1. Who is responsible for your data
In short: IREACH VENTURES LTD, which runs Fintiqa and Fintechbits, decides how your data is used. Email us with any question.
The controller of personal data collected through fintiqa.com is IREACH VENTURES LTD, a company registered in England and Wales under company number 14535559, with its registered office in London, United Kingdom. We also run Fintechbits and its data platform, Fintechbits Intelligence, which Fintiqa is built on. We are not required to appoint a Data Protection Officer. For anything about your data, email hello@fintiqa.com.
This notice explains how we handle personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
2. What we collect and why
In short: Only what you type into our two forms, a scrambled version of your IP address to stop spam, and analytics if you accept cookies. We tell you the legal reason for each.
| When | What we collect | Why we use it | Lawful basis |
|---|---|---|---|
| You join the waitlist | Email address, type of work, company, the page you signed up on and the date. | To invite you when access opens, send you occasional updates about Fintiqa, and understand who the platform is for. | Consent (Article 6(1)(a)). For emails, consent under PECR. |
| You add your fintech | The company details you enter, plus your name, role, work email, LinkedIn URL, the date, and the version of the consent wording you agreed to. | To check you can act for the company, verify the company against primary sources, contact you about the submission, and send you a confirmation email. | Consent (Article 6(1)(a)), given with the checkbox on the form. |
| You add your fintech and it is verified | The company details only. | To publish the company's profile and include it in Fintiqa and Fintechbits Intelligence data. | Legitimate interests (Article 6(1)(f)): building an accurate fintech dataset. Company details are mostly not personal data. |
| Either form | A one-way, salted hash of your IP address. We never store the address itself. | To limit how many submissions one connection can make, which keeps out spam and abuse. | Legitimate interests (Article 6(1)(f)): keeping the site secure. |
| You accept analytics cookies | Pages viewed, how you reached the site, device and browser type, approximate location, collected by Google Analytics. | To understand which pages are useful and improve the site. | Consent (Article 6(1)(a) and PECR regulation 6). |
Filling in the forms is optional. If you don't, you can still read the site; we just can't add you to the waitlist or review your company. We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.
3. People named in our research and data
In short: Our research mentions founders, executives and investors as they appear in news coverage and public filings. You can ask us to correct it or object.
Fintiqa and Fintechbits Intelligence record business events such as funding rounds, acquisitions, executive appointments, regulatory actions and filings. These can include the names and job titles of people involved, taken from published Fintechbits articles, company announcements, regulator registers and public filings such as SEC EDGAR. We process this under legitimate interests (Article 6(1)(f)): providing accurate, sourced information about the fintech market. We do not collect private contact details for these people. If this concerns you, you can ask us to correct the information or object to its use by emailing hello@fintiqa.com.
4. What we publish
In short: Nothing from the waitlist. For founder submissions, only verified company details, never your contact details.
Waitlist details are never published. For founder submissions, only the company details (name, website, headquarters, year founded, sector, stage and description) can appear on a profile, and only after we have verified them. Your name, email address and LinkedIn URL are never published.
5. Who we share it with
In short: We don't sell your data. A few service providers handle it for us, under contract and on our instructions.
We do not sell or rent personal data. We use these processors, who act only on our instructions:
| Provider | What they do | Where data is processed |
|---|---|---|
| Supabase | Database for the waitlist, submissions and Fintechbits Intelligence. | Ireland (EU) |
| Vercel | Hosts and serves the site. | Global network, including the United States |
| Resend | Sends confirmation emails. | European Union |
| Google (Google Analytics) | Website analytics, only if you accept cookies. | United States and other countries |
Founder submissions also go to the Fintechbits Intelligence review team, which is part of IREACH VENTURES LTD. We may disclose data where the law requires it, to protect our rights or the safety of others, or to a buyer of all or part of our business, who would then be bound by this notice. If we add a newsletter provider for waitlist emails, we will list it here before your data is shared with it.
6. International transfers
In short: Some providers handle data outside the UK. When they do, a legal safeguard protects it.
Where personal data is transferred outside the UK, we rely on UK adequacy regulations (which cover the European Economic Area, and the United States for organisations certified under the UK Extension to the EU-US Data Privacy Framework), or on the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses issued under section 119A of the Data Protection Act 2018. Email hello@fintiqa.com for details of the safeguard that applies to a particular provider.
7. How long we keep it
In short: Waitlist entries for up to 24 months. Founder contact details for 24 months after verification, or 12 months if not verified. IP hashes for 30 days. Deletion runs automatically every day.
| Data | How long |
|---|---|
| Waitlist entry | Until you ask us to remove it or withdraw consent, and in any case no more than 24 months after you sign up. |
| Founder submission that we verify | Your name, role, email and LinkedIn URL: 24 months after verification, unless you ask us to delete them sooner. The verified company details stay in our company data while the profile is live. |
| Founder submission we cannot verify, or that is rejected or withdrawn | 12 months after submission. |
| IP address hash | 30 days. |
| Google Analytics data | Up to 14 months, under the retention setting in Google Analytics. |
These periods are applied by an automated daily clean-up. We may keep data longer only where the law requires it or to establish, exercise or defend a legal claim.
8. Your rights
In short: You can see, correct, delete or download your data, limit or object to how we use it, and withdraw consent. Email us and we'll reply within a month. You can also complain to the ICO.
Under UK GDPR you have the right to:
- access your personal data and receive a copy (a subject access request);
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict how we use your data, for example while we check its accuracy;
- receive data you gave us in a portable format and have it transferred to another organisation, where processing is based on consent and carried out by automated means;
- object to processing based on legitimate interests, and to direct marketing at any time; and
- withdraw your consent at any time, without affecting processing that happened before you withdrew it.
To use any of these rights, email hello@fintiqa.com, ideally from the address you used with us so we can confirm it is you. We will respond within one month, which we can extend by up to two further months for complex requests; we will tell you if we do. There is normally no fee. Erasing your data removes your waitlist entry and any founder submission made with that email.
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Keeping your data secure
In short: Your data sits in a locked-down database that the public website can't read, and travels encrypted.
Data is encrypted in transit (HTTPS with HSTS) and at rest by our database provider. The tables holding waitlist and submission data cannot be read through the website's public interface; the site can only add records through checked, rate-limited functions. Access to the data is limited to the people who need it to run Fintiqa and verify submissions. No system is perfectly secure, but if a breach affects your rights and freedoms we will tell you and the ICO as the law requires.
10. Children
In short: Fintiqa is for professionals. We don't knowingly collect data from anyone under 18.
The site is intended for people aged 18 or over using it for work. We do not knowingly collect personal data from children. If you think a child has given us their data, email hello@fintiqa.com and we will delete it.
11. Cookies
In short: No advertising cookies. Google Analytics only runs if you click Accept, and you can change your mind any time.
Fintiqa does not use advertising cookies. With your permission, we use Google Analytics to see which pages people read and how they find us. It sets cookies named _ga and _ga_*, which last up to two years, and Google processes the data on our behalf. Google Analytics 4 does not log or store IP addresses. Nothing from Google loads until you choose Accept on the cookie banner, and you can change your choice at any time through Cookie settings at the foot of every page; choosing Reject clears the analytics cookies we set.
We store your cookie choice in your browser's local storage so we don't ask again on every visit. This is strictly necessary to respect your choice, so it does not need consent.
12. Changes to this notice
In short: If we change how we use your data, we'll update this page and tell you about important changes.
We may update this notice. We will change the date at the top, and if the changes are significant we will tell you by a notice on the site or by email where we have your address. Read it alongside our terms of use.
13. Contact
IREACH VENTURES LTD, registered in England and Wales, company number 14535559. Registered office: London, United Kingdom.
Email: hello@fintiqa.com