Privacy notice

Who we are

Digital Funding (digitalfunding.co.uk) is operated by Data Security and Compliance Services Ltd, trading as Get Cyber Certified. We’re a limited company registered in England and Wales (company number 09707953), with our registered office at c/o Suite 2, Rotherside Court, Rotherside Road, Eckington, South Yorkshire, S21 4HL.

For the personal information described in this notice, we are the data controller. That means we decide how and why your information is used, and we’re responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The person responsible for data protection is Mark Kindred. You can contact us at hello@digitalfunding.co.uk or on 0333 339 0383.

The information we collect

When you send an enquiry, apply for an offer or make a referral using our enquiry form, we collect:

• your first and last name, email address and, if you give it, your phone number
• your organisation’s name and type, and the number of staff if you tell us
• which scheme or offer you’re interested in, and anything you write in your message (for example a charity number or regulator)
• your agreement that we may contact you about your enquiry

If you’re a business adviser referring a client, please only send us your client’s details with their agreement. We’ll use them only to contact your client about the funding and support that may suit them.

When you browse the site, our hosting and font providers receive basic technical information, such as your IP address and browser type, so they can deliver the pages to you. We don’t use analytics or advertising tracking on Digital Funding. See our cookie policy.

How we use your information, and our lawful basis

• To reply to your enquiry and tell you about funding, offers and support that may suit your organisation. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• To assess and deliver an offer you apply for, such as Free Supported Cyber Essentials Certification for charities. Our lawful basis is taking steps at your request before entering into a contract, and then performing that contract.
• To tell you about other services that may benefit your organisation. We do this only where the law allows, and you can ask us to stop at any time.
• To keep records so we can respond to questions or complaints, and to meet our legal obligations.

We don’t sell your information, and we don’t use it for automated decision-making.

Who we share your information with

We use carefully selected suppliers to run the site and our business. They only process your information on our instructions:

• Wix.com hosts this website and stores enquiry form submissions
• Microsoft (Microsoft 365) provides our email and business systems
• Google Fonts supplies the typeface used on the site, so your browser connects to Google’s servers when a page loads

When you apply for one of our offers, your information is used by Get Cyber Certified, our own certification business, to deliver it. We don’t pass your details to the organisations that run the third-party schemes we list. If you apply to one of those schemes, you’ll do so directly with them, under their own privacy notice.

We may also share information where the law requires it, for example with regulators or law enforcement. You can ask us for a list of the suppliers we use to process personal data.

Transfers outside the UK

Some of our suppliers may store or access information outside the UK. Where they do, we make sure the transfer is protected as UK data protection law requires: for example, a UK adequacy decision for the destination country, the UK Extension to the EU–US Data Privacy Framework, or the UK’s International Data Transfer Agreement or Addendum.

How long we keep your information

• Enquiries that don’t lead to a service: up to 2 years from our last contact with you
• Customer information: 5 years after our relationship ends, because customers sometimes ask for information later or come back to us, and so we can respond to queries or complaints

We may keep information for longer where the law requires it.

How we keep your information safe

As a Government-accredited Certification Body for IASME and Cyber Essentials, we’re inspected every year. We hold Cyber Essentials and IASME Cyber Assurance Level 1 and Level 2. Our measures include:

• encryption on all devices we use to store information
• multi-factor authentication on our business systems
• password managers, so long, unguessable passwords can be used
• regularly patched and checked firewalls
• cyber security training for our staff

When choosing suppliers, we look for those with ISO 27001, Cyber Essentials, IASME Cyber Assurance or equivalent assurances.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct information that’s wrong or incomplete
• ask us to delete your information
• object to, or ask us to restrict, how we use it, including direct marketing
• ask us to transfer information you gave us to another organisation

To use any of these rights, email hello@digitalfunding.co.uk. There’s normally no charge, and we’ll reply within one month.

How to complain

If you’re unhappy with how we’ve used your information, please tell us first so we can put it right. See our complaints policy. You also have the right to complain to the Information Commissioner’s Office (ICO) on 0303 123 1113 or at ico.org.uk/make-a-complaint.

Other websites

Digital Funding links to websites run by government and other organisations. We’re not responsible for their content or privacy practices, so please read their privacy notices.

Changes to this notice

We may update this notice from time to time. This version was published on 30 October 2026.