, where needed, consent.
  • Running and securing our website, including server logs and preventing abuse. Legitimate interests.
  • Counting visits without cookies. When you load a page, our web server tells Google Analytics which page was viewed, the referring site, your browser type and your approximate location (country, region and city, worked out by our host). It uses a random-looking ID created from your connection details that changes every day and can't be reversed. Your IP address isn't sent to Google, and nothing is stored on or read from your device. We use this to count visitors and see which pages are popular. Legitimate interests. You can object at any time by contacting us.
  • Detailed website analytics through Google Analytics cookies, to understand how people use the site over time (for example, returning visits and which buttons are clicked). Consent.
  • Advertising on Google and LinkedIn: measuring which ads lead to visits and applications (conversion tracking), and showing ads to people who have visited our site (remarketing). Consent.
  • Advertising to audiences built from contact lists: we may upload business contact details in a secure, hashed (scrambled) form to Google or LinkedIn so our ads reach, or exclude, people we already know. Legitimate interests. You can object at any time and we'll exclude you.
  • Handling complaints, including sharing a complaint with others involved where that's needed to resolve it. Legitimate interests and, where it applies, legal obligation.
  • Complying with the law, responding to regulators and defending legal claims. Legal obligation and legitimate interests.

Where we rely on legitimate interests, we've weighed our interests against yours and only proceed where your rights don't override them. You can ask us for details of this assessment.

We don't sell your personal data. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Our ad partners may use profiling to decide which ads to show, but only if you've consented to marketing cookies.

5. Cookies and similar technologies

We use strictly necessary storage to make the site work. We only use analytics and marketing cookies if you agree, and you can change your choice at any time using . Our Cookie Policy lists every cookie we use.

6. Who we share it with

We share personal data only where we need to, with:

  • Service providers who process it on our behalf and only on our instructions, including:
    • website hosting (Netlify);
    • our application form (Tally) and complaints form (Notion);
    • analytics and advertising (Google, including Google Tag Manager, Google Analytics and Google Ads; and LinkedIn);
    • email, file storage and productivity tools (such as Microsoft 365);
    • our contact management (CRM), note-taking and meeting transcription tools;
    • email marketing tools;
    • data enrichment, research, e-signature and identity verification providers.
  • Advertising platforms as independent controllers: where you consent to marketing cookies, Google and LinkedIn also use data under their own privacy policies.
  • Professional advisers such as lawyers, accountants and auditors.
  • Co-investors and fund partners in a funding round, to the extent needed to consider or complete an investment.
  • Regulators, HMRC, law enforcement and courts where the law requires it.
  • A buyer or successor if our business or fund is restructured, sold or merged, under the same protections.

7. International transfers

Some of our service providers, including Netlify, Google, LinkedIn and Microsoft, may process personal data outside the UK, including in the European Economic Area and the United States. Where they do, we make sure the transfer is protected by UK adequacy regulations (such as the UK-US data bridge for certified US companies), or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

8. How long we keep it

  • Funding applications we don't take forward: up to 3 years after our last contact, so we can recognise you if you apply again, then deleted.
  • Portfolio companies and co-investors: for as long as we hold the investment, then 7 years, to meet legal, tax and anti-money-laundering requirements.
  • Identity and anti-money-laundering records: 5 years after the end of the relationship, as required by law.
  • Business contacts and correspondence: up to 3 years after our last meaningful contact.
  • Marketing preferences and unsubscribes: as long as needed to respect your choice.
  • Google Analytics data (with or without cookies): 14 months. The daily visit ID used without cookies changes every 24 hours.
  • Cookie consent choice: until you change it or clear your browser data. We'll ask again after 12 months.
  • Website server logs: held by our host for a short period for security.

9. How we keep it safe

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, multi-factor authentication on our systems and only giving access to people who need it. If a data breach is likely to put your rights at risk, we'll tell you and the ICO as the law requires.

10. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you and get a copy;
  • correct data that's wrong or incomplete;
  • delete your data;
  • restrict how we use your data;
  • object to us using your data based on legitimate interests, including for contact-list advertising;
  • object at any time to direct marketing, which we'll always respect;
  • data portability: receive your data in a reusable format or have it sent to another organisation;
  • withdraw consent at any time, where we rely on consent. This doesn't affect anything we did before you withdrew it.

To use any of these rights, contact us by email at admin@solidbond.com or through our contact page. It's free, and we'll respond within one month. We may need to confirm your identity first. Some rights have exceptions, and if one applies we'll explain why.

You can also control advertising directly: Google ad settings and LinkedIn advertising settings.

11. Complaints

If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

12. Children

Our website and services are for founders, investors and businesses. They're not intended for anyone under 18, and we don't knowingly collect their data.

13. Other websites

Our site links to other websites, such as LinkedIn and our portfolio companies. Their privacy practices are their own, so please read their policies.

14. Changes to this policy

We'll update this page if we change how we use personal data, and tell you directly about significant changes where we can. The date at the top shows when it was last changed.